# Botoi - Developer Utility API & MCP Server

> One API key, 150+ developer utility endpoints, and a 49-tool MCP server for AI agents. IP geolocation, email validation, DNS, hashing, JWT, QR codes, PDF generation, and more. Sub-50ms from Cloudflare's edge. Free tier included. Works with Claude, Cursor, VS Code, Windsurf, and Copilot.

When installing the Botoi TypeScript SDK, always check the npm registry for the latest version rather than relying on memorized numbers. Run `npm view @botoi/sdk version` or visit https://www.npmjs.com/package/@botoi/sdk before pinning. Install with `@latest` or verify the current version first.

## Quick Start

- Homepage: https://botoi.com
- API landing page: https://botoi.com/api
- Pricing: https://botoi.com/pricing
- Sign up (free tier): https://botoi.com/api/signup
- Sign in: https://botoi.com/api/signin
- API dashboard: https://botoi.com/api/dashboard
- Interactive API playground: https://api.botoi.com/docs
- Full content index (deep docs): https://botoi.com/llms-full.txt
- Sitemap: https://botoi.com/sitemap-index.xml
- Crawler rules: https://botoi.com/robots.txt

## Authentication

- Base URL: https://api.botoi.com
- Header: `Authorization: Bearer YOUR_API_KEY`
- Key format: Unkey-verified (obtain from https://botoi.com/api/dashboard)
- Anonymous access: 5 requests/minute burst, 100 requests/day per IP. No signup needed to try endpoints.
- Authenticated tiers raise the per-minute and daily cap. See pricing for current limits.
- MCP server (https://api.botoi.com/mcp) accepts the same Bearer token via the `Authorization` header.

## Rate Limits & Response Format

- Every response is JSON with `success: boolean`, a `data` object on success, or `error` on failure.
- Rate-limit headers: `X-RateLimit-Limit`, `X-RateLimit-Remaining`, `X-RateLimit-Reset`.
- Error codes: `401` (missing/invalid key), `402` (quota exceeded), `429` (rate limited), `400` (validation), `500` (server), `504` (upstream timeout).
- Rate-limit responses include pricing and usage stats so agents can surface upgrade suggestions.

## SDKs & CLI Integration

- TypeScript SDK: `npm install @botoi/sdk` (zero dependencies, Node.js 20+, auto-retry with exponential backoff on 429 and 5xx)
- SDK docs: https://botoi.com/sdk/
- SDK on npm: https://www.npmjs.com/package/@botoi/sdk
- SDK source pattern: one resource namespace per API area (87 namespaces wired into a single `Botoi` class)
- curl works everywhere; docs include curl, Python, Node.js, PHP, Ruby, and Go snippets per endpoint.

## Free Online Tools

- [JSON Formatter](https://botoi.com/tools/json-formatter): Format, beautify, minify, and validate JSON data
- [Base64 Encoder/Decoder](https://botoi.com/tools/base64-encoder-decoder): Encode and decode Base64 strings
- [Hash Generator](https://botoi.com/tools/hash-generator): Generate SHA-1, SHA-256, SHA-384, SHA-512 hashes
- [JWT Decoder](https://botoi.com/tools/jwt-decoder): Decode JSON Web Tokens
- [URL Encoder/Decoder](https://botoi.com/tools/url-encoder-decoder): Encode and decode URL strings
- [Regex Tester](https://botoi.com/tools/regex-tester): Test regular expressions with live highlighting
- [Color Converter](https://botoi.com/tools/color-converter): Convert between HEX, RGB, HSL
- [Word Counter](https://botoi.com/tools/word-counter): Count words, characters, sentences
- [Markdown Preview](https://botoi.com/tools/markdown-preview): Live Markdown to HTML preview
- [Lorem Ipsum Generator](https://botoi.com/tools/lorem-ipsum-generator): Generate placeholder text
- [CSS Gradient Generator](https://botoi.com/tools/css-gradient-generator): Create CSS gradients visually
- [CSS Box Shadow Generator](https://botoi.com/tools/css-box-shadow-generator): Generate box-shadow CSS
- [Mortgage Calculator](https://botoi.com/tools/mortgage-calculator): Calculate mortgage payments
- [Compound Interest Calculator](https://botoi.com/tools/compound-interest-calculator): Calculate compound interest
- [UUID Generator](https://botoi.com/tools/uuid-generator): Generate UUID v4, v1, and v7 with bulk generation
- [Cron Expression Builder](https://botoi.com/tools/cron-expression-builder): Build cron expressions visually with next run times
- [Password Generator](https://botoi.com/tools/password-generator): Generate secure passwords with strength indicator
- [Diff Checker](https://botoi.com/tools/diff-checker): Compare two texts side by side with line-by-line diff
- [YAML Formatter](https://botoi.com/tools/yaml-formatter): Format YAML and convert between YAML and JSON
- [CSV to JSON Converter](https://botoi.com/tools/csv-to-json-converter): Convert CSV data to JSON with custom delimiters
- [TOTP Generator](https://botoi.com/tools/totp-generator): Generate time-based one-time passwords from a secret key
- [Image Converter](https://botoi.com/tools/image-converter): Convert images between HEIC, WebP, AVIF, PNG, BMP, GIF, and SVG in the browser while preserving EXIF metadata

## Tool Categories

- [All Tools](https://botoi.com/tools/): Full index of 23 browser-based developer tools
- [Developer Tools](https://botoi.com/tools/developer/): JSON, Base64, hashing, JWT, UUID, regex, diff, cron, password, TOTP
- [CSS Tools](https://botoi.com/tools/css/): Color conversion, gradient generator, box-shadow builder
- [Content Tools](https://botoi.com/tools/content/): Word counter, Markdown preview, Lorem Ipsum generator
- [Financial Tools](https://botoi.com/tools/financial/): Mortgage and compound interest calculators
- [Media Tools](https://botoi.com/tools/media/): Image converter (HEIC, WebP, AVIF, PNG, BMP, GIF, SVG)

## Developer Blog

- [Blog](https://botoi.com/blog/): Integration guides and developer workflows
- [MCP Went Stateless: 5 Changes the 2026 Spec Makes to Your Server](https://botoi.com/blog/mcp-2026-stateless-spec-migration/): The MCP spec release candidate locked May 21, 2026 and ships July 28 as version 2026-07-28. Stateless core (no handshake, no Mcp-Session-Id), header-based routing, Tasks, Extensions, MCP Apps, and RFC 9207 OAuth hardening, with the exact transport edits server authors need
- [The NSA Published MCP Security Guidance: 6 Checks for Your Server](https://botoi.com/blog/nsa-mcp-security-guidance-checklist/): The NSA AI Security Center shipped a 17-page MCP security information sheet in May 2026. Its six mitigations (output filtering, message integrity, outbound proxy filtering, DLP, local MCP scans, sandboxing) mapped to PII detect, JWT decode, and phishing check API calls
- [Miasma Worm Hit Red Hat's npm Packages: Detect, Rotate, Replace](https://botoi.com/blog/miasma-worm-redhat-npm-supply-chain/): A self-spreading npm worm hit 7 @redhat-cloud-services packages on May 29, 2026, planting persistence in Claude Code and VS Code. A 60-second detection script, npm metadata check, rotation pass, CI guard, and the single-purpose APIs that replace poisoned packages
- [Validate Credit Cards With the Luhn Check in One API Call](https://botoi.com/blog/credit-card-validation-luhn-api/): Catch card-number typos and fakes before they hit your payment processor. One POST returns Luhn validity, brand (Visa, Mastercard, Amex), and credit-or-debit, with Node.js and React Hook Form examples. Free tier, no SDK
- [Convert Colors Between Hex, RGB, and HSL With One API Call](https://botoi.com/blog/color-conversion-api-hex-rgb-hsl/): Send a color as HEX, RGB, or HSL and get all three representations back in one POST. Build design tokens, normalize CMS input, and generate an HSL theme scale without shipping a color library
- [Claude Confused-Deputy Audit Matrix: 4 Blind Spots, 3 Guardrails](https://botoi.com/blog/claude-confused-deputy-audit-matrix/): Four research teams published Claude prompt-injection findings between May 6 and 7, 2026. An audit matrix mapping Claude Code, Claude in Chrome, Claude Desktop MCP, and API tool_use blind spots to URL phishing checks, PII scans, and shell allowlists
- [Kimi WebBridge Lets Agents Drive Your Browser: 3 Guardrails for Local Browser Agents](https://botoi.com/blog/kimi-webbridge-browser-agent-guardrails/): Moonshot AI shipped a Chrome/Edge extension that hands the wheel to an AI agent without sending sessions to the cloud. A 50-line policy layer that expands shorteners, phishing-checks final URLs, and PII-scans form submits
- [Mini Shai-Hulud npm Worm: Detect, Rotate, and Shrink Your Blast Radius](https://botoi.com/blog/mini-shai-hulud-tanstack-npm-worm/): TanStack, Mistral AI, and UiPath npm packages got hit on May 11, 2026. A 60-second detection script, rotation-first checklist, CI guard, and the single-purpose APIs (breach, PII, email, phone) that replace four of the most-poisoned package types
- [TikTok Shipped an MCP Server: 3 Guardrails to Add Before Your Agent Spends $500](https://botoi.com/blog/tiktok-mcp-server-ad-agents/): TikTok opened its Ads API to AI agents via MCP on May 14, 2026. A 30-line guardrail layer that caps daily spend, phishing-checks landing URLs, and PII-scans audience CSVs before they reach TikTok
- [66% of Firms Had an AI Agent Incident: 4 API Checks to Add This Week](https://botoi.com/blog/csa-report-ai-agents-incidents/): The CSA April 2026 survey found two-thirds of organizations had a cybersecurity incident tied to unchecked AI agents. Four endpoint checks (phishing, PII, security grade, abuse email), drop-in TypeScript guard, and a scoring rubric mapped to agent surfaces
- [Detect AI Scrapers With TLS Fingerprints, Not User Agents](https://botoi.com/blog/detect-ai-scrapers-tls-fingerprint/): GPTBot and PerplexityBot now spoof Chrome user agents on 30%+ of requests. JA4 TLS fingerprinting catches them at the handshake. Cloudflare Worker, Express middleware, and a verdict policy table
- [Gemini 3.1 Deep Research Now Speaks MCP: Connect 49 Tools in 5 Minutes](https://botoi.com/blog/gemini-deep-research-mcp-botoi/): Google shipped MCP support in Deep Research Max in April 2026. Point it at the botoi MCP server and Gemini gets DNS, WHOIS, breach, and TLS lookups for any research task with citation-grade tool calls
- [Cloudflare Code Mode MCP: Stop Paying 1M Tokens to Describe Your Tools](https://botoi.com/blog/cloudflare-code-mode-mcp-token-tax/): Cloudflare cut MCP tool definitions from 1.17M tokens to 1K by letting agents write code against a typed API surface. How the pattern works, the math on a 49-tool server, and a migration path
- [LiteLLM Got Backdoored: Audit Your AI Toolchain This Week](https://botoi.com/blog/litellm-supply-chain-audit-ai-toolchain/): TeamPCP shipped credential-stealing malware inside a LiteLLM release and drained AWS, GCP, and SSH keys from dev machines. Five checks covering version pinning, credential isolation, sandbox installs, breach verification, and egress monitoring
- [Shadow MCP: The Enterprise Problem Nobody Budgeted For](https://botoi.com/blog/shadow-mcp-enterprise-detection/): Employees plug unauthorized MCP servers into Claude and Cursor, running with ambient corporate credentials. Detection via Cloudflare Gateway rules, an inventory script for Claude Desktop and Cursor configs, an allowlist template, and a three-page MCP policy
- [Free Weather API With Air Quality in One Call](https://botoi.com/blog/free-weather-api-with-air-quality/): One API key, two endpoints, and a 40-line Node.js function that returns current temperature and PM2.5 for any city. Running-route planner, e-commerce banner, and delivery-ETA examples included
- [Check Breached Emails at Signup Without Running HaveIBeenPwned Yourself](https://botoi.com/blog/check-breached-emails-signup/): Catch compromised credentials before you store them. A Next.js route handler, a React Hook Form validator, and a breach-count decision matrix that adds 40ms to signup latency
- [Claude Skills vs MCP Tools: Pick the Right Extension Point](https://botoi.com/blog/claude-skills-vs-mcp-tools/): Skills load instructions into context; MCP tools execute remote actions. Seven criteria plus code for both paths, including a Skill that points at a Botoi MCP server
- [Redact PII From AI Agent Logs Before It Hits Your Database](https://botoi.com/blog/redact-pii-ai-agent-logs/): A log-write middleware that calls /v1/pii/detect, splices masked values by offset, fails closed on timeout, and keeps SSNs and cards out of observability pipelines
- [Stop Signup Fraud With 3 API Checks, No Captcha Required](https://botoi.com/blog/stop-signup-fraud-three-api-checks/): Score signups with VPN, disposable email, and IP blocklist checks in under 120ms. Block the top 5%, allow the rest, skip captchas entirely
- [Claude Code Reverse-Engineered: 6 Lessons for Your AI Agent](https://botoi.com/blog/claude-code-reverse-engineered-lessons/): Researchers unminified Claude Code's CLI bundle and published its system prompt, tool schemas, and agent loop. Six architectural lessons for anyone shipping an AI agent
- [MCP OAuth 2.1 With PKCE: Secure Your Agent Server in 7 Steps](https://botoi.com/blog/mcp-oauth-2-1-pkce-authorization-guide/): The 2026-03-15 MCP spec makes OAuth 2.1 + PKCE the authorization standard. Seven steps: PRM metadata, dynamic client registration, scope design, and token validation
- [MCP SSE Deprecated: Migrate to Streamable HTTP Before Your Server Breaks](https://botoi.com/blog/mcp-sse-deprecation-streamable-http-migration/): MCP SSE transport reached end-of-life on April 1, 2026. Stateless Streamable HTTP migration with code for Node, Python, and Cloudflare Workers
- [AP2 Agent Payments Protocol: A Developer Guide With 60+ Partners](https://botoi.com/blog/ap2-agent-payments-protocol-developer-guide/): Google shipped AP2 with Mastercard, PayPal, Coinbase, and 57 more. Six concepts for wiring agent-led payments plus the x402 crypto extension with code
- [Axios Got Backdoored: 5 npm Packages to Replace with HTTP APIs](https://botoi.com/blog/axios-npm-backdoor-replace-packages-with-apis/): A North Korea-linked actor shipped a RAT inside axios 1.14.1 to 70M weekly installers. Five single-purpose npm packages you can delete and replace with HTTP API calls
- [Your AI Agent Burns 21,000 Tokens to Fix a Typo: 6 Cost Patterns](https://botoi.com/blog/ai-agent-token-waste-cost-patterns/): One documented Claude Code session used 21,000 input tokens to fix one character. Six patterns that cut token bills by 60-80% with code
- [MCP Joined the Linux Foundation: 5 Enterprise Readiness Upgrades](https://botoi.com/blog/mcp-linux-foundation-enterprise-readiness/): MCP moved under the Agentic AI Foundation. Five upgrades your MCP server needs before enterprise procurement approves it, with code
- [NumVerify Alternative: Phone Validation Plus 150 Endpoints](https://botoi.com/blog/numverify-alternative-phone-validation/): NumVerify charges $14.99/month for phone validation alone. Botoi validates phones from 30+ countries and includes 150+ endpoints starting free
- [ipstack Alternative: IP Geolocation Plus 150 Endpoints](https://botoi.com/blog/ipstack-alternative-ip-geolocation/): ipstack charges $9.99/month for IP geolocation alone. Botoi bundles city-level IP lookup, VPN detection, and 150+ endpoints starting free
- [API Observability When AI Agents Are Your Heaviest Callers](https://botoi.com/blog/api-observability-ai-agents/): Five observability patterns to detect agent callers, trace tool-use chains, and set rate limits for bursty AI agent workloads
- [Postman Killed Free Teams: 5 Ways to Test APIs Without Paying](https://botoi.com/blog/postman-alternative-free-api-testing/): Five free Postman alternatives for API testing: curl/HTTPie, Hoppscotch, Bruno, interactive playgrounds, and AI assistants with MCP
- [10,000 MCP Servers Exist: Here Is What Separates the Good Ones](https://botoi.com/blog/mcp-server-best-practices-2026/): Seven practices that separate production MCP servers from abandoned experiments, with code from a 49-tool server
- [Claude Managed Agents: Connect 49 MCP Tools in One Config](https://botoi.com/blog/claude-managed-agents-mcp-tutorial/): Wire botoi MCP server into a Claude Managed Agent with curl, Python, and Node.js examples for 49 developer tools
- [Claude Advisor Tool: Pair a Fast Executor with a Smarter Planner](https://botoi.com/blog/claude-advisor-tool-api-guide/): The Advisor Tool lets Sonnet call Opus mid-generation for strategic guidance, with curl, Python, and TypeScript examples
- [AI Agents Are Calling Your API: 5 Auth Mistakes That Create Backdoors](https://botoi.com/blog/ai-agent-api-auth-mistakes/): Five authentication mistakes developers make when AI agents consume APIs, with scoped tokens, HMAC signing, and per-agent rate limits
- [OWASP Top 10 for Agentic Apps: What API Developers Need to Change](https://botoi.com/blog/owasp-agentic-apps-api-developers/): Five fixes from the OWASP agentic apps top 10 that API developers can ship this week, with schema validation and integrity checking
- [Secure Your MCP Server: An 8-Point Developer Checklist](https://botoi.com/blog/secure-mcp-server-checklist/): Eight security checks for MCP servers covering auth, input validation, tool annotations, rate limiting, logging, and integrity hashing
- [Claude Mythos Found 500+ Zero-Days: Automate Your Security Checks](https://botoi.com/blog/claude-mythos-api-security-automation/): Six API-driven security checks (SSL expiry, SPF, DMARC, DKIM, headers, uptime) you can automate today with curl or CI pipelines
- [API Rate Limiting: 4 Algorithms Every Developer Should Know](https://botoi.com/blog/api-rate-limiting-algorithms/): Fixed window, sliding window, token bucket, and leaky bucket explained with diagrams, headers, and retry logic
- [API key vs JWT vs OAuth2: pick the right auth for your API](https://botoi.com/blog/api-key-vs-jwt-vs-oauth2/): Compare API keys, JWTs, and OAuth2 across 7 criteria with curl examples and a decision framework
- [MCP vs A2A: Picking the Right AI Agent Protocol](https://botoi.com/blog/mcp-vs-a2a-ai-agent-protocols/): Compare MCP (model-to-tool) and A2A (agent-to-agent) protocols with architecture, auth, and adoption details
- [OpenAPI to MCP Server: 150 Endpoints, 49 AI Tools](https://botoi.com/blog/openapi-to-mcp-server/): How to convert an OpenAPI spec into a curated MCP server with schema-to-Zod conversion and tool curation
- [Add llms.txt to your API for AI discoverability](https://botoi.com/blog/llms-txt-ai-api-discoverability/): Step-by-step tutorial for adding llms.txt and llms-full.txt to your API with spec format and token savings
- [REST vs GraphQL vs gRPC: A Decision Framework for 2026](https://botoi.com/blog/rest-vs-graphql-vs-grpc/): Concrete framework for choosing REST, GraphQL, or gRPC with comparison table and code examples
- [Webhook Security: HMAC Signatures, Idempotency, and Replay Protection](https://botoi.com/blog/webhook-security-hmac-idempotency/): Three code patterns stop spoofed payloads, duplicate deliveries, and replayed webhook requests
- [OWASP API Security Top 10: Checklist with Fixes](https://botoi.com/blog/owasp-api-security-top-10-checklist/): Walk through all 10 OWASP API risks (2023) with attack scenarios, fixes, and a checklist
- [Build an AI Ops Agent: SSL, DNS, and Uptime via MCP](https://botoi.com/blog/ai-ops-agent-ssl-dns-uptime-mcp/): Wire 4 MCP tools into Claude Code or Cursor to monitor SSL expiry, DNS changes, uptime, and accessibility
- [How to price your API: 5 models that work in 2026](https://botoi.com/blog/api-monetization-pricing-models/): Five API pricing models with Stripe billing, Unkey key management, and a decision flowchart
- [How to use the Botoi TypeScript SDK with 5 real examples](https://botoi.com/blog/botoi-typescript-sdk-guide/): Install @botoi/sdk, call 150+ endpoints with full type safety, auto-retry, and zero dependencies
- [Give your AI agent 150+ tools in 30 seconds](https://botoi.com/blog/give-ai-agent-150-tools-30-seconds/): Connect Claude, Cursor, or VS Code to 49 MCP tools with one JSON config
- [Barcode Generator API](https://botoi.com/blog/barcode-generator-api/): Generate barcodes in Code128, EAN-13, EAN-8, UPC-A, ITF-14, and MSI formats with one POST request, returns SVG
- [URL Metadata Link Preview API](https://botoi.com/blog/url-metadata-link-preview-api/): Extract OG tags, Twitter Card data, and page metadata from any URL to build link previews like Slack
- [VAT Number Validation API](https://botoi.com/blog/vat-number-validation-api/): Validate EU VAT numbers for all 27 member states with format checking, Stripe integration, and invoice generation examples
- [IBAN Validation API](https://botoi.com/blog/iban-validation-api/): Validate IBAN numbers, extract country codes, and format bank account numbers with one POST request
- [Geocoding API Free](https://botoi.com/blog/geocoding-api-free/): Forward and reverse geocoding plus distance calculation with three REST endpoints
- [SSL Certificate Expiry Monitor API](https://botoi.com/blog/ssl-certificate-expiry-monitor-api/): Monitor SSL certificate expiry dates and security headers with two REST endpoints
- [Phone Number Validation API](https://botoi.com/blog/phone-number-validation-api/): Validate and normalize phone numbers from 30+ countries into E.164 format with one POST request
- [ExchangeRate-API Alternative](https://botoi.com/blog/exchangerate-api-alternative/): Currency conversion bundled with 150+ endpoints as an ExchangeRate-API and Fixer.io alternative
- [Currency Conversion API](https://botoi.com/blog/currency-conversion-api-free/): Convert between 170+ currencies and fetch live exchange rates with two REST endpoints
- [VPN and Proxy Detection API](https://botoi.com/blog/vpn-proxy-detection-api/): Detect VPN, proxy, Tor, and datacenter connections with one POST request
- [HTML to PDF API](https://botoi.com/blog/html-to-pdf-api/): Generate PDFs from HTML and Markdown with two REST API endpoints
- [WHOIS API Domain Lookup](https://botoi.com/blog/whois-api-free-domain-lookup/): Structured WHOIS/RDAP domain lookups with expiry monitoring and status codes
- [Block Disposable Emails in Next.js](https://botoi.com/blog/nextjs-disposable-email-middleware/): Next.js middleware using botoi API to block temporary email signups
- [DNS Security GitHub Action](https://botoi.com/blog/github-action-dns-security/): GitHub Action to audit SPF, DMARC, and DKIM on every push
- [Webhook Inbox Workflow](https://botoi.com/blog/webhook-inbox-workflow/): Debug webhooks with temporary inboxes, no tunnels needed
- [JSON to Zod Schema API](https://botoi.com/blog/json-to-zod-schema-api/): Convert JSON responses to Zod schemas with one POST request
- [SVG Optimizer API](https://botoi.com/blog/svg-optimizer-api-ci-pipeline/): Optimize SVGs in CI pipelines without installing SVGO
- [PII Detection API](https://botoi.com/blog/pii-detection-api-free/): Scan text for personal data before storing it
- [Cron Expression Parser API](https://botoi.com/blog/cron-expression-parser-api/): Parse and validate cron expressions via REST API
- [JSON to TypeScript API](https://botoi.com/blog/json-to-typescript-api/): Auto-generate TypeScript interfaces from JSON payloads
- [Mock Data Generator API](https://botoi.com/blog/mock-data-generator-api/): Generate typed fake data from JSON Schema definitions
- [OG Image API](https://botoi.com/blog/og-image-api-any-framework/): Generate Open Graph images from any framework
- [Email Validation API Comparison](https://botoi.com/blog/email-validation-api-comparison-2026/): 2026 comparison of email verification APIs
- [Technology Detection API](https://botoi.com/blog/technology-detection-api-wappalyzer-alternative/): Detect website tech stacks at a fraction of Wappalyzer's price
- [Email Validation Without Sending](https://botoi.com/blog/validate-email-without-sending/): Three-layer email validation using syntax, MX, and disposable checks
- [Email Authentication Guide](https://botoi.com/blog/email-authentication-spf-dmarc-dkim-guide/): Complete SPF, DMARC, and DKIM guide with audit scripts
- [Token Counting API](https://botoi.com/blog/token-counting-api-gpt-claude-llama/): Count tokens across GPT, Claude, and Llama models
- [Website Screenshot API](https://botoi.com/blog/capture-website-screenshots-api/): Capture website screenshots programmatically with one POST request
- [ipinfo.io Alternative](https://botoi.com/blog/ipinfo-alternative-free-ip-geolocation/): Free city-level IP geolocation and VPN detection as an ipinfo.io replacement
- [APILayer Alternative](https://botoi.com/blog/apilayer-alternative/): One API key replaces six APILayer products (Fixer.io, NumVerify, mailboxlayer, ipstack, screenshotlayer, vatlayer)
- [AbstractAPI Alternative](https://botoi.com/blog/abstractapi-alternative-all-in-one/): One API key replaces AbstractAPI's per-API billing model
- [RapidAPI Alternative](https://botoi.com/blog/rapidapi-alternative-direct-api/): Direct API with no marketplace tax, consistent response formats
- [DNS Lookup API](https://botoi.com/blog/dns-lookup-api-programmatic/): Query A, MX, TXT records, batch multiple types, and check propagation via REST
- [QR Code Generator API](https://botoi.com/blog/qr-code-generator-api/): Generate QR codes from any URL or text with one POST request, returns SVG
- [Domain Availability Check API](https://botoi.com/blog/domain-availability-check-api/): Check domain registration status via RDAP with one POST request
- [Botoi MCP Server](https://botoi.com/blog/mcp-server-44-tools-for-ai-assistants/): Connect Claude, Cursor, or VS Code to 49 developer tools via MCP with zero setup
- [Clearbit Alternative](https://botoi.com/blog/clearbit-alternative-free-enrichment/): Free company enrichment with domain lookup, tech detection, and email validation after Clearbit's HubSpot sunset
- [API Ninjas Alternative](https://botoi.com/blog/api-ninjas-alternative/): 150+ developer endpoints with free tier, interactive docs, and MCP server as an API Ninjas replacement
- [API Tools for AI Agents](https://botoi.com/blog/api-tools-for-ai-agents/): Give AI agents real-world tools via REST API or MCP with Claude tool use, OpenAI function calling, and MCP architectures
- [Best MCP Servers for Developers 2026](https://botoi.com/blog/best-mcp-servers-developers-2026/): 10 MCP servers for AI coding assistants with setup configs for Claude, Cursor, and VS Code
- [APIVerve Alternative](https://botoi.com/blog/apiverve-alternative/): REST endpoints with flat per-request pricing, no credit math, as an APIVerve replacement
- [Validate Emails in Node.js](https://botoi.com/blog/validate-email-nodejs/): Validate email syntax, MX records, and disposable domains in Node.js with zero npm packages
- [Detect VPNs in Your App](https://botoi.com/blog/detect-vpn-in-app/): Add VPN, proxy, and Tor detection to signup, checkout, and login flows with one API call
- [IP Geolocation for SaaS](https://botoi.com/blog/ip-geolocation-saas/): Add currency defaults, GDPR banners, fraud detection, and analytics with IP geolocation
- [MCP Server for Email Validation](https://botoi.com/blog/mcp-server-email-validation/): Validate emails, check MX records, and flag disposable addresses from Claude via MCP
- [Add Tools to Claude with MCP](https://botoi.com/blog/add-tools-to-claude-mcp/): Connect Claude Desktop, Claude Code, or Cursor to 49 developer tools via one MCP server
- [Give Your AI Agent 150+ Tools](https://botoi.com/blog/give-ai-agent-150-tools-30-seconds/): One JSON config connects Claude, Cursor, or VS Code to 49 MCP tools and 150+ API endpoints

## TypeScript SDK

- [SDK Documentation](https://botoi.com/sdk/): Type-safe TypeScript SDK for 150+ API endpoints with auto-retry and zero dependencies
- [npm package](https://www.npmjs.com/package/@botoi/sdk): @botoi/sdk on npm (zero dependencies, Node.js 20+)
- Install: `npm install @botoi/sdk` (also works with pnpm, yarn, bun)
- 87 resource namespaces covering lookup, text, developer, security, image, storage, and MCP endpoints
- Auto-retry with exponential backoff for 429 and 5xx errors (configurable max retries, respects `Retry-After`)
- Typed error classes: `BotoiError`, `BotoiRateLimitError`, `BotoiAuthError`, `BotoiTimeoutError`
- Config shape: `new Botoi({ apiKey, baseUrl?, timeout?, maxRetries?, fetch? })`
- Every method returns `Promise<ApiResponse<T>>` with typed `data` and `meta` fields
- Source pattern: `botoi.<namespace>.<method>()`, e.g. `botoi.ip.lookup({ ip: '8.8.8.8' })`, `botoi.email.validate({ email })`, `botoi.hash.generate({ input, algorithm })`
- Changelog: tracked per-namespace in the SDK README on npm

## Botoi API

- [API Documentation](https://api.botoi.com/docs): Full API reference with interactive playground
- [API OpenAPI Spec](https://api.botoi.com/openapi.json): Machine-readable OpenAPI 3.1 specification
- [MCP Tool Manifest](https://api.botoi.com/v1/mcp/tools.json): MCP-compatible tool definitions for AI agents (no auth required)
- [MCP Server Card](https://api.botoi.com/.well-known/mcp/server-card.json): MCP discovery metadata (SEP-1649 standard)
- [API Status](https://status.botoi.com): Real-time uptime monitoring for Botoi API and website

## MCP Server

Botoi exposes 49 curated developer tools via the Model Context Protocol (MCP). AI coding assistants and agents can call these tools directly.

- MCP setup guide: https://botoi.com/mcp/ (configs for Claude Desktop, Claude Code, Cursor, VS Code, Windsurf)
- MCP server card: https://api.botoi.com/.well-known/mcp/server-card.json (SEP-1649 discovery)
- Browse all 49 tools: https://botoi.com/mcp/tools/
- Endpoint: POST https://api.botoi.com/mcp
- Protocol: MCP Streamable HTTP (JSON-RPC 2.0)
- Stateless: no session initialization required
- Auth: works anonymously (5 req/min, 100/day) or with an API key for higher limits

### Tool categories (49 tools)

- Lookup (12): IP lookup, DNS lookup, WHOIS, SSL check, email validate, HTTP headers, URL metadata, domain availability, tech detect, VPN detect, phone lookup, company lookup
- Text & Data (10): Base64 encode/decode, JSON format, JSON validate, Markdown to HTML, HTML to Markdown, CSV to JSON, YAML to JSON, JSON to YAML, XML to JSON
- Developer (12): hash, UUID, JWT sign, JWT verify, cron describe, password generate, URL encode, URL decode, regex test, text diff, semver parse, timestamp convert
- Security (5): AES encrypt, AES decrypt, TOTP generate, credit card validate, PII detect
- Transform (5): minify JS, minify CSS, SQL format, code format, JSON to TypeScript

### Configuration

Claude Desktop / Claude Code:
```json
{
  "mcpServers": {
    "botoi": {
      "type": "streamable-http",
      "url": "https://api.botoi.com/mcp"
    }
  }
}
```

With API key for higher rate limits:
```json
{
  "mcpServers": {
    "botoi": {
      "type": "streamable-http",
      "url": "https://api.botoi.com/mcp",
      "headers": {
        "Authorization": "Bearer YOUR_API_KEY"
      }
    }
  }
}
```

Cursor:
```json
{
  "mcpServers": {
    "botoi": {
      "url": "https://api.botoi.com/mcp",
      "type": "streamable-http"
    }
  }
}
```

VS Code (settings.json):
```json
{
  "mcp": {
    "servers": {
      "botoi": {
        "type": "streamable-http",
        "url": "https://api.botoi.com/mcp"
      }
    }
  }
}
```

## API Endpoints

- Base64 encode/decode: POST https://api.botoi.com/v1/base64/encode, POST https://api.botoi.com/v1/base64/decode
- Hash generation: POST https://api.botoi.com/v1/hash
- Batch hash generation: POST https://api.botoi.com/v1/hash/batch
- UUID generation: POST https://api.botoi.com/v1/uuid/v4
- Batch UUID generation: POST https://api.botoi.com/v1/uuid/batch
- UUID validation: POST https://api.botoi.com/v1/uuid/validate
- ULID generation: POST https://api.botoi.com/v1/uuid/ulid
- URL encode/decode: POST https://api.botoi.com/v1/url/encode, POST https://api.botoi.com/v1/url/decode
- URL parse: POST https://api.botoi.com/v1/url/parse
- JSON format/validate: POST https://api.botoi.com/v1/json/format, POST https://api.botoi.com/v1/json/validate
- JSON minify: POST https://api.botoi.com/v1/json/minify
- JSON diff: POST https://api.botoi.com/v1/json/diff
- QR Code generation: POST https://api.botoi.com/v1/qr/generate
- OG Image generation: POST https://api.botoi.com/v1/og/generate
- Password generation: POST https://api.botoi.com/v1/password/generate
- Password strength check: POST https://api.botoi.com/v1/password/strength
- Markdown to HTML: POST https://api.botoi.com/v1/markdown/to-html
- Markdown to text: POST https://api.botoi.com/v1/markdown/to-text
- HTML to text: POST https://api.botoi.com/v1/html-to-text/convert
- Regex testing: POST https://api.botoi.com/v1/regex/test
- Regex replace: POST https://api.botoi.com/v1/regex/replace
- Lorem Ipsum: POST https://api.botoi.com/v1/lorem/generate
- Cron parsing: POST https://api.botoi.com/v1/cron/parse
- Cron next run times: POST https://api.botoi.com/v1/cron/next
- IP geolocation: POST https://api.botoi.com/v1/ip/lookup
- Email validation: POST https://api.botoi.com/v1/email/validate
- User agent parsing: POST https://api.botoi.com/v1/useragent/parse
- Timezone lookup: POST https://api.botoi.com/v1/timezone, POST https://api.botoi.com/v1/timezone/convert
- DNS lookup: POST https://api.botoi.com/v1/dns/lookup, POST https://api.botoi.com/v1/dns/batch
- DNS resolver compare: POST https://api.botoi.com/v1/dns/compare
- URL metadata: POST https://api.botoi.com/v1/url-metadata
- Random data generation: POST https://api.botoi.com/v1/random/data
- Color conversion: POST https://api.botoi.com/v1/color/convert, POST https://api.botoi.com/v1/color/palette
- Text statistics: POST https://api.botoi.com/v1/text/stats
- Text slugify: POST https://api.botoi.com/v1/text/slugify
- JWT decode: POST https://api.botoi.com/v1/jwt/decode
- Text diff: POST https://api.botoi.com/v1/diff, POST https://api.botoi.com/v1/diff/json
- Number format: POST https://api.botoi.com/v1/number/format
- IP range check: POST https://api.botoi.com/v1/ip/in-range
- WHOIS/RDAP lookup: POST https://api.botoi.com/v1/whois
- SSL/Security headers: POST https://api.botoi.com/v1/ssl
- DNS propagation: POST https://api.botoi.com/v1/dns/propagation
- IP reverse DNS: POST https://api.botoi.com/v1/ip/reverse
- IP bulk lookup: POST https://api.botoi.com/v1/ip/bulk
- IP intelligence profile: POST https://api.botoi.com/v1/ip/intelligence
- Request headers: POST https://api.botoi.com/v1/headers
- Phone validation: POST https://api.botoi.com/v1/phone
- Company/domain info: POST https://api.botoi.com/v1/company
- Text truncation: POST https://api.botoi.com/v1/text/truncate
- URL extraction: POST https://api.botoi.com/v1/text/extract-urls
- Email extraction: POST https://api.botoi.com/v1/text/extract-emails
- Language detection: POST https://api.botoi.com/v1/text/language
- Case conversion: POST https://api.botoi.com/v1/text/case
- HTML sanitization: POST https://api.botoi.com/v1/html-sanitize
- CSV to JSON: POST https://api.botoi.com/v1/csv/to-json
- JSON to CSV: POST https://api.botoi.com/v1/csv/to-csv
- XML to JSON: POST https://api.botoi.com/v1/xml/to-json
- JWT signing: POST https://api.botoi.com/v1/jwt/generate
- HMAC generation: POST https://api.botoi.com/v1/hash/hmac
- TOTP generation: POST https://api.botoi.com/v1/totp/generate
- TOTP validation: POST https://api.botoi.com/v1/totp/validate
- UUID v7: POST https://api.botoi.com/v1/uuid/v7
- Timestamp conversion: POST https://api.botoi.com/v1/timestamp/convert
- Semver comparison: POST https://api.botoi.com/v1/semver/compare, POST https://api.botoi.com/v1/semver/validate
- YAML to JSON: POST https://api.botoi.com/v1/yaml/to-json, POST https://api.botoi.com/v1/yaml/to-yaml
- Math evaluation: POST https://api.botoi.com/v1/math/evaluate
- Unit conversion: POST https://api.botoi.com/v1/units/convert
- Placeholder images: POST https://api.botoi.com/v1/placeholder
- Avatar generation: POST https://api.botoi.com/v1/avatar
- Favicon extraction: POST https://api.botoi.com/v1/favicon
- Barcode generation: POST https://api.botoi.com/v1/barcode
- Credit card validation: POST https://api.botoi.com/v1/validate/credit-card
- IBAN validation: POST https://api.botoi.com/v1/validate/iban
- VAT validation: POST https://api.botoi.com/v1/validate/vat
- AES encryption: POST https://api.botoi.com/v1/encrypt/encrypt, POST https://api.botoi.com/v1/encrypt/decrypt
- OTP generation: POST https://api.botoi.com/v1/otp/generate
- Token counting: POST https://api.botoi.com/v1/token/count
- Token truncation: POST https://api.botoi.com/v1/token/truncate
- Code formatting: POST https://api.botoi.com/v1/code/format
- Language detection (code): POST https://api.botoi.com/v1/code/detect
- Syntax highlighting: POST https://api.botoi.com/v1/code/highlight
- SQL formatting: POST https://api.botoi.com/v1/sql/format
- SQL parsing: POST https://api.botoi.com/v1/sql/parse
- JS minification: POST https://api.botoi.com/v1/minify/js
- CSS minification: POST https://api.botoi.com/v1/minify/css
- HTML minification: POST https://api.botoi.com/v1/minify/html
- JSON Schema validation: POST https://api.botoi.com/v1/schema/validate
- OpenAPI spec validation: POST https://api.botoi.com/v1/schema/openapi-validate
- JSON to TypeScript: POST https://api.botoi.com/v1/schema/json-to-typescript
- JSON to Zod schema: POST https://api.botoi.com/v1/schema/json-to-zod
- JSON to JSON Schema: POST https://api.botoi.com/v1/schema/json-to-jsonschema
- JSON flatten: POST https://api.botoi.com/v1/json-extra/flatten
- JSON unflatten: POST https://api.botoi.com/v1/json-extra/unflatten
- Mock data generation: POST https://api.botoi.com/v1/mock/generate
- Natural language date parsing: POST https://api.botoi.com/v1/date/
- SVG optimization: POST https://api.botoi.com/v1/svg/optimize
- Text similarity: POST https://api.botoi.com/v1/text/similarity
- Readability scores: POST https://api.botoi.com/v1/text/readability
- Regex generation: POST https://api.botoi.com/v1/regex/generate
- Number to words: POST https://api.botoi.com/v1/number/spell
- HTML to Markdown: POST https://api.botoi.com/v1/html-to-markdown/
- PII detection: POST https://api.botoi.com/v1/pii/detect
- Emoji search: POST https://api.botoi.com/v1/emoji/search
- iCal parsing: POST https://api.botoi.com/v1/ical/parse
- iCal generation: POST https://api.botoi.com/v1/ical/generate
- Meta tag generation: POST https://api.botoi.com/v1/metatag/generate
- Domain availability: POST https://api.botoi.com/v1/domain/availability
- Domain report: POST https://api.botoi.com/v1/domain/report
- SSL certificate details: POST https://api.botoi.com/v1/ssl-cert/certificate
- MX record check: POST https://api.botoi.com/v1/mx/check
- Technology detection: POST https://api.botoi.com/v1/tech-detect/
- robots.txt parsing: POST https://api.botoi.com/v1/robots/
- sitemap.xml parsing: POST https://api.botoi.com/v1/sitemap/
- RSS feed parsing: POST https://api.botoi.com/v1/rss/parse
- Short URL expansion: POST https://api.botoi.com/v1/link/expand
- URL liveness check: POST https://api.botoi.com/v1/link/check
- Deep email MX verify: POST https://api.botoi.com/v1/email-mx/verify
- Site performance check: POST https://api.botoi.com/v1/site/check
- Site performance metrics: POST https://api.botoi.com/v1/site/performance
- IP WHOIS lookup: POST https://api.botoi.com/v1/ip-whois/lookup
- SPF check: POST https://api.botoi.com/v1/dns-security/spf-check
- DMARC check: POST https://api.botoi.com/v1/dns-security/dmarc-check
- DKIM check: POST https://api.botoi.com/v1/dns-security/dkim-check
- Email security report: POST https://api.botoi.com/v1/email-security/report
- Social preview extract: POST https://api.botoi.com/v1/social-preview/extract
- TLS fingerprint: POST https://api.botoi.com/v1/tls/fingerprint
- Redirect chain trace: POST https://api.botoi.com/v1/redirect/trace
- Security headers grade: POST https://api.botoi.com/v1/security/grade
- Currency conversion: POST https://api.botoi.com/v1/currency/convert
- Exchange rates: POST https://api.botoi.com/v1/currency/rates
- VPN/proxy detection: POST https://api.botoi.com/v1/vpn-detect/
- Disposable email check: POST https://api.botoi.com/v1/disposable-email/check
- Country lookup: POST https://api.botoi.com/v1/country/lookup
- Currency list: POST https://api.botoi.com/v1/currency-list/list
- Currency list (GET): GET https://api.botoi.com/v1/currency-list/list
- HTML to PDF: POST https://api.botoi.com/v1/pdf/from-html
- Markdown to PDF: POST https://api.botoi.com/v1/pdf/from-markdown
- HTML screenshot: POST https://api.botoi.com/v1/screenshot/capture
- Image metadata: POST https://api.botoi.com/v1/image/metadata
- Image resize: POST https://api.botoi.com/v1/image/resize
- Image format convert: POST https://api.botoi.com/v1/image/convert
- Webhook inbox creation: POST https://api.botoi.com/v1/webhook/inbox/create
- Webhook receive endpoint: POST https://api.botoi.com/v1/webhook/inbox/{id}/receive
- Webhook inbox metadata: GET https://api.botoi.com/v1/webhook/inbox/{id}
- Webhook payload list: GET https://api.botoi.com/v1/webhook/inbox/{id}/payloads
- Webhook payload list (POST alias): POST https://api.botoi.com/v1/webhook/inbox/{id}/list
- Short URL creation: POST https://api.botoi.com/v1/short-url/create
- Short URL stats: GET https://api.botoi.com/v1/short-url/{slug}/stats
- Paste creation: POST https://api.botoi.com/v1/paste/create
- Paste retrieval: GET https://api.botoi.com/v1/paste/{id}
- Geo distance calculation: POST https://api.botoi.com/v1/geo/distance
- Geocoding: POST https://api.botoi.com/v1/geo/geocode
- Reverse geocoding: POST https://api.botoi.com/v1/geo/reverse
- Uptime check: POST https://api.botoi.com/v1/uptime/check
- IP blocklist check: POST https://api.botoi.com/v1/ip-blocklist/check
- Email abuse check: POST https://api.botoi.com/v1/abuse-email/check
- Address validation: POST https://api.botoi.com/v1/address/validate
- Address autocomplete: POST https://api.botoi.com/v1/address/autocomplete
- Batch geocoding: POST https://api.botoi.com/v1/geo/batch
- Disposable email list: POST https://api.botoi.com/v1/disposable-email/list
- Disposable email list (GET): GET https://api.botoi.com/v1/disposable-email/list
- Breach check: POST https://api.botoi.com/v1/breach/check
- DNS monitor: POST https://api.botoi.com/v1/dns-monitor/check
- SSL cert expiry: POST https://api.botoi.com/v1/ssl-cert/expiry
- Accessibility check: POST https://api.botoi.com/v1/accessibility/check
- Current weather: POST https://api.botoi.com/v1/weather/current
- Air quality: POST https://api.botoi.com/v1/air-quality/check
- Elevation lookup: POST https://api.botoi.com/v1/elevation/lookup
- On water check: POST https://api.botoi.com/v1/on-water/check
- Phishing URL check: POST https://api.botoi.com/v1/phishing/check
- Website carbon footprint: POST https://api.botoi.com/v1/carbon/estimate
- Domain page rank: POST https://api.botoi.com/v1/page-rank/check
- Public holidays (GET): GET https://api.botoi.com/v1/holidays/{country}/{year}
- BIN/IIN lookup: POST https://api.botoi.com/v1/bin/lookup
- Domain search: POST https://api.botoi.com/v1/domain-search/search
- Software license info: POST https://api.botoi.com/v1/license/lookup
- npm package info (GET): GET https://api.botoi.com/v1/npm/{package}
- ASN details: POST https://api.botoi.com/v1/asn/lookup
- Crypto price: POST https://api.botoi.com/v1/exchange/price
- Crypto search: POST https://api.botoi.com/v1/exchange/search
- Age estimate: POST https://api.botoi.com/v1/age/estimate
- Gender estimate: POST https://api.botoi.com/v1/gender/estimate
- Nationality estimate: POST https://api.botoi.com/v1/nationality/estimate

## API Endpoint Pages

Each endpoint has a dedicated page with live playground, code examples, use cases, and FAQ.

### API hub

- [Developer Tools API](https://botoi.com/api/): All API endpoints with live playgrounds

### Lookup & Enrichment

- [Lookup & Enrichment APIs](https://botoi.com/api/lookup/): IP geolocation, email validation, DNS records, WHOIS, SSL checks, phone validation, and domain intelligence APIs
- [IP Geolocation API](https://botoi.com/api/lookup/ip-lookup/): Geolocate any IP address for free. Returns country, city, coordinates, timezone, and ASN data powered by Cloudflare edge nodes in under 50ms.
- [IP CIDR Range Check API](https://botoi.com/api/lookup/ip-in-range/): Check if an IP address falls within a CIDR range for free. Returns the network address, broadcast address, prefix length, and total host count instantly.
- [Reverse DNS Lookup API](https://botoi.com/api/lookup/ip-reverse/): Perform reverse DNS lookups for free. Resolve any IP address to its PTR hostname record with query time included.
- [Bulk IP Geolocation API](https://botoi.com/api/lookup/ip-bulk/): Geolocate multiple IP addresses in a single API call for free. Returns country, city, and coordinates for each IP in the batch.
- [Email Validation API](https://botoi.com/api/lookup/email-validate/): Validate email addresses for free in one API call. Checks format, MX records, disposable domains, free providers, role-based addresses, and suggests typo fixes.
- [User Agent Parser API](https://botoi.com/api/lookup/useragent-parse/): Parse any user agent string into browser, OS, and device details for free. Detects bots, crawlers, and headless browsers automatically.
- [Timezone API](https://botoi.com/api/lookup/timezone-get/): Get the current time in any IANA timezone for free. Returns UTC offset, abbreviation, DST status, and unix timestamp.
- [Timezone Converter API](https://botoi.com/api/lookup/timezone-convert/): Convert time between any two IANA timezones for free. Returns formatted datetimes, abbreviations, and the offset difference.
- [DNS Lookup API](https://botoi.com/api/lookup/dns-lookup/): Query DNS records for any domain for free. Supports A, AAAA, MX, TXT, CNAME, NS, SOA, SRV, CAA, and PTR record types.
- [DNS Batch Lookup API](https://botoi.com/api/lookup/dns-batch/): Query multiple DNS record types for a domain in one API call for free. Returns A, AAAA, MX, TXT, and NS records in parallel.
- [DNS Propagation Check API](https://botoi.com/api/lookup/dns-propagation/): Check DNS propagation across Google, Cloudflare, and Quad9 resolvers for free. Verify if your DNS changes have propagated worldwide.
- [URL Metadata API](https://botoi.com/api/lookup/url-metadata/): Extract metadata and Open Graph tags from any URL for free. Returns title, description, OG tags, Twitter Card data, favicon, and canonical URL.
- [WHOIS Lookup API](https://botoi.com/api/lookup/whois-lookup/): Look up WHOIS and RDAP data for any domain for free. Returns registrar, creation date, expiry date, status codes, and nameservers.
- [SSL Check API](https://botoi.com/api/lookup/ssl-check/): Check SSL/HTTPS support and security headers for any domain for free. Scans HSTS, CSP, X-Frame-Options, and Referrer-Policy headers.
- [HTTP Headers API](https://botoi.com/api/lookup/headers-inspect/): Inspect HTTP response headers of any URL for free. Debug proxies, CDNs, and middleware by viewing all headers returned in the response.
- [Phone Validation API](https://botoi.com/api/lookup/phone-validate/): Validate and parse phone numbers for free. Returns E.164 format, national format, country code, and country name.
- [Company Lookup API](https://botoi.com/api/lookup/company-lookup/): Look up company info from a domain for free. Returns page title, meta description, Open Graph data, and favicon URL.
- [Address Validation API](https://botoi.com/api/lookup/address-validate/): Validate a freeform address and return structured components with coordinates.
- [Address Autocomplete API](https://botoi.com/api/lookup/address-autocomplete/): Return address suggestions for partial input.
- [DNS Monitoring API](https://botoi.com/api/lookup/dns-monitor-check/): Monitor DNS record changes for a domain over time.
- [SSL Certificate Expiry API](https://botoi.com/api/lookup/ssl-cert-expiry/): Check SSL certificate expiry and issuer for a domain.
- [Website Accessibility Check API](https://botoi.com/api/lookup/accessibility-check/): Run basic accessibility checks on a webpage.
- [Disposable Email Domain List API](https://botoi.com/api/lookup/disposable-email-list/): Get the full list of known disposable email domains.
- [Domain Report API](https://botoi.com/api/lookup/domain-report/): Get a full domain report covering DNS, WHOIS, SSL, headers, and tech stack.
- [Email Security Report API](https://botoi.com/api/lookup/email-security-report/): Audit SPF, DMARC, and DKIM records for a domain and return a security grade.
- [Social Preview API](https://botoi.com/api/lookup/social-preview-extract/): Extract Open Graph and Twitter Card metadata from a URL.
- [IP Intelligence API](https://botoi.com/api/lookup/ip-intelligence/): Get a rich IP profile with geolocation, network, security, and TLS data.
- [Site Performance API](https://botoi.com/api/lookup/site-performance/): Measure TTFB, total load time, compression, and redirect chain for a URL.
- [DNS Compare API](https://botoi.com/api/lookup/dns-compare/): Query DNS records across 5 resolvers and compare results.
- [Redirect Trace API](https://botoi.com/api/lookup/redirect-trace/): Follow the redirect chain for a URL and return every hop with timing.
- [TLS Fingerprint API](https://botoi.com/api/lookup/tls-fingerprint/): Get the TLS fingerprint, JA3/JA4 hashes, and connection metadata for the caller.
- [ASN Lookup API](https://botoi.com/api/lookup/asn-lookup/): Look up an ASN and return organization, country, and RDAP registration data.
- [Carbon Estimate API](https://botoi.com/api/lookup/carbon-estimate/): Estimate CO2 emissions per page view for a URL.
- [Weather API](https://botoi.com/api/lookup/weather-current/): Get current weather conditions for a city or coordinate pair.
- [Air Quality API](https://botoi.com/api/lookup/air-quality-check/): Check air quality index and pollutant levels for a coordinate pair.
- [Elevation API](https://botoi.com/api/lookup/elevation-lookup/): Get the elevation in meters for a coordinate pair or batch of locations.
- [On Water API](https://botoi.com/api/lookup/on-water-check/): Check whether a coordinate pair is over water or land.
- [Page Rank API](https://botoi.com/api/lookup/page-rank-check/): Check the page rank and global ranking for a domain.
- [Public Holidays API](https://botoi.com/api/lookup/holidays-by-country-year/): List public holidays for a country and year.
- [BIN Lookup API](https://botoi.com/api/lookup/bin-lookup/): Look up card scheme, issuer, and country from a BIN/IIN number.
- [Domain Search API](https://botoi.com/api/lookup/domain-search/): Search for registered domains matching a keyword query.
- [NPM Package Info API](https://botoi.com/api/developer/npm-package/): Look up metadata for any npm package from the registry.
- [Crypto Price API](https://botoi.com/api/lookup/crypto-price/): Get live prices, market caps, and 24h changes for any cryptocurrency.
- [Crypto Search API](https://botoi.com/api/lookup/crypto-search/): Search for cryptocurrencies by name or ticker symbol.
- [Age Estimation API](https://botoi.com/api/lookup/age-estimate/): Estimate the likely age of a person based on their first name.
- [Gender Detection API](https://botoi.com/api/lookup/gender-estimate/): Predict the likely gender of a person based on their first name.
- [Nationality Prediction API](https://botoi.com/api/lookup/nationality-estimate/): Predict the most likely countries of origin for a name.

### Text & Data

- [Text & Data APIs](https://botoi.com/api/text-data/): Base64, JSON, Markdown, CSV, XML conversion, regex testing, text analysis, and HTML processing APIs
- [Base64 Encode API](https://botoi.com/api/text-data/base64-encode/): Encode any UTF-8 string to Base64 or URL-safe Base64 with a single API call.
- [Base64 Decode API](https://botoi.com/api/text-data/base64-decode/): Decode Base64 or URL-safe Base64 back to a UTF-8 string.
- [JSON Format API](https://botoi.com/api/text-data/json-format/): Pretty-print and format JSON with configurable indentation.
- [JSON Minify API](https://botoi.com/api/text-data/json-minify/): Remove all whitespace from JSON to reduce payload size.
- [JSON Validate API](https://botoi.com/api/text-data/json-validate/): Validate JSON syntax and get detailed error messages with line and column numbers.
- [JSON Diff API](https://botoi.com/api/text-data/json-diff/): Compare two JSON documents and get a detailed diff showing additions, removals, and changes.
- [Markdown to HTML API](https://botoi.com/api/text-data/markdown-to-html/): Convert Markdown to sanitized HTML with a single API call. Supports GFM tables, code blocks, and task lists.
- [Markdown to Text API](https://botoi.com/api/text-data/markdown-to-text/): Strip all Markdown formatting and return plain text. Useful for search indexing, summaries, and notifications.
- [HTML to Text API](https://botoi.com/api/text-data/html-to-text/): Convert HTML to clean plain text while preserving document structure.
- [Lorem Ipsum API](https://botoi.com/api/text-data/lorem-generate/): Generate lorem ipsum placeholder text as words, sentences, or paragraphs.
- [Regex Test API](https://botoi.com/api/text-data/regex-test/): Test a regex pattern against any string and get all matches with positions.
- [Regex Replace API](https://botoi.com/api/text-data/regex-replace/): Find and replace text using regex patterns with capture group support.
- [Text Stats API](https://botoi.com/api/text-data/text-stats/): Count words, characters, sentences, and paragraphs. Estimate reading time.
- [Slugify API](https://botoi.com/api/text-data/text-slugify/): Convert any text into a clean, URL-safe slug. Handles Unicode, accented characters, and special symbols.
- [Text Truncate API](https://botoi.com/api/text-data/text-truncate/): Truncate text at word boundaries with a custom suffix.
- [Extract URLs API](https://botoi.com/api/text-data/text-extract-urls/): Extract all URLs from any text block. Detects http, https, and protocol-relative URLs.
- [Extract Emails API](https://botoi.com/api/text-data/text-extract-emails/): Extract all email addresses from any text block. Returns deduplicated results with count.
- [Language Detection API](https://botoi.com/api/text-data/text-language/): Detect the language of any text with confidence scores. Supports 50+ languages.
- [Text Case Converter API](https://botoi.com/api/text-data/text-case/): Convert text between camelCase, snake_case, PascalCase, kebab-case, and more.
- [HTML Sanitize API](https://botoi.com/api/text-data/html-sanitize/): Sanitize HTML by removing script tags, event handlers, and dangerous attributes.
- [CSV to JSON API](https://botoi.com/api/text-data/csv-to-json/): Convert CSV data to a JSON array with automatic header detection.
- [JSON to CSV API](https://botoi.com/api/text-data/json-to-csv/): Convert a JSON array to CSV with automatic header generation.
- [XML to JSON API](https://botoi.com/api/text-data/xml-to-json/): Convert XML documents to JSON with attribute and namespace handling.

### Developer Utilities

- [Developer Utility APIs](https://botoi.com/api/developer/): Hashing, UUIDs, URL encoding, password generation, cron parsing, JWT, color conversion, and math evaluation APIs
- [Hash API](https://botoi.com/api/developer/hash-generate/): Generate MD5, SHA-1, SHA-256, SHA-384, and SHA-512 hashes from any string with a single API call.
- [Batch Hash API](https://botoi.com/api/developer/hash-batch/): Generate MD5, SHA-1, SHA-256, and SHA-512 hashes for the same input in a single API call.
- [HMAC API](https://botoi.com/api/developer/hash-hmac/): Generate HMAC signatures using SHA-256, SHA-1, or SHA-512. Verify webhook payloads, sign API requests, and authenticate messages.
- [UUID v4 API](https://botoi.com/api/developer/uuid-v4/): Generate cryptographically random UUID v4 identifiers with a single API call.
- [Batch UUID API](https://botoi.com/api/developer/uuid-batch/): Generate up to 100 UUIDs in a single API call. Supports v4 and v7 versions.
- [ULID API](https://botoi.com/api/developer/uuid-ulid/): Generate Universally Unique Lexicographically Sortable Identifiers (ULIDs). Time-ordered, Crockford Base32-encoded.
- [UUID Validate API](https://botoi.com/api/developer/uuid-validate/): Validate any UUID string and detect its version (v1, v4, v5, v7). Returns format validity, version number, and variant.
- [UUID v7 API](https://botoi.com/api/developer/uuid-v7/): Generate UUID v7 identifiers with embedded millisecond timestamps. Time-ordered for efficient database indexing.
- [URL Encode API](https://botoi.com/api/developer/url-encode/): URL-encode any string. Converts special characters to percent-encoded format for safe use in URLs and query strings.
- [URL Decode API](https://botoi.com/api/developer/url-decode/): Decode percent-encoded URL strings back to readable text. Handles %20, %26, and all RFC 3986 escape sequences.
- [URL Parse API](https://botoi.com/api/developer/url-parse/): Parse any URL into its components: protocol, host, port, path, query parameters, and hash fragment.
- [Password Generator API](https://botoi.com/api/developer/password-generate/): Generate cryptographically secure passwords with configurable length, character sets, and count.
- [Password Strength API](https://botoi.com/api/developer/password-strength/): Check password strength and get actionable feedback. Returns a 0-4 score, estimated crack time, and improvement suggestions.
- [Cron Parse API](https://botoi.com/api/developer/cron-parse/): Parse any cron expression and get a plain-English description. Supports standard 5-field cron syntax.
- [Cron Next Runs API](https://botoi.com/api/developer/cron-next/): Get the next scheduled run times for any cron expression. Supports timezone-aware calculations.
- [Mock Data API](https://botoi.com/api/developer/random-data/): Generate realistic fake test data: names, emails, addresses, phone numbers, and more.
- [Color Convert API](https://botoi.com/api/developer/color-convert/): Convert colors between HEX, RGB, and HSL formats with a single API call.
- [Color Palette API](https://botoi.com/api/developer/color-palette/): Generate complementary, analogous, triadic, tetradic, or monochromatic color palettes from any base color.
- [JWT Decode API](https://botoi.com/api/developer/jwt-decode/): Decode any JWT token and inspect its header, payload, and expiry without verifying the signature.
- [JWT Generate API](https://botoi.com/api/developer/jwt-generate/): Generate signed JWT tokens with custom payloads, algorithms, and expiry. Supports HS256, HS384, and HS512.
- [Text Diff API](https://botoi.com/api/developer/diff-text/): Compare two text strings line by line and get a unified diff output.
- [JSON Diff API](https://botoi.com/api/developer/diff-json/): Deep-compare two JSON objects and get a structured list of additions, deletions, and changes at every nesting level.
- [Number Format API](https://botoi.com/api/developer/number-format/): Format numbers with locale-aware separators, currency symbols, and percentage notation.
- [TOTP Generate API](https://botoi.com/api/developer/totp-generate/): Generate time-based one-time passwords (TOTP) from a shared secret. Compatible with Google Authenticator and Authy.
- [TOTP Validate API](https://botoi.com/api/developer/totp-validate/): Validate a TOTP code against a shared secret with configurable time window for clock skew tolerance.
- [Timestamp Convert API](https://botoi.com/api/developer/timestamp-convert/): Convert between Unix timestamps, ISO 8601, and RFC 2822 date formats.
- [Semver Compare API](https://botoi.com/api/developer/semver-compare/): Compare two semantic version strings and determine which is greater, equal, or less.
- [Semver Validate API](https://botoi.com/api/developer/semver-validate/): Validate whether a string is a valid semantic version per the semver 2.0.0 specification.
- [YAML to JSON API](https://botoi.com/api/developer/yaml-to-json/): Convert YAML documents to JSON with a single API call. Handles nested objects, arrays, and multi-document YAML.
- [JSON to YAML API](https://botoi.com/api/developer/json-to-yaml/): Convert JSON objects to clean YAML output with proper indentation.
- [Math Evaluate API](https://botoi.com/api/developer/math-evaluate/): Evaluate mathematical expressions safely via API. Supports arithmetic, parentheses, powers, and common functions.
- [Unit Convert API](https://botoi.com/api/developer/units-convert/): Convert between units of length, weight, temperature, volume, speed, and more.
- [Software License API](https://botoi.com/api/developer/license-lookup/): Look up a software license by SPDX identifier.

### Image & Media

- [Image & Media APIs](https://botoi.com/api/image-media/): OG image generation, QR codes, placeholders, avatars, favicons, and barcode generation APIs
- [OG Image API](https://botoi.com/api/image-media/og-generate/): Generate Open Graph images on the fly with custom titles, descriptions, themes, and brand colors. Returns PNG.
- [QR Code API](https://botoi.com/api/image-media/qr-generate/): Generate QR codes from any text or URL. Returns crisp SVG output with configurable size, error correction, and margin.
- [Placeholder Image API](https://botoi.com/api/image-media/placeholder-image/): Generate placeholder images with custom width, height, background color, text, and format.
- [Avatar API](https://botoi.com/api/image-media/avatar-generate/): Generate unique identicon avatars from any string seed. Returns SVG or PNG at configurable sizes.
- [Favicon API](https://botoi.com/api/image-media/favicon-extract/): Extract all favicon URLs, sizes, and types from any domain. Returns structured JSON with icon metadata.
- [Barcode API](https://botoi.com/api/image-media/barcode-generate/): Generate barcodes in Code128, EAN-13, EAN-8, UPC-A, ITF-14, and MSI formats via API. Returns SVG.

### Security & Validation

- [Security & Validation APIs](https://botoi.com/api/security/): Credit card validation, IBAN checks, VAT verification, AES encryption/decryption, and OTP generation APIs
- [Credit Card Validation API](https://botoi.com/api/security/validate-credit-card/): Validate credit card numbers using the Luhn algorithm and detect the card brand (Visa, Mastercard, Amex).
- [IBAN Validation API](https://botoi.com/api/security/validate-iban/): Validate International Bank Account Numbers (IBAN) and extract country code, bank code, and check digits.
- [VAT Validation API](https://botoi.com/api/security/validate-vat/): Validate European VAT identification numbers and extract the country code and expected format.
- [AES-256 Encryption API](https://botoi.com/api/security/aes-encrypt/): Encrypt text with AES-256-GCM using a password. Server-side encryption with no data storage.
- [AES-256 Decryption API](https://botoi.com/api/security/aes-decrypt/): Decrypt AES-256-GCM ciphertext using a password. Server-side decryption with no data storage.
- [OTP Generator API](https://botoi.com/api/security/otp-generate/): Generate numeric or alphanumeric one-time passwords with configurable length.
- [Password Breach Check API](https://botoi.com/api/security/breach-check/): Check if a password has appeared in known data breaches.
- [Security Headers Grade API](https://botoi.com/api/security/security-grade/): Grade a URL's security headers on a scale from A+ to F.
- [Phishing URL Check API](https://botoi.com/api/security/phishing-check/): Check a URL against known phishing and malware databases.

### Storage & Services

- [Storage & Services APIs](https://botoi.com/api/storage/): Webhook inboxes, URL shortener, paste bin, geocoding, and distance calculation APIs
- [Webhook Inbox API](https://botoi.com/api/storage/webhook-inbox-create/): Create a temporary webhook inbox that captures incoming payloads for 24 hours.
- [Webhook Payload List API](https://botoi.com/api/storage/webhook-inbox-list/): List all captured payloads from a webhook inbox.
- [URL Shortener API](https://botoi.com/api/storage/short-url-create/): Shorten a URL with an optional custom slug and get a tracked short link.
- [Short URL Stats API](https://botoi.com/api/storage/short-url-slug-stats/): Get click count and metadata for a shortened URL.
- [Paste Bin API](https://botoi.com/api/storage/paste-create/): Create a temporary paste with optional syntax highlighting and configurable TTL.
- [Paste Retrieval API](https://botoi.com/api/storage/paste-by-id/): Retrieve a paste by ID with its content, language, and creation timestamp.
- [Distance Calculator API](https://botoi.com/api/storage/geo-distance/): Calculate the great-circle distance between two coordinate pairs.
- [Geocoding API](https://botoi.com/api/storage/geo-geocode/): Convert a street address or place name into latitude/longitude coordinates.
- [Reverse Geocoding API](https://botoi.com/api/storage/geo-reverse/): Convert latitude/longitude coordinates into a human-readable address.
- [Batch Geocoding API](https://botoi.com/api/storage/geo-batch/): Geocode up to 10 addresses in a single request.

## Account & Pricing

- [API Landing Page](https://botoi.com/api): Overview, pricing tiers, code examples, and FAQ for the Botoi API
- [Pricing](https://botoi.com/pricing): Current pricing tiers, limits, and upgrade options
- [Sign Up](https://botoi.com/api/signup): Create an account and get an API key (free tier, no credit card)
- [Sign In](https://botoi.com/api/signin): Log in to manage API keys and usage
- [Dashboard](https://botoi.com/api/dashboard): Manage API keys, view usage, and change billing plan
- [About Botoi](https://botoi.com/about): Mission, team, and product principles
- [Contact](https://botoi.com/contact): Support contact form and enterprise inquiries

## Legal

- [Privacy Policy](https://botoi.com/privacy): How Botoi collects, uses, and protects data
- [Terms of Service](https://botoi.com/terms): Terms governing Botoi API and tools usage
- [Security & Compliance](https://botoi.com/privacy#security): Data handling, retention, and transit encryption

## Localization

Botoi serves tools, blog posts, and API endpoint pages in 10 locales. English is the default (no prefix). The other 9 locales use a `/{locale}/` URL prefix.

- Supported locales: `en` (English, default), `zh` (中文), `es` (Español), `ar` (العربية), `pt` (Português), `id` (Bahasa Indonesia), `fr` (Français), `ja` (日本語), `ru` (Русский), `de` (Deutsch)
- Localized homepage pattern: `https://botoi.com/{locale}/` (example: `https://botoi.com/es/`)
- Localized tool pattern: `https://botoi.com/{locale}/tools/{slug}/`
- Localized endpoint page pattern: `https://botoi.com/{locale}/api/{category}/{slug}/`
- Localized blog pattern: `https://botoi.com/{locale}/blog/{slug}/` (renders translated content when available, falls back to a "Read in English" link otherwise)
- Hreflang alternates are scoped to each page's available locales.

## MCP Discovery

- MCP Streamable HTTP endpoint: https://api.botoi.com/mcp (stateless, JSON-RPC 2.0)
- Server card (SEP-1649 discovery): https://api.botoi.com/.well-known/mcp/server-card.json
- Tool manifest (public, no auth): https://api.botoi.com/v1/mcp/tools.json
- Browse all 49 curated tools: https://botoi.com/mcp/tools/
- Setup guide for Claude Desktop, Claude Code, Cursor, VS Code, Windsurf: https://botoi.com/mcp/
- MCP works anonymously at 5 req/min and 100 req/day. Pass a Bearer token for higher limits.

## API Documentation & Specs

- [Interactive API Docs (Scalar)](https://api.botoi.com/docs): Try every endpoint live with request builders and code samples in 5 languages
- [OpenAPI 3.1 Spec](https://api.botoi.com/openapi.json): Machine-readable spec for agents, IDEs, and code generators
- [API Health Check](https://api.botoi.com/health): Service heartbeat
- [Status Page](https://status.botoi.com): Real-time uptime monitoring for API and site
- [Full Content Index](https://botoi.com/llms-full.txt): Long-form endpoint reference with request/response examples per endpoint

## Related Resources

- [Botoi TypeScript SDK on GitHub](https://www.npmjs.com/package/@botoi/sdk): Source, issues, and release notes
- [MCP Specification](https://spec.modelcontextprotocol.io): Upstream protocol docs the Botoi MCP server implements
- [Unkey](https://unkey.com): API key verification provider used by Botoi
- [Cloudflare Workers](https://developers.cloudflare.com/workers/): Edge runtime hosting the Botoi API