Free tools every open source maintainer should bookmark
In short: eight browser tools and a matching JSON API, all free with no key, no signup and no tracking. Each one solves a problem maintainers hit repeatedly: understanding a codebase, watching growth, and keeping a domain healthy.
Running an open source project means answering questions like "how big is this codebase really", "is interest growing or was that one spike", and "is the site still serving valid certificates". These tools answer each of those without installing anything.
Understanding a codebase
Count LOC
Counts lines of code in any public GitHub or GitLab repository by language, splitting code, comments and blanks, and skipping vendor and generated directories. Useful for triage: a dependency with 8,000 lines of code and 40,000 lines total is mostly generated output, and that changes how you read its maintenance burden.
curl 'https://freetools.one/v1/loc?github=torvalds/linux'
Tracking project growth
Star History
Plots cumulative stars over time for up to six repositories at once, with totals and 30-day growth per repo. The useful question is not "how many stars" but "what is the trend" — and the exportable SVG goes straight into a README:

Keeping the domain healthy
TLS checker
Reports protocol version, cipher strength, certificate subject, issuer, SANs and days until
expiry. Renewal automation that fails silently is the classic cause of an outage, and a
days_left check twice a day prevents it.
HTTP headers checker
Returns every response header plus the full redirect chain, which is how you confirm HSTS and CSP are actually deployed, and spot a redirect that adds a second of latency.
Diagnostics and data
IP geolocation
Resolves an IP or hostname to country, city, timezone and coordinates. Useful for choosing CDN regions or making sense of an unexpected traffic spike.
Weather API
Current conditions by city or by the caller's own IP, in both Celsius and Fahrenheit. It looks out of place in a developer toolkit until you wire it into a demo or an uptime page.
Random data API
Random integers, shuffled lists and names from the OS CSPRNG, for fixtures, seeding and load tests. Ten thousand values in one request:
curl 'https://freetools.one/v1/random/integer?min=1&max=6×=10000'
CORS proxy
For debugging cross-origin requests from the browser. It is SSRF-guarded, so it is safe to point at test URLs — but do not route production traffic or secrets through it.
One API for all of them
Every tool is a plain GET endpoint, which means the whole toolkit is scriptable
without an SDK. LOC and star-history results are cached for six hours, so repeated repository
calls are fast; cache other responses in your application when appropriate.
# stars + LOC + certificate health in one shell loop
for repo in cli/cli BurntSushi/ripgrep; do
loc=$(curl -s "https://freetools.one/v1/loc?github=$repo" \
| jq -r '.[]|select(.language=="Total")|.linesOfCode')
stars=$(curl -s "https://freetools.one/v1/stars?github=$repo" | jq '.[-1].y')
printf '%-24s %8s LOC %7s stars\n' "$repo" "$loc" "$stars"
done
Connect an AI agent to them
There is an MCP server at /mcp exposing six of these as
native tools, plus a machine-readable API index and an
OpenAPI spec. Adding one line of JSON to an MCP client gives the
agent repository analysis, certificate checks and diagnostics directly.
Frequently asked questions
Are these developer tools really free with no signup?
Yes. Every tool is a plain GET request with no API key, no account and no tracking. The limit is 30 requests per minute per IP address; LOC and star-history results are cached for six hours.
Can I script all of these tools together?
Yes. They are REST endpoints returning JSON, so any language with an HTTP client can call them, and an MCP server at /mcp exposes six of them as native tools for AI agents.
What is the rate limit on the free APIs?
30 requests per minute per IP address for the general endpoints, and 300 per minute for the random-data endpoints. Cacheable repository endpoints include X-Cache; all responses include X-Elapsed-Ms.
Is the CORS proxy safe to use in production?
It is SSRF-guarded and capped at 5 MB, which makes it safe for testing, but it is a third party that can see every request you route through it. For production, proxy from your own server instead.