The utilities our own team reaches for every day — free, fast and private. Everything runs in your browser, so tokens, payloads and queries never touch a server.
JSON, JWTs, queries and code are processed locally. Safe for API responses that contain customer data.
Open a tool and use it. No account, no rate limit, no ads between you and the result.
Layouts are built for small screens, so you can check a status code or decode a token from anywhere.
Pyalm builds custom software, APIs and automation — these tools solve problems we hit on real projects.
Format, convert and compare the data you're debugging.
Format, validate, minify and syntax-highlight JSON — with exact error line and column.
Compare two JSON documents and see every added, removed and changed value by path.
Convert CSV to JSON and JSON to CSV with delimiter detection, type inference and flattening.
Generate TypeScript interfaces from a JSON sample, with optional fields and unions inferred.
Format and minify SQL — clause per line, indented joins, uppercase keywords.
Compare two blocks of text or code line by line, with added and removed lines highlighted.
Write Markdown with a live preview, then copy or download the HTML.
Minify or beautify JavaScript, CSS, HTML and JSON — see the size you saved.
Generate realistic test data — names, emails, phones, addresses — as JSON, CSV or SQL.
Test endpoints and decode what's inside tokens and strings.
Send GET, POST, PUT, PATCH and DELETE requests from your browser and inspect the response.
Searchable reference of HTTP status codes with plain-English meanings and API usage tips.
Decode a JSON Web Token's header and payload and read its claims and expiry.
Encode text to Base64 or decode it back — with full UTF-8 and URL-safe support.
Percent-encode or decode URLs and query strings, and break a URL into its parts.
Generate SHA-1, SHA-256, SHA-384 and SHA-512 hashes from any text.
Generate UUID v4 and time-ordered v7 IDs in bulk, and validate any UUID.
Create strong, random passwords with the length and character mix you choose.
Convert Linux file permissions between checkboxes, octal (755) and symbolic (rwxr-xr-x).
Regex, cron, timestamps and design utilities.
Test JavaScript regular expressions live — highlighted matches, capture groups and replace preview.
Build cron schedules visually, read them in plain English and preview the next run times.
Convert Unix timestamps to dates and back — seconds or milliseconds, any time zone.
Compare times across cities and find a meeting slot that works — Dubai, India, London, New York and more.
Check text and background contrast against WCAG AA and AAA, and get a passing colour suggestion.
Convert between HEX, RGB, HSL, HSV, CMYK and OKLCH — and check WCAG contrast.
Design layered CSS box shadows visually and copy the CSS or Tailwind class.
Learn and build CSS flexbox layouts visually — every property, live, with CSS and Tailwind output.
Write HTML with Tailwind CSS classes and see it render live — with starter templates.
Create a complete favicon set from an image, text or emoji — ICO, PNGs, manifest and HTML.
Design 1200×630 social share images for links on LinkedIn, X, WhatsApp and Facebook.
Look up domains and prepare your site for search.
Look up A, AAAA, MX, TXT, NS, CNAME, SOA and CAA records — with SPF and DMARC checks.
Check who a domain is registered with, when it expires and its nameservers — via official RDAP data.
See your public IP address and look up any IP's location, ISP and network owner.
Build a robots.txt with crawler rules, AI-bot blocking and sitemap — then test any URL against it.
Turn a list of URLs into a valid XML sitemap with lastmod, changefreq and priority.
Preview how your title and meta description look on Google — desktop and mobile, with pixel widths.
Add UTM parameters to any URL so Google Analytics can show where your visitors came from.
Count words, characters, sentences and reading time, and check text against common length limits.
The real differences between CSV and JSON, when each fits, and the conversion traps: leading zeros, dates, encodings and nested data.
How diff tools find changes with the longest common subsequence, how to read unified diff output, and when line diffs mislead you.
Every Markdown element you actually use (headings, lists, links, code, tables) plus common gotchas, flavour differences and how to preview first.
A practical SQL style guide: keyword case, clause layout, joins, aliases, CTEs, commas and comments, with before-and-after examples.
Turn API responses into TypeScript types, handle optional fields, nulls and unions, and learn why types alone don't validate data at runtime.
What WCAG contrast ratios mean, the AA and AAA thresholds for text and UI, how the ratio is calculated and how to fix failing colours.
How Linux permissions work: owner, group, others, rwx, octal like 755 and 644, symbolic mode, setuid and sticky bit, with safe server defaults.
Which HTTP status code to return and when in a REST API: 2xx, 3xx, 4xx and 5xx, common mistakes like 200 for errors, and error response design.
Practical length limits for page titles, meta descriptions, social posts and SMS, how reading time is estimated and how to write to a limit.
What utm_source, utm_medium and utm_campaign mean, naming conventions that keep reports clean, and how to track WhatsApp, email and social links.
What goes wrong when developers build invoicing: float money, VAT rounding, gap-free numbering, immutability, e-invoicing and audit trails.
Why floats break money, how to use integer minor units or decimals, rounding modes, allocating remainders and tests that catch bugs.
Should your app include its own invoicing and accounting, or connect to existing software? Cost, compliance, maintenance and the hybrid approach.
A guide for freelance developers in the UAE and India: invoice contents, VAT or GST, exports of services, milestones and getting paid on time.
No. JSON, tokens, SQL, text and files are processed in your browser. A few lookup tools (DNS, WHOIS, IP) send only the query you type directly from your browser to a public service; nothing passes through Pyalm.
Yes. Use them in client work, at your company or in your own projects. No attribution is required.
Most tools work after the page loads even if you lose your connection, because they run locally. Lookup tools need a connection.
Decoding happens locally and the token isn't transmitted. As a general rule, avoid pasting live secrets into any website — use short-lived or test tokens when you can.
Email hi@pyalm.com with what you reach for. Many tools here began as a request.