Question 1

Does BraceJSON send my JSON to a server?

Accepted Answer

No. Every operation — parse, format, repair, scan, redact, convert, diff — runs in your browser's JavaScript engine. A Content-Security-Policy with connect-src 'none' is enforced, so the browser physically blocks any outbound network call. You can verify this in DevTools.

Question 2

What kinds of broken JSON can it repair?

Accepted Answer

Trailing commas, missing commas, missing colons, missing brackets, mismatched brackets, single quotes, smart quotes, JS-style comments, unquoted keys, NaN/Infinity/undefined values, and bracket rebalancing.

Question 3

What secrets does the scanner detect?

Accepted Answer

Built-in: JWTs, AWS access keys, email addresses, Luhn-valid credit card numbers, and high-entropy values near sensitive keys (token, password, api_key). You can also define custom regex patterns for organization-specific secrets, stored only in your browser.

Question 4

Is BraceJSON free?

Accepted Answer

Yes. Free, ad-free, tracker-free. No analytics, no cookies, no newsletter, no account.