xml/
Format and Validate XML
Validate and pretty-print XML. Highlights parse errors with line and column numbers.
BrowserOpen tool
Dev Security Toolkit.
Free utilities we've built for the security community: SAML, OIDC, JWT, XML, JSON, and cryptography. Most run in your browser.
saml-sp/
Test SAML (Mock SP)
Mock SP for end-to-end SAML testing. Paste IDP metadata, generate SP metadata, send AuthnRequests, decode assertions at ACS.
ServerOpen tool
saml-decoder/
Decode and Verify SAML
Decode base64-encoded SAML requests and responses. Optionally verify XML-DSIG signatures with a certificate.
BrowserOpen tool
oidc/
Test OIDC Flow
Test the OpenID Connect Authorization Code flow end-to-end with PKCE. View raw tokens and UserInfo response.
ServerOpen tool
Common questions, answered.
From teams evaluating ScrambleID as authentication infrastructure for their organization.
Who are these tools for?
Engineers, IAM architects, security professionals, and procurement teams evaluating ScrambleID's technical posture. The tools cover the protocols we use ourselves (SAML, OIDC, JWT, cryptography), so visitors can validate our claims directly rather than taking marketing copy at face value.
How do these relate to the ScrambleID product?
The tools are primitives. The ScrambleID platform is the production authentication infrastructure built on those same primitives. We ship the tools publicly because they're useful on their own, and because they show how we think about identity across web, voice, helpdesk, and AI agents.
Do I need a ScrambleID account to use these?
No. Every tool at tools.scrambleid.com is free and requires no account. Open the catalog, pick a tool, paste your data. If you're evaluating ScrambleID as authentication infrastructure for your organization, the tools are the easiest way to validate our technical claims firsthand.
Tools are a start.
The infrastructure is the product.
These utilities are useful on their own. They're also a glimpse of how we think about identity.
ScrambleID delivers the same primitives as authentication infrastructure for web, voice, helpdesk, and AI agents. One cryptographic rail, every channel, native MFA by construction.