Developer Utilities Tier 2 Ready POST /v1/url-normalizer

URL Canonicalizer & UTM / Click-ID Tracking Stripper API

Canonicalize URLs and strip 120+ ad-tracking and click-ID parameters for clean deduplication. Canonicalize URLs for deduplication and RAG indexing: strip 120+ tracking parameters (utm_*, fbclid, gclid, msclkid, mc_eid), sort query keys, and unshorten links.

Try It Live in Your Browser · No API Key Required

1. Interactive Sandbox & Sample JSON Output

200 OK · Ready

Editable Request JSON (`POST /v1/url-normalizer`)

Live 200 OK Response Envelope

{
  "ok": true,
  "data": {
    "valid": true,
    "original_url": "HTTPS://WWW.Example.com:443/blog/post/?utm_source=newsletter&fbclid=IwAR123&id=42#section-1",
    "normalized_url": "https://www.example.com/blog/post?id=42",
    "components": {
      "scheme": "https",
      "hostname": "www.example.com",
      "port": null,
      "pathname": "/blog/post",
      "query": {
        "id": "42"
      },
      "fragment": null
    },
    "is_shortener": false,
    "unrolled": false,
    "redirect_hops": 0,
    "stripped_params": [
      "utm_source",
      "fbclid"
    ],
    "ssrf_safe": true,
    "error": null
  },
  "meta": {
    "request_id": "req_url_01",
    "ms": 1
  }
}

Get API Key on RapidAPI Get API Key on Zyla Hub Download OpenAPI 3.0.3 Spec

2. Quickstart Code Examples

Full TypeScript & Python SDK →

curl -X POST "https://api.tinplate.dev/v1/url-normalizer" \
  -H "Content-Type: application/json" \
  -H "X-RapidAPI-Key: YOUR_RAPIDAPI_KEY" \
  -d '{"url":"HTTPS://WWW.Example.com:443/blog/post/?utm_source=newsletter&fbclid=IwAR123&id=42#section-1"}'

import { TinplateClient } from "@tinplate/sdk"; // npm install @tinplate/sdk

const tinplate = new TinplateClient({
  rapidApiKey: process.env.RAPIDAPI_KEY!,
});

const { data, meta } = await tinplate.call("/v1/url-normalizer", {
  "url": "HTTPS://WWW.Example.com:443/blog/post/?utm_source=newsletter&fbclid=IwAR123&id=42#section-1"
});
console.log(`[${meta.ms} ms]`, data);

import requests

response = requests.post(
    "https://api.tinplate.dev/v1/url-normalizer",
    headers={
        "Content-Type": "application/json",
        "X-RapidAPI-Key": "YOUR_RAPIDAPI_KEY",
    },
    json={
  "url": "HTTPS://WWW.Example.com:443/blog/post/?utm_source=newsletter&fbclid=IwAR123&id=42#section-1"
}
)
print(response.json())

const response = await fetch("https://api.tinplate.dev/v1/url-normalizer", {
  method: "POST",
  headers: {
    "Content-Type": "application/json",
    "X-RapidAPI-Key": "YOUR_RAPIDAPI_KEY",
  },
  body: JSON.stringify({
  "url": "HTTPS://WWW.Example.com:443/blog/post/?utm_source=newsletter&fbclid=IwAR123&id=42#section-1"
}),
});
const result = await response.json();
console.log(result);

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "tinplate_url_normalizer",
    "arguments": {
      "url": "HTTPS://WWW.Example.com:443/blog/post/?utm_source=newsletter&fbclid=IwAR123&id=42#section-1"
    }
  }
}

OpenAPI 3.0.3 Schema Contract

Request Parameters & Response Schema Reference

Request Body Parameters (`POST /v1/url-normalizer`)

Parameter	Type & Constraints	Description
`url`required	`string` minLen: 1, maxLen: 8192	URL to canonicalize and strip tracking parameters from.
`strip_tracking`optional	`boolean` default: true	Strip UTM, click-ID (fbclid, gclid, msclkid, etc.), and email tracking parameters.
`custom_strip_params`optional	`string[]`	Additional query parameter names to remove (case-insensitive).
`sort_query`optional	`boolean` default: true	Sort remaining query parameters alphabetically by key.
`strip_fragment`optional	`boolean` default: true	Remove URL hash fragment (#...).
`strip_www`optional	`boolean` default: false	Remove leading 'www.' subdomain.
`strip_trailing_slash`optional	`boolean` default: true	Remove trailing slash from non-root paths (/blog/post/ -> /blog/post).
`force_https`optional	`boolean` default: false	Upgrade http:// scheme to https://.
`resolve_shorteners`optional	`boolean` default: false	If true, resolves redirects via the SSRF-isolated fetcher Worker before normalizing.

Response `data` Object Fields (`200 OK`)

Field	Type	Description
`valid`	`boolean`	Field 'valid'
`original_url`	`string`	Field 'original_url'
`normalized_url`	`string \| null`	Field 'normalized_url'
`components`	`object \| null`	Field 'components'
`is_shortener`	`boolean`	Field 'is_shortener'
`unrolled`	`boolean`	Field 'unrolled'
`redirect_hops`	`integer`	Field 'redirect_hops'
`stripped_params`	`string[]`	Field 'stripped_params'
`ssrf_safe`	`boolean`	Field 'ssrf_safe'
`error`	`string \| null`	Field 'error'

3. What URL Normalizer & Tracking Parameter Stripper API Detects & Validates

Strips 120+ known tracking parameters across Google Ads (gclid, gbraid, utm_*), Meta (fbclid), Microsoft (msclkid), TikTok (ttclid), HubSpot (_hsenc), Mailchimp (mc_eid), and Marketo (mkt_tok)
RFC 3986 canonicalization: lowercases scheme/host, strips default ports (:80/:443), resolves ../ dot segments, sorts retained query parameters alphabetically
Detects IDN homograph punycode domains (xn--)
Optional safe short-URL unrolling via SSRF-isolated Fetcher Worker

Honest Engineering Boundaries

4. Known Limitations & Test Verification

Release Version: v1.0.7 · Last Verified / Benchmarked: 14 November 2026 · Latency Note: Sub-millisecond figures measure in-Worker V8 compute time (typical client HTTPS network RTT to the nearest Cloudflare PoP is 15–65 ms) · See Full Portfolio Benchmarks & Corpora →

Shortener resolution is optional (resolve_redirects: true) and capped at 5 redirect hops via the SSRF-guarded fetcher.
Tested v1.0.4 (14 November 2026).

5. Marketplace Plans & Payload Quotas

Plan	Monthly Price	Included Requests	Rate Limit	Max Request Payload	Best For
BASIC	$0.00 / month	500 / month (hard limit)	10 req / min	64 KB	Evaluation, local development & CI smoke tests
PRO	$9.99 / month	15,000 / month	60 req / min	128 KB	Solo developers & production apps
ULTRA	$29.99 / month	100,000 / month	300 req / min	256 KB	Growing SaaS & multi-agent pipelines
MEGA	$79.99 / month	500,000 / month	1,000 req / min	256 KB	High-volume enterprise workloads

Subscribe on RapidAPI Subscribe on Zyla Hub Full Pricing Details

6. Frequently Asked Questions

Why normalize URLs before storing bookmarks or RAG document chunks?

Without stripping utm_*, fbclid, and gclid parameters, the same article URL gets indexed dozens of times under different cache keys.

Does it preserve functional query parameters like ?id=42 or ?page=2?

Yes, only known analytics, ad-click, and email-tracking parameters are removed; functional parameters are preserved and sorted.

Is redirect unshortening protected against SSRF?

Yes, redirect unrolling uses the edgeguard-fetcher Worker with full RFC1918/metadata IP blocking.

Zero Payload Logging

7. Data Handling, Privacy & Marketplace Proxy Disclosure

Stateless in-memory URL normalization; zero logging.

Worker Zero-Logging Guarantee: Cloudflare Workers Observability and invocation logging are disabled in configuration (observability.enabled = false, head_sampling_rate = 0, invocation_logs = false). Payloads are processed strictly in volatile V8 memory and never logged or stored by Tinplate.

Marketplace Proxies vs. Direct Bearer Key: Requests sent via RapidAPI or Zyla API Hub pass through those marketplaces' proxy infrastructure (subject to their respective privacy policies). Security-sensitive workloads requiring end-to-end zero-intermediary processing can connect directly to https://api.tinplate.dev using a Direct Bearer Key (Authorization: Bearer <API_KEY>). Read our full Privacy Notice and OpenAPI 3.0.3 JSON Schema.