JWT Inspector
Decode a JSON Web Token, check its expiry, and test whether its HS256 signature was made with a weak/common secret. The token is decoded locally and never leaves this page.
API Probe
Fetch a URL from your browser and grade its security headers.
⚠️ Honest limitation: browsers enforce CORS. If the target does not send CORS headers, the fetch will fail or expose only a few headers — that is a browser restriction, not proof the site is down. Sites that allow CORS (many public APIs) work fully.
EVM Token Checker BNB Smart Chain
Read a BEP-20 token's name(), symbol(), decimals() and
totalSupply() directly from chain via read-only eth_call.
No wallet, no signing, no keys — ever.
Pre-filled example: USDT on BSC. RPC endpoint: https://bsc-dataseed.binance.org