Every tool
Everything on the site, grouped by platform. All of it runs in your browser: nothing you paste is uploaded, and there is no server to send it to.
Kubernetes
Validate the manifests you have, or generate the one you need.
- Kubernetes YAML Generator Answer a few questions, get a manifest
- Kubernetes YAML Validator Is this YAML valid, and where is it wrong?
- Kubernetes Rollout & Probe Timing Restart loops, capacity dips and stuck drains
- Kubernetes Service Checker Will this Service have any endpoints?
- Kubernetes Network Policy Viewer What can reach what, and what just broke
- Kubernetes Manifest Diff What actually changed
- Kubernetes Resource Calculator What these manifests actually reserve
- Kubernetes RBAC Viewer Who can actually do what
- Kubernetes Deployment Generator See the capacity dip before you deploy
- Kubernetes Service Generator port, targetPort, and which one you meant
- Kubernetes StatefulSet Generator Stable names, and volumes that outlive you
- Kubernetes QoS Class Calculator And where you sit in the eviction order
- Kubernetes Node Capacity Planner Allocatable is not capacity
- Kubernetes Max Pods per Node Calculator The ENI limit, not the 110 default
- Kubernetes Label Selector Tester Which key failed, not just that one did
- Kubernetes Taint & Toleration Tester Tolerations permit, they do not attract
- Kubernetes Resource Name Validator RFC 1123 subdomain, label, or 1035
- Kubernetes Label & Annotation Validator Why your image tag is not a legal label
- Kubernetes CrashLoopBackOff Guide The status is a timer, not a cause
- Kubernetes TLS Certificate Decoder When it expires, and what it covers
- Kubernetes ServiceAccount Token Decoder Bound or legacy, and when it dies
- Kubernetes imagePullSecret Generator The registry URL nobody gets right
- Kubernetes cert-manager Certificates Issuer scope, and the rate limit that costs a week
- Kubernetes Flux HelmRelease Generator With the source it cannot work without
- Kubernetes Helm Chart Generator Chart.yaml, values, and working templates
- Kubernetes Argo CD Application Generator The defaults that are off, turned on
- Kubernetes Ingress Generator pathType, and the TLS secret that fails quietly
- Kubernetes HPA Generator Why it says unknown and never scales
- Kubernetes SecurityContext Generator Pod level, container level, and which wins
- Kubernetes Probe Generator How long it gets to start before liveness kills it
- Kubernetes PVC Generator Access modes your storage can actually do
- Kubernetes ResourceQuota Generator And the LimitRange that stops it breaking deploys
- Kubernetes CronJob Generator The fields that decide whether it runs
- Kubernetes NetworkPolicy Generator With the DNS rule already in it
- Kubernetes RBAC Generator And what it actually grants
- Kubernetes PodDisruptionBudget Generator Can this budget ever be satisfied?
- Kubernetes API Deprecation Checker What breaks on the next upgrade
- Kubernetes Kubeconfig Viewer Read it without handing it to anyone
- Kubernetes Quantity Parser What 512Mi, 100m and 1e3 actually mean
- Kubernetes Multi-Document YAML Splitter One file per object, in apply order
- Kubernetes .env to ConfigMap & Secret Split the credentials out on the way
- Kubernetes Secret Decoder See what is actually in there
- Kubernetes Ingress to Gateway API Which annotations silently stop working
- Kubernetes Manifest Visualizer What points at what, and what points at nothing
- Kubernetes Patch Tester Which --type, and what it deletes
- Kubernetes kubectl JSONPath Tester kubectl's dialect, not generic JSONPath
- Kubernetes Node Affinity Tester Required excludes, preferred only scores
- Kubernetes Helm Values Diff A missing key is a third value
- Kubernetes Pod and Service CIDR Fixed at cluster creation
- Kubernetes Secret Encoder base64 is not encryption
- Kubernetes API Version Checker Will this apply on that cluster
- Kubernetes Go Template Tester Go truthiness is not JavaScript's
- Kubernetes Cluster Cost Estimator At your rates, not a price table
- Kubernetes Kustomize Build Transformers run in kustomize's order
- Kubernetes Helm Chart Validator version is SemVer, appVersion is not
Kafka
The config that decides whether a message survives, and the bytes on the wire.
- Kafka Confluent Wire Format Decoder The five junk bytes in front of your payload
- Kafka Key to Partition Mapper Which partition does this key land on?
- Kafka Topic Name Validator Legal, risky, or 249 characters too long?
- Kafka Replication Safety Checker How many brokers can you lose
- Kafka Producer Config Linter Will it start, and will it lose a record?
- Kafka Message Payload Decoder The first five bytes are usually not data
- Kafka Connect Source Connector Generator tasks.max is a ceiling, not a count
- Kafka Connect Sink Connector Generator A dead letter queue with no context headers is a pile of records
- Kafka Connect SMT Chain Builder The order is the transforms list
- Kafka MirrorMaker 2 Config Generator It renames every topic by default
- Kafka Partition Reassignment Generator The throttle is not optional
- Strimzi Kafka Resource Generator Without the cluster label, nothing happens
- Kafka mTLS Config Generator The certificate is the identity
- Kafka Schema Registry Config Generator The compatibility direction is your deployment order
- Kafka Exactly-Once Config Generator Half of it is worse than none
- Kafka Broker and KRaft Config Generator The internal topics that break a one-broker cluster
- Kafka Quota Generator Byte rates are per broker, not per cluster
- Kafka Streams Config Generator application.id is four things at once
- Kafka Connect Worker Config Generator Security three times, or the tasks fail
- Kafka Retention and Unit Converter log.retention.hours does not take milliseconds
- Kafka Timestamp Converter Two sentinels and two meanings
- Kafka .properties to YAML Converter Dotted keys stay flat
- Kafka Streams Internal Topic Predictor Create them before Streams does
- Kafka ACL Generator The grant you forgot is on another resource type
- Kafka Topic Config Generator min.insync.replicas is the one that matters
- Kafka client.properties Generator The file every CLI tool asks for
- Kafka Producer Config Generator No password field, on purpose
- Kafka Consumer Config Generator The commit mode decides the semantics
- Kafka Disk and Retention Calculator retention.bytes is per partition
- Kafka Partition Count Calculator The number you can never reduce
- Kafka Cluster Sizing Calculator The traffic no client metric shows
- Kafka Consumer Lag Catch-Up Calculator Whether it ever clears, not just when
- Kafka Producer Batching Calculator linger.ms=0 still batches
- Kafka Segment and Index Sizing Why retention.ms is a lower bound
- Kafka Rebalance Duration Estimator What a rolling restart really costs
- Kafka Cost Estimator Your rates, so nothing goes stale
- Kafka Config Explorer by Version The answer depends on the release
- Kafka Default Config Reference What moved under a config you never edited
- Kafka OAuth Bearer Token Decoder Will Kafka accept it, and can it refresh
- Kafka Record Header Viewer Headers are a list, not a map
- Kafka Topic Regex Subscription Tester Kafka matches the whole name
- Kafka ACL Permission Matrix Viewer DENY beats every ALLOW
- Kafka Connect Config Validator The mistakes that raise no error
- Kafka Consumer Group Id Validator Which broker coordinates the group
- Kafka Partition Assignment Visualizer Leadership is the load, not replicas
- Kafka Consumer Assignment Visualizer The three assignors disagree
- Kafka ZooKeeper to KRaft Config Converter The authorizer class nobody changes
- Kafka Config to Strimzi Half of it belongs elsewhere
- Kafka Docker Compose Generator (KRaft) Reachable from inside and outside
- Kafka JAAS Config Decoder The line that stops SASL working
- Kafka CRC32C Calculator Which CRC, over which bytes
- Kafka Config Upgrade Checker What breaks when you upgrade Kafka
- Kafka Config Diff Which change actually changed something
- Kafka Consumer Config Linter Why the group rebalances, and where the records went
- Kafka Avro Schema Validator The defaults Avro accepts and rejects
- Kafka Schema Compatibility Checker What the registry will say, before you ask it
- Kafka Avro Schema Diff Which direction each change breaks
- Kafka Compression Comparison Measured on your bytes
- Kafka Delivery Semantics Exactly-once has a consumer half
- Kafka ksqlDB Query Builder It looks like SQL and the rules are not
- Kafka Connect SMT Predicate Tester negate reads backwards
- Kafka Streams Topology Viewer Count the repartitions
- Kafka Connect Pipeline Visualizer The order things really run in
- Kafka Protobuf Binary Decoder Works without the .proto
- Kafka Protobuf JSON Converter Why your JSON does not round-trip
- Kafka Protobuf to Avro Schema What does not survive the conversion
- Kafka Avro Binary Decoder Wrong schema, no error
- Kafka Avro JSON Converter Why the console producer rejects your line
- Kafka Avro Sample Data Generator Records that actually serialize
- Kafka JSON to Avro Schema What JSON cannot tell you
- Kafka JSON Schema to Avro What does not survive the conversion
- Kafka SASL JAAS Generator One login module, four syntaxes
- Kafka CLI Command Builder kcat is librdkafka, not Kafka
Terraform
Check it parses, and format it the way terraform fmt would.
- Terraform Validator & Formatter Does it parse, and is it formatted?
- Terraform dynamic Block Generator It is ingress.value, not each.value
- Terraform check and precondition Generator A failed check does not stop the apply
- Terraform variables.tf Generator From the var. references you already wrote
- Terraform Unused Declaration Linter Dead variables, locals and data sources
- Terraform Atlantis YAML Generator when_modified misses your modules
- Terraform Function Tester and HCL Console terraform console, in a tab
- Terraform for Expression Tester Where do the keys collide?
- Terraform Interpolation Tester null becomes an empty string
- Terraform templatefile Tester Render it before you apply it
- Terraform Resource Count Calculator How many objects, not how many blocks
- Terraform count to for_each Converter With the moved blocks it needs
- Terraform moved Block Generator Rename without destroying
- Terraform state mv Command Builder No plan, no undo
- Terraform target Flag Builder And why to stop using it
- Terraform outputs.tf Generator Outputs are not sensitive by default
- Terraform Remote State Data Source Generator It grants read of the whole state
- Terraform Provider Block Generator docker is not hashicorp/docker
- Terraform .gitignore Generator and Checker .terraform* eats the lock file
- Terraform to OpenTofu Migration Checker The state is the part to watch
- Terraform tfvars to JSON Converter The JSON file wins
- Terraform Version Constraint Parser What ~> actually allows
- Terraform Resource Address Parser Quote it before the shell eats it
- Terraform cidrsubnet Calculator newbits is added, not the target
- Terraform Import Block Generator The id is not the name
- Terraform Lock File Viewer Why CI fails and your laptop does not
- Terraform Variables Checker A missing value hangs CI
- Terraform tfvars to Env Vars Converter Lists and maps have to be JSON
- Terraform Deprecated Syntax Checker What a current Terraform rejects
- Terraform State File Viewer Read it without uploading it
- Terraform Plan JSON Viewer It is not redacted
- Terraform HCL to JSON Converter And what the conversion loses
- Terraform Module Source Validator version only works for the registry
- Terraform Backend Config Decoder Is state actually locked?
- Terraform Naming Convention Validator A hyphen makes a resource unreferenceable
Docker
What the image will actually do once it is built and running.
- Docker Container Image Reference Parser Is that a registry or a Docker Hub user?
- Dockerfile Linter What this image will do to you later
- docker run to Kubernetes YAML And the flags that have no equivalent
- Docker Compose to Kubernetes And why depends_on has no equivalent
- Docker Logging Driver Generator json-file never rotates
- Dockerfile Non-Root USER Generator Numeric, or Kubernetes rejects it
- Docker OCI Image Labels Generator One of them actually does something
- Docker Hub Pull Rate Limit Calculator Counted per IP, not per person
- Docker Registry Storage Calculator Deleting a tag frees nothing
- Docker Build Context Analyzer All of it uploads before anything runs
- Docker Compose to docker run Converter Names stop resolving
- Docker Compose Version Migrator version: is obsolete now
- Docker Compose Network and Port Viewer Everything reaches everything
- Docker Command Explainer Which flags hand over the host
- Docker BuildKit Cache Mount Generator apt deletes the cache you just mounted
- Docker BuildKit Secret Mount Generator ARG is in docker history forever
- Docker .dockerignore Pattern Tester *.log does not match logs/app.log
- Docker Image Manifest Viewer unknown/unknown is not broken
- Docker Image Config Viewer Anyone who can pull can read your Env
- Docker Registry Token Decoder Check the scope before the credentials
- Docker HEALTHCHECK Generator Docker does nothing when it fails
- Docker Network Subnet Calculator 31 networks, then it stops
- Docker History Analyzer The rm did not save anything
- Docker Run to Compose Converter Some flags have no equivalent
- Docker CMD and ENTRYPOINT Tester Why docker stop takes ten seconds
- Docker Port Mapping Tester -p reaches past your firewall
- Docker -v to --mount Converter -v invents missing directories
- Docker Restart Policy Simulator The backoff resets after ten seconds
- Docker Exit Code Explainer 137 is two different problems
- Docker CPU Limit Converter --cpu-shares limits nothing
- Docker Memory Limit Calculator -m 512m allows a gigabyte
- Docker Compose Interpolation Tester An unset variable is an empty string
- Docker Environment Variable Precedence Tester Your shell does not reach the container
- Docker Compose Override Merge Previewer An override can add a port, never remove one
- Dockerfile Multi-Stage Build Analyzer Which stages reach the image
- Dockerignore Validator It is not .gitignore
Redis
Which slot a key lands in, and what the bytes on the wire actually say.
- Redis Hash Slot Calculator Which of the 16,384 slots does this key land in?
- Redis Hash Tag Tester Will these keys survive a multi-key command?
- Redis RESP Protocol Decoder Read what the server actually sent
- Redis RESP2 vs RESP3 Reply Decoder What the same reply looks like on each protocol
- Redis Command to RESP Exactly what your client puts on the socket
- Redis Glob Pattern Tester Redis globs are not shell globs
- Redis Connection URL Parser The path is the database number
- Redis Memory Unit Converter 1g and 1gb are not the same number
- Redis TTL Converter -1 and -2 are not durations
- Redis Stream ID Parser The first half is a millisecond timestamp
- redis.conf Validator Will Redis start with this file?
- Redis Production Config Linter The settings that cause incidents
- redis.conf to CONFIG SET Which of these can you change without a restart?
- Redis ACL Rule Decoder What does this user actually get?
- Redis ACL Validator Find the rule that does nothing
- Redis INFO Analyzer The numbers INFO does not print
- Redis SLOWLOG Analyzer What blocked everyone else
- Redis CLUSTER NODES Parser Read the topology, and find the gap
- Redis Cluster Slot Distribution Who owns how much, and what is missing
- Redis Keyspace Notification Flags Why your events never arrive
- Redis Memory Calculator The encoding decides, not the data
- Redis Key Count to Memory The fixed cost per key
- Redis Encoding Threshold Calculator One field more, several times the memory
- Redis Bitmap Memory Calculator Sized by the highest bit, not the set ones
- Redis HyperLogLog Calculator 12 KB whether you count a thousand or a billion
- Redis Cluster Sizing Only 60% of each node is usable
- Redis RDB and AOF Size Calculator The fork needs memory, not disk
- Redis Replication Bandwidth Calculator How long the backlog actually covers
- Redis Connection Pool Calculator More connections is not more throughput
- Redis Pipeline Calculator It removes round trips, not work
- Redis Cache Hit Rate Calculator 99% to 90% is ten times the backend load
- Redis Eviction Policy Simulator volatile- with no TTLs is noeviction
- Redis Cost Estimator Your rates, so nothing goes stale
- Redis Config File Generator A redis.conf with the reasons in it
- Redis ACL Generator A user that can do exactly one job
- Redis Maxmemory Config Generator The limit, and the headroom it needs
- Redis Persistence Config Generator How much you can afford to lose
- Redis Lua Script Generator Atomic, and short enough to stay that way
- Redis TLS Config Generator Encrypted, and the old port actually closed
- Redis Sentinel Config Generator Failover that can actually be authorised
- Redis Cluster Config Generator Three primaries, and the bus port open
- Redis Docker Compose Generator Local Redis that is not on the internet
- Redis Client Config Generator Timeouts on both sides, and a sane pool
- Redis MEMORY STATS Analyzer Which number actually matters
- Redis Bigkeys Output Analyzer Elements are not bytes
- Redis CLIENT LIST Analyzer Find the connection hurting you
- Redis LATENCY Report Analyzer An empty report may mean nothing was recorded
- Redis Keyspace Prefix Analyzer Which key family is growing
- Redis SET Command Builder A plain SET clears the TTL
- Redis ZRANGE Query Builder REV reverses the argument order
- Redis SCAN Iteration Planner COUNT is a hint, not a page size
- Redis Key Name Validator Legal is not the same as workable
- Redis Cluster Compatibility Checker Works now, breaks when you shard
MCP
Why the server will not start, and what the client actually sees.
- MCP Server Config Generator The config, and why yours does not start
- MCP Server Config Validator Why the server never came up
- MCP Tool Schema Validator The keywords the client ignores
- MCP Tool Definition Linter What your tool list costs every request
- MCP JSON-RPC Message Validator Request, response or notification
- MCP stdio Session Debugger The print statement that broke the stream
- MCP Capability Negotiation Checker What the two sides actually agreed
- MCP Resource URI Validator Expand the template, see the result
AI infrastructure
The bytes on the wire, the schema the API accepts, and what it costs.
- LLM SSE Stream Decoder Reassemble the message from the wire
- LLM Tool Definition Converter Anthropic, OpenAI and MCP, both ways
- LLM JSON Schema Strict Mode Checker What structured output will refuse
- LLM Context Window Planner Where the budget runs out
- LLM Prompt Caching Planner Where to put the breakpoint
- LLM API Cost Calculator The number that matches the invoice
- LLM Model Cost Comparison Two models, one workload, your rates
- LLM API Rate Limit Planner Which limit you hit first
Web security
The headers that decide what a browser will let your page do.
AWS
Policies and buckets: who can actually reach what.
- AWS IAM Policy Validator & Analyzer Valid JSON? And what does it grant?
- AWS IAM Policy Evaluator Is this actually allowed?
- AWS S3 Bucket Policy Analyzer Is this bucket actually public?
- AWS S3 Bucket Policy Generator Pick a pattern, get a safe policy
- AWS ARN Decoder Split it up, and check it is right
- AWS ECS Task Definition Analyzer Two roles, and they are not the same
- AWS S3 Lifecycle Policy Analyzer Minimum durations you still pay
- AWS S3 Presigned URL Decoder It dies with the session
- AWS Lambda Configuration Analyzer Memory is the CPU dial
- AWS SQS Visibility Timeout Calculator Six times the function timeout
- AWS EventBridge Pattern Tester Every leaf value is an array
- AWS DynamoDB Capacity Calculator Every index costs a write
- AWS Resource Name Validator A dot in a bucket breaks TLS
- AWS CLI Profile Analyzer The prefix rule is opposite
- AWS IAM Trust Policy Analyzer Account root means the whole account
- AWS Access Key ID Identifier AKIA never expires, ASIA does
- AWS STS Assume Role Command Builder Chaining caps at one hour
- AWS KMS Key Policy Analyzer The one AWS mistake with no undo
- AWS Security Group Analyzer They cannot deny anything
- AWS Network ACL Return Traffic Checker Stateless, so replies need a rule
Data formats
Is it valid, where exactly is it wrong, and what does it become.
Encode & decode
Read what an encoded string actually says, and what it cost to get there.
- Base64 Encoder & Decoder Both directions, UTF-8 done right
- Unix Timestamp Converter Seconds or milliseconds? It says which
- JWT Decoder & Inspector Read the claims, and what is wrong with them
- URL Encoder and Decoder Which of the two functions you actually want
- HTML Entity Encoder and Decoder Five characters, not four hundred
- Hex Encoder and Decoder Bytes, with a hex dump
- Base32 Encoder and Decoder Two alphabets that decode differently
- String Escape Converter Six targets, one of them injection
- Punycode and IDN Converter The domain that is not what it looks like
Cryptography
Which algorithm for which job, and what each digest is safe for.
Identifiers
Generate a value that has to be unique, and understand what it encodes.
Networking & scheduling
The things you end up looking up on some ad-filled site instead.
Cost & compliance
Where the money goes, and how far along your controls already are.