Browse documentation

Security API

2 endpoints for security workflows. Every call requires bearer authentication and uses the standard ToolsOnDuty response envelope.

Try it

Runs a real request from your browser to your own ToolsOnDuty account. Your key is only kept in this page and is never stored.

EndpointAPI key

value *modevisibleStartvisibleEndmaskCharacter

POST/v1/security/mask-data1 credit / call

Data masking

Mask generic text, email addresses, phone numbers or payment-card digits.

Parameter	Type	Required	Description
value	string	Yes	Sensitive value to mask.
mode	string	No	generic \| email \| phone \| card. Default: generic.
visibleStart	number	No	Leading characters to preserve in generic mode. Default: 2.
visibleEnd	number	No	Trailing characters or phone digits to preserve. Default: 2.
maskCharacter	string	No	Single masking character. Default: *.

Request

curl -X POST https://toolsonduty.com/api/v1/security/mask-data \
  -H "Authorization: ******" \
  -H "Content-Type: application/json" \
  -d '{"value":"john@example.com","mode":"email"}'

Response

{
  "ok": true,
  "data": {
    "result": "j***@example.com"
  }
}

POST/v1/generators/captcha2 credits / call

CAPTCHA SVG generator

Generate a lightweight CAPTCHA-style SVG and answer for server-side integration testing.

Parameter	Type	Required	Description
length	number	No	Challenge length (4-8). Default: 6.

Request

curl -X POST https://toolsonduty.com/api/v1/generators/captcha \
  -H "Authorization: ******" \
  -H "Content-Type: application/json" \
  -d '{"length":6}'

Response

{
  "ok": true,
  "data": {
    "answer": "AB7K9P",
    "svg": "<svg>...</svg>",
    "warning": "Hash the answer server-side."
  }
}