Highland Intel APIs

DNS records: A, AAAA, MX, NS and TXT records for a domain over DNS-over-HTTPS.

Email authentication check: SPF and DMARC presence and policy strength for a domain.

HTTP security header audit: Which security headers a site's HTTPS front page sends, with a simple grade.

HTTPS redirect check: Whether plain HTTP redirects to HTTPS, and whether HSTS is set.

security.txt check: Fetches /.well-known/security.txt and reports Contact and Expires (RFC 9116).

Summarize: Three-bullet summary of up to 8,000 characters. Input is PII-redacted first.

Classify: Picks one label from your list (2 to 20 labels) for a piece of text.

Translate (EN/FR and more): Translates text between languages; defaults to English to French for NS/NB customers.

PII redaction: Strips emails, phone numbers, card numbers, SINs and IPv4s. Runs locally, no model.

Text statistics: Word, sentence and character counts, reading time and a Flesch reading-ease score.

JSON Schema validate: Validates a JSON value against a JSON-Schema subset and lists every error path.

Regex tester: Runs a JavaScript regex over sample text and returns matches and groups (capped sizes).

Cron explainer: Explains a 5-field cron expression in plain English (UTC, as Cloudflare runs it).

Text diff: Line-by-line diff of two texts (up to 500 lines each).

Hash: SHA-1/256/384/512 hex digest of UTF-8 text.

Nova Scotia HST calculator: Adds 14% NS HST to a subtotal, or splits a tax-included total. Confirm the rate with CRA.

Quote builder: Totals line items, applies a discount and HST, and computes a deposit. No customer details taken.

Invoice number: Formats PREFIX-YYYYMM-NNNNN-C with a Luhn check digit, or validates one.

Uptime check: One HTTPS probe of a public domain: status, latency and whether it looks up.

Web search: Neural or keyword web search with highlights, for agents. Up to 10 results, public URLs only.

Web page contents: Clean text of up to 5 public pages, capped per page, for agents to read.

Find similar pages: Pages similar in meaning to a given public URL, with highlights. Up to 10 results.

Web scrape to Markdown: Main content of one public page as Markdown (up to 50,000 characters), with title and status.

Site map: Discovers the URLs of a public site (up to 200), optionally ranked by a search term.

Structured web extract: Scrapes a public page and fills your flat schema (up to 20 typed fields) from it. Values are type-checked.

Enrich URL: Profiles one public page: title, summary, organisations and other entities, topics, sentiment and public contact points.

Enrich company: Company profile from public web sources: name, description, industry, recent signals and the sources used.

Entity extraction: Named entities of fixed types (person, organization, location, product, event, date, money, law, technology), each found verbatim in your text.

Keywords: Key phrases of your text, each found verbatim in it; falls back to a frequency ranking if the model answer is unusable.

Sentiment: Positive, negative or neutral, with a score from -1 to 1, from a sentiment classifier over up to 8,000 characters.

Cloudflare IP check: Says whether an IPv4 or IPv6 address is in Cloudflare's published edge ranges, and which range.

Wrangler config lint: Lints a wrangler.jsonc or wrangler.toml: name, entry point, compatibility date, secrets left in vars, routes.

Cron to Cloudflare trigger: Checks a cron expression against Cloudflare Cron Trigger syntax, explains it, lists the next runs and gives the wrangler snippet.

MCP config validator: Validates a Claude Code .mcp.json: transports, commands, URLs, headers and env, and flags literal secrets by path.

CLAUDE.md lint: Lints a CLAUDE.md: size, structure, @imports, and secrets, passwords or email addresses that should not be there.

Claude Code hooks validator: Validates a Claude Code hooks block (or a whole settings.json): events, matchers, hook types, timeouts and risky commands.

Slash command scaffold: Writes a ready-to-save Claude Code slash command file with frontmatter, $ARGUMENTS and a step outline.

Token count estimate: Estimated token counts for cl100k-like, o200k-like, Claude-like and Llama-like tokenizers plus a char/4 baseline. Deterministic estimates, not exact counts.

RAG text chunker: Splits text for retrieval by estimated tokens, sentences or markdown headings, with token overlap and stable SHA-256 chunk ids.

Fine-tune dataset validator: Checks chat (OpenAI-style), messages (Anthropic-style) or Alpaca JSONL: per-line errors, role order, empty turns, duplicates, token estimates and a training-cost estimate from your price.

Fine-tune dataset converter: Converts JSONL between OpenAI-style chat, Anthropic-style messages and Alpaca rows. System prompts move between the system message and the top-level field; rows that cannot convert are listed.

Seeded dataset split: Deterministic seeded shuffle and train/val/test split of JSONL rows. The same seed and input always give the same split.

Text embeddings: Embeds 1 to 16 short texts with the fixed Workers AI model @cf/baai/bge-base-en-v1.5 (768 dimensions) for search and clustering.

Semantic similarity ranking: Ranks up to 15 candidate texts by cosine similarity to a query, using @cf/baai/bge-base-en-v1.5 embeddings.

Prompt safety lint: Flags prompt-injection phrasing, chat-template tokens, hidden characters, PII and secrets per line, and lists {{variables}}. Rule-based, no model call; flagged text is never echoed.

JWT decoder: Decodes a JWT header and payload without verifying it, with warnings for alg none, missing or past exp, future nbf/iat and risky header fields.

URL parser: Splits a URL into scheme, host, port, path segments, query (repeated keys as arrays) and fragment, with warnings for credentials, plain http and punycode. Passwords are never echoed.

Base64 encode and decode: Encodes UTF-8 text to standard or url-safe base64, or decodes either form; binary results that are not valid UTF-8 come back as hex.

UUID generator: Generates 1 to 100 random v4 or time-ordered v7 UUIDs (RFC 9562) from Web Crypto.

User-agent parser: Identifies browser, engine, OS, device class and known crawlers, AI bots and HTTP clients from a User-Agent string. Rule-based; user agents can be spoofed.