RouteX Gateway API Catalog
High-performance, stateless web gateway endpoints running on Cloudflare Workers edge. Complete with SSRF filtering, asset rewriting, and security diagnostics.
• 100% Stateless (Zero DB / KV)
• SSRF-Protected
• Edge Latency < 20ms
• CORS Enabled
Interactive Edge API Console
Live Sandbox
Streaming live request via Cloudflare Workers edge...
200 OK
-- ms
Section 1
Core Gateway Endpoints
GET
/health
Stateless
Returns gateway operational status, stateless architecture confirmation, and local edge browser rendering availability.
GET
/proxy?url={targetUrl}
Streaming
Streams the upstream web page or resource. Automatically performs deep HTML/CSS relative URL rewriting, SPA navigation interception, and robust SSRF validation against private/loopback IP ranges.
PARAM:
url
(string, required)
Fully-qualified HTTP or HTTPS target URL (e.g.
https://example.com)
GET
/ip
Edge Client
Returns client public IP, Cloudflare edge Colo/datacenter code, ASN, country, and TLS cipher suite directly from edge context.
GET
/echo
Debugger
Echoes incoming request headers, HTTP method, client IP, and Cloudflare context back as JSON (like httpbin.org).
POST
/mcp
AI Protocol
Stateless Model Context Protocol (MCP) JSON-RPC 2.0 server allowing AI assistants (Cursor, Claude, Antigravity) to call RouteX tools.
Section 2
Technical Compatibility Diagnostics
GET
/diagnostics?url={targetUrl}
9 Probes
Executes comprehensive automated technical probes against the upstream host. Evaluates DNS resolution, TLS certificates, CSP, subresource stylesheets/images/fonts, redirect chains, bot-blocking signals, and client-side SPA routing characteristics.
PARAM:
url
(string, required)
Audit target URL (e.g.
https://example.com)
Section 3
Stateless Security & Web Inspector APIs
GET
/api/tools/dns?domain={domain}
DoH 1.1.1.1
Queries Cloudflare's native 1.1.1.1 DNS-over-HTTPS resolver statelessly to extract A, AAAA, MX, TXT, NS, and CNAME records with TTL and authoritative answers.
GET
/api/tools/tls?url={url}
TLS Audit
Evaluates target SSL/TLS configuration, protocol version (TLS 1.2/1.3), HSTS max-age, subdomain inheritance, preload eligibility, and server security headers.
GET
/api/tools/security-headers?url={url}
Security
Audits HTTP security response headers: Strict-Transport-Security (HSTS), Content-Security-Policy (CSP), X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy.
GET
/api/tools/headers?url={url}
HTTP
Extracts raw HTTP response headers returned by the upstream server along with protocol version and status code.
GET
/api/tools/redirects?url={url}
Tracing
Traces full HTTP 301, 302, 307, and 308 redirect hops step-by-step from initial target to terminal landing URL.
GET
/api/tools/links?url={url}
Crawler
Parses target HTML markup and extracts all hyperlink anchors (href), distinguishing internal domain vs external links.
GET
/api/tools/robots?url={url}
SEO
Retrieves upstream host
robots.txt and parses Disallow, Allow, Crawl-delay, and Sitemap directives per User-agent.
GET
/api/tools/sitemap?url={url}
XML
Parses
sitemap.xml XML documents and indexes indexed URLs, last modified dates, and change frequencies.
GET
/api/tools/json?url={url}
Parser
Fetches, validates, and pretty-prints JSON payloads from any public API endpoint.
GET
/api/tools/xml?url={url}
XML
Parses and inspects raw XML documents, detecting the root tag element, encoding, and markup structure.
GET
/api/tools/markdown?url={url}
AI & Text
Strips HTML boilerplate, navigation bars, scripts, and CSS, returning clean, readable Markdown text optimized for AI/LLM prompts and terminal reading.
GET
/api/tools/metadata?url={url}
Open Graph
Extracts Open Graph tags (og:*), Twitter Cards, canonical links, favicons, meta description, and JSON-LD structured data for link previews and SEO audits.
GET
/api/tools/response-info?url={url}
Metadata
Returns essential HTTP connection metadata: Content-Type, Content-Length, Charset, Server header, and round-trip time.
GET
/api/tools/cert?domain={domain}
Cert Transparency
Queries public crt.sh logs to inspect active SSL certificates, issuer names, validity windows, and days remaining until expiration.
GET
/api/tools/archive?url={url}
Wayback Machine
Queries official archive.org Wayback Machine API to find closest historical snapshots and timestamps for any public URL.
POST
/api/tools/batch
Multi-Probe
Probes up to 5 URLs in parallel via HTTP HEAD requests, returning status codes, content types, and round-trip latency.
Section 4
Headless Browser & Daytona Sandboxes
GET
/api/daytona/status
Compute Lab
Checks whether Daytona sandboxed compute credentials, API keys, and target snapshot images are configured.
POST
/api/tools/render
Playwright
Renders modern client-side Single Page Applications (Next.js, React, Remix) in an isolated Daytona Chromium sandbox and returns final rendered DOM HTML.
BODY:
JSON: { "url": "https://example.com", "viewport": "desktop" | "mobile" }
POST
/api/tools/screenshot
Playwright
Captures a pixel-perfect PNG screenshot of any public website inside an isolated sandbox.
BODY:
JSON: { "url": "https://example.com", "viewport": "desktop" | "mobile" }
Section 5
Abuse Control & Verification
POST
/api/turnstile/verify
Turnstile
Validates client-side Cloudflare Turnstile CAPTCHA tokens statelessly against the Cloudflare siteverify endpoint.
BODY / PARAM:
token
(string, required)
Turnstile challenge token string