API reference

Every tool is backed by a versioned REST endpoint under /v1/tools/*. All requests and responses are JSON and follow one standard envelope with stable error codes. Full request/response examples are linked per tool below.

OpenAPI JSONOpenAPI YAML

Conventions

  • Every response includes meta.requestId; send an x-request-id header to have it echoed back.
  • Errors use a stable error.code (e.g. INVALID_REQUEST, PAYLOAD_TOO_LARGE), never a raw stack trace.
  • Every endpoint enforces a payload size limit, returning 413 PAYLOAD_TOO_LARGE when exceeded.
  • No authentication is required for any tool endpoint today.

JSON Formatter and Validator

Format, validate, and sort JSON with clear syntax errors, live preview, and one-click copy or download.

Endpoint
POST /v1/tools/json/format
Processing mode
API
Input
JSON text
Output
Formatted JSON text

Limits

  • Max payload size: 2 MiB by default (TOOL_MAX_PAYLOAD_BYTES)

cURL example

curl -X POST https://api.cent-ai.com/v1/tools/json/format \
  -H "Content-Type: application/json" \
  -d '{"input":"{\"service\":\"payments-api\",\"replicas\":3,\"env\":\"production\"}","indentation":2}'

YAML Formatter and Validator

Format, validate, and sort a single YAML document with clear parse errors and live preview.

Endpoint
POST /v1/tools/yaml/format
Processing mode
API
Input
YAML text (single document)
Output
Formatted YAML text

Limits

  • Max payload size: 2 MiB by default (TOOL_MAX_PAYLOAD_BYTES)
  • Documents per request: 1 (multi-document streams are rejected)

cURL example

curl -X POST https://api.cent-ai.com/v1/tools/yaml/format \
  -H "Content-Type: application/json" \
  -d '{"input":"service: payments-api\nreplicas: 3\nenv: production","indentation":2}'

Base64 Encoder and Decoder

Encode text to Base64 or decode it back, with an optional batch mode for multiple values.

Endpoint
POST /v1/tools/base64/format
Processing mode
API
Input
Text or Base64
Output
Base64 or decoded text

Limits

  • Max payload size: 2 MiB by default (TOOL_MAX_PAYLOAD_BYTES)
  • Alphabet: Standard Base64 only (not URL-safe)

cURL example

curl -X POST https://api.cent-ai.com/v1/tools/base64/format \
  -H "Content-Type: application/json" \
  -d '{"input":"Hello, DevOps!","mode":"encode"}'

JWT Decoder

Decode a JWT's header and payload to read its claims. Does not verify the signature.

Endpoint
POST /v1/tools/jwt/decode
Processing mode
API
Input
JWT (header.payload.signature)
Output
Decoded header, payload, and time claims as text

Limits

  • Max payload size: 2 MiB by default (TOOL_MAX_PAYLOAD_BYTES)
  • Signature verification: Not performed — decode only

cURL example

curl -X POST https://api.cent-ai.com/v1/tools/jwt/decode \
  -H "Content-Type: application/json" \
  -d '{"input":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIn0.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c"}'

Hash Generator

Generate an MD5, SHA-1, SHA-256, or SHA-512 hex digest of text input.

Endpoint
POST /v1/tools/hash/generate
Processing mode
API
Input
Text
Output
Hex digest

Limits

  • Max payload size: 2 MiB by default (TOOL_MAX_PAYLOAD_BYTES)

cURL example

curl -X POST https://api.cent-ai.com/v1/tools/hash/generate \
  -H "Content-Type: application/json" \
  -d '{"input":"Hello, DevOps!","algorithm":"sha256"}'

CIDR / Subnet Calculator

Calculate network address, broadcast address, netmask, and usable host range from IPv4 CIDR notation.

Endpoint
POST /v1/tools/cidr/calculate
Processing mode
API
Input
IPv4 CIDR (e.g. 10.0.0.0/24)
Output
Network details as text

Limits

  • Max payload size: 512 characters (a CIDR block is far shorter)
  • Rate limit: 120 requests/minute/IP (LIGHT)
  • Address family: IPv4 only

cURL example

curl -X POST https://api.cent-ai.com/v1/tools/cidr/calculate \
  -H "Content-Type: application/json" \
  -d '{"input":"10.0.0.0/24"}'

DNS Lookup

Look up A, AAAA, CNAME, MX, TXT, and NS records for a hostname.

Endpoint
POST /v1/tools/dns/lookup
Processing mode
API
Input
Hostname
Output
DNS records as text

Limits

  • Max payload size: 512 characters (a hostname maxes out at 253)
  • Rate limit: 30 requests/minute/IP (NETWORK_LOOKUP)
  • Record types: A, AAAA, CNAME, MX, TXT, NS only — no SOA, SRV, or CAA

cURL example

curl -X POST https://api.cent-ai.com/v1/tools/dns/lookup \
  -H "Content-Type: application/json" \
  -d '{"input":"example.com"}'

IP Lookup

Classify an IPv4 or IPv6 address (public, private, loopback, link-local) and look up its reverse DNS.

Endpoint
POST /v1/tools/ip/lookup
Processing mode
API
Input
IPv4 or IPv6 address
Output
Classification and PTR record as text

Limits

  • Max payload size: 512 characters (an IP address maxes out at 45)
  • Rate limit: 30 requests/minute/IP (NETWORK_LOOKUP)
  • Geolocation/ASN/ISP: Not provided — classification and PTR lookup only

cURL example

curl -X POST https://api.cent-ai.com/v1/tools/ip/lookup \
  -H "Content-Type: application/json" \
  -d '{"input":"8.8.8.8"}'

HTTP Header Inspector

Fetch a URL's status code and response headers, following redirects and reporting the redirect chain.

Endpoint
POST /v1/tools/http-headers/inspect
Processing mode
API
Input
Absolute http(s) URL
Output
Status, headers, and redirect chain as text

Limits

  • Max payload size: 2 MiB by default (TOOL_MAX_PAYLOAD_BYTES)
  • Redirects: Up to 5 hops, http(s) only, each hop re-validated
  • Timeout: 5 seconds per request
  • Targets: Private, loopback, link-local, and other reserved IP ranges are blocked

cURL example

curl -X POST https://api.cent-ai.com/v1/tools/http-headers/inspect \
  -H "Content-Type: application/json" \
  -d '{"input":"https://example.com"}'

TLS/Certificate Inspector

Connect to a host over TLS and report its certificate's subject, issuer, validity, and trust status.

Endpoint
POST /v1/tools/tls/inspect
Processing mode
API
Input
Hostname or hostname:port
Output
Certificate details as text

Limits

  • Max payload size: 2 MiB by default (TOOL_MAX_PAYLOAD_BYTES)
  • Timeout: 5 seconds per connection
  • Targets: Private, loopback, link-local, and other reserved IP ranges are blocked

cURL example

curl -X POST https://api.cent-ai.com/v1/tools/tls/inspect \
  -H "Content-Type: application/json" \
  -d '{"input":"example.com"}'

Certificate Decoder

Decode a PEM-encoded X.509 certificate's subject, issuer, validity, SANs, and public key details.

Endpoint
POST /v1/tools/certificate/decode
Processing mode
API
Input
PEM-encoded X.509 certificate
Output
Certificate details as text

Limits

  • Max payload size: 2 MiB by default (TOOL_MAX_PAYLOAD_BYTES)
  • Chain validation: Not performed — decodes the leaf certificate only

cURL example

curl -X POST https://api.cent-ai.com/v1/tools/certificate/decode \
  -H "Content-Type: application/json" \
  -d '{"input":"-----BEGIN CERTIFICATE-----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\nd9Ro53HzI/oXDUbLh8Sisq/ip9twSkC52/culOMRGu4M4ZhXbl2M4/s=\n-----END CERTIFICATE-----"}'

HMAC Generator

Generate an HMAC-MD5, HMAC-SHA1, HMAC-SHA256, or HMAC-SHA512 digest of text input using a secret key.

Endpoint
POST /v1/tools/hmac/generate
Processing mode
API
Input
Text and a secret key
Output
Hex digest

Limits

  • Max payload size: 2 MiB by default (TOOL_MAX_PAYLOAD_BYTES)

cURL example

curl -X POST https://api.cent-ai.com/v1/tools/hmac/generate \
  -H "Content-Type: application/json" \
  -d '{"input":"Hello, DevOps!","secret":"my-shared-secret","algorithm":"sha256"}'

CSR Decoder

Decode a PEM-encoded PKCS#10 certificate signing request's subject, public key, and requested SANs.

Endpoint
POST /v1/tools/csr/decode
Processing mode
API
Input
PEM-encoded PKCS#10 CSR
Output
CSR details as text

Limits

  • Max payload size: 2 MiB by default (TOOL_MAX_PAYLOAD_BYTES)
  • Signature verification: Not performed — decode only

cURL example

curl -X POST https://api.cent-ai.com/v1/tools/csr/decode \
  -H "Content-Type: application/json" \
  -d '{"input":"-----BEGIN CERTIFICATE REQUEST-----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\n59DOsjev3pD8z6qiyGQLT8yBPIrHl4tCjw3n8w==\n-----END CERTIFICATE REQUEST-----"}'

HTTP Security Headers Checker

Check a domain's HSTS, CSP, and other security-relevant HTTP response headers, with findings and remediation guidance.

Endpoint
POST /v1/tools/http-headers/check
Processing mode
API
Input
Hostname
Output
Findings and header-by-header status

Limits

  • Max payload size: 512 bytes (hostname only)
  • Scope: Root endpoint only — not a crawler
  • Rate limit: 15 requests/minute/IP (SECURITY_SCAN)

cURL example

curl -X POST https://api.cent-ai.com/v1/tools/http-headers/check \
  -H "Content-Type: application/json" \
  -d '{"input":"example.com"}'

SSL/TLS Domain Checker

Check a domain's TLS certificate health: trust, expiry, hostname match, chain, and negotiated protocol/cipher.

Endpoint
POST /v1/tools/tls/check
Processing mode
API
Input
Hostname or hostname:port
Output
Findings and certificate/chain details

Limits

  • Max payload size: 512 bytes (hostname only)
  • Rate limit: 15 requests/minute/IP (SECURITY_SCAN)

cURL example

curl -X POST https://api.cent-ai.com/v1/tools/tls/check \
  -H "Content-Type: application/json" \
  -d '{"input":"example.com"}'

Certificate Analyzer

Analyze a pasted PEM certificate's fields, extensions, and expiry, with clear findings and remediation guidance.

Endpoint
POST /v1/tools/certificate/analyze
Processing mode
API
Input
PEM-encoded X.509 certificate
Output
Findings and certificate details

Limits

  • Max payload size: 2 MiB by default (TOOL_MAX_PAYLOAD_BYTES)

cURL example

curl -X POST https://api.cent-ai.com/v1/tools/certificate/analyze \
  -H "Content-Type: application/json" \
  -d '{"input":"-----BEGIN CERTIFICATE-----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\nd9Ro53HzI/oXDUbLh8Sisq/ip9twSkC52/culOMRGu4M4ZhXbl2M4/s=\n-----END CERTIFICATE-----"}'

Certificate Chain Validator

Validate a live host's certificate chain: ordering, missing intermediates, expired links, and basic constraints.

Endpoint
POST /v1/tools/certificate-chain/validate
Processing mode
API
Input
Hostname or hostname:port
Output
Findings and chain details

Limits

  • Max payload size: 512 bytes (hostname only)
  • Chain depth: 6 certificates
  • Rate limit: 15 requests/minute/IP (SECURITY_SCAN)

cURL example

curl -X POST https://api.cent-ai.com/v1/tools/certificate-chain/validate \
  -H "Content-Type: application/json" \
  -d '{"input":"example.com"}'

Certificate Expiry Checker

Check certificate expiry from a live domain or a pasted/uploaded PEM certificate, with clear severity levels.

Endpoint
POST /v1/tools/certificate-expiry/check
Processing mode
API
Input
Hostname, or PEM-encoded X.509 certificate
Output
Findings and expiry details

Limits

  • Max payload size: 64 KiB
  • Rate limit: 15 requests/minute/IP (SECURITY_SCAN)

cURL example

curl -X POST https://api.cent-ai.com/v1/tools/certificate-expiry/check \
  -H "Content-Type: application/json" \
  -d '{"input":"example.com"}'

Secret Scanner

Scan text for likely secrets — cloud/API tokens, private keys, database URLs — entirely in your browser by default.

Endpoint
POST /v1/tools/secret-scanner/scan
Processing mode
Browser
Input
Text
Output
Findings with redacted evidence

Limits

  • Max input size: 256 KiB
  • Detection method: Deterministic pattern/context/entropy — no LLM
  • API mode rate limit: 10 requests/minute/IP (FILE_SCAN), opt-in only

cURL example

curl -X POST https://api.cent-ai.com/v1/tools/secret-scanner/scan \
  -H "Content-Type: application/json" \
  -d '{"input":"aws_access_key_id = \"AKIAIOSFODNN7EXAMPLE\""}'

.env Security Scanner

Scan .env-style configuration for exposed secrets, publicly-shipped credentials, weak defaults, and risky settings — paste content directly, or check a live URL.

Endpoint
POST /v1/tools/env-scanner/scanPOST /v1/tools/env-scanner/scan-url
Processing mode
API
Input
.env-style text or a URL
Output
Findings with redacted evidence

Limits

  • Max input size: 256 KiB
  • Max fetched response size: 256 KiB
  • Max redirects followed: 5
  • Rate limit: 10 requests/minute/IP (FILE_SCAN)

cURL example

curl -X POST https://api.cent-ai.com/v1/tools/env-scanner/scan \
  -H "Content-Type: application/json" \
  -d '{"input":"NODE_ENV=production\nDEBUG=true\nAWS_ACCESS_KEY_ID=AKIAIOSFODNN7EXAMPLE"}'