15 single-purpose developer, security, and AI-safety APIs running on Cloudflare Workers with zero payload logging and sub-5 ms edge execution.
Zero Payload Logging SSRF-Isolated Fetcher RapidAPI & Zyla Ready
POST /v1/json-heal
Repairs malformed JSON and LLM outputs (markdown fences, trailing commas, single quotes, unquoted keys, comments, truncated strings/containers) and optionally validates against a JSON Schema.
POST /v1/pii-redactor
Detects and redacts PII (emails, Luhn-validated cards, MOD-97 IBANs, EU VATs, phones, IPs, SSNs, and HU tax/TAJ IDs) with reversible caller-only tokens and zero payload storage.
POST /v1/eu-vat-iban
Offline ISO 13616 IBAN MOD-97 & ISO 9362 BIC/SWIFT validation, plus 27-country EU VAT format verification and VIES lookup with KV caching and graceful degradation.
POST /v1/email-dns
Audits MX, SPF, DKIM selectors, DMARC, and MTA-STS records via DNS-over-HTTPS, returning a 0-100 deliverability score, grade, and exact DNS fix instructions.
POST /v1/prompt-guard
Deterministic Layer 1 (Unicode/homoglyph/base64 normalization) and Layer 2 (heuristic & exfiltration guard) prompt-injection firewall. Zero payload logging.
POST /v1/ua-bot-parser
Parses User-Agent strings into browser, OS, and device metadata and classifies official AI crawlers, search bots, scrapers, and headless browsers.
POST /v1/workday-holiday
Calculates business days, adds/subtracts workdays, and checks public holidays across 13 countries including Easter/movable holidays and Hungarian bridge/swap days.
POST /v1/hallucination-diff
Compares an LLM answer against grounding source passages using deterministic token/bigram overlap, numeric verification, and entity matching.
POST /v1/consent-tokens
Stateless HMAC-SHA256 signed consent and RFC 8058 One-Click unsubscribe token issuer and verifier with key rotation (kid).
POST /v1/html-to-markdown
Fetches a web page via private fetcher (or accepts raw HTML), strips navigation/script/footer boilerplate, converts content to clean Markdown, and estimates LLM token count.
POST /v1/ssrf-firewall
Advisory SSRF pre-check and redirect-chain inspector blocking private IP ranges, cloud metadata endpoints, localhost variants, obfuscated decimal/hex/octal IPs, and unsafe redirects.
POST /v1/security-headers
Audits HSTS, Content-Security-Policy quality, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy, and CORS configuration with a 0-100 score and copy-paste fixes.
POST /v1/signup-fraud
Evaluates signup risk from email, IP, and User-Agent inputs using disposable-domain detection, MX lookup, plus-alias/role heuristics, IP checks, and bot classification.
POST /v1/webhook-verify
Constant-time WebCrypto HMAC signature verification and replay-window check for Stripe, GitHub, Slack, Shopify, Svix, and generic HMAC webhooks.
POST /v1/schema-diff
Detects breaking and non-breaking changes between two OpenAPI 3.x specs or JSON Schemas (removed endpoints, type changes, new required fields, enum removals, tightened bounds).