Which utilities does the Developer Toolbox API include?

Six pure-compute utilities under the /toolbox/v1 namespace: UUID v4 generation, multi-algorithm hashing (MD5, SHA-1, SHA-256, SHA-384, SHA-512), unicode-safe base64 encode/decode, JWT header/payload decoding, cryptographically-secure password generation, and Unicode-aware URL slugification.

How do I authenticate my requests?

Pass your API key as the apikey query parameter, for example ?apikey=YOUR_KEY, or send it in an X-Api-Key header. Authentication is applied globally across all endpoints.

Does the JWT decode endpoint verify signatures?

No. The /toolbox/v1/jwt-decode endpoint decodes the header and payload and reports whether a signature segment is present, but it intentionally does not verify the signature. Always treat decoded claims as untrusted input — this endpoint is for inspection and debugging, not authentication.

Are MD5 and SHA-1 safe to use?

MD5 and SHA-1 are supported for checksums and legacy interoperability only. They are not collision-resistant and should never be used for security-sensitive purposes such as password storage or digital signatures. Use SHA-256 or stronger when security matters.

Can I generate multiple UUIDs in a single request?

Yes. The /toolbox/v1/uuid endpoint accepts a count parameter between 1 and 100 and returns them in a uuids array. When count is 1, a convenience uuid field is also included so you can read the value directly without indexing into the array.

How are passwords generated securely?

The /toolbox/v1/password endpoint uses crypto.getRandomValues with rejection sampling to eliminate modulo bias, ensuring a uniform distribution across the selected character classes. You can configure the length (1–256) and toggle lowercase, uppercase, numbers, and symbols independently.

How fast is the API and how reliable is it?

Because every endpoint is pure compute running on Cloudflare Workers across 300+ locations with no upstream calls, responses typically return in single-digit milliseconds from the data center nearest the request. The service targets 99.99% uptime and adds zero third-party dependencies that could introduce latency or failures.

The everyday utility belt for developers, served from the edge

Developer Toolbox API

The Developer Toolbox API bundles the six utilities you reach for daily into a single, dependency-free HTTP API running on Cloudflare's global edge network. Generate RFC 4122 v4 UUIDs in batches, compute MD5/SHA-1/SHA-256/SHA-384/SHA-512 digests, encode and decode unicode-safe base64, inspect JWT headers and payloads, mint cryptographically-secure passwords, and turn any string into a clean URL slug.

Every endpoint is pure compute — no third-party calls, no rate-limited upstreams, no surprise latency. Responses come back as clean, flat JSON with predictable shapes, so they drop straight into your code, CI pipelines, low-code automations, and serverless functions.

Get a free API key Read the docs

Free tier included, no credit card required. One key works across every API.

Free calls / month: 1,000
Utilities: 6
Response Time: <10ms
Dependencies: Zero

Get your free API key

1,000 free calls on the free plan

Key features

Batch UUID v4 generation (1–100 per call)
Multi-algorithm hashing: MD5, SHA-1, SHA-256, SHA-384, SHA-512
Unicode-safe and URL-safe base64 encode/decode
JWT header and payload decoding (no signature verification)
Cryptographically-secure password generation with character-class control
Unicode-aware slugify with diacritic stripping
Pure compute on the edge — clean, flat JSON responses

Built for

Generating correlation IDs and primary keys in serverless functions
Computing checksums and content hashes in CI/CD pipelines
Encoding and decoding payloads in low-code automations
Inspecting JWT claims while debugging auth flows
Issuing secure one-time passwords and temporary credentials
Building SEO-friendly slugs from user-submitted titles
Replacing scattered helper functions across microservices
Quick data-munging from the command line or notebooks

MCP · for your agent

Hand the Developer Toolbox API to your agent

Connect Claude, Cursor or any MCP client once, then ask in plain words. Your agent finds this API, reads its docs and makes the call: 1 credit per call, the same as REST, from your team's balance.

Connect your agent

Turn post titles into URL slugs

“Turn these 40 blog post titles into URL slugs, stripping accents and punctuation, and flag any duplicates.”

list_apis · get_api_docsfree

api_request GET /toolbox/v1/slugify?text=10+Tips+for+Faster+Checkout+Pages 1 cr

A lowercase, hyphenated slug per title, with duplicates called out.

Create a strong service password

“Create a 32-character password with symbols for the new staging database user.”

list_apis · get_api_docsfree

api_request GET /toolbox/v1/password?length=32&symbols=true 1 cr

A cryptographically random 32-character password using letters, digits and symbols.

$ claude mcp add --transport http apicodex https://mcp.apicodex.io

Illustrative asks; the calls and prices are real. Claude, Cursor, VS Code and Windsurf setup: mcp.apicodex.io

Try it

Build the request for your data

Edit the parameters below and see the exact request and curl command you'd send. No key required to preview.

GET /toolbox/v1/hash

Open in Playground

Parameters

algo

text

apikey

Request · HTTP

GET /toolbox/v1/hash?algo=sha256&text=hello&apikey=YOUR_KEY HTTP/1.1
Host: api.apicodex.io

Response · JSON 200 OK

{
"algo": "sha256",
"hex": "2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824",
"length": 64
}

Run it with your key

Documentation

Developer Toolbox API Documentation

The Developer Toolbox API exposes six pure-compute utility endpoints under the /toolbox/v1 namespace: UUID generation, multi-algorithm hashing, base64 encode/decode, JWT decoding, secure password generation, and slugification. All endpoints return flat JSON. Hashing runs over UTF-8 bytes, base64 handles full unicode, and password generation uses crypto.getRandomValues with rejection sampling to eliminate modulo bias.

Base URL

url

https://api.apicodex.io/toolbox

Authentication

Authenticate by passing your API key as the apikey query parameter, or by sending it in an X-Api-Key header.

headers

GET /toolbox/v1/hash?algo=sha256&text=hello&apikey=YOUR_KEY

Request and response

Illustrative values. Confirm current endpoint behavior, quotas, and data freshness in the API documentation before production use.

request · http

GET /toolbox/v1/hash?algo=sha256&text=hello&apikey=YOUR_KEY HTTP/1.1
Host: api.apicodex.io

response · json

{
"algo": "sha256",
"hex": "2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824",
"length": 64
}

Code examples

cURL

curl --request GET \
  --url 'https://api.apicodex.io/toolbox/v1/hash?algo=sha256&text=hello&apikey=YOUR_KEY'

JavaScript/Node.js

const params = new URLSearchParams({
  algo: 'sha256',
  text: 'hello',
  apikey: 'YOUR_KEY'
});

const response = await fetch(
  `https://api.apicodex.io/toolbox/v1/hash?${params}`
);
const data = await response.json();
console.log(data); // { algo: 'sha256', hex: '2cf24dba...', length: 64 }

Python

import requests

url = "https://api.apicodex.io/toolbox/v1/hash"

querystring = {"algo": "sha256", "text": "hello", "apikey": "YOUR_KEY"}

response = requests.get(url, params=querystring)

print(response.json())

Endpoints

GET /v1/uuid

Generate one or more RFC 4122 version 4 UUIDs.

/v1/uuid?count=2&apikey=YOUR_KEY

GET /v1/hash

Hash text with md5, sha1, sha256, sha384, or sha512 and return the hex digest.

/v1/hash?algo=sha256&text=hello&apikey=YOUR_KEY

POST /v1/hash

Hash text supplied in a JSON body ({ text, algo }).

/v1/hash?apikey=YOUR_KEY

GET /v1/base64

Base64 encode or decode text, with optional URL-safe alphabet.

/v1/base64?op=encode&text=h%C3%A9llo&urlsafe=true&apikey=YOUR_KEY

POST /v1/base64

Base64 encode or decode text supplied in a JSON body ({ text, op, urlsafe }).

/v1/base64?apikey=YOUR_KEY

GET /v1/jwt-decode

Decode a JWT's header and payload without verifying the signature.

/v1/jwt-decode?token=eyJhbGc...&apikey=YOUR_KEY

GET /v1/password

Generate a cryptographically-random password with configurable character classes.

/v1/password?length=20&symbols=true&apikey=YOUR_KEY

GET /v1/slugify

Convert any text into a clean, URL-safe slug with diacritic stripping.

/v1/slugify?text=Cr%C3%A8me%20Br%C3%BBl%C3%A9e&apikey=YOUR_KEY

Parameters

Required parameters

text The input string for /hash, /base64, and /slugify endpoints.
token The JWT (header.payload[.signature]) to decode on the /jwt-decode endpoint.
apikey Your API key, passed as a query parameter (or sent as an X-Api-Key header).

Optional parameters

count Number of UUIDs to generate, 1–100 (default 1).
version UUID version for /uuid; only version 4 is supported (default 4).
algo Hash algorithm: md5, sha1, sha256, sha384, sha512 (default sha256).
op Base64 operation: encode or decode (default encode).
urlsafe Use the URL-safe base64 alphabet for /base64 (default false).
length Password length, 1–256 (default 16).
lowercase Include lowercase letters in passwords (default true).
uppercase Include uppercase letters in passwords (default true).
numbers Include digits in passwords (default true).
symbols Include symbols in passwords (default false).
separator Slug word separator, max 5 chars (default "-").

Pricing

Developer Toolbox API Pricing

This API costs 1 credit per request. Credits are shared across every API on your plan.

Estimate your monthly cost

Drag the slider to match your expected request volume. We'll recommend the cheapest plan that covers it.

Requests per month 10,000

Recommended plan

Starter

$29.99 /month

Credits used

Credits included

Cost per 1K requests

Choose Starter

Free

1,000 credits · ~1,000 requests/mo · 2 rps

All APIs included
No credit card required
Full documentation and examples
MCP server for your AI agents
Up to 5 active API keys

Start for free

Starter

Popular

$29.99 /month

50,000 credits · ~50,000 requests/mo · 10 rps

All APIs included
Email support
Usage dashboard and analytics
MCP server for your AI agents
Up to 5 active API keys

Start with Starter

Pro

$99.99 /month

250,000 credits · ~250,000 requests/mo · 25 rps

All APIs included
Priority support
MCP server for your AI agents
Up to 5 active API keys

Start with Pro

FAQ

Developer Toolbox API

Key features

Built for

Hand the Developer Toolbox API to your agent

Generate IDs for seed data

Turn post titles into URL slugs

Create a strong service password

Build the request for your data

Developer Toolbox API Documentation

Base URL

Authentication

Request and response

Code examples

Endpoints

GET /v1/uuid

GET /v1/hash

POST /v1/hash

GET /v1/base64

POST /v1/base64

GET /v1/jwt-decode

GET /v1/password

GET /v1/slugify

Parameters

Required parameters

Optional parameters

Developer Toolbox API Pricing

Free

Starter

Pro

Need a different plan?

Frequently asked questions

Related APIs