Skip to content

Latest commit

History

166 Commits

Folders and files

NameName
Last commit message
Last commit date

Repository files navigation

SafeJSON — Verifiable Local JSON Toolkit

SafeJSON is a browser-local JSON toolkit for developers who inspect sensitive JSON, JWTs, schemas, logs, and API payloads with no pasted-content upload during core tool operations. You can verify this with DevTools.

Not just another JSON formatter. A verifiable local JSON toolkit for sensitive developer workflows.

Website:safejson.dev


How to verify local processing

You do not have to trust the claim.

  1. Open safejson.dev
  2. Open DevTools (F12) → Network tab
  3. Paste any JSON and run the formatter, diff, JWT decoder, JSONPath, or Schema
  4. Confirm: no request contains your pasted content

Detailed verification guide →


What runs locally

ToolWhat it doesProcessingFree / Pro
JSON FormatterInstant syntax-highlighted formatting with collapsible tree viewBrowser-localFree
JSON ValidatorError detection with line and column numbersBrowser-localFree
JSON BeautifierConfigurable indentation (2, 3, or 4 spaces)Browser-localFree
JSON ViewerCollapsible tree view for navigating large objectsBrowser-localFree
JSON ParserInspect structure, types, and nesting depthBrowser-localFree
CSV ↔ JSONConvert between CSV and JSON formatsBrowser-localFree
JSON DiffSide-by-side comparison with color-coded resultsBrowser-localPro
JWT DecoderDecode header, payload, and signatureBrowser-localPro
JSONPath QueryXPath-like queries against JSON dataBrowser-localPro
JSON Schema ValidatorValidate against draft-04 through 2020-12 (Ajv)Browser-localPro
Browser ExtensionAuto-detect and format raw JSON on any URLBrowser-localFree

All core processing is browser-local. No pasted-content upload. No pasted-content analytics.


Why SafeJSON exists

Developers paste API responses, JWTs, credentials, config files, logs, and production payloads into online JSON tools every day — often without checking where that data goes.

In November 2025, popular JSON formatting sites were found to have leaked over 80,000 credentials through server-side processing. Attackers were actively harvesting the data within 48 hours of the discovery.

SafeJSON was built so core JSON workflows are browser-local and verifiable. You can check the pasted-content boundary yourself with DevTools.


Proof

AssetWhat it shows
DevTools verificationFormatter: no pasted-content upload
JSON Diff proofDiff: comparison runs locally
JWT Decoder proofJWT: token decoded locally

Pricing

Core tools are free forever. Formatter, validator, beautifier, viewer, parser, and CSV conversion.

Pro is $5/month or $39/year. Unlocks JSON Diff, JWT Decoder, JSONPath Query, and JSON Schema Validator. Pro tools are built for sensitive JSON workflows — diff, decode, query, and validate with no pasted-content upload for core tool inputs. One license activates up to 2 devices. 5 free trials per tool.

Payment and license delivery handled by Lemon Squeezy.

View pricing →


Browser extension

Auto-detects and formats raw JSON responses on any URL.

Manual install from source:

git clone https://github.com/Json-Lee-git/SafeJSON
# Open chrome://extensions or edge://extensions# Enable Developer Mode → Load unpacked → select extension/ folder

Large JSON support

Formatter and Beautifier tested with 50MB JSON locally. Viewer and Parser support large local workflows. Large JSON is parsed with a Web Worker so the UI stays responsive in the tested formatter and beautifier workflows, with no pasted-content upload.


What SafeJSON does not claim

  • Not "zero network requests" (SafeJSON uses GA for aggregate analytics)
  • Not "no tracking" (GA is installed; pasted content is never sent to analytics)
  • Not "guaranteed private" or "enterprise-grade security"
  • Not "SafeJSON handles 50MB everywhere" (only Formatter + Beautifier tested)
  • Not Team / Self-hosted / SSO / compliance yet

Tech stack

Next.js 16 · React 19 · Tailwind CSS · Phosphor Icons · Vercel (static prerendering) · Lemon Squeezy License API


Development

npm install
npm run dev

Checks:

npm run lint
npm run build
npm run growth:check
npm run privacy:sentinel

Links


License

MIT

About

Browser-based JSON toolkit with verifiable browser-local workflows for formatting, validation, viewing, diffing, JWT decoding, JSONPath querying, and schema validation. Verify no pasted-content upload for core tools in DevTools -> Network.

Topics

Resources

Stars

0 stars

Watchers

0 watching

Forks

Releases

Packages

Contributors

Languages