PithLab API

Add (or strip) a prefix and suffix on every line, with optional quoting, numbering and a custom joiner, e.g. to build an SQL IN list or a JS array.

Exact age in years, months and days on a given date, with totals in days and weeks and the next birthday.

Count LLM tokens in text: exact counts for OpenAI's o200k_base and cl100k_base tokenizers, estimates for Claude, Gemini and Llama, and how much of common context windows it fills.

Simplify width × height to an aspect ratio (1920×1080 → 16:9, with the nearest common preset), or resize to a ratio by solving the missing width or height.

Descriptive statistics for a list of numbers: mean, median, mode, min, max, range, geometric and harmonic means, variance, standard deviation and quartiles.

Generate a 1D barcode as SVG: EAN-13, UPC-A, EAN-8 (check digit added or verified), Code 128 or Code 39.

Encode text to Base64 or decode Base64 to text (UTF-8).

Hash a password with bcrypt (random salt), or check a password against an existing bcrypt hash.

Split a restaurant bill item by item (tax and tip shared in proportion to what each person ate, to the cent) or settle group trip expenses with the fewest payments.

Adult body mass index with the WHO category and the healthy weight range for the height, in metric or imperial units.

Body fat percentage by the US Navy circumference method, with the ACE category and (given a weight) fat and lean mass.

Build or normalise a CSS border-radius value (including elliptical blob shapes) from a shorthand value or a named preset.

Build a CSS box-shadow from one layer's settings, a JSON list of layers, or a named preset. Colours are validated and re-serialised.

Break-even point: units and revenue needed to cover fixed costs, with contribution margin and an optional target profit.

Count working days between two dates, or add/subtract working days to a date, skipping weekends and an optional holiday list.

Compound annual growth rate: the CAGR between two values, the future value at a given CAGR, or the years needed to reach a target. Rates are returned as fractions (0.12 = 12%).

Convert text between upper, lower, title, sentence, camel, Pascal, snake, kebab, constant and dot case.

Decode X.509 certificates (PEM, up to 20 in a chain): subject, issuer, validity, SANs, key, extensions and fingerprints, with self-signed and chain-order checks.

Count characters (grapheme clusters), characters without spaces, UTF-8 bytes, words and lines, plus X post weighted length, SMS encoding and segments, and common platform limits.

Convert IPv4/IPv6 CIDR blocks to first–last ranges, ranges to the minimal CIDR list, merge overlapping CIDRs and ranges, or list every address in a small block.

Format a reference for a book, journal article, website, newspaper article or report in APA 7, MLA 9, Chicago (notes-bibliography) or Harvard style.

Build a CSS clip-path: polygon from points, circle, ellipse or inset, or a named preset shape (triangle, hexagon, star, arrows…). All values are percentages.

Flip one or more fair coins with a cryptographic random source, with head/tail counts and longest streaks.

Simulate how a list of colours looks with each colour vision deficiency (Machado 2009 model) and flag pairs that become hard to tell apart for one chosen type. Colours only, not images.

Convert a colour between HEX, RGB(A), HSL and HSV, detecting the input format.

Mix two colours in sRGB, linear RGB and OKLab, with the equivalent CSS color-mix() and an evenly spaced blend scale in each space.

Generate a palette from one base colour: complementary, analogous, triadic, tetradic, split-complementary and monochromatic harmonies, plus a 50–950 tint and shade scale as CSS variables and a Tailwind theme.

Grow a starting amount with compound interest and optional end-of-month contributions; returns the final balance, interest earned, AER and an optional year-by-year table.

WCAG contrast ratio between two colours, with AA and AAA results.

How long a credit card balance takes to clear and the interest paid: at a fixed monthly payment, within a set number of months, or paying only the minimum.

Check a payment card number's format: brand from its IIN prefix, length and Luhn check digit. Does not contact any bank or check whether the card exists.

Explain a five-field cron expression and list its next run times (UTC).

Build a Content-Security-Policy from directive lines (as header, meta tag, Nginx and Apache config) with a security analysis, or analyse an existing policy for risky settings.

Decode a PKCS#10 certificate signing request: subject, public key, requested SANs and extensions, attributes, and whether its self-signature is valid.

Build a CSS linear, radial or conic gradient (optionally repeating) from colour stops. Colours are validated and written as hex.

Generate CSS Grid layout code (grid-template-columns/rows, gap and named grid-template-areas) plus matching HTML.

Minify CSS with csso (optionally merging and reordering rules) or pretty-print it. Syntax problems the parser recovered from are returned as warnings.

Build a CSS text-shadow from one layer's settings, a JSON list of layers, or a named preset (neon, 3D, outline, long shadow).

Generate CSS for a triangle pointing in any of eight directions, as the classic border trick and as clip-path, plus a tooltip arrow for straight directions.

Clean CSV: trim cells, drop empty rows and columns, remove duplicate rows, rename headers, fix ragged rows and drop columns. Returns the cleaned CSV and a report of what changed.

Convert CSV (comma, semicolon, tab or pipe separated) to JSON.

Turn CSV into SQL: an optional CREATE TABLE with inferred column types, then batched INSERT statements, quoted for PostgreSQL, MySQL, SQLite or SQL Server.

Parse CSV into headers and rows (padded to the same width), optionally filtered by a search term and sorted by a column. Numbers and dates sort naturally.

Convert a curl command into equivalent code: JavaScript fetch, Node.js axios, Python requests, Go net/http, PHP curl or HTTPie. Handles headers, -d/--data*, -F forms, -u auth and common flags; unsupported options come back as warnings.

Add or subtract years, months, weeks and days (or business days) to a date. Month ends are clamped: 31 January + 1 month = 28/29 February.

Time between two dates in years, months and days, plus total days, weeks and business days (Monday–Friday).

Days (and a days/hours/minutes/seconds countdown) until a date, or until the next New Year, Valentine's Day, Easter, Halloween, US Thanksgiving or Christmas.

Compare the avalanche (highest APR first) and snowball (smallest balance first) debt payoff strategies: months to debt-free, total interest and payoff order.

Roll dice in standard tabletop notation (2d6+3, 4d6kh3, d20-1, 3d8+2d4) with a cryptographic random source; returns each die, the total, and the possible min, max and average.

Apply one or more percentage discounts in order (each to the already reduced price): final price, total saving and the equivalent single discount.

Look up a domain's DNS records (A, AAAA, CNAME, MX, NS, TXT, CAA, SOA) through public resolvers.

Convert one or more docker run commands into a docker-compose.yml: ports, volumes, env vars, networks, restart policy, healthchecks, resource limits and more. Unsupported flags come back as warnings.

Registration data (RDAP, the successor to WHOIS) for a domain or a public IP address: registrar, dates, status, nameservers and DNSSEC.

Estimated pregnancy due date (40 weeks) from the last period, conception date or IVF transfer, with milestone dates and the gestational age on a given day.

SPF (with the DNS lookup count), DKIM, DMARC, MX, MTA-STS, TLS-RPT and BIMI for a domain, with a plain-English verdict.

Convert a .env file to JSON, YAML, docker run -e flags or a Kubernetes env list, or a flat JSON object back to .env. Reports duplicate keys (last value wins).

Generate realistic fake test data (names, emails on example.com, phones, addresses, UUIDs, IPs from documentation ranges…) as JSON, CSV, SQL INSERTs or NDJSON. A seed makes the output reproducible.

Turn plain text into Unicode styles (bold, italic, script, fraktur, double-struck, monospace, circled, small caps, upside down, strikethrough…) for social bios and posts.

Find and replace in text, as plain text or a JavaScript regular expression, with case sensitivity and whole-word options. Returns the result and match counts.

Generate flexbox CSS and HTML for a container and its items (direction, wrap, justify, align, gaps, and per-item flex, align-self and order). Defaults are left out of the CSS.

Add, subtract, multiply or divide fractions, mixed numbers and decimals exactly, with the simplified result, mixed number, decimal and worked steps.

Fuel needed and cost of a trip from distance, fuel efficiency (L/100 km, km/L, US or UK MPG) and fuel price, optionally round trip and split between people.

Generate frosted-glass (glassmorphism) CSS: translucent background, backdrop blur and saturation (with the -webkit- prefix), border, radius and shadow.

US-style GPA on a 4.0 scale from letter grades and credits, optionally weighted for honors/AP courses and combined with a previous cumulative GPA.

Score needed on a final exam to reach a target grade, or the weighted average of graded categories (percentages or points like 43/50).

MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes of text (UTF-8).

Compute an HMAC (SHA-1, SHA-256, SHA-384 or SHA-512) of a message with a secret key, e.g. to sign or check webhook payloads.

Freelance hourly and day rate needed to reach a take-home income after tax, business expenses, non-billable time and weeks off.

Generate Apache .htaccess and Nginx redirect rules: single page, bulk list, domain move, force HTTPS, add or remove www, add or remove trailing slashes.

Escape text as HTML entities, or decode named (&), decimal (&) and hex (&) character references back to text.

Pretty-print HTML with consistent indentation, or minify it (collapse whitespace, drop comments). <pre>, <textarea>, <script> and <style> contents are kept as written when minifying.

Build an Apache/nginx .htpasswd file from username:password lines, hashed with bcrypt ($2y$), APR1-MD5 ($apr1$) or SHA-1 ({SHA}).

Fetch a public URL once (redirects not followed, body not read) and return the status line, response headers, resolved address and timing.

Look up HTTP status codes: the reason phrase, what it means, the defining specification and usage notes. Search by code (404), code prefix (40), class (4xx) or words (rate limit).

Inflation at a steady annual rate: what an amount will cost in the future, or what a future amount is worth in today's money, plus purchasing power lost and doubling time.

Convert an IP address between dotted decimal, decimal integer, hex, binary, octal and IPv6 forms (IPv4-mapped included).

Validate an IPv6 address and return its expanded and compressed forms, address type, reverse DNS name, embedded IPv4, integer value and, with a prefix, the network range.

Minify JavaScript with terser (mangle names, compress, drop comments) or pretty-print it. Syntax errors come back with line and column.

Compare two JSON documents structurally: lists added, removed, changed and moved values with JSONPath-style paths, plus an RFC 6902 JSON Patch that turns the original into the changed document.

Validate and pretty-print or minify JSON.

Validate a JSON document against a JSON Schema (draft 2020-12 or draft-07). Returns valid, every error with its JSON Pointer path and schema keyword, and warnings about unsupported keywords.

Convert a JSON array of objects to CSV.

Generate Go struct types with json tags from a sample JSON document. Integers and floats are kept apart; arrays of objects are merged into one struct.

Generate Python classes (dataclasses, Pydantic v2 models or TypedDicts) with type hints from a sample JSON document. Keys become snake_case fields, with aliases where needed.

Generate TypeScript interfaces or type aliases from a sample JSON document. Keys missing from some array items become optional.

Convert JSON to XML. Keys with the attribute prefix (default @_) become attributes; arrays become repeated elements.

Generate Zod schemas (and inferred TypeScript types) from a sample JSON document, optionally detecting string formats such as email, URL, UUID and dates.

Convert JSON to YAML or YAML to JSON.

Evaluate a JSONPath expression against JSON and return every match with its normalised path, JSON Pointer and value. Filters such as [?(@.price < 10)] run in a safe interpreter (no eval).

Convert between calendar dates (UTC), Julian Date (JD), Modified Julian Date (MJD) and ordinal dates (YYDDD / YYYYDDD).

Decode a JWT's header and payload. Does not verify the signature.

Sign a JWT (HS256/384/512 with a shared secret, or RS/PS/ES with a PEM private key), or verify a token's signature and exp/nbf/iat claims.

Generate one new signing key pair (ECDSA, Ed25519 or RSA up to 4096 bits): PKCS#8 private key PEM, SPKI public key PEM, OpenSSH public key line and SHA-256 fingerprint. The key is created on PithLab's server and not stored; generate locally for production secrets.

Check whether a year is a leap year under Gregorian rules (with the rule that applies and the previous/next leap years), or list the leap years in a range.

Remove hidden characters, smart punctuation and other artefacts from AI-generated text.

Fixed-rate loan or mortgage repayment: monthly payment, total interest, total repaid, a yearly amortisation summary and optionally the full monthly schedule.

Generate lorem ipsum placeholder text by paragraphs, sentences or words, as plain text or HTML paragraphs. Pass a seed for repeatable output.

Generate random MAC addresses (locally administered unicast by default, optional vendor OUI prefix), or inspect and reformat an existing one.

Identify and decode an unknown string: Base64, Base32, hex, URL/percent encoding, JWTs, Unix timestamps, UUIDs, HTML entities, binary, Morse, ROT13, punycode, IP addresses and more. Returns matches ranked by confidence.

Turn CSV, TSV or an existing Markdown table into a tidy GitHub-flavoured Markdown table, with column alignment and padded columns. The first row is the header.

What a meeting costs from its length and attendees' pay. Annual salaries are converted at 2,080 working hours a year.

Find the hours on a date when working hours overlap across 2 to 6 time zones (DST-aware), with each overlap in UTC and every zone's local time.

Fetch a page (first 1 MB) and report its title, description, canonical, robots, Open Graph and Twitter tags, hreflang, H1s and JSON-LD types, with fixes.

Generate HTML <head> tags for SEO and social sharing (title, description, canonical, robots, Open Graph, Twitter card), with length advice.

Find the MIME type and Content-Type header for a file extension or filename, the extensions for a MIME type, or search the table. Optionally detect a file's real type from its first bytes (magic numbers).

Translate text to International Morse code or Morse back to text, with the playback duration at a given speed.

Maximum home price you can afford from income, debts, down payment and mortgage rate, using front-end and back-end debt-to-income (DTI) limits including property tax, insurance and HOA.

Spell text with the NATO/ICAO phonetic alphabet (Alfa, Bravo, Charlie…), or turn phonetic words back into text.

Convert a whole number of any size between binary, octal, decimal, hexadecimal and any base from 2 to 36.

Adjust the lightness of palette colours as little as possible (in OKLCH, hue kept) until chosen foreground/background pairs meet a WCAG contrast target.

Random diceware-style passphrases from the EFF large word list (7,776 words), chosen with a cryptographic random source, with their entropy in bits.

Random passwords from a cryptographic random source.

Estimate a password's strength like zxcvbn: entropy in bits, a 0–4 score, detected weak patterns (common passwords, sequences, keyboard runs, dates, repeats), estimated crack times and suggestions.

Convert PEM to DER (as Base64 or hex, with an optional ASN.1 structure dump), or wrap Base64/hex DER in PEM armour with a detected or chosen label.

Percentages: X% of Y, X as a percentage of Y, change from X to Y, increase or decrease X by Y%.

Look up TCP and UDP port numbers: the service, what it's for, and security notes for ports that are risky to expose. Search by port, list, range or service name.

Profit, margin (profit ÷ price) and markup (profit ÷ cost) from cost and price, or the selling price for a target margin or markup.

Convert CSS pixels to rem or rem to pixels for a given root font size (16px by default).

Generate a QR code as an SVG image for a URL, text, email, phone number, SMS, vCard contact or map location.

Fairly pick random winners from a list of names (no repeats), or shuffle the names into balanced random teams. Uses a cryptographic random source.

Random integers or decimals in an inclusive range from a cryptographic random source, with or without duplicates (unbiased at any range size), optionally sorted.

Random strings from chosen character sets (or a custom alphabet), each character drawn uniformly with a cryptographic random source.

Cryptographically random tokens for API keys, session secrets and webhooks, as hex, Base64, Base64url or Base62, with an optional prefix such as sk_live_.

Simplify a ratio (4:6 → 2:3, with percentages), solve a proportion A:B = C:D for the missing value, or split an amount in a ratio.

Readability scores for English text (Flesch reading ease, Flesch–Kincaid grade, Gunning fog, SMOG, Coleman–Liau, ARI) plus counts of long sentences, passive voice, adverbs and complex words.

Run text through a chain of PithLab operations in order (decode, format, convert, change case, sort, dedupe, hash…) and return each step's output.

Follow a public URL's redirect chain hop by hop (up to 10 hops), returning each status, Location and headers, the final URL, and whether it loops.

Run a JavaScript regular expression against text: every match with its position and capture groups, an optional replacement result, and a plain-English explanation of the pattern. Runs are time-limited.

Remove repeated lines from text, keeping the first occurrence of each and the original order.

Remove blank lines from text, or collapse runs of blank lines into one.

Compare buying a home with renting and investing the difference, year by year: net worth of each, the break-even year and who is ahead at the end. Ignores taxes on gains, tax relief and PMI.

Project retirement savings from current savings, monthly contributions (optionally rising each year) and an expected return, in nominal and today's money, with the monthly income from a safe-withdrawal rate.

PTR (reverse DNS) names for a public IPv4 or IPv6 address, with a forward-confirmed (FCrDNS) check.

Reverse text by characters (keeping emoji and accents intact), by word order, or by line order.

Generate a robots.txt (default rules, per-crawler groups, AI crawler blocking, sitemaps), or test whether a crawler may fetch a URL under a robots.txt.

Test whether a URL path is allowed for a crawler under a site's robots.txt (fetched, or passed in), using Google's longest-match rules.

Return on investment: gain or loss and ROI in percent, plus the annualised return (CAGR) when a holding period is given.

Convert a whole number to Roman numerals (1 to 3999, or up to 3,999,999 with vinculum overlines) or Roman numerals to a number. The direction is detected from the input.

Convert pay between hourly, daily, weekly, biweekly, semi-monthly, monthly and annual figures for a given work schedule (gross, before tax).

Savings goal planner: the monthly deposit needed to reach a target by a deadline, or how long a given monthly deposit takes, with monthly interest.

Generate schema.org JSON-LD structured data (Article, FAQ, HowTo, Product, LocalBusiness, Organization, Person, Event, Breadcrumbs, WebSite, Recipe), checked against Google's required and recommended properties.

Evaluate a maths expression safely (no eval): + − × ÷ ^, brackets, factorial (!), percent, trig and inverse trig, hyperbolic, logs, roots, exp, abs, rounding, and the constants pi, e and tau.

Scan text (code, config, logs, .env files) for leaked secrets such as AWS keys, GitHub and Stripe tokens, private keys, JWTs and passwords in URLs. Findings carry line, column, severity and a masked preview, never the raw secret.

Grade pasted HTTP response headers (A+ to F) for security: CSP, HSTS, framing, nosniff, Referrer-Policy, Permissions-Policy, cross-origin policies, cookies and information leaks. Nothing is fetched.

Find a site's security.txt (/.well-known/security.txt, then /security.txt) and validate it against RFC 9116, or validate content you pass in.

Fetch an XML sitemap or sitemap index (up to 5 MB each, 50 child sitemaps), count URLs and report invalid XML, lastmod, http, off-host and duplicate URLs.

Generate sitemap.xml from a list of URLs (with optional lastmod, changefreq and priority), validated against the sitemaps.org protocol.

Bedtimes for a wake-up time, or wake-up times for a bedtime, timed to whole 90-minute sleep cycles (6, 5, 4 or 3 cycles).

Turn a title into a URL slug.

Sort lines alphabetically, naturally (1, 2, 10), by length, or shuffle them, with options to reverse, de-duplicate and drop blank lines.

Format or minify SQL.

Connect to a public host over TLS and report whether its certificate is trusted, the protocol and cipher, and the chain with expiry dates and days left.

Escape or unescape a string for JSON, JavaScript, Java/C#, Python, regular expressions, CSV, SQL, POSIX shell or HTML attributes.

Network, broadcast, mask, host range and host count for an IPv4 CIDR.

Total monthly and yearly cost of a list of subscriptions billed weekly, monthly, quarterly or yearly, with cost per use and the saving from cancelling some.

Basal metabolic rate (Mifflin–St Jeor) and total daily energy expenditure for an adult, with calorie targets to lose, maintain or gain weight and macro grams.

Clean pasted text: strip HTML to plain text, straighten smart quotes, plain dashes and ellipses, remove emoji or non-ASCII characters, Unicode-normalise and fix line endings.

Compare two texts line by line (Myers diff) and return added, removed and unchanged lines, plus a unified-style text diff.

Encrypt text with a password (AES-256-GCM, key from PBKDF2-HMAC-SHA256 with 600,000 iterations, random salt and IV) as one Base64 string, or decrypt such a string. Compatible with the PithLab Text Encryption tool.

Convert text to its UTF-8 bytes as space-separated binary (8-bit) or hex groups, or decode binary/hex bytes back to text.

Hours worked between two clock times minus a break (crossing midnight if needed), or the total of a list of durations, as h/m, H:MM and decimal hours.

Convert a wall-clock date and time in one IANA time zone to other zones, DST-aware, with offsets and day shifts.

Tip and total for a bill, split between people, optionally rounding each share up to a whole currency unit.

Convert TOML to JSON or JSON to TOML (TOML 1.0). TOML dates become ISO 8601 strings in JSON; notes explain anything that can't be represented exactly.

Generate the current and next TOTP (RFC 6238) codes for a Base32 secret, as an authenticator app would, plus an otpauth:// URI.

Inspect every character in text: code point, name, category, script, UTF-8/UTF-16 bytes, escapes, and warnings for invisible, bidi-control and look-alike (homoglyph) characters. Can also escape the text or strip invisible characters.

Convert a value between units of length, mass, temperature, volume, area, speed, data, time, energy, pressure or fuel economy. Leave out `to` to get every unit in the category.

Convert a Unix timestamp (seconds or milliseconds, detected automatically) to a date.

Percent-encode or decode text for URLs.

Split a URL into its parts with the WHATWG URL parser: protocol, credentials, host, port (explicit, default and effective), path segments, decoded query parameters and fragment. Nothing is fetched.

Check a link for phishing red flags without visiting it: lookalike and punycode domains, brand names in subdomains, IP hosts, shorteners, risky TLDs and schemes, credentials in URLs. Returns a 0–100 score and a verdict. Offline heuristics, not a blocklist lookup.

Browser, engine, operating system, device and bot detection from a User-Agent string.

Add UTM campaign parameters to a URL (replacing any existing ones, keeping other parameters and the #fragment), or parse the UTM parameters out of a tagged URL.

Random version 4 UUIDs.

Add VAT (or sales tax/GST) to a net price, or remove it from a gross, tax-inclusive price.

ISO 8601 week number, ISO week date, day of year and quarter for a date, or the Monday–Sunday dates of a given ISO week.

Spin a wheel of 2 to 200 entries: picks one entry uniformly at random with a cryptographic random source (the API returns the result, without the animation).

Trim lines, collapse repeated spaces, expand tabs, join lines or remove all whitespace from text.

Generate a Wi-Fi QR code (SVG) that phones scan to join a network, plus the WIFI: payload text.

Count words, characters, sentences and paragraphs, with reading time.

Count how often each word (or two- and three-word phrase) appears in text, with optional English stop-word removal. Returns the top terms with counts and percentages.

Current (or given) time in several IANA time zones, with date, UTC offset, day/night and the difference from a reference zone.

Validate XML, then pretty-print it with consistent indentation or minify it. Errors report the line and column.

Convert XML to JSON.