~/agents · manual

Tools for your browser agent

Check a Compose file, plan a subnet, or estimate a restore. Your agent can use the same tools you do, with the inputs and results right here on the page for you to review.

26 tool pages support WebMCP. Open a tool to make its action available in a supporting browser.

Start with a real task

  1. Open Compose Doctor in a browser your agent can use.
  2. Give your agent a configuration you are comfortable sharing and ask it to use the tool.
  3. Review the findings on the page, revise the configuration, and check it again before deploying.

Example prompt

Use Compose Doctor to check this configuration for port conflicts and exposed services. Explain the findings, suggest changes, and check the revised configuration again.

These tools calculate, inspect, and generate drafts. They do not run shell commands or deploy changes.

What “ready” means

WebMCP is an experimental browser API that gives agents named actions with defined inputs. A tool page shows “Agent tool: ready” only after its action registers successfully with your browser. Expand the action name to see what it does. This confirms registration, not that an agent is connected or working.

Browser support and agent access are separate requirements. This site is enrolled in Chrome’s WebMCP origin trial; support can change as the experiment develops. See the current browser guidance. If WebMCP is unavailable, use the ordinary controls on every tool page.

The tools directory lets you and your agent find a tool by purpose or local processing. Its discovery action returns page links. Individual actions register only on their own pages and are removed when you leave.

Available to agents

26 tool pages, grouped by the job. Each entry explains its limits.

Containers & Deployment
  • docker-compose-converter

    Runs in your browser

    Convert docker run commands to Compose format.

    Converts a command; it does not run containers or verify the generated configuration against your host.

  • compose-to-run

    Runs in your browser

    Convert Compose services back to docker run commands.

    Generated commands do not create the volumes, networks, or other infrastructure they reference.

  • dockerfile-generator

    Runs in your browser

    Generate Dockerfiles with a guided interface.

    Generates a draft without building an image. Agent calls preserve other wizard settings and refuse populated environment fields.

  • k8s-manifest-generator

    Runs in your browser

    Generate Kubernetes manifests with a wizard.

    Generates supported resources without contacting a cluster. Agent calls preserve other wizard settings and refuse populated environment fields.

  • compose-doctor

    Runs in your browser

    Diagnose dependencies, port conflicts, mounts, and exposure in Compose.

    Checks common problems, not every Compose rule. It does not resolve external files, run containers, or inspect your host.

Networks & Connectivity
  • url-expander

    Uses this site and external services

    Expand shortened URLs to reveal their destination.

    Contacts public destinations through this site. It cannot inspect private services or certify a link as safe.

  • subnet-calculator

    Runs in your browser

    Calculate IP subnets, ranges, and network info.

    IPv4 only. It calculates address ranges without scanning or configuring a network.

  • dns-lookup

    Uses this site and external services

    Query DNS records and RDAP domain registration information.

    Uses Cloudflare public DNS and registry RDAP services through this site, not your LAN resolver.

  • ssl-checker

    Browser contacts the destination

    Check HTTPS reachability from your browser.

    Contacts the destination from your browser. Browser restrictions can obscure the result; it does not inspect certificates.

  • subnet-planner

    Runs in your browser

    Find overlapping networks and split IPv4 blocks for VLANs and VPNs.

    IPv4 only, with up to 128 networks to compare or 256 equal subnets to allocate. It does not scan or configure devices.

Storage & Recovery
  • storage-planner

    Runs in your browser

    Estimate NAS capacity, fault tolerance, and backup restore duration.

    Estimates equal-disk layouts and transfer time. Mixed disk sizes, measured performance, and backup verification are outside its scope.

Configuration Files
  • json-formatter

    Runs in your browser

    Format and validate JSON data.

    Checks JSON syntax. Optional type checks cover top-level fields, not an application schema.

  • yaml-validator

    Runs in your browser

    Validate and format YAML while preserving comments and anchors.

    Checks YAML syntax, not Compose or Kubernetes validity. Sorting documents with anchors is refused.

  • ini-validator

    Runs in your browser

    Parse and format the npm INI dialect.

    Uses the npm INI dialect; other applications may interpret the same file differently.

  • toml-validator

    Runs in your browser

    Validate and format TOML configuration files.

    Formatting loses comments and normalizes dates to UTC with millisecond precision. Validation leaves the input intact.

  • diff-tool

    Runs in your browser

    Compare two text files or configurations.

    Compares supplied text. It does not read files from your server or apply changes there.

Scheduling & Time
  • cron-expression

    Runs in your browser

    Build and validate cron expressions with run previews.

    Previews a five-field schedule in the selected timezone. It does not schedule a job.

  • timestamp-converter

    Runs in your browser

    Convert between Unix epoch and human-readable dates.

    Numeric timestamps need explicit units; agent-supplied date strings need a timezone offset.

Text & Documentation
  • markdown-editor

    Runs in your browser

    Live-preview Markdown with instant formatting.

    Agent editing does not load or save browser drafts. Saving is explicit, images are links, and nothing is published.

  • base64

    Runs in your browser

    Encode and decode Base64 data.

    Agent calls encode or decode supplied text, not uploaded files. Base64 is not encryption.

  • case-converter

    Runs in your browser

    Convert text between cases (camel, snake, etc.).

    Transforms supplied text. It does not rename files or check whether a name is valid in your application.

  • regex-tester

    Runs in your browser

    Test regular expressions with real-time matching.

    Uses JavaScript regular expressions with execution and output limits; other regex engines may behave differently.

Security & Access
  • hash-generator

    Runs in your browser

    Generate SHA hashes and HMACs with Web Crypto.

    Agent access covers text hashing only. HMAC keys and uploaded files stay outside the registered action.

  • jwt-decoder

    Runs in your browser

    Decode JWTs and inspect claims and expiry.

    Decodes claims without verifying the signature or proving that a token is authentic.

  • chmod-calculator

    Runs in your browser

    Convert between octal and symbolic file permissions.

    Calculates ordinary three-digit permissions. It does not support special bits or change filesystem permissions.

  • certificate-inspector

    Runs in your browser

    Inspect PEM names, expiry, algorithms, and fingerprints locally.

    Parses up to 10 PEM certificates locally. It does not accept private keys or verify signatures, trust chains, or revocation.

Where your inputs go

Most tools process inputs in your browser. Agent use may share those inputs and results with your agent provider, even when the calculation is local. An agent with page-reading access may also read displayed content. Keep production secrets out of agent-assisted drafts.

DNS and URL expansion send requests through this site’s Cloudflare handlers. DNS queries go to Cloudflare’s public resolver; registration queries go to the domain’s RDAP registry and its referrals. URL expansion contacts destination servers. The HTTPS checker contacts its target directly from your browser. These handlers do not save your inputs; providers may process request metadata under their own policies.

Saving a Markdown draft in browser storage is a separate, explicit control. Agent editing does not read saved drafts. See the privacy policy for storage and provider details.

Kept manual

These 4 pages generate secrets and do not register agent actions. That is not a barrier to an agent reading the page; use them with care when sharing your browser.

  • wireguard-config

    Manual only. Keys are generated locally; forwarding, firewall rules, and NAT still need configuration on your hosts.

  • password-generator

    Manual only. Generate and copy locally; there is no agent action for creating passwords or passphrases.

  • ssh-key-generator

    Manual only. Creates local OpenSSH keys; it does not install them on a host.

  • htpasswd-generator

    Manual only. Creates a local bcrypt entry; it does not configure authentication on your server.