Welcome to the Tools API documentation.
This documentation is written as a user guide for developers integrating with our public APIs and web interface. It covers authentication, request formats, response schemas, code examples, and token usage.
Background guide for the public Ko-fi page, including what already exists on the platform today, why the running cost is growing, and how the six support levels are meant to be understood.
View the Support Tools guide →
Privacy and data usage details: View Privacy Policy →
General platform terms: View Terms of Service →
Search and retrieve IRC channel logs with advanced filtering. Perfect for integrating log data into other applications.
View IRC Log API Documentation →
Quick Start Guide (includes setup, basic + advanced examples): IRC Memory Lane API Guide →
Generate AI-powered analyses of RSS feeds by category. ChatGPT identifies themes, narrative patterns, and behavioral trends in aggregated news content.
permission:rssView RSS Analytics API Documentation →
Send SMS messages with callback tracking and delivery status updates.
SMS Callback Responses (webhook responses): SMS Prefix Callback Guide →
Search and retrieve Marvel Cinematic Universe data with chronological ordering and IMDB integration.
Discover and query BIND DNS zones, retrieve zone metadata, and access DNS records.
Real-time blocklist queries with bitmask support, DNS-first publication, commerce data mirroring, and DMARC intake for the DNSBL review queue.
View DNSBL/FraudBL API Documentation →
Admin-facing intake and review flow for DMARC aggregate reports before any reported IP is published to DNSBL.
/admin/dnsbl/dmarc (admin review UI), POST /api/dnsbl/dmarc/report (intake endpoint)View DNSBL DMARC Documentation →
Internal AI engine dashboard for managing prompt profiles, testing prompts, and monitoring API usage.
/admin/openai (requires permission:openai.manage)View OpenAI Engine Documentation →
The public registration flow and the admin user list/editor now expose a small discovery signal so site owners can see how new people found Tools.
/register for new signups, /users and /users/{user}/edit for admin reviewAdmin-only service-message workflow for sending one message to selected groups of Tools users, plus safer generic browser error pages.
/users/mailout from user management; administrators onlyView User Mailout Documentation →
Admin page for maintaining trusted IPv4 addresses and CIDR ranges that may bypass normal auth on supported API routes.
/admin/security/api-ip-whitelist (admin web session)Tools-managed registration flow for vBulletin communities, keeping invite/review state in Tools while the forum account itself still lives in vBulletin.
/admin/security/vbulletin (requires vbulletin.manage), public registration pages under /vbulletin/onboarding/*View vBulletin Registration Documentation →
View the condensed registration changelog →
View the invite-complete frontend hook guide →
Logged-in personal vault groundwork for encrypted login secrets, secure notes, and a cautious first payment-card storage slice.
/password-manager (logged-in web users only)View Password Manager Documentation →
Browser-wide AI assistant extension for Toolbox replies, fact-checking, Facebook admin workflows, and SoundCloud capture.
View SocialGPT Chrome Extension Documentation →
Public-facing X/Twitter bot identity backed by the Tools-side X mention/reply system.
/docs/en/x-bot; admin control room under /admin/social-media-tools/x-botView X Mention Bot Documentation →
View the public ToolGPT changelog →
Web-based RSS aggregator with categorization, feed source management, and inline editing.
/rss (requires permission:rss)View RSS Watch Documentation →
Focused how-to guide for using Playwright in Tools through stored admin scripts, browserbot.sh, and the project E2E test runner.
/admin/browser-automation and Playwright E2E admin under /admin/browser-automation/playwrightPersonal Microsoft To Do integration for authenticated users, with bidirectional sync and authenticated API access.
/settings/integrations/microsoft-todo (requires login)/api/microsoft-todo/* endpointsView Microsoft To Do Documentation →
Queued media transcription service with owner/admin progress visibility in both web UI and API.
/whisper (requires permission:whisper.use)/api/whisper/*Personal cycle tracking UI for authenticated users, now with optional reminder SMS and parent alerts.
/menstrual-tracking (requires login)View Menstrual Tracking Documentation →
Personal account settings and service overview page for authenticated users.
/users/profile (requires login)View My Profile Documentation →
Live overview of current Tools visitors, split into logged-in users, guests, and likely bots.
/online, admin detail view under /admin/security/online-usersSlug-based public onboarding flow with invite keys, status pages, delegated key creators, and scoped forum-group approval.
/vbulletin/onboarding, admin management under /admin/security/vbulletin, delegated key creation under /vbulletin/onboarding/keysView vBulletin Onboarding Documentation →
Step-by-step screenshot walkthrough for the existing-account-first onboarding variant used by Snöbollseffekten.
/docs/en/snobollseffektenView the Snöbollseffekten guide →
Technical note for the Snöbollseffekten-specific vBulletin header hook, route handling, logo swap, and member widgets.
/docs/en/snobollseffekten-vbulletin-integration/snowball to /snowball/forum redirect rules, header-based logo replacement, early logo-hide CSS, preload/preconnect hints, Tools bundle loading, and member-widget notes for latest-member.js plus member-count.jsView the Snöbollseffekten vBulletin integration note →
Reference for OAuth start/callback endpoints, plus Slack redirect URL guidance.
/oauth/*start/callback/callback-url, SoundCloud start/callbackView OAuth Endpoints Documentation →
Used for server-to-server requests to public APIs:
Authorization: Bearer sk-YOUR_API_KEY_HERE
Where to find your key:
/keys/mine)Used for browser-based requests to protected endpoints:
permission:rss, permission:openai.manage, etc.Special tokens for AI-specific operations:
Authorization: Bearer YOUR_TOOLS_AI_TOKEN
Usage: /api/ai/url/analyze and similar AI endpoints
| Feature | Endpoint | Auth | Rate Limit |
|---|---|---|---|
| IRC Search | POST /api/irclog/search |
API Key | 60/min |
| RSS Analytics | POST /feed-admin/analytics/generate |
Web Session | 20/min |
| SMS Send | POST /api/sms/send |
API Key | 300/min |
| MCU Search | GET /api/mcu/timeline |
Public | 300/min |
| DNS Query | GET /api/dns/zones |
API Key | 60/min |
| DNSBL Query | POST /api/dnsbl/query |
API Key | 9000/min |
All APIs follow standard HTTP status codes:
200 OK - Request successful400 Bad Request - Invalid parameters or validation error401 Unauthorized - Missing or invalid authentication403 Forbidden - Authenticated but missing required permissions429 Too Many Requests - Rate limit exceeded500 Internal Server Error - Server-side error{
"ok": false,
"error": "Human-readable error message",
"error_code": "VALIDATION_ERROR"
}
Tools supports multiple domains using a single .env configuration by detecting the current request host.
For recent changes and new features: View Changelog →
Last Updated: 2026-05-19 API Version: v1