Resolves an IP address or domain to its Autonomous System Number (ASN), network owner, country, and hosting/cloud classification — agents get structured network ownership context plus a trust score to assess infrastructure risk.

Check if a password has appeared in known data breaches using the HaveIBeenPwned Pwned Passwords API with k-anonymity — the full password is never transmitted, only a 5-character SHA-1 hash prefix — returns breach count and a risk classification so agents can enforce password policies without storing or exposing credentials.

Fingerprints a domain's cloud infrastructure by probing DNS records, HTTP headers, and PTR lookups to detect CDN, WAF, hosting, DNS provider, and email provider with confidence scores and an infrastructure security grade (A–F).

Convert any amount between 33 currencies using live European Central Bank exchange rates — returns the converted amount, exchange rate, rate date, and inverse rate so agents can handle pricing, invoicing, financial comparisons, and multi-currency workflows without a paid forex API.

Query a domain's DNS record across 10 geographically distributed public resolvers simultaneously — returns what each resolver sees, whether results are consistent, propagation percentage, and a readiness score so agents can confirm DNS changes have fully propagated globally.

Validate a domain's DNSSEC configuration by checking for DS records at the parent zone, DNSKEY records at the domain, RRSIG signatures, and NSEC/NSEC3 records — returns a full chain-of-trust assessment and readiness score so agents can verify DNS integrity before trusting resolution results.

Check if a domain name is available for registration by querying RDAP and DNS — returns registration status, whether it's taken or free, expiry date if registered, and availability of the same name across 10 popular TLDs simultaneously so agents can find the best domain for a brand or project.

Validates SPF, DKIM, and DMARC records for a domain, probes multiple DKIM selectors concurrently, detects misconfigurations, and returns an overall email security grade (A–F) with transparent deductions.

Validate an email address for deliverability, detect disposable/temporary domains, identify role-based addresses, verify MX records exist, and return a trust score — so agents can qualify leads, clean lists, and gate signups without sending a single email.

Fetch public metadata for any GitHub repository — stars, forks, open issues, language breakdown, license, contributors, last commit date, topics, and an activity/health score — so agents can evaluate dependencies, research projects, and assess open source health without the GitHub API complexity.

Check an IP address against 15 major DNS blacklists (Spamhaus, Barracuda, SORBS, etc.) simultaneously — returns which lists it appears on, a reputation score, and a threat classification so agents can make block/allow decisions instantly.

Geolocate any IPv4 or IPv6 address to city, region, country, latitude/longitude, timezone, and ISP — returns structured location data so agents can localize content, detect VPNs, enforce geo-restrictions, and enrich user records without a paid geolocation subscription.

Decode and inspect any JWT token — extracts header algorithm, payload claims, expiry status, issued-at time, audience, issuer, and subject without requiring the secret — so agents can debug auth issues, check token expiry, and extract identity claims from tokens in pipelines.

Detect the language of any text input using character frequency analysis and n-gram pattern matching — returns the detected language, ISO code, confidence score, and top alternative languages so agents can route multilingual content, trigger translation workflows, and classify text without a paid NLP API.

Fetch any public URL and extract structured metadata — Open Graph tags, Twitter Card tags, canonical URL, title, description, favicon, article author/date, JSON-LD structured data, and content type — so agents can preview, classify, and enrich links without building their own scraper.

Fetch any article or web page and extract clean readable text stripped of navigation, ads, and boilerplate — returns the main content body, word count, estimated reading time, detected language, and key sentences so agents can read the web without a browser or third-party scraping service.

Parse and validate any phone number in any format, identify its country, line type (mobile/landline/VOIP/toll-free/premium), carrier region, and return all standard format variants — so agents can validate contacts, normalize phone data, and classify line types without a paid telecom API.

Follows a URL through its full redirect chain (up to 20 hops), recording status codes, timing, headers, TLS status, and protocol downgrades per hop, then returns an overall redirect health grade (A–F).

Fetch and parse a domain's robots.txt file — returns all crawl rules by user-agent, sitemap URLs, crawl delay settings, and checks whether a specific path is allowed or blocked for any bot — so agents can respect crawl policies and locate sitemaps before scraping.

Accepts unstructured text and a JSON Schema, then uses an LLM to extract structured data matching the schema. Supports any user-defined schema shape — contact info, invoices, product specs, medical records, legal clauses, etc. Returns the extracted object plus token usage. Fields that cannot be found are omitted or null.

Fetches a URL and evaluates 10 security-critical response headers (CSP, HSTS, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy, X-XSS-Protection, CORP, COEP, COOP), detects anti-patterns, and returns an overall security grade (A–F).

Calculates IPv4/IPv6 subnet details from CIDR notation including network/broadcast addresses, netmask, usable host range, supernet, and possible subnets; for multiple CIDRs, detects overlaps and classifies relationships.

Fetch a URL and detect the full technology stack from HTTP response headers, HTML meta tags, cookies, and script patterns — returns CMS, framework, CDN, server, analytics, and security tool detections so agents can profile any web target without a browser.

Check username availability across 20+ social platforms and developer sites simultaneously — returns which platforms have a profile registered under that handle so agents can find people, verify identities, scout brand handles, or check name availability before registration.

Look up domain registration metadata via RDAP — returns registrar, creation/expiry dates, nameservers, status flags, and an actionability score so agents can assess domain trustworthiness or availability risk.