Welcome to the Tools API documentation.
This documentation is written as a user guide for developers integrating with our public APIs and web interface. It covers authentication, request formats, response schemas, code examples, and token usage.
Background guide for the public Ko-fi page, including what already exists on the platform today, why the running cost is growing, and how the six support levels are meant to be understood.
View the Support Tools guide →
Privacy and data usage details: View Privacy Policy →
General platform terms: View Terms of Service →
The admin user editor includes a one-click DNSBL + AI triage action that keeps its result inline. Public registration flows, including Google OAuth sign-up, can also be blocked by DNSBL when ENABLE_DNSBL_CHECKS_ON_REGISTRATION is enabled in the server configuration.
Search and retrieve IRC channel logs with advanced filtering. Perfect for integrating log data into other applications.
View IRC Log API Documentation →
Quick Start Guide (includes setup, basic + advanced examples): IRC Memory Lane API Guide →
Unified documentation for Knowledge Base setup, endpoint usage, webhook ingest, and test flow.
View Knowledge Base API Documentation →
Generate AI-powered analyses of RSS feeds by category. ChatGPT identifies themes, narrative patterns, and behavioral trends in aggregated news content.
permission:rssView RSS Analytics API Documentation →
Send SMS messages with callback tracking and delivery status updates.
SMS Callback Responses (webhook responses): SMS Prefix Callback Guide →
Search and retrieve Marvel Cinematic Universe data with chronological ordering and IMDB integration.
Discover and query BIND DNS zones, retrieve zone metadata, and access DNS records.
Real-time blocklist queries with bitmask support, DNS-first publication, commerce data mirroring, and DMARC intake for the DNSBL review queue.
View DNSBL/FraudBL API Documentation →
Admin-facing intake and review flow for DMARC aggregate reports before any reported IP is published to DNSBL.
/admin/dnsbl/dmarc (admin review UI), POST /api/dnsbl/dmarc/report (intake endpoint)View DNSBL DMARC Documentation →
Internal AI engine dashboard for managing prompt profiles, testing prompts, and monitoring API usage.
/admin/openai (requires permission:openai.manage)View OpenAI Engine Documentation →
Dedicated Copilot connector flow with multi-tenant setup, per-user delegation, setup testing, and a separate Copilot response endpoint.
/admin/copilot, API at /api/ai/copilot/respondai.copilot, admin override by connector_slugSocialGPT/browser-extension-oriented AI endpoints and token-scope behavior, documented separately from the generic OpenAI engine runtime docs.
/api/ai/socialgpt/* and /api/social-media-tools/extension/*ai.socialgpt (legacy ai.client alias), SocialGPT-specific response contract, extension token validation/test helpersView Social Media Tools AI API Documentation →
The public registration flow and the admin user list/editor now expose a small discovery signal so site owners can see how new people found Tools.
/register for new signups, /users and /users/{user}/edit for admin reviewAdmin-only service-message workflow for sending one message to selected groups of Tools users, plus safer generic browser error pages.
/users/mailout from user management; administrators onlyView User Mailout Documentation →
User-facing guide for configuring the Tornevall mail service in an email client.
Database-backed public status page for shorter notices, manual recovery text, and optional external WordPress RSS updates.
/news and /information; editor under /feed-admin/newsflash (requires permission:rss)View Public News Page Documentation →
Public lightweight viewer for live-style SwedeServ chat rows stored in the legacy IRCWatch-backed chat table.
/swedeserv.phpView SwedeServ Chat History Documentation →
Admin page for maintaining trusted IPv4 addresses and CIDR ranges that may bypass normal auth on supported API routes.
/admin/security/api-ip-whitelist (admin web session)Tools-managed registration flow for vBulletin communities, keeping invite/review state in Tools while the forum account itself still lives in vBulletin.
/admin/security/vbulletin (requires vbulletin.manage), public registration pages under /vbulletin/onboarding/*View vBulletin Registration Documentation →
View the condensed registration changelog →
View the invite-complete frontend hook guide →
Logged-in personal vault groundwork for encrypted login secrets, secure notes, and a cautious first payment-card storage slice.
/password-manager (logged-in web users only)View Password Manager Documentation →
Logged-in shared audio archive for playback, direct public play/download links, and permission-gated uploads.
/audio-library (logged-in web users; upload requires admin or audio.upload)storage/app/audio-libraryView Audio Library Documentation →
Browser-wide AI assistant extension for Toolbox replies, fact-checking, Facebook admin workflows, and SoundCloud capture.
View SocialGPT Chrome Extension Documentation →
Public X/Twitter bot whose visible name is read from the saved X-bot account.
/docs/en/x-bot; admin control room under /admin/social-media-tools/x-botView X Mention Bot Documentation →
View the public X-bot changelog →
Web-based RSS aggregator with categorization, feed source management, and inline editing.
/rss (requires permission:rss)View RSS Watch Documentation →
Focused how-to guide for using Playwright in Tools through stored admin scripts, browserbot.sh, and the project E2E test runner.
/admin/browser-automation and Playwright E2E admin under /admin/browser-automation/playwrightPersonal Microsoft To Do integration for authenticated users, with bidirectional sync and authenticated API access.
/settings/integrations/microsoft-todo (requires login)/api/microsoft-todo/* endpointsView Microsoft To Do Documentation →
Queued media transcription service with owner/admin progress visibility in both web UI and API.
/whisper (requires permission:whisper.use)/api/whisper/*Personal cycle tracking UI for authenticated users, now with optional reminder SMS and parent alerts.
/menstrual-tracking (requires login)View Menstrual Tracking Documentation →
Personal account settings and service overview page for authenticated users.
/users/profile (requires login)View My Profile Documentation →
Live overview of current Tools visitors, split into logged-in users, guests, and likely bots.
/online, admin detail view under /admin/security/online-usersSlug-based public onboarding flow with invite keys, status pages, delegated key creators, and scoped forum-group approval.
/vbulletin/onboarding, admin management under /admin/security/vbulletin, delegated key creation under /vbulletin/onboarding/keysView vBulletin Onboarding Documentation →
Step-by-step screenshot walkthrough for the existing-account-first onboarding variant used by Snöbollseffekten.
/docs/en/snobollseffektenView the Snöbollseffekten guide →
Technical note for the Snöbollseffekten-specific vBulletin header hook, route handling, logo swap, and member widgets.
/docs/en/snobollseffekten-vbulletin-integration/snowball to /snowball/forum redirect rules, header-based logo replacement, early logo-hide CSS, preload/preconnect hints, Tools bundle loading, and member-widget notes for latest-member.js plus member-count.jsView the Snöbollseffekten vBulletin integration note →
Reference for OAuth start/callback endpoints, plus Slack redirect URL guidance.
/oauth/*start/callback/callback-url, SoundCloud start/callbackView OAuth Endpoints Documentation →
Used for server-to-server requests to public APIs:
Authorization: Bearer sk-YOUR_API_KEY_HERE
Where to find your key:
/keys/mine)Used for browser-based requests to protected endpoints:
permission:rss, permission:openai.manage, etc.Special tokens for AI-specific operations:
Authorization: Bearer YOUR_TOOLS_AI_TOKEN
Usage: /api/ai/url/analyze and similar AI endpoints
| Feature | Endpoint | Auth | Rate Limit |
|---|---|---|---|
| IRC Search | POST /api/irclog/search |
API Key | 60/min |
| RSS Analytics | POST /feed-admin/analytics/generate |
Web Session | 20/min |
| SMS Send | POST /api/sms/send |
API Key | 300/min |
| MCU Search | GET /api/mcu/timeline |
Public | 300/min |
| DNS Query | GET /api/dns/zones |
API Key | 60/min |
| DNSBL Query | POST /api/dnsbl/query |
API Key | 9000/min |
All APIs follow standard HTTP status codes:
200 OK - Request successful400 Bad Request - Invalid parameters or validation error401 Unauthorized - Missing or invalid authentication403 Forbidden - Authenticated but missing required permissions429 Too Many Requests - Rate limit exceeded500 Internal Server Error - Server-side error{
"ok": false,
"error": "Human-readable error message",
"error_code": "VALIDATION_ERROR"
}
Tools supports multiple domains using a single .env configuration by detecting the current request host.
For recent changes and new features: View Changelog →
Last Updated: 2026-05-19 API Version: v1
Client applications that integrate with Tools can read the current main-platform version from GET /api/platform. The endpoint is public and read-only and returns only safe release metadata:
{
"name": "Tornevall Tools",
"version": "1.10.0"
}
Apps and extensions keep their own independent version numbers. They may additionally show this Tools platform version so users can see which backend generation they are connected to. API and route URLs themselves remain unversioned.