You paste a JWT into some online decoder to check a claim, and a second later it hits you: that token just went to a server you know nothing about. Is it logged? No idea. Same story with pasting JSON, an API response, whatever, into a random tool site covered in trackers and cookie banners. You never really know what happens to what you typed.
So I put the tools I actually use into one page where that isn't a question: tools.merrt.com.tr
Everything runs in your browser. Nothing you paste leaves the page, there's no backend, no cookies following you around, and it works offline (it's a PWA).
What's in there so far:
JSON formatter that actually tells you the line and column when your JSON is broken
