lecode

Why Devtools will never have a server

September 8, 2026 · admin@lecode.tech

Devtools has a JSON formatter, a JWT decoder, a CIDR calculator, and a dozen other things you reach for mid-deploy. None of them talk to a server. Not because a server would be hard to add — a formatter-as-a-service is a weekend project — but because the moment Devtools makes a network call, it stops being safe to paste a production token into it.

The constraint is the feature

Most developer tool sites are, technically, logging services with a UI on top. Paste a JWT to decode it, and the request goes through someone's infrastructure first — logged, cached, maybe retained for analytics you never agreed to. It's rarely malicious. It's just the default shape of a web app: client sends data, server processes it, server can see everything it processes.

Devtools breaks that shape on purpose. Every tool runs entirely on-device, in the app's own process. There's no endpoint to paste a secret into by accident, because there's no endpoint at all for the tools themselves.

What this costs

Going server-less isn't free. It means no shared history across devices, no team features, no way to push a config update to a tool's logic without shipping a new app version. Every one of those is a real feature other tools offer, and Devtools doesn't have any of them.

That's a trade I'll keep making. The people reaching for a CIDR calculator or a JWT decoder mid-incident are, disproportionately, the people who most need to know their input isn't going anywhere. A slightly less convenient tool that's actually safe to use with real infrastructure beats a slicker one you have to think twice before using.

Offline-first isn't a marketing checkbox

It's a constraint that shapes every design decision downstream — no cloud sync means the local storage format has to be right the first time, no server-side validation means the client has to be genuinely correct, not just fast. It's more work up front. It's also the only way I'd trust a tool like this with my own production configs, so it's the only way I'd ship it.

privacyoffline-firstengineering
Why Devtools will never have a server