RouteX Gateway API Catalog

High-performance, stateless web gateway endpoints running on Cloudflare Workers edge. Complete with SSRF filtering, asset rewriting, and security diagnostics.

Scalar /docs → OpenAPI 3.1 → View Raw JSON →
• 100% Stateless (Zero DB / KV) • SSRF-Protected • Edge Latency < 20ms • CORS Enabled
Gateway Base URL:

Interactive Edge API Console

Live Sandbox
Demo:
Section 1

Core Gateway Endpoints

GET /health
Stateless
Returns gateway operational status, stateless architecture confirmation, and local edge browser rendering availability.
Direct Test →
GET /proxy?url={targetUrl}
Streaming
Streams the upstream web page or resource. Automatically performs deep HTML/CSS relative URL rewriting, SPA navigation interception, and robust SSRF validation against private/loopback IP ranges.
PARAM: url (string, required) Fully-qualified HTTP or HTTPS target URL (e.g. https://example.com)
Direct Test →
GET /ip
Edge Client
Returns client public IP, Cloudflare edge Colo/datacenter code, ASN, country, and TLS cipher suite directly from edge context.
Direct Test →
GET /echo
Debugger
Echoes incoming request headers, HTTP method, client IP, and Cloudflare context back as JSON (like httpbin.org).
Direct Test →
POST /mcp
AI Protocol
Stateless Model Context Protocol (MCP) JSON-RPC 2.0 server allowing AI assistants (Cursor, Claude, Antigravity) to call RouteX tools.
Direct Test →
Section 2

Technical Compatibility Diagnostics

GET /diagnostics?url={targetUrl}
9 Probes
Executes comprehensive automated technical probes against the upstream host. Evaluates DNS resolution, TLS certificates, CSP, subresource stylesheets/images/fonts, redirect chains, bot-blocking signals, and client-side SPA routing characteristics.
PARAM: url (string, required) Audit target URL (e.g. https://example.com)
Direct Test →
Section 3

Stateless Security & Web Inspector APIs

GET /api/tools/dns?domain={domain}
DoH 1.1.1.1
Queries Cloudflare's native 1.1.1.1 DNS-over-HTTPS resolver statelessly to extract A, AAAA, MX, TXT, NS, and CNAME records with TTL and authoritative answers.
Direct Test →
GET /api/tools/tls?url={url}
TLS Audit
Evaluates target SSL/TLS configuration, protocol version (TLS 1.2/1.3), HSTS max-age, subdomain inheritance, preload eligibility, and server security headers.
Direct Test →
GET /api/tools/security-headers?url={url}
Security
Audits HTTP security response headers: Strict-Transport-Security (HSTS), Content-Security-Policy (CSP), X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy.
Direct Test →
GET /api/tools/headers?url={url}
HTTP
Extracts raw HTTP response headers returned by the upstream server along with protocol version and status code.
Direct Test →
GET /api/tools/redirects?url={url}
Tracing
Traces full HTTP 301, 302, 307, and 308 redirect hops step-by-step from initial target to terminal landing URL.
Direct Test →
GET /api/tools/links?url={url}
Crawler
Parses target HTML markup and extracts all hyperlink anchors (href), distinguishing internal domain vs external links.
Direct Test →
GET /api/tools/robots?url={url}
SEO
Retrieves upstream host robots.txt and parses Disallow, Allow, Crawl-delay, and Sitemap directives per User-agent.
Direct Test →
GET /api/tools/sitemap?url={url}
XML
Parses sitemap.xml XML documents and indexes indexed URLs, last modified dates, and change frequencies.
Direct Test →
GET /api/tools/json?url={url}
Parser
Fetches, validates, and pretty-prints JSON payloads from any public API endpoint.
Direct Test →
GET /api/tools/xml?url={url}
XML
Parses and inspects raw XML documents, detecting the root tag element, encoding, and markup structure.
Direct Test →
GET /api/tools/markdown?url={url}
AI & Text
Strips HTML boilerplate, navigation bars, scripts, and CSS, returning clean, readable Markdown text optimized for AI/LLM prompts and terminal reading.
Direct Test →
GET /api/tools/metadata?url={url}
Open Graph
Extracts Open Graph tags (og:*), Twitter Cards, canonical links, favicons, meta description, and JSON-LD structured data for link previews and SEO audits.
Direct Test →
GET /api/tools/response-info?url={url}
Metadata
Returns essential HTTP connection metadata: Content-Type, Content-Length, Charset, Server header, and round-trip time.
Direct Test →
GET /api/tools/cert?domain={domain}
Cert Transparency
Queries public crt.sh logs to inspect active SSL certificates, issuer names, validity windows, and days remaining until expiration.
Direct Test →
GET /api/tools/archive?url={url}
Wayback Machine
Queries official archive.org Wayback Machine API to find closest historical snapshots and timestamps for any public URL.
Direct Test →
POST /api/tools/batch
Multi-Probe
Probes up to 5 URLs in parallel via HTTP HEAD requests, returning status codes, content types, and round-trip latency.
Section 4

Headless Browser & Daytona Sandboxes

GET /api/daytona/status
Compute Lab
Checks whether Daytona sandboxed compute credentials, API keys, and target snapshot images are configured.
Direct Test →
POST /api/tools/render
Playwright
Renders modern client-side Single Page Applications (Next.js, React, Remix) in an isolated Daytona Chromium sandbox and returns final rendered DOM HTML.
BODY: JSON: { "url": "https://example.com", "viewport": "desktop" | "mobile" }
POST /api/tools/screenshot
Playwright
Captures a pixel-perfect PNG screenshot of any public website inside an isolated sandbox.
BODY: JSON: { "url": "https://example.com", "viewport": "desktop" | "mobile" }
Section 5

Abuse Control & Verification

POST /api/turnstile/verify
Turnstile
Validates client-side Cloudflare Turnstile CAPTCHA tokens statelessly against the Cloudflare siteverify endpoint.
BODY / PARAM: token (string, required) Turnstile challenge token string