Developer Toolbox API
The Developer Toolbox API bundles the six utilities you reach for daily into a single, dependency-free HTTP API running on Cloudflare's global edge network. Generate RFC 4122 v4 UUIDs in batches, compute MD5/SHA-1/SHA-256/SHA-384/SHA-512 digests, encode and decode unicode-safe base64, inspect JWT headers and payloads, mint cryptographically-secure passwords, and turn any string into a clean URL slug.
Every endpoint is pure compute — no third-party calls, no rate-limited upstreams, no surprise latency. Responses come back as clean, flat JSON with predictable shapes, so they drop straight into your code, CI pipelines, low-code automations, and serverless functions.
Free tier · no credit card · billed on RapidAPI
Key features
- Batch UUID v4 generation (1–100 per call)
- Multi-algorithm hashing: MD5, SHA-1, SHA-256, SHA-384, SHA-512
- Unicode-safe and URL-safe base64 encode/decode
- JWT header and payload decoding (no signature verification)
- Cryptographically-secure password generation with character-class control
- Unicode-aware slugify with diacritic stripping
- Pure compute on the edge — clean, flat JSON responses
Perfect for
- Generating correlation IDs and primary keys in serverless functions
- Computing checksums and content hashes in CI/CD pipelines
- Encoding and decoding payloads in low-code automations
- Inspecting JWT claims while debugging auth flows
- Issuing secure one-time passwords and temporary credentials
- Building SEO-friendly slugs from user-submitted titles
- Replacing scattered helper functions across microservices
- Quick data-munging from the command line or notebooks
Developer Toolbox API Documentation
Everything you need to integrate — base URL, auth, and copy-paste examples.
The Developer Toolbox API exposes six pure-compute utility endpoints under the /toolbox/v1 namespace: UUID generation, multi-algorithm hashing, base64 encode/decode, JWT decoding, secure password generation, and slugification. All endpoints return flat JSON. Hashing runs over UTF-8 bytes, base64 handles full unicode, and password generation uses crypto.getRandomValues with rejection sampling to eliminate modulo bias.
Base URL
https://edge-apis.e9736.workers.devAuthentication
Authenticate by passing your API key as the apikey query parameter. When calling via RapidAPI the X-RapidAPI-Key header is injected for you.
GET /toolbox/v1/hash?algo=sha256&text=hello&apikey=YOUR_KEYRequest & response
GET /toolbox/v1/hash?algo=sha256&text=hello&apikey=YOUR_KEY HTTP/1.1{
"algo": "sha256",
"hex": "2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824",
"length": 64
}Code examples
curl --request GET \
--url 'https://edge-apis.e9736.workers.dev/toolbox/v1/hash?algo=sha256&text=hello&apikey=YOUR_KEY'Endpoints
GET /toolbox/v1/uuid
Generate one or more RFC 4122 version 4 UUIDs.
/toolbox/v1/uuid?count=2&apikey=YOUR_KEYGET /toolbox/v1/hash
Hash text with md5, sha1, sha256, sha384, or sha512 and return the hex digest.
/toolbox/v1/hash?algo=sha256&text=hello&apikey=YOUR_KEYPOST /toolbox/v1/hash
Hash text supplied in a JSON body ({ text, algo }).
/toolbox/v1/hash?apikey=YOUR_KEYGET /toolbox/v1/base64
Base64 encode or decode text, with optional URL-safe alphabet.
/toolbox/v1/base64?op=encode&text=h%C3%A9llo&urlsafe=true&apikey=YOUR_KEYPOST /toolbox/v1/base64
Base64 encode or decode text supplied in a JSON body ({ text, op, urlsafe }).
/toolbox/v1/base64?apikey=YOUR_KEYGET /toolbox/v1/jwt-decode
Decode a JWT's header and payload without verifying the signature.
/toolbox/v1/jwt-decode?token=eyJhbGc...&apikey=YOUR_KEYGET /toolbox/v1/password
Generate a cryptographically-random password with configurable character classes.
/toolbox/v1/password?length=20&symbols=true&apikey=YOUR_KEYGET /toolbox/v1/slugify
Convert any text into a clean, URL-safe slug with diacritic stripping.
/toolbox/v1/slugify?text=Cr%C3%A8me%20Br%C3%BBl%C3%A9e&apikey=YOUR_KEYParameters
Required Parameters
text- The input string for /hash, /base64, and /slugify endpoints.token- The JWT (header.payload[.signature]) to decode on the /jwt-decode endpoint.apikey- Your API key, passed as a query parameter (or X-RapidAPI-Key header via RapidAPI).
Optional Parameters
count- Number of UUIDs to generate, 1–100 (default 1).version- UUID version for /uuid; only version 4 is supported (default 4).algo- Hash algorithm: md5, sha1, sha256, sha384, sha512 (default sha256).op- Base64 operation: encode or decode (default encode).urlsafe- Use the URL-safe base64 alphabet for /base64 (default false).length- Password length, 1–256 (default 16).lowercase- Include lowercase letters in passwords (default true).uppercase- Include uppercase letters in passwords (default true).numbers- Include digits in passwords (default true).symbols- Include symbols in passwords (default false).separator- Slug word separator, max 5 chars (default "-").
Developer Toolbox API Pricing
Simple, predictable pricing for high-volume utility calls with a generous free tier and no hidden fees
Basic
- All six utilities
- 10 requests / second
- Clean JSON responses
Pro
- All six utilities
- 50 requests / second
- $0.20 / 1k overage
Ultra
- All six utilities
- 200 requests / second
- Priority routing
- $0.10 / 1k overage
Need higher volume or a custom SLA?
Talk to us about enterprise rates, dedicated support, and compliance docs.
Frequently asked questions
Six pure-compute utilities under the /toolbox/v1 namespace: UUID v4 generation, multi-algorithm hashing (MD5, SHA-1, SHA-256, SHA-384, SHA-512), unicode-safe base64 encode/decode, JWT header/payload decoding, cryptographically-secure password generation, and Unicode-aware URL slugification.
Pass your API key as the apikey query parameter, for example ?apikey=YOUR_KEY. When you call the API through RapidAPI, the X-RapidAPI-Key header is injected automatically and authentication is handled for you. Authentication is applied globally across all endpoints.
No. The /toolbox/v1/jwt-decode endpoint decodes the header and payload and reports whether a signature segment is present, but it intentionally does not verify the signature. Always treat decoded claims as untrusted input — this endpoint is for inspection and debugging, not authentication.
MD5 and SHA-1 are supported for checksums and legacy interoperability only. They are not collision-resistant and should never be used for security-sensitive purposes such as password storage or digital signatures. Use SHA-256 or stronger when security matters.
Yes. The /toolbox/v1/uuid endpoint accepts a count parameter between 1 and 100 and returns them in a uuids array. When count is 1, a convenience uuid field is also included so you can read the value directly without indexing into the array.
The /toolbox/v1/password endpoint uses crypto.getRandomValues with rejection sampling to eliminate modulo bias, ensuring a uniform distribution across the selected character classes. You can configure the length (1–256) and toggle lowercase, uppercase, numbers, and symbols independently.
Because every endpoint is pure compute running on Cloudflare Workers across 300+ locations with no upstream calls, responses typically return in single-digit milliseconds from the data center nearest the request. The service targets 99.99% uptime and adds zero third-party dependencies that could introduce latency or failures.
Related APIs & tools
Other services that pair well — all on the same key.
DNS Lookup API
Query DNS records with forward and reverse lookups for A, AAAA, MX, TXT, SOA, NS and more, returned as clean JSON.
Learn more→Text Analysis API
Comprehensive NLP and pattern detection, including named entity recognition, sentiment analysis, and content moderation.
Learn more→Whois API
Retrieve domain registration information, ownership details, expiration dates, and registrar data for any domain.
Learn more→Every week you build in-house is a week you don't ship product
2,500+ teams already made the switch. Start with a free tier today, or talk to us about your enterprise needs.
For developers
Free tier, no credit card. Integrate your first API in under 30 minutes.
Get API keys freeRead the docsFor teams and enterprise
Custom volumes, SLA guarantees, dedicated support, and compliance documentation.
Talk to salesor email sales@apicodex.io