Roll dice notation with a cryptographically secure RNG, optionally repeated. Returns per-die rolls, the kept dice and the total for each roll.

Rebuild a nested object from a single-level object whose keys are delimited paths (default delimiter `.`) — the inverse of flatten. Requires a flat object.

Parse a document (json, json5, jsonc, yaml, xml, csv, tsv, toml, ndjson, ini, env, properties, plist or querystring) and validate it against a JSON Schema. Returns whether it is valid and a list of precise, path-tagged errors. Malformed input or an invalid schema is rejected before payment.

Circularly rotate a non-negative integer left or right within an explicit bit width (bits shifted off one end reappear at the other). The value must fit in `width` bits. Returns decimal, hex and binary.

Opens each URL in a cloud browser and returns one tab per URL, in input order, with the title, content type, extracted text, the accessibility tree and a link map. Results over the inline size limit return a preview per tab plus a download reference. Each call is one request.

Parse a DMARC TXT record ("v=DMARC1; p=…") into its policy, alignment, sampling and reporting tags. Missing or invalid policy/alignment/pct values are clean 400s.

Fuzzy-search airports by name, city or code, optionally filtered by ISO country code or airport type. Matches are ranked exact-code/name then prefix then substring, larger airports first. Empty result is a successful 200.

Evaluate an SPF record against an IPv4/IPv6 address using only its literal ip4/ip6/all mechanisms. DNS-dependent mechanisms (include, a, mx, exists, redirect) reached before a match yield an honest `indeterminate` result rather than a guess.

Parse an SPF TXT record ("v=spf1 …") into its qualified mechanisms and modifiers. Records that do not start with v=spf1 or use unknown mechanisms are clean 400s.

Parse a DKIM public-key DNS TXT record ("v=DKIM1; k=rsa; p=…") into its key type, public key, hash algorithms, service types and flags. An empty `p` is reported as a revoked key. A missing `p` tag is a clean 400.

Opens each URL in a cloud browser and returns one tab per URL, in input order, with the title, content type, extracted text, the accessibility tree and a link map. Results over the inline size limit return a preview per tab plus a download reference. Each call is one request.

Assess how trustworthy a domain is using authoritative live signals, not just its spelling. Fuses RDAP registration data (domain age — the single strongest phishing signal — plus registrar, expiry and registry status flags), DNS resolvability (A/AAAA), MX presence and DNSSEC into a 0-100 risk score with a verdict (low/medium/high) and the exact reasons. Pairs with `urltrust` (lexical) for a complete picture.

Score how likely a URL is to be phishing or untrustworthy using offline lexical and structural heuristics (no network lookups). Checks raw-IP hosts, embedded credentials, punycode/homoglyph labels, brand typosquatting, brand-in-subdomain, abused TLDs, shorteners, random hostnames, odd ports, plaintext http and executable paths. Returns a 0-100 risk score, a verdict and the reasons.

Statically analyse a Model Context Protocol (MCP) server manifest for security risks. Tool descriptions enter the model context, a prime prompt-injection vector. Deterministic and offline (inline manifest). Flags dangerous capabilities (command/code execution, filesystem, credential and network access), injection patterns, hidden unicode and unconstrained parameters. Returns severity-ranked findings and a 0-100 score.

Resolve a 20-character Legal Entity Identifier (LEI, ISO 17442) to its authoritative entity record: verified legal name, registration status (ISSUED/LAPSED/RETIRED), entity status, jurisdiction, legal form, registration number, legal and headquarters addresses, key dates (registration, last update, next renewal), managing LOU, corroboration level and any BIC codes. ISO 7064 check digits are verified before payment.

Look up an airport by its 3-letter IATA code or 4-character ICAO code. Provide exactly one. Returns the airport name, both codes, city, country, coordinates, elevation and type.

Create an email validation job from a JSON list of addresses or CSV text (send exactly one). Poll its status, then fetch results as JSON or CSV. Billing counts only testable addresses, fixed at creation; unreachable, disposable and typo domains are free.

Crypto liquidation levels on Hyperliquid perps (perpetual futures). Where ETH whale positions get liquidated and how far price must move to trigger it: levels with notional at risk, nearest first. Single-market slice of /liquidations, for agents that only track ETH

Applies AI edits to an image guided by a text instruction. Pass the image as a URL and the edit as text. Choose the quality tier with image_generator_version: genius or super_genius for the highest detail at 2k output. The genius tier also takes an art style in genius_preference: classic, anime, photography, graphic, or cinematic. Returns a link to the edited image.

Generate images from a text prompt with Google's Nano Banana Pro (Gemini 3 Pro Image) — highest-quality photorealistic output. Returns hosted image URLs.