AgentsToolsHub

Calculate Body Mass Index from weight (kg) and height (cm), with the WHO weight category and the healthy BMI weight range for your height. Use this when an agent needs to body Mass Index with WHO category.

Count the total days between two dates, plus the breakdown in weeks and days and in calendar years, months and days. Use this when an agent needs to days, weeks and calendar time between two dates.

Calculate the final sale price and the amount saved for any price and percent-off discount, with the working shown. Use this when an agent needs to sale price and savings from a percent off.

Calculate the liters of fuel a trip needs and its total cost from distance, consumption (L/100 km) and price per liter — with optional cost splitting between passengers. Use this when an agent needs to trip fuel and cost, splitable between people.

Calculate the fixed monthly payment for a loan from its principal, annual interest rate and term in years, plus total repaid and total interest (annuity formula). Use this when an agent needs to monthly payment, total cost and interest for any loan.

Calculate X% of Y, what percent X is of Y, and the percent change between two values — with step-by-step working shown. Use this when an agent needs to percent of a number, ratios and percent change.

Estimate reading time from a word count at any reading speed. Defaults to 200 words per minute — the typical silent-reading speed for adults. Use this when an agent needs to how long a text takes to read, by word count.

Calculate the tip for any bill, the grand total, and how much each person pays when splitting. Defaults to a 15% tip. Use this when an agent needs to tip amount, total and per-person split.

Add VAT to a net amount or remove VAT from a gross amount. Standard VAT rates for 36 countries are built in, or override with any custom rate. Use this when an agent needs to add or remove VAT at standard rates for 36 countries.

Convert area units: square millimeters, centimeters, meters and kilometers, hectares, acres, square feet and square miles. Use this when an agent needs to square meters, feet, acres, hectares.

Convert digital storage units: bits, bytes, KB, MB, GB, TB (decimal, ×1000) and KiB, MiB, GiB, TiB (binary, ×1024) — both systems side by side. Use this when an agent needs to decimal (KB/MB/GB) and binary (KiB/MiB/GiB) units.

Convert between metric and imperial length units: kilometers, meters, centimeters, millimeters, micrometers, nanometers, miles, yards, feet, inches and nautical miles. Use this when an agent needs to metric and imperial distance units, instantly.

Convert numbers to Roman numerals (1–3999) and Roman numerals back to numbers, with strict validation that rejects non-standard forms like IIIM or VX. Use this when an agent needs to numbers ↔ Roman numerals, with validation.

Convert speed units: kilometers per hour, miles per hour, meters per second, knots and feet per second with exact definitions. Use this when an agent needs to km/h, mph, m/s, knots and ft/s.

Convert between Celsius, Fahrenheit and Kelvin with exact formulas, reference points (freezing and boiling water) and step-by-step working. Use this when an agent needs to celsius, Fahrenheit and Kelvin, both ways.

Convert Unix epoch timestamps to ISO/UTC dates and back. Millisecond timestamps are detected automatically; invalid dates are rejected with clear errors. Use this when an agent needs to epoch seconds ↔ human dates, both directions.

Convert cooking and liquid volume units: milliliters, liters, cubic meters, US gallons, quarts, pints, cups, fluid ounces, tablespoons and teaspoons. Use this when an agent needs to liters, gallons, cups, milliliters.

Convert between weight and mass units: metric tons, kilograms, grams, milligrams, pounds, ounces and stones with exact international definitions. Use this when an agent needs to kilograms, pounds, ounces and more.

Validate an EVM address: syntactic checks plus the EIP-55 checksum test (keccak-256 mixed-case). Returns the canonical checksummed form, flags addresses pasted with a broken checksum, and never guesses — an invalid checksum is an error, not a silent fix. Use this when an agent needs to eIP-55 checksum check + canonical form.

Convert APR (nominal annual rate) to APY (effective annual yield) for any compounding frequency including continuous — the exact DeFi math that decides whether a 10% APR pool really pays 10%. Deterministic closed-form, no approximations. Use this when an agent needs to nominal rate → effective yield, any compounding.

Calculate a transaction's gas fee: gas units × gas price (gwei) gives the ETH cost, multiplied by the ETH price for USD. Exact BigInt math for the wei amounts. Use this when an agent needs to transaction cost in ETH and USD from gas × gwei.

Compute impermanent loss for a 50/50 constant-product AMM position at any relative price move, with a reference table of common moves. Deterministic closed-form — the exact divergence number an LP should compare against farming rewards. Use this when an agent needs to aMM divergence loss for any price move.

Live total value locked for any DeFi protocol from DefiLlama: current TVL, per-chain breakdown, 1-day/7-day/1-month change percentages and market cap where available. The due-diligence snapshot an agent should pull before quoting a protocol's size or health. Use this when an agent needs to total value locked + chain breakdown + trends.

Generate cryptographically secure randomness: passwords with charset rules, hex keys of any byte length, and uniform random integers (rejection sampling, no modulo bias). Never use Math.random for secrets. Use this when an agent needs to cSPRNG passwords, hex keys and uniform integers.

Convert between wei, kwei, mwei, gwei, microether, milliether and ether with exact BigInt arithmetic. Decimal strings of any magnitude convert without floating-point error. Use this when an agent needs to exact Ethereum unit conversion — no float errors.

Look up any US telephone area code to find the state or territory it serves, or list every area code in a given state. Covers all 404 NANP codes in use, including overlays. Use this when an agent needs to all 404 NANP area codes → state lookup.

Reference database of all 250 countries and territories: ISO 3166-1 codes, capitals, regions, population, area, currencies, languages, TLDs and calling codes. Look up a single country or list by region. Use this when an agent needs to 250 countries: codes, capitals, currencies, populations.

Encode text to base64 or decode base64 back to text. Full UTF-8 support including emoji and non-Latin scripts. Use this when an agent needs to uTF-8 safe base64 in both directions.

Convert any text into all ten naming conventions at once: camelCase, PascalCase, snake_case, CONSTANT_CASE, kebab-case, dot.case, Title Case, Sentence case, lower and UPPER — split correctly on camel humps, spaces, hyphens, underscores and dots. One call instead of ten lookups. Use this when an agent needs to every naming convention in one call.

Convert text between nine letter cases: UPPER, lower, Title, Sentence, camelCase, PascalCase, snake_case, kebab-case and CONSTANT_CASE. camelCase boundaries are split automatically. Use this when an agent needs to camelCase, snake_case, kebab-case and more.

Turn a cron expression into plain English, validate it, and compute the exact next execution times. Deterministic — the answer to 'when does this cron actually fire?' without guessing. Use this when an agent needs to explain a cron expression and compute the next runs.

List the next N executions of a cron expression with exact timestamps — from now or from any reference datetime. Complements cron-describe (which explains what an expression means) with the concrete schedule agents need when scheduling their own work. Use this when an agent needs to exact upcoming executions for a cron expression.

Convert CSV to JSON (array of objects keyed by the header row) and JSON arrays back to CSV. Handles quoted fields with embedded delimiters, escaped quotes and multi-line values per RFC 4180 conventions. Use this when an agent needs to cSV to array-of-objects and back, with quote handling.

Validate CSV structure before ingesting it: RFC 4180-aware parse, ragged rows, column-count consistency against the header or an expected schema, duplicate headers, stray quotes and empty-cell counts. Deterministic — every issue cites its exact row number. Use this when an agent needs to structural lint: ragged rows, dupes, quoting issues.

Compare two texts line by line using an LCS diff: exact additions, removals and context — in unified-diff style. Deterministic, unlike asking a model to 'find the differences'. Use this when an agent needs to exact line-level diff with unified-style output.

Validate an email address in two layers: strict RFC-style syntax, then a live DNS MX lookup on the domain to confirm the recipient actually runs mail servers. Catches the typos and fake domains that pure regex misses. Use this when an agent needs to syntax + live MX check — can this address receive mail?.

Generate realistic-looking test data: users, companies, Luhn-valid test cards and addresses. Deterministic by seed — the same seed always produces identical records, so your tests and fixtures are reproducible. All data is synthetic; card numbers pass Luhn but are not real accounts. Use this when an agent needs to seeded test users, companies and cards — reproducible.

Compute exact hash digests of UTF-8 text using Web Crypto (SHA family) and a verified pure-JS MD5 for legacy checksums. Deterministic — identical input always yields the identical digest. Use this when an agent needs to sHA-256 / SHA-512 / SHA-1 / MD5, exact digests.

Reference database of HTTP response status codes with phrase, category and explanation. Look up a specific code or list a whole category (1xx–5xx). Use this when an agent needs to look up any HTTP status code's meaning.

Generate a valid RFC 5545 iCalendar file from JSON events: proper CRLF line endings, text escaping, line folding at 75 octets and a required DTSTAMP. The output imports cleanly into Google Calendar, Outlook and Apple Calendar. Use this when an agent needs to jSON events → valid .ics calendar file.

Parse iCalendar (.ics) content — meeting invites, conference calendars, exports from Google/Outlook — into structured event JSON: title, start/end, location, organizer and description. Use this when an agent needs to turn .ics calendar files into clean event JSON.

Convert ISO 8601 durations (P1DT2H30M) to total seconds and back — including weeks — with a component breakdown. The unambiguous duration math agents should use for retries, TTLs and scheduling instead of mental arithmetic. Use this when an agent needs to durations ↔ seconds, exact in both directions.

Compare two JSON documents structurally — every added, removed and changed value reported with its RFC 6901 JSON Pointer path, not a text blob. Objects and arrays recurse; type changes (string → number) are flagged as changes. Deterministic, unlike eyeballing or text diffs. Use this when an agent needs to structural diff with exact JSON Pointer paths.

Validate JSON with precise error messages, pretty-print it with any indent, and inspect its top-level type and element counts. Use this when an agent needs to validate, pretty-print and inspect JSON.

Repairs broken JSON: trailing commas, single quotes, unquoted keys, Python literals (True/False/None), NaN, comments, smart quotes and truncated documents. Built for the most common agentic failure mode — parsing slightly-wrong JSON from an LLM or a human. Use this when an agent needs to fix LLM-mangled, truncated or sloppy JSON.

Validate a JSON document against a JSON Schema (draft 2020-12) with precise error paths — the exact check agents need before trusting structured output. Returns valid/invalid plus every violation with its JSON Pointer location and message. Use this when an agent needs to validate JSON against a draft 2020-12 schema.

Generate TypeScript interfaces from a JSON sample: nested objects become named interfaces, arrays collapse to their element type, mixed arrays become unions, and keys that need quotes are handled. Deterministic — the same JSON always produces the same types. Use this when an agent needs to jSON sample → typed interfaces, ready to paste.

Create a properly signed HS256 JWT: iat/exp set from the chosen lifetime, optional iss/sub claims, URL-safe base64 — the exact token format your API middleware validates. Built for generating test tokens during development; never use with a production secret. Use this when an agent needs to sign a test JWT with iat/exp handled correctly.

Decode a JSON Web Token's header and payload to readable JSON. Pure decoding: signatures are NOT verified and no secret is needed. Accepts standard and URL-safe base64 with or without padding; claims like exp and iat are rendered as dates. Use this when an agent needs to decode header and payload — no verification.

Calculate the API cost of an LLM call: input and output tokens × published per-million prices for 15 current models (OpenAI, Anthropic, Google, DeepSeek, xAI, Meta). Batch multiplier included for monthly estimates. Use this when an agent needs to tokens × current per-model prices = USD.

Convert Markdown to HTML with GitHub-flavored markdown support (tables, task lists, strikethrough, autolinks). Deterministic — the same markdown always yields byte-identical HTML, unlike LLM-approximated conversions. Use this when an agent needs to gFM markdown → clean HTML, exact output.

Look up MIME content types by type substring or file extension, or list a category — covering text, application, image, audio, video, font and multipart types used in web APIs. Use this when an agent needs to content-Type lookup by type or file extension.

Parse natural-language date and time expressions — "in two weeks", "next friday at 3pm", "dec 25th" — into exact ISO 8601 dates. Deterministic parsing (no LLM guessing); relative expressions resolve against a reference moment you control. Use this when an agent needs to "next friday 3pm" → exact ISO dates.

Convert integers between any bases from 2 to 36 — binary, octal, decimal, hexadecimal and beyond — with BigInt precision (no limit on magnitude). Use this when an agent needs to binary, octal, decimal, hex — any base 2–36.

Compute readability metrics for a block of text: Flesch Reading Ease score, Flesch-Kincaid grade level, and word/sentence/syllable statistics. Deterministic formulas — useful for checking documentation, prompts and agent output clarity. Use this when an agent needs to flesch reading-ease and grade level for any text.

Test a regular expression against text and see every match: the matched substring, its index, and all capture groups. Deterministic — the same pattern and text always produce the same result, unlike LLM-simulated regex matching. Use this when an agent needs to pattern + text → every match, group and index.

Parse a semantic version into major/minor/patch/prerelease, test it against a SemVer range (^, ~, >=, *) and compare two versions with the exact upgrade class (major/minor/patch/prerelease). Deterministic — no approximating precedence rules from memory. Use this when an agent needs to parse, compare and range-test versions.

Split text into retrieval-friendly chunks with a token budget and sentence-aware boundaries. Overlap between consecutive chunks preserves context across splits — the standard preparation step before embedding. Use this when an agent needs to rAG-ready chunks with token budgets and overlap.

Scan unstructured text and extract structured entities: email addresses, URLs, IPv4 addresses, phone numbers and domains. Deduplicated, categorized, machine-ready. Use this when an agent needs to pull emails, URLs, IPs, phones and domains from raw text.

Normalize messy text into clean, comparable form: Unicode NFC composition, accent folding (café → cafe), zero-width and invisible-character removal, control-character stripping and whitespace collapsing. The preprocessing step that makes string comparison and deduplication trustworthy. Use this when an agent needs to unicode NFC, accents, zero-width and control chars.

Estimate how many tokens a text consumes for each major model family (GPT, Claude, Gemini, Llama, DeepSeek) using a character/word heuristic that is within ~10% of real BPE tokenizers — enough for context budgeting and cost math, with zero dependencies. Use this when an agent needs to approximate token counts per LLM family, ±10%.

Percent-encode text for safe inclusion in URLs and query strings, or decode percent-encoded text back. Uses the standard encodeURIComponent rules. Use this when an agent needs to percent-encoding for query strings and URLs.

Parse a URL into all its components: protocol, hostname, port, path segments, query parameters (as a clean object), hash and credentials. Exact — no guessing by eye. Use this when an agent needs to break any URL into protocol, host, path and params.

Parse a User-Agent header into structured data: browser (name/version), rendering engine, operating system, and device type/vendor/model. Deterministic — the same string always parses identically. Use this when an agent needs to uA string → browser, engine, OS and device.

Generate cryptographically random UUIDv4s or time-sortable UUIDv7s from a real CSPRNG, and validate any UUID's format, version and variant bits. Use this when an agent needs to random v4, sortable v7, plus strict validation.

Convert YAML to JSON and JSON to YAML — the config-format bridge for CI files, Kubernetes manifests, docker-compose, agent configs and prompts. Parse errors are reported precisely; formatting is preserved via deterministic serialization. Use this when an agent needs to convert configs between YAML and JSON, both directions.

Full loan amortization: the exact monthly payment, a year-by-year principal/interest/balance table, total interest, and the effect of extra monthly payments — payoff months saved and interest saved. Deterministic mortgage math agents can quote line by line. Use this when an agent needs to full yearly schedule + extra-payment savings.

Calculate the compound annual growth rate that takes an initial value to a final value over a given number of years — the standard way to annualize returns. Use this when an agent needs to compound annual growth rate, time-normalized.

Validate an International Bank Account Number: country code, country-specific length and the ISO 7064 MOD 97-10 check digits — with the pretty-printed grouping returned when valid. Use this when an agent needs to structure, length and mod-97 checksum validation.

Compute NPV at any discount rate and solve IRR (bisection on the IRR equation) for a period cash-flow series: investment analysis, project comparison and bond-style math with exact, reproducible results. Period 0 is the initial outflow. Use this when an agent needs to internal rate of return + discounted value of cash flows.

Calculate gross profit, profit margin (profit as % of price) and markup (profit as % of cost) from a unit cost and selling price — the two numbers people constantly mix up. Use this when an agent needs to profit margin vs markup, both computed.

European option pricing with the Black-Scholes-Merton model: exact price for calls and puts plus delta, gamma, theta, vega and rho, with dividend yield support. Deterministic closed-form math — the numbers agents should quote instead of hallucinating option values. Use this when an agent needs to black-Scholes price + all five Greeks.

Calculate return on investment: profit (or loss) and the percentage return relative to the initial amount invested. Use this when an agent needs to return on investment as a percentage.

Great-circle (haversine) distance between two latitude/longitude points in km, miles and nautical miles, plus initial bearing and the geographic midpoint. Deterministic spherical math on the IUGG mean Earth radius. Use this when an agent needs to great-circle distance and bearing between coordinates.

Given 2-8 cities, find the UTC hours where everyone sits inside acceptable local business hours (default 9-17) for a given date — DST-correct via the IANA tz database. Returns every feasible hour with each city's local time, or the best partial-overlap hours if none fit. Use this when an agent needs to find hours that work across cities, DST-correct.

Compute the moon's phase for any date: age in the synodic cycle, illuminated fraction, phase name, and the dates of the next new and full moons. Deterministic astronomy on the mean synodic month — the night-sky fact agents constantly misremember. Use this when an agent needs to phase, illumination and next new/full moon, any date.

Convert coordinates to an Open Location Code (Google Plus Code) and back, with the decoded bounding box. Plus codes give every 14×14-meter spot on Earth a short address that works without street names — ideal where addresses don't exist. Use this when an agent needs to coordinates ↔ shareable plus codes, both directions.

Where the sun is in the sky right now — or at any timestamp — for any coordinates: azimuth (compass bearing), elevation angle, cardinal direction, right ascension and declination, from the NOAA solar equations. Deterministic astronomy for shadow math, solar-panel orientation and photo planning. Use this when an agent needs to azimuth, altitude and cardinal direction, now or any time.

Compute sunrise, sunset, solar noon, civil dawn/dusk, golden hours and day length for any latitude/longitude and date — with the exact NOAA solar equations, accurate to about a minute. Answers agents repeatedly get wrong from memory. Use this when an agent needs to sun times, golden hour and day length for any place.

Count business days (Mon–Fri) between two dates, with weekend and holiday breakdown. Provide a country code and real public holidays (via Nager.Date) are excluded too. Use this when an agent needs to working days between dates, optionally minus public holidays.

The Crypto Fear & Greed Index: today's 0–100 sentiment score with its classification, plus the last 8 days for trend context. Sentiment blends volatility, momentum, social media, dominance and trends — a useful contrarian signal agents can cite with a number. Use this when an agent needs to market sentiment, live from alternative.me.

Convert any amount between 30+ fiat currencies at the latest European Central Bank reference rates (Frankfurter, no API key). Returns the converted amount and the exact rate applied — live data agents should use instead of guessing exchange rates from memory. Use this when an agent needs to convert any amount at ECB reference rates.

Look up any English word: part-of-speech definitions with usage examples, IPA phonetics, pronunciation audio when available, and synonym/antonym lists. Live from the free Dictionary API — definitions agents can quote verbatim instead of inventing. Use this when an agent needs to definitions, phonetics and synonyms for a word.

Historical exchange-rate series for any ECB currency pair over the last N days: start/end rates, high, low, average and percentage change, plus the daily table. The auditable answer to 'how did EUR/USD move this month' for reports and pricing decisions. Use this when an agent needs to time series of a currency pair from ECB data.

Live position of the International Space Station: latitude, longitude, altitude, orbital velocity and whether it's currently in daylight — fetched the moment you call. A genuinely live fact no model can know, ideal for demos and tracking automations. Use this when an agent needs to where the International Space Station is right now.

Live Bitcoin fee market from mempool.space: recommended sat/vB tiers (fastest / 30 min / 1 hour / economy / minimum), unconfirmed-transaction backlog, and the total fee cost for your transaction's size in vBytes. No more guessing sats before broadcasting. Use this when an agent needs to live sat/vB fee tiers + cost for your tx size.

Upcoming near-earth object close approaches from NASA's official NeoWs API: names, estimated diameters, miss distances in kilometers, relative velocities and the hazard classification. Live planetary-defense data — the kind of fact agents cannot invent. Use this when an agent needs to upcoming asteroid close approaches from NASA NeoWs.

Returns the current date and time in any IANA time zone, plus Unix seconds/milliseconds, ISO 8601, weekday and day-of-year. Use it whenever an agent needs to know 'now'. Use this when an agent needs to the current date/time in any time zone — agents have no clock.

Look up the fact attached to any number from the Numbers API: pop-culture trivia, mathematical properties, day-of-year facts and historical years. The kind of color that makes explanations memorable — cited from the dedicated database, not invented. Use this when an agent needs to trivia, math or history attached to a number.

Generate a QR code for any text, URL or crypto address: returns ready-to-embed SVG markup and a data URI, with configurable size and error-correction level. Use this when an agent needs to any text or URL as a QR code (SVG + PNG data URI).

Convert a specific wall-clock time between any two IANA time zones with DST-aware, exact offsets — the scheduling-agent operation that LLMs get wrong constantly. Shows both ISO timestamps and the offsets applied. Use this when an agent needs to a specific time, converted between any two zones.

Convert any color between hex, RGB and HSL with WCAG relative luminance — exact integer/channel math, no drift. Accepts #abc, #aabbcc, rgb() and hsl() input and reports every representation plus a light/dark verdict. Use this when an agent needs to hex ↔ RGB ↔ HSL + luminance, exact.

Compute the WCAG 2.1 contrast ratio between a text and background color with pass/fail against every accessibility threshold: AA and AAA for normal and large text, plus the 3:1 UI-component minimum. Exact luminance math — the check every design system needs. Use this when an agent needs to contrast ratio + AA/AAA pass/fail.

Extract EXIF metadata from a JPEG: camera make/model, lens, exposure settings, timestamps, orientation and GPS coordinates as decimal lat/lon. The OSINT-standard check for where a photo really came from — parsed in memory, never stored. Use this when an agent needs to camera, settings and GPS from a JPEG.

Query and parse a domain's CAA records: which certificate authorities are authorized to issue TLS certificates, whether wildcards are covered separately, and where violation reports go. A CAA policy locks the domain against mis-issuance by CAs the owner never chose. Use this when an agent needs to which certificate authorities may issue for this domain?.

Enumerate a domain's subdomains from public Certificate Transparency logs via crt.sh — every TLS certificate ever issued for the domain or its subdomains, deduplicated. The passive-recon standard: reveals staging hosts, admin panels and internal naming without touching the target. Use this when an agent needs to subdomains disclosed by public CT logs (crt.sh).

Fetch a URL and audit every Set-Cookie it sends: name, and whether Secure, HttpOnly and SameSite are present — the three flags that decide whether a cookie survives transport, XSS and CSRF. Session cookies missing flags are exactly how session hijacking happens. Use this when an agent needs to every cookie a URL sets, with missing flags flagged.

Compute a CVSS 3.1 base score from its vector string using the exact FIRST specification (weights, scope handling, and the rounding function). Pairs with cve-lookup: paste any vector and get the score, severity band, and metric breakdown. Use this when an agent needs to vector string → exact base score.

Fetch and grade a domain's DMARC record at _dmarc.<domain>: policy (none/quarantine/reject), alignment modes, aggregate-report (rua) and failure-report (ruf) destinations, and the percentage applied. DMARC is what actually stops spoofing — p=none grades C even though most domains sit there. Use this when an agent needs to spoofing policy grade + report destinations.

Check an IPv4 address against four major public DNS blocklists (Barracuda, SpamCop, SORBS, DroneBL). A listing means the IP sent spam or abuse — mail sent from it will bounce or junk across the internet. The pre-flight check before sending email from any server or relay. Use this when an agent needs to is this IP on the major email blocklists?.

Full inbound/outbound email authentication audit for a domain: MX reachability, SPF policy grade, DKIM selector discovery across common selectors, DMARC policy grade, and a composite score with concrete fixes. One call instead of five — the diligence an agent runs before trusting or emailing a domain. Use this when an agent needs to sPF + DKIM + DMARC + MX in one report card.

Scan text or a domain for homoglyph attacks: Cyrillic and Greek characters that render identically to Latin letters (а vs a, р vs p). Returns every impostor position with its Latin equivalent and the fully normalized ASCII rendering — the definitive check for spoofed brands and IDN domains. Use this when an agent needs to find look-alike characters hiding in text or domains.

Build a keccak-256 sorted-pair merkle tree (OpenZeppelin convention) from a list of leaves and get the root plus a verification proof for any leaf — the standard construction for token airdrops and allowlists. Fully deterministic: same leaves, same root. Use this when an agent needs to root + proofs for airdrops and whitelists.

Scores a password by information entropy: character-pool size, length, crack-time against an offline attack (10^10 guesses/s), and common-password/pattern detection. Evaluated in memory only, never stored or logged — the honest math behind 'is this password good?'. Use this when an agent needs to entropy bits + realistic crack-time estimate.

Score a URL for phishing patterns: homoglyph/IDN look-alikes, brand tokens in subdomains, IP-literal hosts, @-tricks, excessive length/hyphens/depth, high-abuse TLDs, punycode and non-standard ports. Pure analysis of the string itself — the pre-click check for links from emails, QR codes or chat. Use this when an agent needs to risk-score a URL before clicking or calling it.

Resolve the PTR record for any IPv4 or IPv6 address — the hostname the IP's owner configured in reverse DNS. Reveals hosting providers, mail-server identities and corporate naming; a missing PTR on a mail source is also a deliverability red flag. Use this when an agent needs to what hostname claims this IP address?.

Fetch and parse a domain's SPF record: authorized senders (ip4/ip6/mx/a/include), lookup count against the 10-DNS-lookup limit, and the final policy qualifier. Flags too-permissive (+all), missing records and over-limit configurations that silently break mail delivery. Use this when an agent needs to sender Policy Framework parse + policy grade.

Probe a server's TLS configuration: which protocol versions (TLS 1.0 → 1.3) it accepts, the cipher negotiated for each, and a downgrade-risk verdict. Legacy protocols still accepting connections are flagged — weak TLS is a compliance finding agents get asked about. Use this when an agent needs to which TLS protocols and ciphers a server accepts.

Generate the current TOTP two-factor code (RFC 6238) from a base32 secret — the same codes authenticator apps produce. Supports 6/8 digits, 30/60-second steps and SHA-1/256/512. Deterministic HMAC via Web Crypto; nothing is stored. Use this when an agent needs to rFC 6238 2FA codes from a base32 secret.