Developer Toolbox brings formatting, encoding, time, network, and development utilities into one site. Most tools work as soon as the page opens, but they do not all handle data the same way. Before using a tool, determine whether the task is local computation, a network lookup, or AI assistance. That is more accurate than assuming that every input always stays on the device.
Which operations stay in the browser?
Tools that do not require external data generally run in the current browser. Examples include:
- Formatting and minifying JSON, XML, HTML, JavaScript, CSS, and YAML.
- Converting Base64, URLs, HTML entities, Unicode escapes, hexadecimal, and Morse code.
- Working with timestamps, number bases, units, text cases, and character counts.
- Calculating MD5, SHA, HMAC, and file hashes, plus most image conversions.
These operations do not need to send the input to the DevToolbox API. For temporary logs, configuration fragments, or internal data, prefer deterministic local operations when they solve the task.
Which features require a network request?
Two groups of features communicate with a server:
- Network lookup tools: IP, DNS, WHOIS, MAC vendor, and port checks require an external data source or a backend network connection.
- AI-assisted features: natural-language descriptions, JSON, SQL, or code snippets are sent to the DevToolbox API and then processed by Cloudflare Workers AI.
Do not submit access tokens, production database connection strings, private keys, unredacted user records, or proprietary source code to an AI feature. Replace sensitive values with representative placeholders first.
AI features available today
The current AI entry points cover five concrete workflows:
- Regex Tester: generate a JavaScript regex candidate from natural language, then test it on the same page.
- JSON Formatter: send valid JSON to AI and receive a suggested TypeScript interface.
- SQL Formatter: receive a rewritten query with possible index suggestions in comments.
- JavaScript, HTML, and CSS formatter pages: explain code purpose, edge cases, and potential issues.
- Cron Expression: convert a description such as “weekdays at 9:30 AM” into a five-part Cron expression and inspect upcoming run times.
AI output is not a compiler, a database execution plan, or a security audit. Test regex candidates with positive and negative cases, compare TypeScript output with the API contract, and validate SQL suggestions with the target database’s EXPLAIN command and realistic data volumes.
A safer workflow
- Use the local parser or formatter first to confirm that the input is valid.
- Confirm that the data contains no secrets before invoking AI.
- Put AI output back into a deterministic tool, compiler, or test environment.
- Before copying the result, verify flags, time zones, encodings, and the target runtime.
Developer Toolbox is designed to keep common transformations, checks, and generation steps in one workspace. It does not replace the final engineering decision. Understanding the data path and validating the output is what actually reduces context switching without introducing new uncertainty.