Universal Link Tester
Test and validate iOS Universal Links, Android App Links, and custom URI schemes with AASA / AssetLinks JSON validators, fallback simulators, and QR verification.
All link analysis and configuration JSON checks execute securely in browser memory.
Enter a universal link or choose a sample preset below to start auditing.
Mobile Deep Link Input
Mobile Deep Link Verification and App Routing Manifest Analysis
The Universal Link and App Routing Tester provides an interactive diagnostic suite for auditing mobile deep links, universal routing architectures, and associated server manifest configurations. Modern mobile applications rely on deep linking to transition users from mobile web pages, emails, and social feeds directly into specific in-app views. When configured correctly, deep links increase user engagement and preserve attribution tracking. When misconfigured, they trigger browser error popups, drop context, and frustrate users.
This diagnostic tool classifies incoming link strings into their proper architectural category: standard HTTPS web links, Apple Universal Links, Android App Links, Android Intent URIs, or legacy custom URI schemes (such as myapp://). The engine inspects URI syntax, extracts path hierarchies and query parameter dictionaries, and evaluates server configuration manifests including the Apple App Site Association (apple-app-site-association) file and the Android Digital Asset Links (assetlinks.json) declaration. It generates live sample JSON files and validates SHA-256 certificate fingerprints against official platform specifications.
It is vital to distinguish between static manifest auditing and actual native operating system dispatch. A web browser runtime can parse URI structures, lint server configuration files, and generate physical device testing QR codes, but it cannot trigger native iOS SpringBoard or Android IntentManager dispatch routines without a physical mobile device. This utility bridges that gap by pairing comprehensive static syntax validation with real-device QR code scanning, executing all processing locally in browser memory with zero server transmission.
Core Tool Capabilities
- Deep Link Scheme Classification and Syntax Parsing: Categorizes input links into Apple Universal Links, Android App Links, Android Intent URIs, or custom application schemes.
- Apple App Site Association (AASA) Schema Linter: Validates and formats apple-app-site-association JSON files, checking Team ID, Bundle ID, and pattern matching syntax rules.
- Android Digital Asset Links JSON Validator: Lints assetlinks.json manifests, verifying package names and 32-byte colon-separated SHA-256 certificate fingerprints.
- Operating System Fallback Behavior Simulation: Simulates expected routing behaviors on iOS and Android when the target application is installed versus when it is missing.
- Physical Device QR Code Generation: Generates high-resolution QR codes to facilitate immediate mobile camera testing on physical iPhone and Android hardware.
- Client-side In-Memory Execution: Runs all JSON linting, schema validation, and QR rendering locally in browser memory, keeping private package names confidential.
Local Browser Privacy
Your files are processed locally on your device. Files are not uploaded, transmitted, or stored on remote servers.
Once the page has loaded, you can disconnect your network connection and continue using this tool offline.
Target Use Cases
- • Mobile Application Marketing and User Onboarding
- • Eliminating Broken Browser Dialogs and Fallback Errors
- • Server-Side Well-Known Manifest Deployment
- • Quality Assurance and Staging Regression Auditing
Technical Specifications & Platform Limits
Comprehensive coverage of modern and legacy mobile deep linking protocols.
Official Apple Developer and Google Android Digital Asset Links specifications.
Validates release keystore signing fingerprints for Android verification.
Enables instant over-the-air camera testing on physical test devices.
Pure local analysis executed with zero external server network requests.
Step-by-Step Workflow
Input Target Deep Link or URI Scheme
Enter your HTTPS universal link, custom application scheme, or select a built-in e-commerce or streaming test preset.
Inspect Route Components and Anatomy
Review the classified link type, extracted scheme, host domain, path hierarchy, and query parameter dictionary.
Audit Server Manifest Configuration
Review and lint the generated apple-app-site-association and assetlinks.json manifests for deployment to /.well-known/.
Scan Test QR Code on Physical Device
Scan the generated QR code using your iPhone or Android camera to verify real-world application launch behavior.
Practical Real-World Use Cases
Mobile Application Marketing and User Onboarding
Growth marketers and mobile engineers verifying promotional deep links before launching multi-channel ad campaigns.
Eliminating Broken Browser Dialogs and Fallback Errors
Web development teams replacing fragile custom URI schemes with verified universal links that gracefully open web pages.
Server-Side Well-Known Manifest Deployment
DevOps engineers generating compliant AASA and AssetLinks manifests for deployment on Nginx, Cloudflare, S3, or Firebase.
Quality Assurance and Staging Regression Auditing
QA engineers testing deep link routing behavior across staging and production builds using camera scan workflows.
Frequently Asked Questions
- Why are HTTPS Universal Links and Android App Links superior to custom URI schemes?
- Custom URI schemes like myapp:// have significant security and usability drawbacks. If a user does not have the corresponding application installed, mobile browsers like Safari display an error dialog stating that the address is invalid. Furthermore, custom schemes cannot be cryptographically claimed, meaning malicious apps can register the same scheme to hijack sensitive payloads. In contrast, HTTPS Universal Links and Android App Links use domain verification to guarantee ownership and fall back to your normal website if the app is not installed.
- Where must the apple-app-site-association file be hosted on a web server?
- Apple requires the apple-app-site-association file to be hosted at https://yourdomain.com/.well-known/apple-app-site-association over a secure HTTPS connection. The file must be served directly from your origin without redirects, using the application/json MIME type, and it must not have a .json file extension in the URL path. If the well-known directory cannot be used, Apple permits hosting the file at the root path as a secondary fallback.
- How does Android verify Digital Asset Links during application installation?
- When an Android application declaring an autoVerify intent filter is installed, the Android operating system issues an HTTPS GET request to https://yourdomain.com/.well-known/assetlinks.json. The OS inspects the JSON array to confirm that the package name matches and that the declaring app was signed with a certificate whose SHA-256 fingerprint matches the fingerprint listed in the statement. If verification succeeds, links pointing to that domain open the native app directly without prompting the user.
- Can a client-side browser tool simulate end-to-end native OS application launches?
- No, a browser-based tool cannot execute native operating system dispatch routines. Web browsers operate inside a sandboxed security model that prevents web scripts from directly interrogating the local device package manager or forcing other native applications to open. This tool performs deep static syntax validation, lints manifest schemas, and models expected routing behaviors, but testing actual native app handoffs requires scanning the generated QR code on a physical mobile device with the app installed.
- Are my internal deep links, proprietary package names, or SHA-256 fingerprints sent to remote servers?
- No. All URI classification, path decomposition, JSON manifest generation, schema validation, and QR code rendering execute entirely inside your local browser memory using client-side JavaScript. Proprietary mobile package names, secret route parameters, and internal staging domains are never transmitted across the network, logged in remote databases, or shared with third parties. You can safely inspect confidential application routes completely offline.
Share this tool
Help others discover this utility. No login or registration required.
Master this tool with Guides & Articles
Learn the workflows, common mistakes, and advanced techniques behind Universal Link Tester - Validate Deep Links and App Routing with our deep-dive educational content.
How to Check File Size Before Uploading Files Online
Learn how to check file size before uploading files to email platforms, CMS systems, cloud storage, APIs, and messaging apps. Explore browser-native payload analysis, upload compatibility checks, transfer estimates, and file optimization workflows with SHRTX.
Deep Linking Guide: Connecting Web, Mobile, and Desktop Routes
Learn how deep links, Universal Links, Android App Links, fallback URLs, QR flows, and deferred routing connect app paths.
Designing Glitch Art with Browser-Native Image Workflows
Learn databending, JPEG and PNG corruption behavior, pixel-sorting pipelines, and browser-local rendering workflows for glitch art.