Every tool
Everything on the site, grouped by platform. All of it runs in your browser: nothing you paste is uploaded, and there is no server to send it to.
Kubernetes
Validate the manifests you have, or generate the one you need.
- Kubernetes YAML Generator Answer a few questions, get a manifest
- Kubernetes YAML Validator Is this YAML valid, and where is it wrong?
- Kubernetes Rollout & Probe Timing Restart loops, capacity dips and stuck drains
- Kubernetes Service Checker Will this Service have any endpoints?
- Kubernetes Network Policy Viewer What can reach what, and what just broke
- Kubernetes Manifest Diff What actually changed
- Kubernetes Resource Calculator What these manifests actually reserve
- Kubernetes RBAC Viewer Who can actually do what
- Kubernetes Deployment Generator See the capacity dip before you deploy
- Kubernetes Service Generator port, targetPort, and which one you meant
- Kubernetes StatefulSet Generator Stable names, and volumes that outlive you
- Kubernetes QoS Class Calculator And where you sit in the eviction order
- Kubernetes Node Capacity Planner Allocatable is not capacity
- Kubernetes Max Pods per Node Calculator The ENI limit, not the 110 default
- Kubernetes Label Selector Tester Which key failed, not just that one did
- Kubernetes Taint & Toleration Tester Tolerations permit, they do not attract
- Kubernetes Resource Name Validator RFC 1123 subdomain, label, or 1035
- Kubernetes Label & Annotation Validator Why your image tag is not a legal label
- Kubernetes CrashLoopBackOff Guide The status is a timer, not a cause
- Kubernetes TLS Certificate Decoder When it expires, and what it covers
- Kubernetes ServiceAccount Token Decoder Bound or legacy, and when it dies
- Kubernetes imagePullSecret Generator The registry URL nobody gets right
- Kubernetes cert-manager Certificates Issuer scope, and the rate limit that costs a week
- Kubernetes Flux HelmRelease Generator With the source it cannot work without
- Kubernetes Helm Chart Generator Chart.yaml, values, and working templates
- Kubernetes Argo CD Application Generator The defaults that are off, turned on
- Kubernetes Ingress Generator pathType, and the TLS secret that fails quietly
- Kubernetes HPA Generator Why it says unknown and never scales
- Kubernetes SecurityContext Generator Pod level, container level, and which wins
- Kubernetes Probe Generator How long it gets to start before liveness kills it
- Kubernetes PVC Generator Access modes your storage can actually do
- Kubernetes ResourceQuota Generator And the LimitRange that stops it breaking deploys
- Kubernetes CronJob Generator The fields that decide whether it runs
- Kubernetes NetworkPolicy Generator With the DNS rule already in it
- Kubernetes RBAC Generator And what it actually grants
- Kubernetes PodDisruptionBudget Generator Can this budget ever be satisfied?
- Kubernetes API Deprecation Checker What breaks on the next upgrade
- Kubernetes Kubeconfig Viewer Read it without handing it to anyone
- Kubernetes Quantity Parser What 512Mi, 100m and 1e3 actually mean
- Kubernetes Multi-Document YAML Splitter One file per object, in apply order
- Kubernetes .env to ConfigMap & Secret Split the credentials out on the way
- Kubernetes Secret Decoder See what is actually in there
- Kubernetes Ingress to Gateway API Which annotations silently stop working
- Kubernetes Manifest Visualizer What points at what, and what points at nothing
- Kubernetes Patch Tester Which --type, and what it deletes
- Kubernetes kubectl JSONPath Tester kubectl's dialect, not generic JSONPath
- Kubernetes Node Affinity Tester Required excludes, preferred only scores
- Kubernetes Helm Values Diff A missing key is a third value
- Kubernetes Pod and Service CIDR Fixed at cluster creation
- Kubernetes Secret Encoder base64 is not encryption
- Kubernetes API Version Checker Will this apply on that cluster
- Kubernetes Go Template Tester Go truthiness is not JavaScript's
- Kubernetes Cluster Cost Estimator At your rates, not a price table
- Kubernetes Kustomize Build Transformers run in kustomize's order
- Kubernetes Helm Chart Validator version is SemVer, appVersion is not
Observability
Why the target is not scraped, and why the query returns nothing.
Kafka
The config that decides whether a message survives, and the bytes on the wire.
- Kafka Confluent Wire Format Decoder The five junk bytes in front of your payload
- Kafka Key to Partition Mapper Which partition does this key land on?
- Kafka Topic Name Validator Legal, risky, or 249 characters too long?
- Kafka Replication Safety Checker How many brokers can you lose
- Kafka Producer Config Linter Will it start, and will it lose a record?
- Kafka Message Payload Decoder The first five bytes are usually not data
- Kafka Connect Source Connector Generator tasks.max is a ceiling, not a count
- Kafka Connect Sink Connector Generator A dead letter queue with no context headers is a pile of records
- Kafka Connect SMT Chain Builder The order is the transforms list
- Kafka MirrorMaker 2 Config Generator It renames every topic by default
- Kafka Partition Reassignment Generator The throttle is not optional
- Strimzi Kafka Resource Generator Without the cluster label, nothing happens
- Kafka mTLS Config Generator The certificate is the identity
- Kafka Schema Registry Config Generator The compatibility direction is your deployment order
- Kafka Exactly-Once Config Generator Half of it is worse than none
- Kafka Broker and KRaft Config Generator The internal topics that break a one-broker cluster
- Kafka Quota Generator Byte rates are per broker, not per cluster
- Kafka Streams Config Generator application.id is four things at once
- Kafka Connect Worker Config Generator Security three times, or the tasks fail
- Kafka Retention and Unit Converter log.retention.hours does not take milliseconds
- Kafka Timestamp Converter Two sentinels and two meanings
- Kafka .properties to YAML Converter Dotted keys stay flat
- Kafka Streams Internal Topic Predictor Create them before Streams does
- Kafka ACL Generator The grant you forgot is on another resource type
- Kafka Topic Config Generator min.insync.replicas is the one that matters
- Kafka client.properties Generator The file every CLI tool asks for
- Kafka Producer Config Generator No password field, on purpose
- Kafka Consumer Config Generator The commit mode decides the semantics
- Kafka Disk and Retention Calculator retention.bytes is per partition
- Kafka Partition Count Calculator The number you can never reduce
- Kafka Cluster Sizing Calculator The traffic no client metric shows
- Kafka Consumer Lag Catch-Up Calculator Whether it ever clears, not just when
- Kafka Producer Batching Calculator linger.ms=0 still batches
- Kafka Segment and Index Sizing Why retention.ms is a lower bound
- Kafka Rebalance Duration Estimator What a rolling restart really costs
- Kafka Cost Estimator Your rates, so nothing goes stale
- Kafka Config Explorer by Version The answer depends on the release
- Kafka Default Config Reference What moved under a config you never edited
- Kafka OAuth Bearer Token Decoder Will Kafka accept it, and can it refresh
- Kafka Record Header Viewer Headers are a list, not a map
- Kafka Topic Regex Subscription Tester Kafka matches the whole name
- Kafka ACL Permission Matrix Viewer DENY beats every ALLOW
- Kafka Connect Config Validator The mistakes that raise no error
- Kafka Consumer Group Id Validator Which broker coordinates the group
- Kafka Partition Assignment Visualizer Leadership is the load, not replicas
- Kafka Consumer Assignment Visualizer The three assignors disagree
- Kafka ZooKeeper to KRaft Config Converter The authorizer class nobody changes
- Kafka Config to Strimzi Half of it belongs elsewhere
- Kafka Docker Compose Generator (KRaft) Reachable from inside and outside
- Kafka JAAS Config Decoder The line that stops SASL working
- Kafka CRC32C Calculator Which CRC, over which bytes
- Kafka Config Upgrade Checker What breaks when you upgrade Kafka
- Kafka Config Diff Which change actually changed something
- Kafka Consumer Config Linter Why the group rebalances, and where the records went
- Kafka Avro Schema Validator The defaults Avro accepts and rejects
- Kafka Schema Compatibility Checker What the registry will say, before you ask it
- Kafka Avro Schema Diff Which direction each change breaks
- Kafka Compression Comparison Measured on your bytes
- Kafka Delivery Semantics Exactly-once has a consumer half
- Kafka ksqlDB Query Builder It looks like SQL and the rules are not
- Kafka Connect SMT Predicate Tester negate reads backwards
- Kafka Streams Topology Viewer Count the repartitions
- Kafka Connect Pipeline Visualizer The order things really run in
- Kafka Protobuf Binary Decoder Works without the .proto
- Kafka Protobuf JSON Converter Why your JSON does not round-trip
- Kafka Protobuf to Avro Schema What does not survive the conversion
- Kafka Avro Binary Decoder Wrong schema, no error
- Kafka Avro JSON Converter Why the console producer rejects your line
- Kafka Avro Sample Data Generator Records that actually serialize
- Kafka JSON to Avro Schema What JSON cannot tell you
- Kafka JSON Schema to Avro What does not survive the conversion
- Kafka SASL JAAS Generator One login module, four syntaxes
- Kafka CLI Command Builder kcat is librdkafka, not Kafka
Terraform
Check it parses, and format it the way terraform fmt would.
- Terraform Validator & Formatter Does it parse, and is it formatted?
- Terraform dynamic Block Generator It is ingress.value, not each.value
- Terraform check and precondition Generator A failed check does not stop the apply
- Terraform variables.tf Generator From the var. references you already wrote
- Terraform Unused Declaration Linter Dead variables, locals and data sources
- Terraform Atlantis YAML Generator when_modified misses your modules
- Terraform Function Tester and HCL Console terraform console, in a tab
- Terraform for Expression Tester Where do the keys collide?
- Terraform Interpolation Tester null becomes an empty string
- Terraform templatefile Tester Render it before you apply it
- Terraform Resource Count Calculator How many objects, not how many blocks
- Terraform count to for_each Converter With the moved blocks it needs
- Terraform moved Block Generator Rename without destroying
- Terraform state mv Command Builder No plan, no undo
- Terraform target Flag Builder And why to stop using it
- Terraform outputs.tf Generator Outputs are not sensitive by default
- Terraform Remote State Data Source Generator It grants read of the whole state
- Terraform Provider Block Generator docker is not hashicorp/docker
- Terraform .gitignore Generator and Checker .terraform* eats the lock file
- Terraform to OpenTofu Migration Checker The state is the part to watch
- Terraform tfvars to JSON Converter The JSON file wins
- Terraform Version Constraint Parser What ~> actually allows
- Terraform Resource Address Parser Quote it before the shell eats it
- Terraform cidrsubnet Calculator newbits is added, not the target
- Terraform Import Block Generator The id is not the name
- Terraform Lock File Viewer Why CI fails and your laptop does not
- Terraform Variables Checker A missing value hangs CI
- Terraform tfvars to Env Vars Converter Lists and maps have to be JSON
- Terraform Deprecated Syntax Checker What a current Terraform rejects
- Terraform State File Viewer Read it without uploading it
- Terraform Plan JSON Viewer It is not redacted
- Terraform HCL to JSON Converter And what the conversion loses
- Terraform Module Source Validator version only works for the registry
- Terraform Backend Config Decoder Is state actually locked?
- Terraform Naming Convention Validator A hyphen makes a resource unreferenceable
CI and automation
The workflow file that runs with your secrets, and the bill it generates.
Postgres
Where the memory goes, and where the query time went.
Docker
What the image will actually do once it is built and running.
- Docker Container Image Reference Parser Is that a registry or a Docker Hub user?
- Dockerfile Linter What this image will do to you later
- docker run to Kubernetes YAML And the flags that have no equivalent
- Docker Compose to Kubernetes And why depends_on has no equivalent
- Docker Logging Driver Generator json-file never rotates
- Dockerfile Non-Root USER Generator Numeric, or Kubernetes rejects it
- Docker OCI Image Labels Generator One of them actually does something
- Docker Hub Pull Rate Limit Calculator Counted per IP, not per person
- Docker Registry Storage Calculator Deleting a tag frees nothing
- Docker Build Context Analyzer All of it uploads before anything runs
- Docker Compose to docker run Converter Names stop resolving
- Docker Compose Version Migrator version: is obsolete now
- Docker Compose Network and Port Viewer Everything reaches everything
- Docker Command Explainer Which flags hand over the host
- Docker BuildKit Cache Mount Generator apt deletes the cache you just mounted
- Docker BuildKit Secret Mount Generator ARG is in docker history forever
- Docker .dockerignore Pattern Tester *.log does not match logs/app.log
- Docker Image Manifest Viewer unknown/unknown is not broken
- Docker Image Config Viewer Anyone who can pull can read your Env
- Docker Registry Token Decoder Check the scope before the credentials
- Docker HEALTHCHECK Generator Docker does nothing when it fails
- Docker Network Subnet Calculator 31 networks, then it stops
- Docker History Analyzer The rm did not save anything
- Docker Run to Compose Converter Some flags have no equivalent
- Docker CMD and ENTRYPOINT Tester Why docker stop takes ten seconds
- Docker Port Mapping Tester -p reaches past your firewall
- Docker -v to --mount Converter -v invents missing directories
- Docker Restart Policy Simulator The backoff resets after ten seconds
- Docker Exit Code Explainer 137 is two different problems
- Docker CPU Limit Converter --cpu-shares limits nothing
- Docker Memory Limit Calculator -m 512m allows a gigabyte
- Docker Compose Interpolation Tester An unset variable is an empty string
- Docker Environment Variable Precedence Tester Your shell does not reach the container
- Docker Compose Override Merge Previewer An override can add a port, never remove one
- Dockerfile Multi-Stage Build Analyzer Which stages reach the image
- Dockerignore Validator It is not .gitignore
Redis
Which slot a key lands in, and what the bytes on the wire actually say.
- Redis Hash Slot Calculator Which of the 16,384 slots does this key land in?
- Redis Hash Tag Tester Will these keys survive a multi-key command?
- Redis RESP Protocol Decoder Read what the server actually sent
- Redis RESP2 vs RESP3 Reply Decoder What the same reply looks like on each protocol
- Redis Command to RESP Exactly what your client puts on the socket
- Redis Glob Pattern Tester Redis globs are not shell globs
- Redis Connection URL Parser The path is the database number
- Redis Memory Unit Converter 1g and 1gb are not the same number
- Redis TTL Converter -1 and -2 are not durations
- Redis Stream ID Parser The first half is a millisecond timestamp
- redis.conf Validator Will Redis start with this file?
- Redis Production Config Linter The settings that cause incidents
- redis.conf to CONFIG SET Which of these can you change without a restart?
- Redis ACL Rule Decoder What does this user actually get?
- Redis ACL Validator Find the rule that does nothing
- Redis INFO Analyzer The numbers INFO does not print
- Redis SLOWLOG Analyzer What blocked everyone else
- Redis CLUSTER NODES Parser Read the topology, and find the gap
- Redis Cluster Slot Distribution Who owns how much, and what is missing
- Redis Keyspace Notification Flags Why your events never arrive
- Redis Memory Calculator The encoding decides, not the data
- Redis Key Count to Memory The fixed cost per key
- Redis Encoding Threshold Calculator One field more, several times the memory
- Redis Bitmap Memory Calculator Sized by the highest bit, not the set ones
- Redis HyperLogLog Calculator 12 KB whether you count a thousand or a billion
- Redis Cluster Sizing Only 60% of each node is usable
- Redis RDB and AOF Size Calculator The fork needs memory, not disk
- Redis Replication Bandwidth Calculator How long the backlog actually covers
- Redis Connection Pool Calculator More connections is not more throughput
- Redis Pipeline Calculator It removes round trips, not work
- Redis Cache Hit Rate Calculator 99% to 90% is ten times the backend load
- Redis Eviction Policy Simulator volatile- with no TTLs is noeviction
- Redis Cost Estimator Your rates, so nothing goes stale
- Redis Config File Generator A redis.conf with the reasons in it
- Redis ACL Generator A user that can do exactly one job
- Redis Maxmemory Config Generator The limit, and the headroom it needs
- Redis Persistence Config Generator How much you can afford to lose
- Redis Lua Script Generator Atomic, and short enough to stay that way
- Redis TLS Config Generator Encrypted, and the old port actually closed
- Redis Sentinel Config Generator Failover that can actually be authorised
- Redis Cluster Config Generator Three primaries, and the bus port open
- Redis Docker Compose Generator Local Redis that is not on the internet
- Redis Client Config Generator Timeouts on both sides, and a sane pool
- Redis MEMORY STATS Analyzer Which number actually matters
- Redis Bigkeys Output Analyzer Elements are not bytes
- Redis CLIENT LIST Analyzer Find the connection hurting you
- Redis LATENCY Report Analyzer An empty report may mean nothing was recorded
- Redis Keyspace Prefix Analyzer Which key family is growing
- Redis SET Command Builder A plain SET clears the TTL
- Redis ZRANGE Query Builder REV reverses the argument order
- Redis SCAN Iteration Planner COUNT is a hint, not a page size
- Redis Key Name Validator Legal is not the same as workable
- Redis Cluster Compatibility Checker Works now, breaks when you shard
MCP
Why the server will not start, and what the client actually sees.
- MCP Server Config Generator The config, and why yours does not start
- MCP Server Config Validator Why the server never came up
- MCP Structured Output Validator The contract only the server has to keep
- MCP Tool Schema Validator The keywords the client ignores
- MCP Tool Poisoning Scanner The instruction you never see
- MCP Tool Definition Linter What your tool list costs every request
- MCP JSON-RPC Message Validator Request, response or notification
- MCP stdio Session Debugger The print statement that broke the stream
- MCP Capability Negotiation Checker What the two sides actually agreed
- MCP Resource URI Validator Expand the template, see the result
- MCP OAuth Flow Debugger The token that works everywhere
- MCP Transport Checker Two protocols, one name
- MCP Server Scaffolding Generator Starts correctly the first time
AI infrastructure
The bytes on the wire, the schema the API accepts, and what it costs.
- LLM SSE Stream Decoder Reassemble the message from the wire
- LLM Tool Definition Converter Anthropic, OpenAI and MCP, both ways
- LLM JSON Schema Strict Mode Checker What structured output will refuse
- LLM Chat Template Renderer What the model actually sees
- LLM Rate Limit Header Decoder Which bucket actually 429s
- LiteLLM Proxy Config Generator The prefix decides where it goes
- vLLM Server Config Generator Whether it will actually start
- Ollama Modelfile Generator num_ctx is not the model's context
- Vector Database Sizing Calculator The graph does not shrink
- LLM Agent Loop Cost Calculator Turn 20 pays for turns 1 to 19
- LLM Fine-Tuning Cost Calculator Training is the cheap part
- RAG Chunking and Embedding Planner Overlap costs more than it looks
- LLM Token Counter Exact, in your browser, or not at all
- LLM Inference Speed Calculator Two bounds, and only one is the GPU
- LLM Quantization Comparison Q4_K_M is not four bits
- What LLM Can I Run on My GPU Fitting is not the same as usable
- GPU VRAM Calculator for LLM Inference Weights, KV cache and what actually fits
- LLM Context Window Planner Where the budget runs out
- LLM Prompt Caching Planner Where to put the breakpoint
- LLM API Cost Calculator The number that matches the invoice
- LLM Model Cost Comparison Two models, one workload, your rates
- LLM API Rate Limit Planner Which limit you hit first
Email and DNS
The records that decide whether your mail arrives, and whether anything resolves.
Web security
The headers that decide what a browser will let your page do.
AWS
Policies and buckets: who can actually reach what.
- AWS IAM Policy Validator & Analyzer Valid JSON? And what does it grant?
- AWS IAM Policy Evaluator Is this actually allowed?
- AWS S3 Bucket Policy Analyzer Is this bucket actually public?
- AWS S3 Bucket Policy Generator Pick a pattern, get a safe policy
- AWS ARN Decoder Split it up, and check it is right
- AWS ECS Task Definition Analyzer Two roles, and they are not the same
- AWS S3 Lifecycle Policy Analyzer Minimum durations you still pay
- AWS S3 Presigned URL Decoder It dies with the session
- AWS Lambda Configuration Analyzer Memory is the CPU dial
- AWS SQS Visibility Timeout Calculator Six times the function timeout
- AWS EventBridge Pattern Tester Every leaf value is an array
- AWS DynamoDB Capacity Calculator Every index costs a write
- AWS Resource Name Validator A dot in a bucket breaks TLS
- AWS CLI Profile Analyzer The prefix rule is opposite
- AWS IAM Trust Policy Analyzer Account root means the whole account
- AWS Access Key ID Identifier AKIA never expires, ASIA does
- AWS STS Assume Role Command Builder Chaining caps at one hour
- AWS KMS Key Policy Analyzer The one AWS mistake with no undo
- AWS Security Group Analyzer They cannot deny anything
- AWS Network ACL Return Traffic Checker Stateless, so replies need a rule
Azure
What the role actually grants, and what the token actually opens.
- Azure Storage Account Security Analyzer The key makes the rest advisory
- Azure VM Size Decoder No d means no temp disk
- Azure Cosmos DB Throughput Calculator Divided evenly, not by demand
- Azure Resource Name Validator One set of rules per provider
- Azure Blob Lifecycle Policy Analyzer The tier you leave early is billed anyway
- Azure NSG Rule Analyzer First match wins, lowest number first
- Azure RBAC Role Definition Analyzer NotActions denies nothing
- Azure Resource ID Parser Type and name pairs, not a path
- Azure Storage SAS Token Decoder It cannot be revoked
Google Cloud
Who can actually reach it, and which credential never expires.
- GCP Storage Bucket Analyzer Two access systems, one visible
- GCP Signed URL Decoder A bearer token in a URL
- GCP Machine Type Decoder The trailing letter is the architecture
- GCP Resource Name Parser Project ID is not project number
- GCP Cloud Run Config Analyzer No CPU between requests
- GCP Pub/Sub Subscription Analyzer Duplicates are the ack deadline
- GCP Firewall Rule Analyzer On a tie, the deny wins
- GCP IAM Policy Analyzer allAuthenticatedUsers is public
- GCP Service Account Key Analyzer The credential that never expires
Data formats
Is it valid, where exactly is it wrong, and what does it become.
Encode & decode
Read what an encoded string actually says, and what it cost to get there.
- Base64 Encoder & Decoder Both directions, UTF-8 done right
- Unix Timestamp Converter Seconds or milliseconds? It says which
- JWT Decoder & Inspector Read the claims, and what is wrong with them
- URL Encoder and Decoder Which of the two functions you actually want
- HTML Entity Encoder and Decoder Five characters, not four hundred
- Hex Encoder and Decoder Bytes, with a hex dump
- Base32 Encoder and Decoder Two alphabets that decode differently
- String Escape Converter Six targets, one of them injection
- Punycode and IDN Converter The domain that is not what it looks like
Cryptography
Which algorithm for which job, and what each digest is safe for.
Identifiers
Generate a value that has to be unique, and understand what it encodes.
Networking & scheduling
The things you end up looking up on some ad-filled site instead.
Cost & compliance
Where the money goes, and how far along your controls already are.