Unicode Security Mcp

A local MCP server that lets an assistant inspect text and identifiers for Unicode confusables, mixed scripts and invisible control characters.

What you can do

• Analyze text for confusable characters, invisible controls, mixed scripts and a heuristic risk level
• Compare two identifiers through a small confusable skeleton
• Normalize a single identifier into a skeleton for local comparison

When to use it

Useful when reviewing usernames, domain-like names, package names or pasted text where lookalike characters or hidden controls could cause confusion, spoofing or hard-to-diagnose bugs.

Requirements

Runs as a local stdio process installed from the npm package; the README's run steps build it with npm and start the compiled entry point with Node.js. No authentication, environment variables or headers are declared, and it needs no network access.