Developer Utilities & Validators (Tanod)
Cloud GPU prices per hour, plus developer helpers: hash, HMAC, JWT, IDs, JSON, cron, time zones.
| Endpoint | https://tanod.dev/mcp/util (streamable-http) |
|---|---|
| Registry version | 0.1.2 |
| Now | 40 tools · grade C (75) · pin ts_c15b9b49ab3ab3c5c036a149501161e5 · protocol 2025-06-18 |
| First / last listed | 2026-10-27 02:36 UTC / 2026-10-27 02:36 UTC |
| Grade over time | 2026-10-27: C (75), 40 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: text_encode hash_text hmac_sign_verify generate_ids generate_random validate_json convert_data validate_identifier parse_phone_number lookup_phone_prefix parse_user_agent parse_url cron_next_runs convert_time get_public_holidays count_or_add_business_days convert_units convert_color_check_contrast check_wcag_contrast geocode make_qr_code make_barcode read_qr_barcode peppol_lookup lint_x402_listing check_header_budget build_ics_event parse_ics expand_rrule decode_jwt verify_jwt decode_lightning_invoice decode_nostr_id get_gpu_prices get_gpu_price_index upload_file_get_link find_places_nearby lookup_barcode_product render_mermaid search_datasets
text_encode | utilpeek: Encode or decode text: base64, hex, URL, punycode, JWT decode, ... For digests use hash_text; for a JWT's claims use decode_jwt. Returns the text encoded or decoded with `codec`: base64, base64url, base32, hex, url (percent), html (entities), quoted_printable, rot13, punycode, idna or jwt. Decoders are strict (bad input is a 422 decode_failed); bytes that are not UTF-8 come back as `outp params: text*, codec*, direction |
hash_text | utilpeek: Hash text or bytes: sha256, keccak256, blake2b, md5, crc32, ... For a keyed HMAC use hmac_sign_verify. Returns hex digests of the text (as UTF-8) or base64 bytes you send. md5 and sha1 are for checksums, not security. Send exactly one of text or base64 (else 422 invalid_request); bad base64 is a 422 invalid_base64. The input is never echoed. Typically under 0.1 s (keccak256 about 2 s per params: text, base64, algorithms |
hmac_sign_verify | utilpeek: Sign or verify an HMAC, including GitHub, Stripe and Slack webhook signatures. For plain digests use hash_text; for JWTs use verify_jwt. Returns the HMAC of a message under a shared key (sign), or whether a signature matches it in constant time (verify); handles GitHub (`sha256=` prefix accepted), Stripe `v1` (of `{t}.{raw body}`) and Slack `v0` (of `v0:{timestamp}:{raw body}`) webhook s params: mode*, message*, key*, key_encoding, algorithm, output, signature |
generate_ids | utilpeek: Generate UUIDs or ULIDs. For numbers, bytes and picks use generate_random. Returns 1-100 new identifiers: random UUID v4, time-ordered UUID v7 (RFC 9562) or ULIDs, optionally strictly increasing within the response (v7 and ULID; per response on purpose, so one caller cannot predict another's next ID). Input: optional `kind`, `version`, `count` and `monotonic`; an empty body gives one UUI params: kind, version, count, monotonic |
generate_random | utilpeek: Generate cryptographically strong random numbers, bytes, UUIDs, dice rolls, picks and shuffles. For UUIDs and ULIDs use generate_ids. Returns values from the OS CSPRNG (Python `secrets`): integers (uniform, inclusive range), floats in [min, max), 1-1,024 random bytes (hex or base64), UUID v4, dice rolls such as 3d6 or 2d10+3 with the total, picks from a list or a shuffle. Input: optional params: kind, min, max, count, length, encoding, dice, items, unique |
validate_json | utilpeek: Validate JSON against a JSON Schema. To pull JSON out of prose use extract_json_with_schema; to convert formats use convert_data. Returns whether a JSON value is valid against a JSON Schema (draft from $schema, default 2020-12; 2019-09, 7, 6, 4 and 3 recognised), with up to 100 errors (instance path, schema path, message, validator) and the formats checked. Remote $ref documents are refu params: instance*, schema* |
convert_data | utilpeek: Convert data between JSON, YAML, CSV, TOML and XML. To check JSON against a schema use validate_json. Returns the document converted from json, yaml, csv, toml or xml to json, yaml, csv or toml. YAML uses libyaml's restricted loader (alias bombs refused); XML with DTDs or entities is a 422 xml_forbidden; lossy conversions are a 422 (not_tabular, not_representable, ...) rather than silent params: input*, from*, to*, delimiter, indent |
validate_identifier | utilpeek: check the format and check digits of an identifier. For a VIN's vehicle use decode_vin; for phone numbers use parse_phone_number. Returns `valid`, `reason` (invalid_checksum, invalid_length, invalid_format, ... when not valid), `compact`, `formatted` and a kind-specific `detail` (an IBAN's country and bank code, an ISBN's ISBN-10/13 forms, ...). An invalid identifier is a normal answer ( params: kind*, value* |
parse_phone_number | utilpeek: parse and format a phone number. For a prefix's country and network use lookup_phone_prefix. A string that is not a phone number, or a national form without region, is a 422 (not charged). Offline numbering-plan check (phonenumbers, Apache-2.0): `valid` means the number fits its country's numbering plan, not that it is assigned, in service or reachable; `carrier` is the original range ho params: number*, region |
lookup_phone_prefix | utilpeek: Look up a phone number prefix: country, line type and original network, with ambiguity. To parse a full number use parse_phone_number. Returns the country, line type, original network, time zones and E.164 form of the leading digits of a number (0917, +63917, 0063917), `ambiguous` with `candidates` when they span networks; `list` with `region` lists a country's mobile prefixes by network params: prefix, region, list |
parse_user_agent | utilpeek: parse a User-Agent string. For known x402 monitors and indexers with call rates use identify_x402_client. A User-Agent is self-reported and easy to fake; `is_bot` is a heuristic (declared crawlers, HTTP libraries, headless browsers). Parsed with ua-parser and the uap-core regexes (Apache-2.0). Typically under 0.1 s (first call up to 0.5 s). Price: USD 0.001. Free: 10 utilpeek calls per I params: user_agent* |
parse_url | utilpeek: parse a URL. To fetch the page use render_page. The URL is parsed, never fetched. Public-suffix split from the Public Suffix List snapshot bundled with the parser (dated 2025-04-07; suffixes added later are not known), with and without the PSL private section; credentials in the URL are never echoed. A URL that cannot be parsed is a 422 (not charged). Typically under 0.1 s. Price: USD 0. params: url* |
cron_next_runs | utilpeek: the next run times of a cron expression. For iCalendar RRULEs use expand_rrule. Standard 5-field cron (minute hour day-of-month month day-of-week) or a macro (@daily, @hourly, ...); no seconds or year fields, no R/H/W. Day-of-month and day-of-week use Vixie OR semantics; an expression that never fires (Feb 30) is a 422 no_next_run (not charged); rare ones return what exists with `exhaust params: expression*, count, timezone, start |
convert_time | utilpeek: convert one instant between time zones. For business days use count_or_add_business_days. Zones come from the pinned IANA tz database (tzdata package), not the host; a wall time in a DST gap or fold is flagged `nonexistent` / `ambiguous`; a time with an offset plus `from_tz` is a 422. An unknown zone or a malformed time is a 422 (not charged). Typically under 0.1 s. Price: USD 0.001. Fre params: to_tz*, time, from_tz |
get_public_holidays | utilpeek: public holidays of a country for a year. To count working days use count_or_add_business_days. An unsupported country, subdivision, language or year is a 422 naming the supported values (not charged). Typically under 0.1 s. Price: USD 0.001. Free: 10 utilpeek calls per IP per UTC day. Computed from the python-holidays rules (MIT), not an official calendar: lunar, religious and one-off ho params: country*, year*, subdivision, language |
count_or_add_business_days | utilpeek: Count business days between two dates or add working days, skipping public holidays. For the holiday list use get_public_holidays. Returns the business days between two dates (mode count; both ends included by default, like NETWORKDAYS) or the date N business days after or before a date (mode add, like WORKDAY), skipping weekends (configurable) and, with a country, its public holidays; p params: mode*, start*, end, days, include_start, include_end, weekend, country, subdivision |
convert_units | utilpeek: Convert units of measurement: length, weight, temperature, volume, pressure, energy, data size. For numbers in words use text_numbers. Returns a value converted between two units of one category, with the exact factor: length, mass, temperature (with offsets), volume (US and imperial), area, speed, pressure, energy, power, data size (kB = 1000 bytes, KiB = 1024), time and fuel economy (r params: value*, from*, to* |
convert_color_check_contrast | utilpeek: Convert a color between hex, RGB, HSL and OKLCH and check WCAG contrast. For contrast alone use check_wcag_contrast. Returns a CSS color (hex, rgb(), hsl() or a CSS name) as hex, rgb, hsl, hsv, naive cmyk, OKLCH and WCAG relative luminance; with a `background`, the WCAG 2.x contrast ratio and AA / AAA pass or fail for normal and large text and UI components (unrounded: #777 on white is 4 params: color*, background |
check_wcag_contrast | utilpeek: Check the WCAG contrast between a text color and a background color. To convert colour formats too use convert_color_check_contrast. Returns the WCAG 2.x contrast ratio of a `foreground` and a `background` CSS color, with AA / AAA pass or fail for normal text, large text and UI components (unrounded: #777 on white is 4.48:1 and fails AA). An unparseable or out-of-range color is a 422 bef params: foreground*, background* |
geocode | utilpeek: offline geocoding over the GeoNames cities15000 table. For places of a kind nearby use find_places_nearby. Input: either `place` alone or `lat` and `lon` together. `place` matches cities of 15,000+ people offline ("City" or "City, CC" with an ISO country code or a US state code); no match is a 404 place_not_found (not charged). Cities only (no street addresses). Typically under 0.1 s (fi params: place, lat, lon |
make_qr_code | utilpeek: make a QR code image. For 1-D barcodes use make_barcode; to read a code use read_qr_barcode. Returns `svg` (text) or `data_base64` (PNG), or with `output` "url" a 24 h download link, plus `version`, `modules`, `width_px`, `height_px` and `bytes`. Data too long for a QR code at the chosen level is a 422 (not charged). Encoded locally, nothing is fetched; typically under 0.1 s. Price: USD params: data*, format, scale, error, border, output |
make_barcode | utilpeek: make a 1-D barcode image. For QR codes use make_qr_code; to find the product behind a number use lookup_barcode_product. Returns `svg` (text, with width_mm/height_mm) or `data_base64` (PNG, with width_px/height_px; `output` "url": a 24 h link), plus `encoded` and `bytes`. A supplied check digit (ean13, ean8, upca, isbn13) must be right: a wrong one is a 422 invalid_checksum (not charged) params: data*, type, format, text, output |
read_qr_barcode | imagepeek: Read every QR code and barcode in an image. To make a QR code use make_qr_code; for other text use ocr_image. Returns every code found: `type` (QR, EAN-13, EAN-8, UPC-A, UPC-E, Code128, Code39), decoded `text`, `kind` (url, wifi, vcard, payment_emv, ...), corner `points`, `bbox`; a QR holding an EMVCo payment payload (PIX, QR Ph, SGQR, PromptPay; starts 000201) also gets a parsed `emv` params: url, image_base64, parse_emv |
peppol_lookup | utilpeek: Check whether a company is registered on the Peppol e-invoicing network. For the legal entity use search_lei. Returns whether a Peppol participant ID (such as 0192:983887457) is registered on the Peppol e-invoicing network, from its SML DNS record; if so, its SMP URL and the document types the SMP lists (BIS Billing 3.0 invoice and credit note, order, despatch advice and invoice response params: participant*, scheme |
lint_x402_listing | utilpeek: Lint an x402 listing, or check a seller's Bazaar coverage. For price position, preflight and demand too use x402_seller_report. Returns in mode lint the listing's problems against the CDP rules, a score and a suggested description; in mode coverage each paid route of a seller marked listed, missing or stale in the CDP Bazaar, with 30-day payers, calls and a 402 probe. Input: `mode` lint: params: mode, listing, url, host, openapi_url |
check_header_budget | utilpeek: Measure response headers against nginx, aiohttp, Node fetch and Python limits. Returns response-header byte sizes, total, Set-Cookie count and size, the five largest fields, and nginx/aiohttp/Node/Python pass/fail with limit overrides. One unpaid public-HTTPS GET, no redirects or body read. Estimates only; names and sizes, never values. Invalid or unreachable: 422 (not charged). Typicall params: url* |
build_ics_event | utilpeek: Build an iCalendar file from JSON events. To read an .ics file use parse_ics. Returns RFC 5545 VCALENDAR text built from 1-50 events, CRLF lines folded at 75 octets and text escaped, with its base64, a data: URI and the uids. Input: `events`, optional `calendar_name`, default `timezone` and `time_format`. Pure computation: no network access, nothing stored. A zoned start is written as TZ params: events*, calendar_name, timezone, time_format |
parse_ics | utilpeek: Parse an iCalendar file into JSON events. To write one use build_ics_event. Returns iCalendar text (Google, Outlook, Apple, up to 1 MB) unfolded and read into events. Windows zone names are mapped; at most 2,000 events (`truncated` when more). Input: `ics`, optional `timezone` for floating times and `max_events`. Pure computation: no network access, nothing stored. Only VEVENT is returne params: ics*, timezone, max_events |
expand_rrule | utilpeek: Expand an iCalendar RRULE into dates. For cron use cron_next_runs; to build an event use build_ics_event. Returns an RFC 5545 RRULE and a start expanded into its occurrence list with python-dateutil in an IANA time zone: wall-clock times keep across DST changes. Up to 1,000 occurrences, an optional [from, to] window, extra until and exdates. Returns ISO 8601 times with offset and whether params: rrule*, dtstart*, timezone, limit, between, until, exdates |
decode_jwt | utilpeek: Decode a JWT without verifying it. To check the signature use verify_jwt. Returns a compact JWT split into its header and payload JSON, with alg, typ, kid, whether a signature is present, and the standard claims: iat, nbf and exp as ISO 8601 UTC, plus expired and not_yet_valid against the server clock. Decoding does not verify the signature. Pure computation: no network access, nothing s params: token* |
verify_jwt | utilpeek: Verify a JWT signature and claims. To read the claims without a key use decode_jwt. Returns valid true or false for a JWT checked with PyJWT against one key (HMAC secret, PEM public key or JWK Set), with a reason: bad signature, expired, wrong audience or issuer, algorithm not allowed. Algorithm none is refused; the key type fixes the algorithm family. Input: `token` and exactly one of ` params: token*, secret, public_key, jwks, algorithms, audience, issuer, leeway_seconds |
decode_lightning_invoice | chainpeek: Decode a Lightning invoice: amount, payee, payment hash and expiry. For EVM calldata use decode_calldata; for Nostr ids use decode_nostr_id. Returns a Lightning invoice's network, amount (msat, sat, BTC), creation time, expiry and expired flag, payee public key recovered from the signature, payment hash, description or hash, route hints and feature bits. Pure computation from the invoic params: invoice* |
decode_nostr_id | chainpeek: Decode a Nostr npub, nprofile, note, nevent or naddr to hex; resolve NIP-05. For ENS names use resolve_ens. Returns a Nostr NIP-19 identifier decoded to hex (public key or event id) and its TLV fields (relays, author, kind), or a NIP-05 name@domain resolved to a public key and relays, optionally checked against a key. Secret keys (nsec) are refused with a 422 and never decoded, stored o params: input*, verify_nip05 |
get_gpu_prices | utilpeek: GPU prices: cheapest H100, A100, L4 per GPU-hour on AWS, Azure, Google Cloud, Akash. Returns cheapest GPU prices per GPU-hour on AWS, Azure and Google Cloud (list prices) and Akash (marketplace bids with GPUs free), by chip, memory, minimum GPUs per cloud machine, region and price ceiling; returns USD per machine-hour or null for unknown shape and an unknown-shape exclusion count; option params: chip, min_gpu_mem_gb, min_gpus_per_machine, provider, regions, pricing, max_usd_per_gpu_hour, limit, rent_vs_buy |
get_gpu_price_index | utilpeek: GPU price index: daily H100, H200, A100 rental price per GPU-hour over time. Returns a GPU chip's daily rental price history: lowest and median on-demand list price, lowest spot, Akash median bid and free GPUs. List prices and marketplace bids, not executed trades. Days without a snapshot are missing, not interpolated. Typically under 0.1 s. Price: USD 0.002. Free: 10 utilpeek calls per params: chip*, from, to |
upload_file_get_link | utilpeek: Upload a file and get a download link that expires in 24 hours. Returns a public download link to a file you upload, valid for `ttl_hours` (default 24, the most); every call stores a new copy under a new link. Over HTTP the file may also be the raw request body or a multipart `file` part. PDF, Office, ODF, image, audio, CSV, JSON, text and Markdown only, up to 20 MB, detected from the by params: filename*, content_base64*, ttl_hours |
find_places_nearby | utilpeek: Find places nearby: pharmacies, cafes, ATMs, shops and hospitals near a point, from OpenStreetMap. To resolve a city name use geocode. Returns places of one kind (pharmacy, cafe, supermarket, ATM, hospital, clinic, bicycle or hardware shop, fuel, EV charging and more) within 50 m-5 km of lat/lon or a city's centre, nearest first. Input: `kind`, then `lat` and `lon` or `place`, optional ` params: kind*, lat, lon, place, radius_m, limit |
lookup_barcode_product | utilpeek: Look up the product behind a barcode in open product databases, with conflicts flagged. To make a barcode use make_barcode; to read every code in an image use read_qr_barcode; to validate other identifiers use validate_identifier. Returns what a barcode is: check digit, GS1 prefix country, and Open Food, Beauty, Products and Pet Food Facts answers side by side with conflicts and test-dat params: code, image_url, image_base64 |
render_mermaid | pdfpeek: Render Mermaid diagram code to an SVG or PNG image. Returns Mermaid diagram code drawn as an SVG or PNG file in an offline sandboxed browser: `format` svg | png, `theme` (default, dark, forest, neutral, base), `scale` 1-4 for PNG (default 2, sharp when zoomed). File base64 in `file` (output=url gives a 24 h link). A syntax error is a 422 invalid_diagram with the line number; over 8,000 x params: code*, format, theme, scale, output |
search_datasets | utilpeek: Find datasets on Hugging Face Hub only. Returns public datasets from Hugging Face Hub only, ranked by downloads: link, licence and size labels, downloads and last update. Optional licence, task, language and size filters. Licence tags are as published by dataset authors, not legal advice; check source terms. Cached up to 1 hour. No match is charged; invalid input, empty or malformed repl params: q*, n, licence, task, language, size |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.