Client-side tools

🌐whoamiShows your IP and HTTP headers as seen by the server.Shipped🔍url-inspectParses a URL into protocol, host, path, query and hash.Shipped🔤base64Encode and decode text in both directions, standard and url-safe.Shipped🔑jwt-decodePaste a token, get header, payload, exp and iat in a readable form.Shipped🧬uuidGenerate UUID v4 and v7 with one-click copy.Shipped🧮hashCompute MD5, SHA-1, SHA-256, SHA-512 and bcrypt hashes.Shipped📺screen-infoScreen size, window dimensions, browser language and device capabilities.Shipped
📅timestampConvert Unix, ISO and human-readable dates across time zones.Planned
📦json-formatValidate, format and minify JSON; convert JSON to YAML.Planned
🧾regex-testerMatch a regex against text with flags and group highlighting.Shipped
🔢number-baseConvert numbers between dec, hex, bin and oct.Planned
⏰cron-explainTranslate cron expressions to plain text and the next run time.Shipped
🆎case-converterConvert between camelCase, snake_case, kebab-case and Title Case.Planned
📝markdown-previewLive Markdown preview with HTML export.Shipped🔄diffCompare two texts with side-by-side highlighting.Shipped🔲qrGenerate a QR code from text, fully client-side.Shipped🎨colorConvert hex, rgb and hsl, plus WCAG contrast checks.Shipped
🌈gradientBuild a CSS gradient with a live preview.Planned
🎲loremGenerate Lorem Ipsum and fake data: names, emails, IPs.Planned
📊metricsAI usage metrics: tokens by model, cost, daily breakdown.Shipped🎭themesColor scheme preview page with swatches and details.Shipped

Server-side tools

🌍dnsResolve A, AAAA, MX and TXT records for a domain.Shipped🔎ip-infoGeo info for an IP address.Shipped🤖agent-generatorGenerate Claude Code and Codex agent configs from a structured spec — deterministic, no LLM.Shipped
⏱️pingRound-trip latency to the server.Planned
📤echoPOST /echo returns body and metadata, handy for webhook testing.Planned
📨request-binDisposable URL that captures incoming requests and shows them live.Planned

Accounts & sign-in

🔐mcp-authSign in with an email magic link or GitHub.Shipped
🟣google-signinGoogle sign-in as an additional auth provider.Planned

Workflow

ArchitectClaude Opus
BackendDeepSeek V3
FrontendDeepSeek V3
Review & deployClaude Sonnet
DesignGPT-5.4-nano
RouterDeepSeek V4 Flash

What this roadmap tracks

This page maps every tool in the sandbox to its current state: what ships today, what is planned and what is deferred. The General tab lists the browser and server tools, the API tab covers keys and quotas, and the MCP tab groups the server rollout by stage, so a single page works as a status board.

The MCP server rollout is the clearest example. Stage 0 (Shipped) is done: twelve live tools, OAuth 2.1 for connectors, tool annotations and a real outputSchema on every tool. Stage 1 (Foundation) is also done — the shared normalizer, the unified error format, the SSRF-safe client and the response cache. Stage 2 is part-shipped: ssl_check and http_check are live, while dns_propagation, email_dns_check and whois are planned and port_check is deferred.

How to read the status badges

  1. Shipped means the tool or feature is live and, where it has a page, linked from the roadmap.
  2. In progress means it is being built now; Planned means it is agreed but not started.
  3. Deferred means it is deliberately parked, usually for safety or cost reasons.

Frequently asked questions about the roadmap

Is the roadmap a promise of dates?

No. It tracks status and rollout order, not deadlines; an item can move between Planned, In progress and Shipped as work lands.

Which items have already shipped?

The twelve MCP tools, OAuth 2.1 connectors, tool annotations and output schemas (stage 0), plus the normalizer, error format, SSRF-safe client and response cache (stage 1).

Why are some tools deferred?

Items such as port_check are parked on purpose: a port scanner needs strict abuse and private-range controls before it can ship safely.

Back to home