# Formatho

> Secure AI tool infrastructure: Formatho Runtime is a self-hosted MCP server giving AI agents controlled access to developer, security, and EVM tools - permissioned, audit-logged, zero data egress. Runs in your VPC or on-premise. A hosted tier is available at https://mcp.formatho.com/mcp.

The same tool catalog powers the free browser tools at formatho.com - every tool page states what it does, how to use it, and how AI agents can call it via MCP. Private and secure, runs in your browser; nothing you enter is uploaded, logged, or stored.

## Categories
Category hub pages group every tool with a one-line description each:
- [Web3 & Blockchain Tools]: https://formatho.com/category/web3 — EVM contract reader, vanity address generator, Keccak-256 hasher, ABI tools, Uniswap math, multi-chain readers.
- [Security & Auth Tools]: https://formatho.com/category/security — JWT debugger, SAML decoder, OIDC builder, hash generators, encryption, TOTP, password analysis.
- [Data Format Tools]: https://formatho.com/category/data-formats — JSON, YAML, XML, TOML, CSV validators, formatters, converters, diff tools. UUID, Base64, IBAN, ISO 20022.
- [Developer Tools]: https://formatho.com/category/developer — SQL formatter, SQLite browser, Git, regex, Docker, Mermaid viewer, diff checker.
- [Converters & Calculators]: https://formatho.com/category/converters — Timestamp, number base, color, case, temperature converters. Math, ETA, percentage calculators.
- [Network & Web Tools]: https://formatho.com/category/network — IPv4 subnet calculator, MAC tools, IPv6 ULA, URL encoder/parser, HTTP status codes, QR generator.

## Tools

### Web3 & Blockchain

- [Passkey Address Deriver]: https://formatho.com/tools/passkey-address — Derive EVM addresses from P-256 passkey public keys. For Ritual Chain TxPasskey and WebAuthn wallets.
- [DKMS Key Visualizer]: https://formatho.com/tools/dkms-visualizer — Visualize how Ritual agents derive identity keys via DKMS from TEE-held roots to purpose-specific keys.
- [X402 Payment Encoder]: https://formatho.com/tools/x402-encoder — Encode and decode X402 payment payloads for agent-to-agent transactions. Build HTTP 402 challenges.
- [EVM Calldata Decoder]: https://formatho.com/tools/calldata-decoder — Decode raw Ethereum calldata and error data against a built-in signature dictionary (ERC-20, permit, routers, standard errors), or by pasted ABI. Event topic0 lookup included.
- [CREATE2 Address Calculator]: https://formatho.com/tools/create2-calculator — Compute deterministic CREATE2 deployment addresses from factory, salt, and init code hash. Keccak math identical to the EVM, all client-side.
- [Uniswap Tick & SqrtPrice Calculator]: https://formatho.com/tools/uniswap-math — Convert between Uniswap v3 price, tick, and sqrtPriceX96 with token decimals. Exact Q64.96 integer math matching TickMath.
- [EIP-1967 Proxy Slot Checker]: https://formatho.com/tools/eip1967-checker — Read the standardized proxy storage slots — implementation, admin, beacon — for any contract across 21 EVM chains. Read-only eth_getStorageAt.
- [Solidity Storage Slot Calculator]: https://formatho.com/tools/storage-slot-calculator — Compute storage slots for Solidity variables, mappings (keccak of key and slot), and dynamic array elements. Exact EVM slot math.
- [Uniswap v4 Hook Calculator]: https://formatho.com/tools/v4-hook-calculator — Compute the v4 hook permission bits and the address prefix to mine, or decode any hook address into its 14 hook-call permissions.
- [Ethereum Transaction Decoder]: https://formatho.com/tools/tx-decoder — Decode raw signed transactions (legacy, EIP-1559, EIP-2930, EIP-4844) into typed fields: nonce, gas, to, value, calldata selector, signature.
- [R1CS Circuit Inspector]: https://formatho.com/tools/r1cs-inspector — Inspect Circom .r1cs constraint files and .wtns witnesses: constraints, wires, inputs, named signals. Works with circom, snarkjs, and coCircom artifacts — 100% local.

### Security & Auth

- [TLS Certificate Checker]: https://formatho.com/tools/tls-checker — Check TLS/SSL certificate expiry, issuer, and security configuration. Paste openssl output for instant analysis.
- [Prompt Injection Tester]: https://formatho.com/tools/prompt-injection-tester — Scan prompts and untrusted content for injection patterns: overrides, exfiltration commands, hidden Unicode, encoded payloads. Includes attack payloads and the Lethal Trifecta checklist.
- [OWASP ZAP Report Analyzer]: https://formatho.com/tools/zap-report-analyzer — Paste an OWASP ZAP JSON or Markdown scan report and get a triaged summary: risk counts, affected URLs, CWE links and fix guidance. 100% client-side.
- [ComfyUI Workflow Inspector]: https://formatho.com/tools/comfyui-workflow-inspector — Paste any ComfyUI workflow JSON (API or canvas format): models required, sampler and CFG settings, resolution, and which nodes need custom node packs. Free, client-side.
- [ComfyUI API Converter]: https://formatho.com/tools/comfyui-api-converter — Convert ComfyUI workflows between the API/prompt format and the canvas format, both directions. Links and widgets rebuilt automatically. Free, client-side.
- [ComfyUI Workflow Diff]: https://formatho.com/tools/comfyui-workflow-diff — Compare two ComfyUI workflow JSONs: added and removed nodes, changed seeds, steps, CFG, samplers and prompts. Both formats accepted. Free, client-side.
- [Safetensors Header Reader]: https://formatho.com/tools/safetensors-reader — Read the JSON header of any .safetensors model: LoRA metadata, base model, rank, tensor names and dtypes. Only header bytes read, nothing uploaded.
- [ComfyUI Sampler Guide]: https://formatho.com/tools/comfyui-sampler-guide — Which ComfyUI sampler to use: euler, dpmpp_2m, lcm and more explained, sigma schedulers, and how steps, CFG, denoise and seed interact.
- [CSR Decoder]: https://formatho.com/tools/csr-decoder — Decode a Certificate Signing Request (PKCS#10) in your browser: subject, SANs, public key, extensions and self-signature verification. Free, client-side.
- [Security Policy Generator]: https://formatho.com/tools/policy-generator — Generate password, access control, and incident response policies for SOC 2 compliance.
- [Security Headers Analyzer]: https://formatho.com/tools/security-headers — Check HSTS, CSP, X-Frame-Options and more on any URL. Graded A-F with fix recommendations.
- [CSP Generator]: https://formatho.com/tools/csp-generator — Build Content-Security-Policy headers visually. Configure directives and copy the header.
- [CSP Evaluator]: https://formatho.com/tools/csp-evaluator — Analyze a CSP header for weaknesses: unsafe-inline, wildcards, missing directives, bypass risks.
- [CORS Tester]: https://formatho.com/tools/cors-tester — Test cross-origin requests from your browser. See Access-Control-Allow-Origin, methods and headers.
- [Cookie Security Analyzer]: https://formatho.com/tools/cookie-analyzer — Check Set-Cookie headers for Secure, HttpOnly, SameSite, prefixes and domain scope.
- [JWT & Auth Toolkit]: https://formatho.com/tools/jwt-suite — Complete auth debugging suite: decode and verify JWTs, inspect claims, build OIDC URLs, decode SAML, generate tokens. All client-side.
- [SAML Metadata Generator]: https://formatho.com/tools/saml-metadata-generator — Generate SP and IdP SAML 2.0 metadata XML: entityID, ACS/SLO endpoints, NameID format, certificates. Client-side.
- [Certificate Fingerprint]: https://formatho.com/tools/certificate-fingerprint — Calculate SHA-1/256/384/512 fingerprints of X.509 certificates from PEM. For SAML, pinning, and TLS debugging.
- [Key Format Converter]: https://formatho.com/tools/key-format-converter — Convert RSA keys between PKCS#1 and PKCS#8, public keys between SPKI and PKCS#1, PEM to DER hex. All client-side.
- [SAML Request & Response Decoder]: https://formatho.com/tools/saml-decoder — Decode SAML AuthnRequest and Response messages - base64 plus raw-deflate - with pretty-printed XML. Essential for Okta, Entra ID and Shibboleth debugging. 100% client-side.
- [DMARC Record Parser]: https://formatho.com/tools/dmarc-parser — Parse and validate DMARC TXT records: policy strength (p/sp/np), rua/ruf reporting, pct sampling, adkim/aspf alignment and misconfig warnings. Optional DNS lookup, 100% client-side parsing.
- [OIDC Authorization URL & PKCE Generator]: https://formatho.com/tools/oidc-url-builder — Build OAuth 2.0 / OIDC authorize URLs with state, nonce and S256 PKCE code challenges. Works with Okta, Auth0, Entra ID, Keycloak.
- [JWT Debugger]: https://formatho.com/tools/jwt — Decode and inspect JWT tokens instantly.
- [Hash Text]: https://formatho.com/tools/hash-text — Generate Argon2id, bcrypt, PBKDF2, MD5, SHA-1, SHA-256, SHA-384, SHA-512, BLAKE2b, and Poseidon hashes online. 100% client-side Argon2id password hashing for maximum security.
- [Bcrypt]: https://formatho.com/tools/bcrypt — Generate and verify Bcrypt password hashes.
- [Encrypt/Decrypt]: https://formatho.com/tools/encryption — Encrypt and decrypt text using various algorithms.
- [HMAC Generator]: https://formatho.com/tools/hmac-generator — Generate HMAC hash codes with various algorithms.
- [X25519 Key Exchange]: https://formatho.com/tools/x25519-demo — Generate X25519 keypairs and perform ECDH key exchange. See how two parties derive the same shared secret without transmitting it.
- [CTR Mode Visualizer]: https://formatho.com/tools/ctr-mode — Interactive counter mode encryption demo: watch keystream blocks XOR with plaintext. Block-by-block breakdown with nonce/counter visualization.
- [Shamir Secret Sharing]: https://formatho.com/tools/shamir-splitter — Split secrets into N shares where any threshold K reconstructs. Visual polynomial interpolation over GF(257). Client-side.
- [MPC Demo]: https://formatho.com/tools/mpc-demo — Interactive demo of secure multi-party computation: split numbers into shares, compute on encrypted data, reconstruct without revealing inputs.
- [Pedersen Commitment]: https://formatho.com/tools/pedersen-commitment — Create Pedersen commitments over secp256k1: bind to a value without revealing it. Hiding and binding properties. Client-side.
- [RSA Key Generator & Signer]: https://formatho.com/tools/rsa-key-pair-generator — Generate RSA key pairs, sign messages with a private key, and verify RSA signatures (PKCS1-v1_5, PSS).
- [Password Strength]: https://formatho.com/tools/password-strength-analyser — Analyze password strength and get improvement suggestions.
- [TOTP Generator]: https://formatho.com/tools/otp-code-generator — Generate TOTP codes from secrets. Privacy-first tool.
- [PDF Signature Checker]: https://formatho.com/tools/pdf-signature-checker — Check and validate digital signatures in PDF files. Privacy-first tool.
- [Token Generator]: https://formatho.com/tools/token-generator — Generate secure random tokens with customizable length and character sets.
- [Basic Auth Generator]: https://formatho.com/tools/basic-auth-generator — Generate HTTP Basic Authentication headers.
- [String Obfuscator]: https://formatho.com/tools/string-obfuscator — Obfuscate strings to hide sensitive data.

### Data Formats

- [JSON Viewer]: https://formatho.com/tools/json-viewer — Format and visualize JSON data.
- [JSON Linter]: https://formatho.com/tools/json-lint — Validate and lint JSON code.
- [JSON Minify]: https://formatho.com/tools/json-minify — Minify JSON to reduce size.
- [JSON <> YAML]: https://formatho.com/tools/json-yaml — Convert JSON to YAML and YAML to JSON instantly.
- [TOML YAML JSON Converter]: https://formatho.com/tools/toml-yaml-json-converter — Convert between TOML, YAML and JSON in one tabbed tool. Four conversion modes with live validation, 100% client-side.
- [JSON <> CSV]: https://formatho.com/tools/json-csv — Convert JSON to CSV and CSV to JSON format instantly.
- [JSON Diff]: https://formatho.com/tools/json-diff — Compare two JSON objects and see differences.
- [CSV Row & Column Counter]: https://formatho.com/tools/csv-counter — Count rows, columns, and cells in CSV data. Handles quoted fields, auto-detects delimiter, shows column types and empty values.
- [XML Formatter]: https://formatho.com/tools/xml-formatter — Format and prettify XML documents.
- [XML ↔ JSON]: https://formatho.com/tools/xml-json — Bi-directional XML to JSON converter with real-time conversion and clipboard support.
- [YAML Linter]: https://formatho.com/tools/yaml-lint — Validate and lint YAML code.
- [YAML Viewer]: https://formatho.com/tools/yaml-viewer — YAML linter and validator. Format, validate, and beautify YAML documents with real-time syntax checking.
- [GZip Compress/Decompress]: https://formatho.com/tools/gzip — Compress to gzip/zlib/deflate and back, with Base64 in/out. Native browser streams, nothing uploaded.
- [UUID Generator]: https://formatho.com/tools/uuid — Generate UUIDs (Universally Unique Identifiers). Supports v1, v4, and more.
- [ULID Generator]: https://formatho.com/tools/ulid-generator — Generate ULIDs (Universally Unique Lexicographically Sortable Identifiers).
- [Base64 String]: https://formatho.com/tools/base64 — Encode and decode Base64 strings instantly.
- [Base64 File]: https://formatho.com/tools/base64-file-converter — Convert files to and from Base64 encoding.
- [Phone Parser]: https://formatho.com/tools/phone-parser — Parse and format phone numbers.
- [IBAN Validator]: https://formatho.com/tools/iban-validator — Validate and parse International Bank Account Numbers.
- [List Converter]: https://formatho.com/tools/list-converter — Convert lists between different formats (comma, newline, JSON, etc).

### Developer Tools

- [Git Cheat Sheet]: https://formatho.com/tools/git-memo — Quick reference for common Git commands.
- [Crontab Generator]: https://formatho.com/tools/crontab-generator — Generate cron expressions with a visual builder.
- [SQL Formatter]: https://formatho.com/tools/sql — Format and beautify SQL queries.
- [SQL to ER Diagram]: https://formatho.com/tools/sql-to-er-diagram — Convert CREATE TABLE SQL into interactive ER diagrams with relationship mapping.
- [SQL Query Plan]: https://formatho.com/tools/sql-query-plan-visualizer — Visualize SQL execution plans and get optimization tips.
- [SQL Dialect Converter]: https://formatho.com/tools/sql-dialect-converter — Convert SQL between PostgreSQL, MySQL, SQLite, T-SQL, BigQuery, and more.
- [Foreign Key Visualizer]: https://formatho.com/tools/foreign-key-visualizer — Map foreign key relationships and find orphaned tables in your schema.
- [SQLite Browser]: https://formatho.com/tools/sqlite-browser — Open, query, and edit SQLite databases in your browser. Browse tables, run SQL, edit cells, import CSV, export .db files. WebAssembly, no upload.
- [Chmod Calculator]: https://formatho.com/tools/chmod-calculator — Calculate Unix file permissions.
- [Docker to Compose]: https://formatho.com/tools/docker-run-to-compose — Convert docker run commands to docker-compose.
- [Regex Tester]: https://formatho.com/tools/regex-tester — Test and debug regular expressions.
- [Text Encoding Playground]: https://formatho.com/tools/text-encoding-playground — Convert text to Unicode escapes, NATO phonetic alphabet and numeronyms, plus ASCII art. One tabbed playground, client-side.
- [Quick Utilities]: https://formatho.com/tools/quick-utilities — SVG placeholders, WiFi QR codes, camera recording, chronometer, emoji picker and keycode info in one page.
- [Mermaid Diagram Viewer]: https://formatho.com/tools/mermaid-viewer — Render Mermaid diagrams in real-time. Flowcharts, sequence diagrams, class diagrams, gantt charts, and more.
- [Performance Benchmark]: https://formatho.com/tools/benchmark-builder — benchmark-builder - free, privacy-first, and 100% client-side.
- [BPMN Viewer]: https://formatho.com/tools/bpmn — Visualize BPMN 2.0 diagrams and export them as PDF. Free, privacy-first BPMN viewer that runs entirely in your browser.
- [Visio Viewer]: https://formatho.com/tools/visio-viewer — Open and view Microsoft Visio .vsdx files in your browser — no Visio install, no upload. Multi-page rendering, zoom, and SVG export.
- [BPMN to Visio]: https://formatho.com/tools/bpmn-to-visio — Convert BPMN 2.0 diagrams to Visio (.vdx) with live preview and exact BPMN DI layout preservation. Drag-drop, layered auto-layout fallback, conversion summary. Client-side.
- [Html Wysiwyg Editor]: https://formatho.com/tools/html-wysiwyg-editor — html-wysiwyg-editor - free, privacy-first, and 100% client-side.
- [Markdown Editor]: https://formatho.com/tools/markdown — Edit and preview Markdown files in real-time.
- [Markdown to HTML Converter]: https://formatho.com/tools/markdown-to-html — Convert Markdown to HTML with syntax highlighting.
- [Text Diff Checker]: https://formatho.com/tools/diff — Compare two texts and see differences.
- [Text Statistics]: https://formatho.com/tools/text-statistics — Count characters, words, sentences, and paragraphs.
- [Image Compressor]: https://formatho.com/tools/image — Compress and optimize images.
- [Agent Identity Generator]: https://formatho.com/tools/agent-identity-generator — Instantly generate unique personas, traits, and system prompts for AI agents.
- [PII Redactor]: https://formatho.com/tools/pii-redactor — Scan and remove personal data (emails, phones, SSNs, API keys) before sending to any AI model. Client-side.
- [OpenAI API Request Builder]: https://formatho.com/tools/openai-request-builder — Build chat/completions requests visually — model, messages, parameters. Generates curl, Python, and JavaScript code.
- [Context Window Splitter]: https://formatho.com/tools/context-splitter — Chunk long text for RAG by tokens, sentences, or paragraphs. Shows overlap and context usage per chunk.
- [Prompt Template Renderer]: https://formatho.com/tools/prompt-template-renderer — Auto-generate a form from {{variables}} in your prompt template. Fill values, get the rendered prompt with token count.
- [LLM JSON Validator]: https://formatho.com/tools/llm-json-validator — Extract and validate JSON from any AI model output — handles markdown fences, prose, trailing commas, smart quotes.
- [Jev Playground]: https://formatho.com/tools/jev-playground — Build Jev (TypeSafe System One) requests visually: state plus Noul, Choice, and Score questions. Mock responses with probability distributions, Python SDK code generation. Free, client-side, no API key.
- [Jev Suitability Test]: https://formatho.com/tools/jev-suitability — Is your task Jev-shaped? Six criteria from System One guidance: judgement, bounded, atomic, context-contained, fast-human, machine-consumed — scored with a verdict and decomposition advice.
- [LLM Token Counter]: https://formatho.com/tools/local-token-counter — Count tokens for GPT-4o, GPT-4, o1, and legacy models locally. Compare across tokenizers, estimate API costs. No API calls.
- [elizaOS Character Validator]: https://formatho.com/tools/eliza-character-validator — Validate your elizaOS character.json against the real schema: missing required fields, type errors, empty bio or style, malformed messageExamples, and leaked secrets. Free, client-side.
- [.env Hygiene Checker]: https://formatho.com/tools/env-hygiene-checker — Client-side scan of agent .env files: duplicate keys, empty values, quote and whitespace issues, and known elizaOS variable names. Nothing is ever uploaded.
- [elizaOS Plugin Manifest Linter]: https://formatho.com/tools/eliza-plugin-linter — Lint your plugin package.json against the elizaOS registry conventions: plugin- name prefix, elizaos keywords, dual-format build fields and registry assets. Free, client-side.
- [Meta Tag Generator]: https://formatho.com/tools/meta-tag-generator — Generate HTML meta tags for SEO.

### Converters & Calculators

- [Unix Timestamp Converter]: https://formatho.com/tools/unix-timestamp — Convert Unix timestamps to human-readable dates. Live clock with seconds-since counter and current time in both formats.
- [Everyday Converters]: https://formatho.com/tools/everyday-converters — Roman numerals, temperature, percentages, math expressions, number bases and colors in one tabbed converter page.
- [Date-Time Converter]: https://formatho.com/tools/date-time-converter — Convert dates and times between different formats and timezones.
- [Case Converter]: https://formatho.com/tools/case-converter — Convert text between different cases (camelCase, snake_case, etc.).
- [Text to Binary]: https://formatho.com/tools/text-to-binary — Convert text to binary and vice versa.
- [ETA Calculator]: https://formatho.com/tools/eta-calculator — Calculate estimated time of arrival.
- [Quantum Circuit Simulator]: https://formatho.com/tools/quantum-circuit-simulator — Design and simulate quantum circuits with real quantum gates. Perfect for learning quantum computing concepts.
- [Lorem Ipsum Generator]: https://formatho.com/tools/lorem — Generate placeholder text for designs.

### Network & Web

- [IPv4 Subnet Calculator]: https://formatho.com/tools/ipv4-subnet-calculator — Calculate IPv4 subnets, network ranges, and available hosts.
- [IPv4 Converter Suite]: https://formatho.com/tools/ipv4-converter-suite — Convert IPv4 addresses between decimal, binary, hex and octal, and expand CIDR ranges into host lists. Tabbed, client-side.
- [MAC Address Toolkit]: https://formatho.com/tools/mac-address-toolkit — Look up MAC address vendors and generate random MACs with any OUI. Two tools in one tabbed page, fully client-side.
- [IPv6 ULA Generator]: https://formatho.com/tools/ipv6-ula-generator — Generate IPv6 Unique Local Addresses.
- [URL Encoder/Decoder]: https://formatho.com/tools/url-encoder — Encode and decode URL strings.
- [URL Parser]: https://formatho.com/tools/url-parser — Parse and analyze URLs to extract components.
- [HTML Entities]: https://formatho.com/tools/html-entities — Encode and decode HTML entities.
- [Device Information]: https://formatho.com/tools/device-information — View your browser and device information.
- [User Agent Parser]: https://formatho.com/tools/user-agent-parser — Parse and analyze user agent strings.
- [HTTP Status Codes]: https://formatho.com/tools/http-status-codes — Reference for HTTP status codes and their meanings.
- [Slugify]: https://formatho.com/tools/slugify-string — Convert text to URL-friendly slugs.
- [QR Code Generator]: https://formatho.com/tools/qr-code-generator — Generate QR codes from text or URLs.

### Compliance & Standards

- [SOC 2 Readiness Checklist]: https://formatho.com/tools/soc2-checklist — Interactive checklist covering all 5 Trust Service Criteria with linked tools for each control.
- [BOM Diff Tool]: https://formatho.com/tools/bom-diff — Compare two Bills of Materials — see added, removed, and changed parts with quantity differences.
- [BOM Cost Roll-up]: https://formatho.com/tools/bom-cost-rollup — Roll up multi-level automotive and manufacturing BOMs: indented EBOM/MBOM trees, per-tier quantities, unit costs and cost per assembly. Free, client-side.
- [Battery Passport Checklist]: https://formatho.com/tools/battery-passport-checklist — Interactive checklist for all EU Battery Passport data points (Annex XIII, Regulation 2023/1542): EV (46), LMT (49), industrial >2kWh (32). Track readiness before 18 Feb 2027. Free, client-side.
- [DPP JSON Validator]: https://formatho.com/tools/dpp-json-validator — Validate a Digital Product Passport JSON payload: required fields, battery data, operator, data carrier. Free, client-side.
- [DPP Resolver Tester]: https://formatho.com/tools/dpp-resolver-tester — Test a DPP resolver: paste the QR URL, fetch the passport, verify required fields present. Tests the full scan→resolve→verify chain. Free.
- [ESPR DPP Timeline]: https://formatho.com/tools/espr-timeline — Interactive timeline of EU ESPR delegated acts and DPP deadlines: battery passport Feb 2027, textiles, electronics, construction. Free.
- [DPP Supplier Data Request]: https://formatho.com/tools/supplier-data-request — Generate a structured data request for suppliers: which DPP fields you need, in what format, with deadlines. Export CSV or JSON. Free, client-side.
- [Textile DPP Builder]: https://formatho.com/tools/textile-dpp-builder — Build a textile-specific Digital Product Passport: fiber composition, recycled content, chemical treatments, care. Free, client-side.
- [Battery Carbon Footprint Declaration]: https://formatho.com/tools/battery-carbon-footprint — Build the carbon footprint declaration for an EU battery passport: cradle-to-gate kg CO₂e/kWh per the delegated regulation. Free, client-side.
- [PPWR Declaration of Conformity]: https://formatho.com/tools/ppwr-declaration — Generate an EU Declaration of Conformity for packaging under PPWR Regulation 2025/40, Annex VIII. Free, client-side.
- [Part Number Generator]: https://formatho.com/tools/part-number-generator — Generate intelligent part numbers with configurable category/type/sequence codes. Batch generation.
- [ISO 20022 Validator]: https://formatho.com/tools/iso20022-validator — Validate ISO 20022 payment messages (pain.001, pacs.008, camt.053). Auto-detects type, checks required fields, pretty-prints XML.
- [pain.001 Builder]: https://formatho.com/tools/pain001-builder — Build ISO 20022 Customer Credit Transfer Initiation XML visually — debtor, creditor, amount, SEPA service level, purpose codes.
- [GS1 Digital Link Builder]: https://formatho.com/tools/gs1-digital-link — Build and decode GS1 Digital Link URLs: GTIN, serial, lot, expiry into a web URL and QR code. Check-digit and date validation, element-string conversion. Free, client-side.
- [ESPR Digital Product Passport]: https://formatho.com/tools/espr-passport — Build and validate a Digital Product Passport prototype for the EU Ecodesign Regulation 2024/1781: identification, Article 7 sustainability parameters, operator data, QR data carrier, JSON export. Client-side.
- [DPP Playground]: https://formatho.com/tools/dpp-playground — Build a draft EU Digital Product Passport: pick your industry (textile, battery, electronics...), list the documents you have, and see exactly what information is missing. 100% client-side.
- [Invoice Generator]: https://formatho.com/tools/invoice-generator — Create professional invoices with line items, tax, discounts and multi-currency support. Live preview, PDF download generated on your device, draft auto-save. 100% client-side.
- [PINT AE Invoice Builder & Validator]: https://formatho.com/tools/pint-ae — Build PINT AE XML invoices for the UAE 2026 e-invoicing mandate (Peppol), or paste XML to validate: TRN format, VAT categories, required UBL fields and totals math. 100% client-side.
- [Password Generator]: https://formatho.com/tools/password-generator — Generate strong random passwords and passphrases with crypto-grade randomness: length control, character sets, exclude look-alikes, entropy meter. 100% client-side — passwords never leave your device.
- [DPP Readiness Score]: https://formatho.com/tools/dpp-readiness — How ready is your export product for the EU Digital Product Passport? Answer 14 questions and get a 0-100 score with a prioritized action list. 100% client-side.
- [GTIN Validator]: https://formatho.com/tools/gtin-validator — Validate GTIN-8/12/13/14 (EAN/UPC) barcodes: check digit verification, GS1 prefix decode to issuing country, and check digit generation. 100% client-side.
- [SPF Record Analyzer]: https://formatho.com/tools/spf-analyzer — Parse and validate SPF records: mechanisms, qualifiers, the 10-DNS-lookup limit, and syntax errors with plain-English fixes. Optional DNS lookup. 100% client-side.

## Developer Stack Tools
Persona-specific tool pages:
- [owasp tools]: https://formatho.com/dev-tools/owasp — OWASP-aligned security tools — headers analyzer, CSP generator, CORS tester, cookie analyzer
- [soc2 tools]: https://formatho.com/dev-tools/soc2 — Open-source SOC 2 compliance tools — readiness checklist, policy generator, TLS checker, security headers. Client-side, free, source on GitHub
- [sap tools]: https://formatho.com/dev-tools/sap — SAP developer tools — XML formatter, JSON validator, CSV converter for PI/PO, CPI, BTP
- [okta tools]: https://formatho.com/dev-tools/okta — Okta developer tools — SAML decoder, OIDC builder, JWT verifier for SSO debugging
- [ping federate tools]: https://formatho.com/dev-tools/ping-federate — Ping Federate tools — SAML decoder, OIDC builder, JWT verifier for identity flows

## Formatho Runtime (MCP for AI agents)
Self-hosted MCP server exposing these tools to AI agents privately — Docker deployment, permissioned tool registry, metadata-only audit logging:
- Formatho Runtime: https://formatho.com/runtime
- Docker image: docker.io/formatho/formatho-runtime
- Source: https://github.com/formatho/formatho-runtime
- MCP connect: docker run -i --rm -v formatho-audit:/data formatho/formatho-runtime

## EVM Chain Tools
Chain-specific developer tool pages with pre-configured RPC endpoints, chain IDs, and token addresses:
- [ethereum tools]: https://formatho.com/evm-tools/ethereum
- [arbitrum tools]: https://formatho.com/evm-tools/arbitrum
- [base tools]: https://formatho.com/evm-tools/base
- [optimism tools]: https://formatho.com/evm-tools/optimism
- [polygon tools]: https://formatho.com/evm-tools/polygon
- [bnb chain tools]: https://formatho.com/evm-tools/bnb-chain
- [avalanche tools]: https://formatho.com/evm-tools/avalanche
- [zksync tools]: https://formatho.com/evm-tools/zksync
- [linea tools]: https://formatho.com/evm-tools/linea
- [blast tools]: https://formatho.com/evm-tools/blast
- [mantle tools]: https://formatho.com/evm-tools/mantle
- [cronos tools]: https://formatho.com/evm-tools/cronos
- [ritual tools]: https://formatho.com/evm-tools/ritual
- [hyperevm tools]: https://formatho.com/evm-tools/hyperevm
- [katana tools]: https://formatho.com/evm-tools/katana
- [monad tools]: https://formatho.com/evm-tools/monad
- [robinhood tools]: https://formatho.com/evm-tools/robinhood
- [unichain tools]: https://formatho.com/evm-tools/unichain
- [stable tools]: https://formatho.com/evm-tools/stable
- [tempo tools]: https://formatho.com/evm-tools/tempo
- [world chain tools]: https://formatho.com/evm-tools/world-chain

## Guides
- [Blog - developer guides and tutorials]: https://formatho.com/blogs — Deep dives on AI agents, blockchain, RWA tokenization, and privacy-first tools.

### Blog posts
- [Debian Votes to Allow 'Responsible Use of Generative AI' — What It Means for Open Source]: https://formatho.com/blogs/Debian-Responsible-Generative-AI-Vote-Open-Source — Debian's 2026 general resolution lets contributors use generative AI — but keeps them fully responsible for quality, cor
- [The End of Context Collapse: How Block's Buzz Redefines the AI Workspace]: https://formatho.com/blogs/End-Of-Context-Collapse-Block-Buzz-Redefines-AI-Workspace — "If Buzz disappears, your identity and signed history still verify. Git remains Git and can be rehosted... A protocol an
- [Building Index-Tracking Assets on Options Instead of Debt]: https://formatho.com/blogs/index-tracking-assets-options-not-debt — Vitalik Buterin proposes a radical rethink of synthetic assets: replace liquidations with options. Here is a deep dive i
- [The Future of RWA Tokenization: 5 Megatrends Reshaping Finance by 2030]: https://formatho.com/blogs/future-of-rwa-tokenization-5-megatrends-reshaping-finance-2030 — Discover how Real World Asset (RWA) tokenization is bridging the gap between traditional finance and blockchain. Explore
- [Real Estate Tokenization in 2026: Legal Frameworks, SM REITs, and Smart Contract Compliance]: https://formatho.com/blogs/real-estate-tokenization-legal-frameworks-sm-reits-2026 — Explore how real estate tokenization works in 2026 — from SPV structures and SEBI SM REIT regulations to ERC-3643 compli
- [The Structural Reconfiguration of Finance: Institutional Guide to Real-World Asset (RWA) Tokenization in 2026]: https://formatho.com/blogs/structural-reconfiguration-finance-rwa-tokenization-2026 — The IMF calls it a structural reconfiguration of global finance. With $441B in represented value and $27.65B actively tr
- [5 Privacy-Focused Developer Tools You Need in 2026]: https://formatho.com/blogs/5-privacy-focused-developer-tools — Discover 5 essential privacy-first developer tools for 2026. From client-side converters to end-to-end encrypted notes, 
- [Why RWA, AI, and Privacy Tokens Are Outperforming Bitcoin in 2026]: https://formatho.com/blogs/why-rwa-ai-privacy-tokens-outperforming-bitcoin-2026 — Discover how institutional investors are shifting from Bitcoin to Real World Assets (RWA), AI infrastructure, and privac
- [CLARITY Act Victory: Regulatory Clarity for $3T Crypto Market]: https://formatho.com/blogs/clarity-act-victory-regulatory-clarity-3t-crypto-market — The cryptocurrency industry just achieved a monumental legislative breakthrough that could reshape the future of digital
- [EIP-7702: How Ethereum's Pectra Upgrade Finally Bridges EOAs and Smart Contracts]: https://formatho.com/blogs/eip-7702-ethereum-pectra-eoa-smart-contract-upgrade — EIP-7702 is the most significant change to Ethereum accounts since the network launched. It lets regular wallets tempora
- [ERC-7730: The Clear Signing Standard That Will Transform How You Verify Ethereum Transactions]: https://formatho.com/blogs/erc-7730-clear-signing-ethereum-standard — Blind signing is the silent killer of Ethereum security. ERC-7730 introduces a structured, human-readable format for tra
- [Generate QR Codes Without Tracking Pixels: The Privacy-First Guide]: https://formatho.com/blogs/generate-qr-codes-without-tracking-pixels — Discover why most free QR generators track your users. Learn how client-side QR code generation protects user privacy an
- [From Dead Capital to Programmable Gold: 5 Shifts Redefining the Global Economy in 2026]: https://formatho.com/blogs/from-dead-capital-to-programmable-gold-2026 — The global financial architecture is currently undergoing its most significant structural upgrade since the advent of el
- [AI Meets Blockchain: How Agent Orchestration Could Transform Web3 Development]: https://formatho.com/blogs/ai-meets-blockchain-agent-orchestration-web3 — After analyzing 25+ research papers, 5,750+ community reactions, and 12 competitor solutions, we found a critical gap in
- [Beyond the Chatbot: The Rise of Agentic Orchestration and Digital Workforce]: https://formatho.com/blogs/beyond-the-chatbot-agentic-orchestration-digital-workforce — The chatbot era is ending. Discover how multi-agent orchestration, digital twins, and browser-native workflows are trans
- [Privacy-First Developer Tools: Why Your Data Should Never Leave Your Browser]: https://formatho.com/blogs/privacy-first-developer-tools-2026 — The data harvesting problem in developer tooling is real. Learn why privacy-first tools matter in 2026 and how client-si
- [Need Developer Tools That Don't Spy On You?]: https://formatho.com/blogs/developer-tools-that-dont-spy-on-you — Discover why most free developer tools harvest your data. Learn about zero-trust, client-side development and the rise o
- [Convert JSON to YAML in 1 Second — No Upload]: https://formatho.com/blogs/convert-json-to-yaml-no-upload — Learn why converting JSON to YAML on cloud servers exposes your infrastructure configuration. Discover client-side conve
- [JSON to YAML Converter: A Practical Guide for DevOps Engineers]: https://formatho.com/blogs/json-to-yaml-converter-tools — Master JSON to YAML conversion for Docker Compose, Kubernetes, and CI/CD configs. Learn when to use each format and avoi
- [JWT Decoder Security Guide: Inspect Tokens Without Risk]: https://formatho.com/blogs/jwt-decoder-security-guide — Deep dive into JWT structure, common vulnerabilities, and why you should never paste tokens into online decoders. Learn 
- [Decode JWT Tokens Without Server Exposure]: https://formatho.com/blogs/decode-jwt-tokens-without-server-exposure — Learn why pasting JWTs into online decoders exposes your authentication system. Discover client-side JWT decoding that k
- [SQL Formatter for Security: Spot Vulnerabilities in Plain Sight]: https://formatho.com/blogs/sql-formatter-security — Unformatted SQL is a security blind spot. Learn how proper formatting reveals injection vulnerabilities, improves code r
- [Format SQL Queries Without Cloud Uploads]: https://formatho.com/blogs/format-sql-queries-without-cloud-uploads — Learn why pasting SQL queries into online formatters exposes your database schema. Discover client-side SQL formatting t
- [Base64 Encoder/Decoder: The Complete Developer Guide]: https://formatho.com/blogs/base64-encoder-decoder-complete-guide — Everything you need to know about Base64 encoding — what it is, when to use it (and when not to), common pitfalls, and w
- [Encode/Decode Base64 — Files Never Leave Your Browser]: https://formatho.com/blogs/encode-decode-base64-files-never-leave-browser — Learn why Base64 is not encryption and why using online decoders for secrets is dangerous. Discover zero-trust, client-s
- [NEW: 100+ Developer Tools — All Free, All Private]: https://formatho.com/blogs/100-developer-tools-all-free-all-private — Discover Formatho's expanded toolkit with 100+ free developer tools. Every tool runs 100% locally in your browser. No se
- [We Built 100+ Privacy-First Developer Tools. Here's What We Learned.]: https://formatho.com/blogs/100-plus-developer-tools-launch — The story behind Formatho's 100+ developer tools — the architecture decisions, the hard trade-offs, and why we chose cli
- [Test Regex Patterns — No More Random Websites]: https://formatho.com/blogs/test-regex-patterns-securely-2026 — Learn why pasting production data into online regex testers is a security breach. Discover client-side regex testing tha
- [Regex Tester Security: Patterns That Protect and Patterns That Kill]: https://formatho.com/blogs/regex-tester-security — Regular expressions can validate input or bring your server to its knees. Learn about ReDoS attacks, safe regex patterns
- [QR Codes Without Tracking: Privacy-First QR Generation]: https://formatho.com/blogs/qr-codes-without-tracking — Most free QR code generators track your data. Learn the privacy risks of online QR tools and how client-side generation 
- [UUID Generator Masterclass: Everything You Need to Know About Unique Identifiers]: https://formatho.com/blogs/uuid-generator-masterclass — Complete guide to UUIDs — from v1 to v5, security implications of predictable IDs, and how to generate unique identifier
- [Generate UUIDs Without Internet Connection: The 2026 Masterclass]: https://formatho.com/blogs/generate-uuids-without-internet-connection-2026 — Learn why generating UUIDs offline is critical for security. Discover how client-side UUID generation protects your data
- [India's #1 Privacy-First Developer Toolkit — The 2026 Blueprint for Data Sovereignty]: https://formatho.com/blogs/india-privacy-first-developer-toolkit-2026 — Discover how Formatho became India's leading privacy-first developer toolkit with 100+ tools that run entirely in your b
- [When AI Stops Feeling Like Software and Starts Feeling Like a Real Employee]: https://formatho.com/blogs/when-ai-stops-feeling-like-software-and-starts-feeling-like-a-real-employee — A reflection on local AI agents, persistence, and why location matters more than intelligence.
- [UUID v1 vs v4: Which Should You Use?]: https://formatho.com/blogs/uuid-v1-vs-v4 — Understanding the key differences between UUID versions and when to use each for your projects.
- [AI and Job Safety: The 22 Careers Most Protected From Automation]: https://formatho.com/blogs/ai-job-safety-22-careers-anthropic-research — New research from Anthropic reveals a massive gap between theoretical AI capability and actual workplace deployment. Dis
- [Inside Meta's AI Restructuring: The Race for Applied Superintelligence]: https://formatho.com/blogs/meta-ai-restructuring-applied-superintelligence-2026 — Meta's radical 2026 reorganization reveals the strategic tensions and architectural decisions shaping the AI industry. H
- [The Strategic Horizon of AI Agent Orchestration: Your 2026 Career Blueprint]: https://formatho.com/blogs/ai-agent-orchestration-career-blueprint-2026 — A comprehensive guide to building a career in AI Agent Orchestration. Learn the tech stack, frameworks, and skills that 
- [How Bcrypt Hashing Keeps Your User Passwords Safe]: https://formatho.com/blogs/bcrypt-password-hashing-guide — A deep dive into bcrypt, the industry-standard password hashing algorithm.
- [A Developer's Guide to Encoding and Decoding Base64]: https://formatho.com/blogs/base64-encoding-guide — Everything you need to know about Base64 encoding, from basic concepts to advanced use cases.
- [Why You Should Use ULIDs Instead of UUIDs in Your Database]: https://formatho.com/blogs/ulids-vs-uuids — Discover how ULIDs combine the benefits of UUIDs with time-based sorting.
- [Understanding JWT Tokens: A Complete Guide]: https://formatho.com/blogs/jwt-tokens-complete-guide — Learn how JSON Web Tokens work and common security pitfalls to avoid.
- [SQL Formatting Best Practices for Readable Code]: https://formatho.com/blogs/sql-formatting-best-practices — Learn why properly formatted SQL matters and discover the conventions that make your queries easier to read.
- [QR Codes Explained: How They Work and When to Use Them]: https://formatho.com/blogs/qr-codes-explained — Discover the technology behind QR codes and learn best practices.
- [Regular Expressions: A Practical Cheat Sheet]: https://formatho.com/blogs/regex-practical-guide — Master regex with this practical guide covering common patterns and real-world examples.
- [Ethereum Unit Converter: Wei, Gwei, and Ether Explained]: https://formatho.com/blogs/ethereum-units-explained — Understanding Ethereum denominations is crucial for blockchain development.
- [Crontab Generator: Mastering Scheduled Tasks]: https://formatho.com/blogs/crontab-guide — Learn how cron expressions work and best practices for scheduling automated tasks.
- [Understanding HTTP Status Codes Every Developer Should Know]: https://formatho.com/blogs/http-status-codes-guide — A comprehensive guide to HTTP status codes and how to use them correctly.
- [JSON vs YAML vs TOML: Which Config Format Should You Use?]: https://formatho.com/blogs/json-yaml-toml-comparison — Compare the three most popular configuration file formats.
- [Password Security: How Strong is Your Password Really?]: https://formatho.com/blogs/password-security-guide — Learn what makes a password secure and how attackers crack them.
- [IPv4 Subnetting Made Simple]: https://formatho.com/blogs/ipv4-subnetting-guide — Master IPv4 subnetting with this practical guide.
- [Case Conversion: camelCase, snake_case, and Beyond]: https://formatho.com/blogs/case-conversion-guide — Navigate the world of text case conventions.
- [Understanding Cryptographic Hashes: MD5, SHA-1, SHA-256]: https://formatho.com/blogs/cryptographic-hashes-guide — Learn how cryptographic hash functions work and which ones are safe.
- [Markdown Tips and Tricks for Better Documentation]: https://formatho.com/blogs/markdown-tips-tricks — Level up your Markdown skills with advanced formatting and best practices.
- [Git Commands You Should Know by Heart]: https://formatho.com/blogs/git-commands-cheat-sheet — Essential Git commands for everyday development.
- [Understanding Color Formats: HEX, RGB, HSL Explained]: https://formatho.com/blogs/color-formats-guide — Navigate color formats for web development.
- [Docker Run to Docker Compose: A Migration Guide]: https://formatho.com/blogs/docker-run-to-compose — Learn how to convert docker run commands to docker-compose.yml.
- [BIP39 Mnemonic Phrases: Understanding Seed Words]: https://formatho.com/blogs/bip39-mnemonic-guide — Learn how BIP39 mnemonic phrases work for cryptocurrency wallets.
- [Text Encoding vs Encryption: Know the Difference]: https://formatho.com/blogs/encoding-vs-encryption — A critical distinction - encoding is not encryption.
- [Understanding Unix File Permissions: chmod Calculator]: https://formatho.com/blogs/unix-file-permissions — Demystify Unix file permissions with this guide.
- [Keccak-256 vs SHA-256: When to Use Which (With Examples)]: https://formatho.com/blogs/keccak-256-vs-sha-256-when-to-use-which — Keccak-256 is not SHA3-256, and neither is a drop-in for the other. The padding-byte difference that splits the Keccak f
- [The Secure AI-Agent Stack: Zero Data Egress in Practice]: https://formatho.com/blogs/secure-ai-agent-stack-zero-data-egress — Agents leak at every layer: prompts to model APIs, tool payloads to SaaS endpoints, telemetry you did not know you sent.
- [Decode JWTs & SAML Without Leaking Secrets]: https://formatho.com/blogs/decode-jwt-saml-without-leaking-secrets — Every online JWT decoder you paste a token into is a disclosure. How to inspect JWTs and SAML assertions entirely in you
- [ISO 20022 pain.001 Explained + Builder]: https://formatho.com/blogs/iso-20022-pain001-explained-build-in-browser — pain.001 is the XML message businesses submit to banks to move money — the grammar replacing SWIFT MT across payments. A
- [What Is Jev? The System One Model Explained]: https://formatho.com/blogs/what-is-jev-system-one-model-explained — Jev is TypeSafe AI's System One model: state and typed questions in, probability distributions out — no text generation.
- [How to Open Camunda BPMN Files in Visio (Free, No Plugins)]: https://formatho.com/blogs/how-to-open-camunda-bpmn-files-in-visio — Visio cannot import .bpmn files from Camunda Modeler. Here is the reliable path: export BPMN 2.0 XML, convert it to Visi