Developer Tools

Developer Utilities API API

The Developer Utilities API returns 20+ deterministic developer and AI-agent tools as clean JSON.

21 actionsLive JSON1,000 free creditsMCP-ready

🤖 Using an AI assistant? Copy this link into ChatGPT / Claude / Cursor — it reads every endpoint and parameter instantly and tells you if this API fits your use case.

The primary hash endpoint returns a value's hash across algorithms (hex, base64, base64url, bit length, HMAC), and the set covers UUIDs, encoding, JWT decode, password generation, cron parsing, slugify, regex testing, formatting and conversion. It is built for developer tools and AI agents that need one reliable endpoint for common utility operations without pulling in a dozen libraries. One ReefAPI key, one shared credit pool, the standard envelope.

Live example

Real request and response JSON

Captured from the indexed primary action, hash, on Jul 18, 2026, 5:19 PM UTC.

Captured request

{
  "method": "POST",
  "url": "https://api.reefapi.com/dev-utils/v1/hash",
  "headers": {
    "x-api-key": "$REEF_KEY",
    "content-type": "application/json"
  },
  "body": {
    "input": "hello world",
    "algo": "sha256"
  }
}

Captured response

{
  "ok": true,
  "meta": {
    "api": "dev-utils",
    "endpoint": "hash",
    "mode": "live",
    "latency_ms": 56.1,
    "record_count": 1,
    "bytes": 0,
    "cache_hit": false,
    "algo": "sha256"
  },
  "data": {
    "algo": "sha256",
    "hex": "b94d27b9934d3e08a52e52d7da7dabfac484efe37a5380ee9088f7ace2efcde9",
    "base64": "uU0nuZNNPgilLlLX2n2r+sSE7+N6U4DukIj3rOLvzek=",
    "base64url": "uU0nuZNNPgilLlLX2n2r-sSE7-N6U4DukIj3rOLvzek",
    "length_bits": 256,
    "hmac": false,
    "input_bytes": 11
  }
}

Actions

What the Developer Utilities API API does

Code samples

Call hash from your stack

curl -X POST https://api.reefapi.com/dev-utils/v1/hash \
  -H "x-api-key: $REEF_KEY" \
  -H "content-type: application/json" \
  -d '{"input":"hello world","algo":"sha256"}'

import requests

r = requests.post(
    "https://api.reefapi.com/dev-utils/v1/hash",
    headers={"x-api-key": REEF_KEY},
    json={
  "input": "hello world",
  "algo": "sha256"
},
)
print(r.json()["data"])

const res = await fetch("https://api.reefapi.com/dev-utils/v1/hash", {
  method: "POST",
  headers: {
    "x-api-key": process.env.REEF_KEY,
    "content-type": "application/json",
  },
  body: JSON.stringify({
  "input": "hello world",
  "algo": "sha256"
}),
});
const { ok, data, meta, error } = await res.json();

MCP one-liner

Ask your MCP-connected assistant: call reefapi.dev-utils.hash with {"input":"hello world","algo":"sha256"}.

Use cases

Who uses this API and why

AI agents call these deterministic tools (hash, uuid, jwt_decode, cron) instead of guessing the result.
Developer tools use encode, convert and format to normalize data inside a workflow.
Automation pipelines use slugify, regex_test and password to handle common string operations reliably.

FAQ

Questions developers ask before integrating

What is the Developer Utilities API API?

Developer Utilities API API is a ReefAPI endpoint group for developer utilities api It returns live JSON through POST requests under /dev-utils/v1.

Is the Developer Utilities API API free to try?

Yes. ReefAPI starts with 1,000 free credits, no card required. Developer Utilities API calls use the same shared credit balance as every other ReefAPI engine.

Do I need a Developer Utilities API login or account?

No login to Developer Utilities API is needed for the API response. You call ReefAPI with your x-api-key header, and the playground can run live examples before you create a production key.

How fresh is the Developer Utilities API data?

The page example is captured from a live hash call, and production requests fetch live data through ReefAPI rather than a static sample.

How many credits does the Developer Utilities API API use?

Developer Utilities API actions currently cost 1-2 credits per successful call. Failed or blocked calls are free, and all APIs draw from one credit pool.

Can I call Developer Utilities API from an AI assistant or MCP client?

Yes. Connect ReefAPI once through MCP and your assistant can call dev-utils actions with the same key, credit pool and JSON envelope used by normal REST requests.

Is the Developer Utilities API API a Developer Utilities API scraper?

It is the managed alternative to a DIY Developer Utilities API scraper. Instead of building and maintaining your own scraper — proxies, headless browsers, captcha and constant breakage — you call one ReefAPI endpoint and get the same developer utilities api back as clean JSON.

Why does my Developer Utilities API scraper keep getting blocked?

Most Developer Utilities API scrapers break on anti-bot defenses, rate limits and IP bans that need rotating residential proxies and browser fingerprinting to clear. ReefAPI handles all of that for you — no proxies, no captchas, no maintenance — and returns live JSON. Blocked or failed calls are free.

docs / dev-utils

Developer Utilities API

base /dev-utils/v121 endpoints

post/dev-utils/v1/hash1 credit

Hash/checksum text or binary (base64/hex) input: md5…sha3·blake2·crc32·adler32, optional HMAC keying → hex + base64 digests.

Parameter		Allowed / range	Description
input	required	—	The data to hash. Plain text by default; set input_encoding=base64\|hex to hash binary data.
algo = sha256	optional	md5 · sha1 · sha224 · sha256 · sha384 · sha512 · sha3-256 · sha3-512 · blake2b · blake2s · crc32 · adler32	Hash/checksum algorithm.
hmac_key	optional	—	Optional HMAC key — returns the keyed HMAC digest instead of the plain hash (not valid for crc32/adler32).
input_encoding = text	optional	text · base64 · hex	How to interpret `input`: utf-8 text, or base64/hex-encoded binary.

Action	Description	Concrete use case	Key params
hash	Hash/checksum text or binary (base64/hex) input: md5…sha3·blake2·crc32·adler32, optional HMAC keying → hex + base64 digests.	Ops teams call hash to get hash/checksum text or binary (base64/hex) input.	input, algo, hmac_key, input_encoding
uuid	Generate ids: uuid v4/v7/v1(MAC-safe)/v3/v5, ULID, nanoid — up to 100.	Developer tools call uuid to generate ids.	version, count, namespace, name, size
encode	Encode/decode: base64(+url-safe), hex, URL (path/component/form), HTML entities, unicode-escape, json-string.	Validation workflows call encode to get encode/decode.	input, op, direction
jwt_decode	Decode a JWT WITHOUT needing the key (header+payload+claims analysis); optionally verify the signature with a provided key. Decode-only — this API never signs tokens.	Data-quality teams call jwt_decode to get decode a JWT WITHOUT needing the key (header+payload+claims analysis); optionally verify the….	token, verify_key
password	Generate cryptographically-secure passwords (charset controls, ambiguity filter) + entropy strength score; or score a provided password with `check`.	Ops teams call password to generate cryptographically-secure passwords (charset controls, ambiguity filter) + entropy st….	length, count, lowercase, uppercase, digits, ...
cron	Explain a cron expression in plain language (15 locales) + compute the next N run times in any IANA timezone (DST-correct).	Developer tools call cron to get explain a cron expression in plain language (15 locales) + compute the next N run times in an….	expression, runs, tz, locale, from_time
slugify	URL-safe slug from any-script text (CJK/Cyrillic/Arabic → ASCII via anyascii transliteration).	Validation workflows call slugify to get uRL-safe slug from any-script text (CJK/Cyrillic/Arabic → ASCII via anyascii transliteration)..	input, separator, lowercase, max_length
regex_test	Test a regex against text: matches + groups + named groups, optional replace. User patterns run with a hard 1s timeout (ReDoS-guarded) + size caps.	Data-quality teams call regex_test to get test a regex against text.	pattern, input, flags, replacement, max_matches
format	Pretty-print, minify or validate JSON / YAML / XML / SQL (string-level; file/data CONVERSION lives in the file-convert API).	Ops teams call format to get pretty-print, minify or validate JSON / YAML / XML / SQL (string-level; file/data CONVERSION….	input, type, op, indent, sort_keys, ...
convert	Convert structured data between JSON / YAML / CSV / XML at the string level (paste-in, ≤512KB). CSV↔JSON is tabular (array of flat objects). For file/Excel/multi-MB conversion use the file-convert API.	Developer tools call convert to convert structured data between JSON / YAML / CSV / XML at the string level (paste-in, ≤512KB).	input, from, to, indent, sort_keys
qr	Generate a QR code as SVG (text), base64-PNG (text data-URI), or terminal ASCII — all textual output, no binary asset. Up to QR version 40.	Validation workflows call qr to generate a QR code as SVG (text), base64-PNG (text data-URI), or terminal ASCII.	input, kind, error_correction, scale, border
color	Parse any CSS color (hex/rgb()/hsl()/name) → every format + CSS3 name + luminance; optional second color → WCAG 2.x contrast ratio + AA/AAA.	Data-quality teams call color to parse any CSS color (hex/rgb()/hsl()/name) → every format + CSS3 name + luminance; optional s….	input, contrast_with
mock_data	Generate fake/test records (Faker, 70+ locales): preset bundles (person/address/company/internet/profile/product/lorem) or a custom field→type schema; seed for reproducible output.	Ops teams call mock_data to generate fake/test records (Faker, 70+ locales).	preset, schema, count, locale, seed
text_diff	Unified diff between two texts + change stats + similarity ratio.	Developer tools call text_diff to get unified diff between two texts + change stats + similarity ratio..	a, b, context, label_a, label_b
text_analyze	Algorithmic text analysis (no LLM): language detect (97 langs) · readability (Flesch & co) · profanity flag/censor · keyword extraction · full stats. Pick checks or get all.	Validation workflows call text_analyze to get algorithmic text analysis (no LLM).	input, checks, top_keywords
timestamp	Parse/convert any timestamp ('now', unix s/ms/µs, ISO-8601, RFC-2822) → every format + timezone conversion + relative time.	Data-quality teams call timestamp to get parse/convert any timestamp ('now', unix s/ms/µs, ISO-8601, RFC-2822) → every format + timezo….	value, tz
case_convert	Convert identifier/text casing: camel·pascal·snake·kebab·constant·dot·title·sentence·upper·lower (+ detected input case).	Ops teams call case_convert to convert identifier/text casing.	input, target
base_convert	Convert integers between bases 2-36 (arbitrary precision; 0x/0b/0o prefixes accepted).	Developer tools call base_convert to convert integers between bases 2-36 (arbitrary precision; 0x/0b/0o prefixes accepted)..	input, from_base, to_base
markdown	Render CommonMark+tables markdown → sanitized HTML (raw HTML escaped, XSS-safe) + heading TOC with slugs.	Validation workflows call markdown to render CommonMark+tables markdown → sanitized HTML (raw HTML escaped, XSS-safe) + heading TOC….	input
user_agent	Parse a User-Agent string → browser/OS/device families + versions + bot flag (uap-core database).	Data-quality teams call user_agent to parse a User-Agent string → browser/OS/device families + versions + bot flag (uap-core databa….	input
batch	Run up to 100 mixed dev-utils calls in one request.	Ops teams call batch to get run up to 100 mixed dev-utils calls in one request..	items

Parameter		Allowed / range	Description
version = v4	optional	v4 · v7 · v1 · v3 · v5 · ulid · nanoid	Id kind. v4=random · v7=time-ordered (RFC 9562) · v1=timestamp (random multicast node — host MAC never leaks) · v3/v5=deterministic namespace+name (md5/sha1) · ulid=Crockford-base32 sortable · nanoid=21-char URL-safe.
count = 1	optional	1–100	How many ids to generate (v3/v5 always 1 — deterministic).
namespace	optional	—	v3/v5 namespace: dns\|url\|oid\|x500 or a custom UUID.
name	optional	—	v3/v5 name to hash into the namespace.
size = 21	optional	8–64	nanoid length (nanoid only).

Parameter		Allowed / range	Description
input	required	—	The string to encode or decode.
op	required	base64 · base64url · hex · url · url-component · url-form · html · unicode-escape · json-string	Codec. url=path-safe quote · url-component=encode everything (JS encodeURIComponent) · url-form=+ for spaces · html=entities · json-string=JSON string-literal escaping.
direction = encode	optional	encode · decode	encode (default) or decode.

Parameter		Allowed / range	Description
token	required	—	The JWT to decode.
verify_key	optional	—	Optional verification key: the HMAC secret (HS) or PEM public key (RS/ES/PS). Algorithm is taken from the token header (whitelisted; alg=none always fails).

Parameter		Allowed / range	Description
length = 16	optional	4–128	Password length.
count = 1	optional	1–50	How many passwords.
lowercase = true	optional	—	Include a-z.
uppercase = true	optional	—	Include A-Z.
digits = true	optional	—	Include 0-9.
symbols = true	optional	—	Include symbols (!@#$%^&*()-_=+[]{};:,.<>?/~).
exclude_ambiguous = false	optional	—	Drop look-alikes (Il1O0o`'"\|).
check	optional	—	Score THIS password instead of generating (entropy heuristic; the password is not stored or logged).

Parameter		Allowed / range	Description
expression	required	—	5-field cron (min hour dom month dow), @aliases (@daily, @hourly…), or 6-field with seconds first.
runs = 5	optional	1–50	How many upcoming run times to return.
tz = UTC	optional	—	IANA timezone for the run times (DST handled).
locale = en	optional	en · de · es · fr · it · nl · pl · pt · ro · ru · tr · uk · ja · ko · zh	Language of the human explanation.
from_time	optional	—	Compute runs after this ISO-8601 instant (default now). Pin it for reproducible output.

Parameter		Allowed / range	Description
input	required	—	Text to slugify.
separator = -	optional	—	Word separator (default '-').
lowercase = true	optional	—	Lowercase the slug (default true).
max_length = 0	optional	0–500	Truncate at a word boundary (0 = no limit).

Parameter		Allowed / range	Description
pattern	required	—	The regular expression (≤2000 chars; Python `regex` syntax — PCRE-compatible incl. \p{...}).
input	required	—	The subject text to scan.
flags	optional	—	Flag letters, any of: i (ignorecase), m (multiline), s (dotall), x (verbose). E.g. 'im'.
replacement	optional	—	Optional replacement template — when set, `replaced` holds the substituted text (backrefs \1, \g<name>).
max_matches = 100	optional	1–500	Cap on returned matches.

Parameter		Allowed / range	Description
input	required	—	The document text.
type	required	json · yaml · xml · sql	Document type.
op = pretty	optional	pretty · minify · validate	pretty \| minify \| validate (sql: pretty/minify only — sqlparse is non-validating).
indent = 2	optional	1–8	Indent width for pretty (json/yaml/xml).
sort_keys = false	optional	—	Sort object keys (json/yaml).
keyword_case = upper	optional	upper · lower · capitalize	SQL keyword casing (sql only).

Parameter		Allowed / range	Description
input	required	—	The source document text.
from	required	json · yaml · csv · xml	Source format.
to	required	json · yaml · csv · xml	Target format.
indent = 2	optional	0–8	Indent width for json/yaml/xml output (0=compact).
sort_keys = false	optional	—	Sort object keys (json/yaml).

Parameter		Allowed / range	Description
input	required	—	The data to encode (URL, text, vCard, wifi string…).
kind = svg	optional	svg · png_base64 · text	Output: svg (scalable vector text) · png_base64 (base64 + data-URI) · text (terminal ASCII art).
error_correction = m	optional	l · m · q · h	Recovery level: l~7% · m~15% · q~25% · h~30%.
scale = 4	optional	1–20	Module pixel size (png/svg).
border = 4	optional	0–16	Quiet-zone width in modules (spec default 4).

Parameter		Allowed / range	Description
preset	optional	person · address · company · internet · profile · product · lorem	Ready-made record shape (ignored when `schema` is given).
schema	optional	—	Custom shape: {output_field: type}. Types: address, bool, catch_phrase, city, color_hex, color_name, company, company_email, country, country_code, credit_card_full, credit_card_number, currency_code, date, date_of_birth, domain, email, emoji, file_name, first_name, float, free_email, iban, int, ipv4, ipv6, iso8601, job, language_code, last_name, latitude, locale, longitude, mac, mime_type, name, paragraph, password, phone, sentence, slug, ssn, state, street, text, time, url, user_agent, username, uuid, word, zip.
count = 5	optional	1–100	How many records.
locale = en_US	optional	—	Faker locale (en_US, tr_TR, de_DE, ja_JP…). Unknown locales fall back to en_US.
seed	optional	—	Seed for deterministic output (same seed+schema+locale +count+faker-version → same records).

Parameter		Allowed / range	Description
input	required	—	The color: '#1a2b3c', '#abc', 'rgb(26,43,60)', 'hsl(210,40%,17%)' or a CSS3 name ('rebeccapurple').
contrast_with	optional	—	Optional second color — returns the WCAG contrast ratio + AA/AAA pass flags for normal/large text.

Parameter		Allowed / range	Description
a	required	—	The original text.
b	required	—	The changed text.
context = 3	optional	0–20	Context lines around each hunk.
label_a = a	optional	—	Label for the original.
label_b = b	optional	—	Label for the changed text.

Parameter		Allowed / range	Description
input	required	—	The text to analyze.
checks	optional	—	Which analyses to run (default all): language, readability, profanity, keywords, stats.
top_keywords = 10	optional	1–50	How many keywords to extract.

Parameter		Allowed / range	Description
value = now	optional	—	The timestamp. 'now' (default), unix seconds (≤10 digits), unix ms (12-14), unix µs (15-17), ISO 8601, or RFC 2822.
tz = UTC	optional	—	IANA timezone for the local-time outputs.

Parameter		Allowed / range	Description
input	required	—	The text/identifier to convert.
target	required	camel · pascal · snake · kebab · constant · dot · title · sentence · upper · lower	Target case style.

Parameter		Allowed / range	Description
input	required	—	The number (string). Prefixes 0x/0b/0o override from_base.
from_base = 10	optional	2–36	Source base (ignored if input has a prefix).
to_base = 10	optional	2–36	Target base.