Be the first to get access to new connectors. Get early access →
ConnectorBay Early access

Devkit — connector documentation

  • MCP endpoint: https://devkit.connectorbay.com/mcp
  • REST API: POST https://devkit.connectorbay.com/v1/tools/{tool_name}, described by the OpenAPI 3.1 spec at https://devkit.connectorbay.com/openapi.json
  • Transport: Streamable HTTP, stateless, MCP specification 2025-06-18 or later
  • Authentication: none required. An optional Authorization: Bearer <key> raises rate limits.
  • Health: https://devkit.connectorbay.com/health · Tool schemas: https://devkit.connectorbay.com/tools.json
  • Publisher: Unify Dynamics LLC · connectorbay.com/devkit · agent@connectorbay.com

What Devkit is for

The small utilities every developer keeps re-deriving: does this regex actually match, why won't this JSON parse, what does that cron expression mean and when does it next run, what's really inside this JWT, base64/hex/URL-encode this, hash or HMAC a string, generate a UUID, convert a timestamp across time zones, diff two blobs of text, or recall what a given HTTP status code means.

What it does

Regex — test a Python/PCRE-style pattern against text with flags (i/m/s/x), return every match with positions, capture groups and named groups, and optionally apply a replacement. JSON — validate with a plain-language hint for the common mistakes (single quotes, trailing commas, Python True/None, comments), pretty-print or minify, list every key path, query a dotted/bracket path (items[0].name), or get type counts and max depth. Cron — explain a 5- or 6-field expression (and @daily/@hourly/@weekly aliases) in plain words and list its next runs in any IANA time zone. JWT — decode header and payload, surface iat/nbf/exp/auth_time as readable times and an expiry status, flag alg: none tokens; JWE (5-part, encrypted) tokens report the header only. Encode/decode — base64, base64url, URL percent-encoding, hex, HTML entities, unicode escapes, binary, ROT13 and Morse. Hashes — MD5, SHA-1, SHA-2, SHA-3, BLAKE2 and CRC32 digests, or HMAC with a key. UUIDs — generate v4 (random), v7 (time-ordered) or v1 (time+node), or inspect one to get its version, variant and embedded timestamp. Timestamps — convert unix seconds/milliseconds/microseconds or almost any date string to ISO 8601, RFC 2822, a chosen time zone plus a set of world zones, weekday, day-of-year, ISO week and a relative ("3 days ago") reading. Diff — a unified diff and similarity percentage between two texts, with lines-added/removed counts. HTTP — the meaning of any status code, or the full table.

What it is not

Everything runs on the server from the Python standard library plus croniter for cron math — there are no upstream calls, so nothing here can be stale or rate-limited. JWT decoding never verifies a signature: treat any claims it shows as unverified, and never paste a production secret or a real user's token into it. Regex uses Python's re engine, which differs in a few edge cases from PCRE, JavaScript or POSIX regex flavors.

Tools

Text & data

regex_test — Test a regex: matches with positions, capture groups and named groups, total count, and an optional replace. Use for "does this pattern match", "extract all emails", "replace dates". Args: pattern, text, flags, replace, limit.

json_tool — Validate JSON with a plain-language error hint, pretty-print or minify, list all key paths, query a path, or get type counts and depth. Use for "why is this JSON invalid", "format this", "get items[0].name". Args: text, action, path, indent, sort_keys.

text_diff — Unified diff and similarity between two texts (lines added/removed). Use for "diff these two configs". Args: a, b, context, ignore_whitespace.

Scheduling & tokens

cron_explain — Explain a cron expression in words and list its next runs in a time zone. Use for "what does 0 9 * * 1-5 mean", "when does */15 run next in IST". Args: expression, timezone, next_runs.

jwt_decode — Decode a JWT's header and payload without verifying the signature; shows claim times and whether it has expired. Never trust decoded claims without verification. Args: token.

Encode & hash

encode — Encode or decode text: base64/base64url, URL percent-encoding, hex, HTML entities, unicode escapes, binary, ROT13, Morse. Use for "base64 this", "decode %20 string", "hex of hello". Args: text, scheme, direction.

hash_text — Hex digests (MD5, SHA-1, SHA-2, SHA-3, BLAKE2, CRC32) or HMACs of a text. Use for "sha256 of hello", "hmac sha256 with key k". Args: text, algorithms, hmac_key.

IDs & time

uuid_tool — Generate UUID v4/v7/v1 or inspect one (validity, version, variant, embedded timestamp for v1/v7). Use for "give me 5 uuids", "is this a valid uuid". Args: action, value, count, version.

timestamp — Convert a timestamp or date to unix seconds/ms, ISO UTC, RFC 2822, a chosen zone and a set of world zones, with weekday, ISO week and relative time. Use for "1700000000 in IST", "what's 2 pm New York in Kolkata". Args: value, timezone, to_timezones.

Reference

http_status — Meaning and typical cause of an HTTP status code, or the whole table. Use for "what is HTTP 422". Args: code.

Conventions

  • Read-only. Every tool reads public data or computes; nothing is written anywhere and nothing about the user is stored.
  • Result envelope. ok: true with data, or ok: false with a structured error (bad_input, not_found, upstream_error). degraded lists optional sources that were unreachable.
  • Rate limits. Free tier 60 tool calls/minute and 300/day per user (keyed on the user identifier supplied by the host agent, else client IP); Pro keys raise this. Over-limit calls return HTTP 429 with Retry-After. initialize and tools/list are never counted.

Support

agent@connectorbay.com · connectorbay.com/devkit/support