list_chaos_rules
List reusable API chaos endpoint mappings.
run_redirect_analyzer
Analyze redirect chain behavior for a URL.
run_cors_debug
Run CORS diagnostics for a target URL and origin.
automation_create_workflow
Create an API automation workflow from steps you define. Use this when the user asks to generate automation for a URL or API: you define the steps (method, path, assertions) and send them. Preferred for a single URL or a few endpoints when the user does not provide an OpenAPI spec or Postman collection. Saves to Automation Studio and exports to API Testing (/app/api-testing). Returns workflowId, dashboardUrl (link to API Testing dashboard or the new workflow), and optional apiWorkflowId. Tell the user to view results at the dashboardUrl (e.g. https://httpstatus.com/app/api-testing).
automation_generate_from_openapi
Generate an automation workflow from an OpenAPI/Swagger spec (JSON or YAML string). Use only when the user provides a full OpenAPI spec. For a single URL or endpoints without a spec, use automation_create_workflow instead.
automation_import_postman_collection
Convert an exported Postman collection (JSON object the user already has) into an automation workflow. Use only when the user explicitly provides or pastes a Postman collection. For a URL or API without a Postman export, use automation_create_workflow instead.
automation_run_workflow
Run an existing automation workflow by workflowId. Returns runId and status.
automation_get_workflow_status
Get status, step results, and logs for a workflow run by runId.
start_resolve
Resolve natural-language developer intent to HttpStatus.com tools via the /start router (retrieval-first, optional AI). Returns session_id, tools with routes, confidence, and resolution_layer.
run_security_scan
Scan a URL for common security issues: missing security headers (HSTS, CSP, X-Frame-Options, etc.), TLS configuration, CORS policy, and XSS vectors. Returns a scored report per check category.
validate_openapi
Validate an OpenAPI 2.x/3.x specification (JSON or YAML string) against the spec and report errors, warnings, and schema violations. Returns a structured list of issues with paths and severity.
decode_jwt
Decode a JSON Web Token and return the header, payload, and signature metadata. Optionally verify the signature with a secret or public key.
run_trace
Submit distributed trace data (Jaeger, Zipkin, OpenTelemetry, or generic) for analysis. Returns span summary, critical path, slowest operations, and an optional shareable link.
analyze_har
Analyze an HTTP Archive (HAR) file object. Returns performance summary, waterfall timings, largest requests, error responses, and third-party breakdown.
check_ssl
Check the SSL/TLS certificate for a hostname: validity, expiry, issuer chain, protocol versions, and cipher suites. Returns days-until-expiry and any chain errors.
create_monitor
Create an uptime monitor for a URL. Returns monitorId, dashboard URL, and next check time. Use get_monitor_status to fetch results.
get_monitor_status
Get the current status, uptime percentage, and recent check history for a monitor created with create_monitor.
capture_webhook
Create or connect to a webhook capture bin and return the capture URL. Returns captureId, webhookUrl to share with the caller, and any requests already received. Use captureId on subsequent calls to poll for new requests.