WebForge Toolkit

WebForge Toolkit is a local browser utility for developers, QA engineers, and operators who need quick inspection and conversion tools while working in Chrome. Core tools: Landing screen with branded access, searchable utility suggestions, and a scrollable utility list designed for future tools. Packaged searchable Help Center with definitions, operating steps, examples, limitations, and print/PDF support. Persistent Light and Dark themes across the popup, full-view workspace, and Help Center. Packaged credits and contributor information available from the extension menu. Network inspector for captured fetch/XHR calls, cURL generation, timing, size, and response previews where Chrome allows response capture. JSON formatter, validator, and repair helper. XML formatter, validator, and repair helper. CSV and Excel-paste conversion to JSON, plus JSON to CSV or Excel-paste format. Webpage export to Markdown, text, or text-based PDF. Image extractor for webpage images, srcsets, icons, video posters, and CSS background images with JSON, CSV, or HTML gallery export. Passive OWASP checker for browser-observable risks such as missing security headers, mixed content, risky forms, exposed client-side secrets, unsafe links, and storage/cookie hygiene signals. Time tools for current Unix epoch milliseconds, Unix seconds, UTC/local time display, and two-way date/timestamp conversion. Developer tools for JWT decode/HS256 verification, URL parsing, Base64/hex/crypto transforms, text/JSON diff, regex testing, lightweight code formatting, UUIDs, passwords, and secure random values. Local HAR analyzer with request filtering, status, timing, transfer size, resource-type summaries, and report export. Active-page analyzer for performance resources, accessibility signals, browser storage, cookie attributes, CSP/CORS headers, HTML table extraction, and link checking. Client utilities for REST, GraphQL, SOAP, webhook, OpenAPI, Kafka REST, Redis HTTP, WebSocket, RabbitMQ Web STOMP, SSE, OAuth 2.0/PKCE, MQTT, and Elasticsearch workflows. Local API request collections with reusable variables and redacted JSON export. Privacy posture: Runs locally in the browser. Has no WebForge-operated server, analytics, advertising, or tracking service. Sends data only when the user explicitly runs a client request, link check, OAuth navigation, or connection to a user-selected endpoint. Stores extension state, rules, saved profiles/requests, and recent local logs in Chrome local storage.