diff --git a/contrib/tools/api/moderate.js b/contrib/tools/api/moderate.js
new file mode 100644
index 0000000..66dac31
--- /dev/null
+++ b/contrib/tools/api/moderate.js
@@ -0,0 +1,51 @@
+var http = require('http');
+
+var makeIpBan = function(cidr, privkey, cb) {
+  cb({
+    message: "overchan-inet-ban "+cidr;
+    name: "mod#"+privkey,
+    frontend: "memegod.censor",
+    newsgroup: "ctl"
+  })
+}
+
+var makeDeletePosts = function(msgids, privkey, cb) {
+  cb({
+    message: "\ndelete ".join(msgids)
+    name: "mod#"+privkey,
+    frontend: "memegod.censor",
+    newsgroup: "ctl",
+  })
+}
+
+var moderate = function(req) {
+
+  j = JSON.stringify(req);
+
+  var r = http.request({
+    port: 8800,
+    method: "POST",
+    path: "/api/post",
+    auth: "user:pass",
+    headers: {
+      "Content-Type": "text/json",
+      "Content-Length": j.length
+    }
+  }, function (res) {
+    res.on('data', function (chunk) {
+      var r = chunk.toString();
+      var rj = JSON.parse(r);
+      console.log(rj.id);
+    });
+  });
+
+  r.write(j);
+  r.end();
+}
+
+var privateKey = "longhexgoestripcodegoeshere";
+
+// ban 192.168.0.1/16 and sign with private key
+moderate(makeIpBan("192.168.0.1/16", privateKey));
+// delete <msg1@place.tld> and <msg2@otherplace.tld> and sign with private key
+moderate(makeDeletPosts(["<msg1@place.tld>", "<msg2@otherplace.tld>"], privateKey));