~/agents · manual
Tools for your browser agent
Check a Compose file, plan a subnet, or estimate a restore. Your agent can use the same tools you do, with the inputs and results right here on the page for you to review.
26 tool pages support WebMCP. Open a tool to make its action available in a supporting browser.
Start with a real task
- Open Compose Doctor in a browser your agent can use.
- Give your agent a configuration you are comfortable sharing and ask it to use the tool.
- Review the findings on the page, revise the configuration, and check it again before deploying.
Example prompt
Use Compose Doctor to check this configuration for port conflicts and exposed services. Explain the findings, suggest changes, and check the revised configuration again.
These tools calculate, inspect, and generate drafts. They do not run shell commands or deploy changes.
What “ready” means
WebMCP is an experimental browser API that gives agents named actions with defined inputs. A tool page shows “Agent tool: ready” only after its action registers successfully with your browser. Expand the action name to see what it does. This confirms registration, not that an agent is connected or working.
Browser support and agent access are separate requirements. This site is enrolled in Chrome’s WebMCP origin trial; support can change as the experiment develops. See the current browser guidance. If WebMCP is unavailable, use the ordinary controls on every tool page.
The tools directory lets you and your agent find a tool by purpose or local processing. Its discovery action returns page links. Individual actions register only on their own pages and are removed when you leave.
Available to agents
26 tool pages, grouped by the job. Each entry explains its limits.
Containers & Deployment
- docker-compose-converter
Runs in your browser
Convert docker run commands to Compose format.
Converts a command; it does not run containers or verify the generated configuration against your host.
- compose-to-run
Runs in your browser
Convert Compose services back to docker run commands.
Generated commands do not create the volumes, networks, or other infrastructure they reference.
- dockerfile-generator
Runs in your browser
Generate Dockerfiles with a guided interface.
Generates a draft without building an image. Agent calls preserve other wizard settings and refuse populated environment fields.
- k8s-manifest-generator
Runs in your browser
Generate Kubernetes manifests with a wizard.
Generates supported resources without contacting a cluster. Agent calls preserve other wizard settings and refuse populated environment fields.
- compose-doctor
Runs in your browser
Diagnose dependencies, port conflicts, mounts, and exposure in Compose.
Checks common problems, not every Compose rule. It does not resolve external files, run containers, or inspect your host.
Networks & Connectivity
- url-expander
Uses this site and external services
Expand shortened URLs to reveal their destination.
Contacts public destinations through this site. It cannot inspect private services or certify a link as safe.
- subnet-calculator
Runs in your browser
Calculate IP subnets, ranges, and network info.
IPv4 only. It calculates address ranges without scanning or configuring a network.
- dns-lookup
Uses this site and external services
Query DNS records and RDAP domain registration information.
Uses Cloudflare public DNS and registry RDAP services through this site, not your LAN resolver.
- ssl-checker
Browser contacts the destination
Check HTTPS reachability from your browser.
Contacts the destination from your browser. Browser restrictions can obscure the result; it does not inspect certificates.
- subnet-planner
Runs in your browser
Find overlapping networks and split IPv4 blocks for VLANs and VPNs.
IPv4 only, with up to 128 networks to compare or 256 equal subnets to allocate. It does not scan or configure devices.
Storage & Recovery
- storage-planner
Runs in your browser
Estimate NAS capacity, fault tolerance, and backup restore duration.
Estimates equal-disk layouts and transfer time. Mixed disk sizes, measured performance, and backup verification are outside its scope.
Configuration Files
- json-formatter
Runs in your browser
Format and validate JSON data.
Checks JSON syntax. Optional type checks cover top-level fields, not an application schema.
- yaml-validator
Runs in your browser
Validate and format YAML while preserving comments and anchors.
Checks YAML syntax, not Compose or Kubernetes validity. Sorting documents with anchors is refused.
- ini-validator
Runs in your browser
Parse and format the npm INI dialect.
Uses the npm INI dialect; other applications may interpret the same file differently.
- toml-validator
Runs in your browser
Validate and format TOML configuration files.
Formatting loses comments and normalizes dates to UTC with millisecond precision. Validation leaves the input intact.
- diff-tool
Runs in your browser
Compare two text files or configurations.
Compares supplied text. It does not read files from your server or apply changes there.
Scheduling & Time
- cron-expression
Runs in your browser
Build and validate cron expressions with run previews.
Previews a five-field schedule in the selected timezone. It does not schedule a job.
- timestamp-converter
Runs in your browser
Convert between Unix epoch and human-readable dates.
Numeric timestamps need explicit units; agent-supplied date strings need a timezone offset.
Text & Documentation
- markdown-editor
Runs in your browser
Live-preview Markdown with instant formatting.
Agent editing does not load or save browser drafts. Saving is explicit, images are links, and nothing is published.
- base64
Runs in your browser
Encode and decode Base64 data.
Agent calls encode or decode supplied text, not uploaded files. Base64 is not encryption.
- case-converter
Runs in your browser
Convert text between cases (camel, snake, etc.).
Transforms supplied text. It does not rename files or check whether a name is valid in your application.
- regex-tester
Runs in your browser
Test regular expressions with real-time matching.
Uses JavaScript regular expressions with execution and output limits; other regex engines may behave differently.
Security & Access
- hash-generator
Runs in your browser
Generate SHA hashes and HMACs with Web Crypto.
Agent access covers text hashing only. HMAC keys and uploaded files stay outside the registered action.
- jwt-decoder
Runs in your browser
Decode JWTs and inspect claims and expiry.
Decodes claims without verifying the signature or proving that a token is authentic.
- chmod-calculator
Runs in your browser
Convert between octal and symbolic file permissions.
Calculates ordinary three-digit permissions. It does not support special bits or change filesystem permissions.
- certificate-inspector
Runs in your browser
Inspect PEM names, expiry, algorithms, and fingerprints locally.
Parses up to 10 PEM certificates locally. It does not accept private keys or verify signatures, trust chains, or revocation.
Where your inputs go
Most tools process inputs in your browser. Agent use may share those inputs and results with your agent provider, even when the calculation is local. An agent with page-reading access may also read displayed content. Keep production secrets out of agent-assisted drafts.
DNS and URL expansion send requests through this site’s Cloudflare handlers. DNS queries go to Cloudflare’s public resolver; registration queries go to the domain’s RDAP registry and its referrals. URL expansion contacts destination servers. The HTTPS checker contacts its target directly from your browser. These handlers do not save your inputs; providers may process request metadata under their own policies.
Saving a Markdown draft in browser storage is a separate, explicit control. Agent editing does not read saved drafts. See the privacy policy for storage and provider details.
Kept manual
These 4 pages generate secrets and do not register agent actions. That is not a barrier to an agent reading the page; use them with care when sharing your browser.
- wireguard-config
Manual only. Keys are generated locally; forwarding, firewall rules, and NAT still need configuration on your hosts.
- password-generator
Manual only. Generate and copy locally; there is no agent action for creating passwords or passphrases.
- ssh-key-generator
Manual only. Creates local OpenSSH keys; it does not install them on a host.
- htpasswd-generator
Manual only. Creates a local bcrypt entry; it does not configure authentication on your server.