The everyday utility belt for developers, served from the edge
Developer Toolbox API
The Developer Toolbox API bundles the six utilities you reach for daily into a single, dependency-free HTTP API running on Cloudflare's global edge network. Generate RFC 4122 v4 UUIDs in batches, compute MD5/SHA-1/SHA-256/SHA-384/SHA-512 digests, encode and decode unicode-safe base64, inspect JWT headers and payloads, mint cryptographically-secure passwords, and turn any string into a clean URL slug.
Every endpoint is pure compute — no third-party calls, no rate-limited upstreams, no surprise latency. Responses come back as clean, flat JSON with predictable shapes, so they drop straight into your code, CI pipelines, low-code automations, and serverless functions.
Free tier included, no credit card required. One key works across all 49 APIs.
- Utilities
- 6
- Response Time
- <10ms
- Dependencies
- Zero
Key features
- Batch UUID v4 generation (1–100 per call)
- Multi-algorithm hashing: MD5, SHA-1, SHA-256, SHA-384, SHA-512
- Unicode-safe and URL-safe base64 encode/decode
- JWT header and payload decoding (no signature verification)
- Cryptographically-secure password generation with character-class control
- Unicode-aware slugify with diacritic stripping
- Pure compute on the edge — clean, flat JSON responses
Built for
- Generating correlation IDs and primary keys in serverless functions
- Computing checksums and content hashes in CI/CD pipelines
- Encoding and decoding payloads in low-code automations
- Inspecting JWT claims while debugging auth flows
- Issuing secure one-time passwords and temporary credentials
- Building SEO-friendly slugs from user-submitted titles
- Replacing scattered helper functions across microservices
- Quick data-munging from the command line or notebooks
Try it
Build the request for your data
Edit the parameters below and see the exact curl command and JSON response you will get. No key required to preview.
Parameters
GET /toolbox/v1/hash?algo=sha256&text=hello&apikey=YOUR_KEY HTTP/1.1
Host: api.apicodex.io
{
"algo": "sha256",
"hex": "2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824",
"length": 64
}Documentation
Developer Toolbox API Documentation
The Developer Toolbox API exposes six pure-compute utility endpoints under the /toolbox/v1 namespace: UUID generation, multi-algorithm hashing, base64 encode/decode, JWT decoding, secure password generation, and slugification. All endpoints return flat JSON. Hashing runs over UTF-8 bytes, base64 handles full unicode, and password generation uses crypto.getRandomValues with rejection sampling to eliminate modulo bias.
Base URL
https://api.apicodex.ioAuthentication
Authenticate by passing your API key as the apikey query parameter, or by sending it in an X-Api-Key header.
GET /toolbox/v1/hash?algo=sha256&text=hello&apikey=YOUR_KEYRequest and response
Illustrative values. Confirm current endpoint behavior, quotas, and data freshness in the API documentation before production use.
GET /toolbox/v1/hash?algo=sha256&text=hello&apikey=YOUR_KEY HTTP/1.1{
"algo": "sha256",
"hex": "2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824",
"length": 64
}Code examples
curl --request GET \
--url 'https://api.apicodex.io/toolbox/v1/hash?algo=sha256&text=hello&apikey=YOUR_KEY'Endpoints
GET /toolbox/v1/uuid
Generate one or more RFC 4122 version 4 UUIDs.
/toolbox/v1/uuid?count=2&apikey=YOUR_KEYGET /toolbox/v1/hash
Hash text with md5, sha1, sha256, sha384, or sha512 and return the hex digest.
/toolbox/v1/hash?algo=sha256&text=hello&apikey=YOUR_KEYPOST /toolbox/v1/hash
Hash text supplied in a JSON body ({ text, algo }).
/toolbox/v1/hash?apikey=YOUR_KEYGET /toolbox/v1/base64
Base64 encode or decode text, with optional URL-safe alphabet.
/toolbox/v1/base64?op=encode&text=h%C3%A9llo&urlsafe=true&apikey=YOUR_KEYPOST /toolbox/v1/base64
Base64 encode or decode text supplied in a JSON body ({ text, op, urlsafe }).
/toolbox/v1/base64?apikey=YOUR_KEYGET /toolbox/v1/jwt-decode
Decode a JWT's header and payload without verifying the signature.
/toolbox/v1/jwt-decode?token=eyJhbGc...&apikey=YOUR_KEYGET /toolbox/v1/password
Generate a cryptographically-random password with configurable character classes.
/toolbox/v1/password?length=20&symbols=true&apikey=YOUR_KEYGET /toolbox/v1/slugify
Convert any text into a clean, URL-safe slug with diacritic stripping.
/toolbox/v1/slugify?text=Cr%C3%A8me%20Br%C3%BBl%C3%A9e&apikey=YOUR_KEYParameters
Required parameters
textThe input string for /hash, /base64, and /slugify endpoints.tokenThe JWT (header.payload[.signature]) to decode on the /jwt-decode endpoint.apikeyYour API key, passed as a query parameter (or sent as an X-Api-Key header).
Optional parameters
countNumber of UUIDs to generate, 1–100 (default 1).versionUUID version for /uuid; only version 4 is supported (default 4).algoHash algorithm: md5, sha1, sha256, sha384, sha512 (default sha256).opBase64 operation: encode or decode (default encode).urlsafeUse the URL-safe base64 alphabet for /base64 (default false).lengthPassword length, 1–256 (default 16).lowercaseInclude lowercase letters in passwords (default true).uppercaseInclude uppercase letters in passwords (default true).numbersInclude digits in passwords (default true).symbolsInclude symbols in passwords (default false).separatorSlug word separator, max 5 chars (default "-").
Pricing
Developer Toolbox API Pricing
One key, one subscription, all 49 APIs. Start free and upgrade when you grow. No minimums, no lock-in.
This API costs 1 credit per request. Credits are shared across every API on your plan.
Estimate your monthly cost
Drag the slider to match your expected request volume. We will recommend the cheapest plan that covers it.
Recommended plan
Starter
$29.99 /month
Free
- All 49 APIs included
- No credit card required
- Full documentation and examples
Starter
Popular- All 49 APIs included
- Email support
- Usage dashboard and analytics
Pro
- All 49 APIs included
- Priority support
- Up to 5 API keys
Need a different plan?
Tell us about your API, volume, or support requirements.
Coming soon · MCP
Use the Developer Toolbox API from your AI agent
The API Codex MCP server will expose this API, and the other 39, to Claude, Cursor and any MCP client as tools. Same key, same credits, one config entry.
FAQ
Frequently asked questions
Six pure-compute utilities under the /toolbox/v1 namespace: UUID v4 generation, multi-algorithm hashing (MD5, SHA-1, SHA-256, SHA-384, SHA-512), unicode-safe base64 encode/decode, JWT header/payload decoding, cryptographically-secure password generation, and Unicode-aware URL slugification.
Pass your API key as the apikey query parameter, for example ?apikey=YOUR_KEY, or send it in an X-Api-Key header. Authentication is applied globally across all endpoints.
No. The /toolbox/v1/jwt-decode endpoint decodes the header and payload and reports whether a signature segment is present, but it intentionally does not verify the signature. Always treat decoded claims as untrusted input — this endpoint is for inspection and debugging, not authentication.
MD5 and SHA-1 are supported for checksums and legacy interoperability only. They are not collision-resistant and should never be used for security-sensitive purposes such as password storage or digital signatures. Use SHA-256 or stronger when security matters.
Yes. The /toolbox/v1/uuid endpoint accepts a count parameter between 1 and 100 and returns them in a uuids array. When count is 1, a convenience uuid field is also included so you can read the value directly without indexing into the array.
The /toolbox/v1/password endpoint uses crypto.getRandomValues with rejection sampling to eliminate modulo bias, ensuring a uniform distribution across the selected character classes. You can configure the length (1–256) and toggle lowercase, uppercase, numbers, and symbols independently.
Because every endpoint is pure compute running on Cloudflare Workers across 300+ locations with no upstream calls, responses typically return in single-digit milliseconds from the data center nearest the request. The service targets 99.99% uptime and adds zero third-party dependencies that could introduce latency or failures.
Keep building
Related APIs
Query DNS records with forward and reverse lookups for A, AAAA, MX, TXT, SOA, NS and more, returned as clean JSON.
Comprehensive NLP and pattern detection, including named entity recognition, sentiment analysis, and content moderation.
Retrieve domain registration information, ownership details, expiration dates, and registrar data for any domain.