
DevUtils MCP Server
io.github.paladiniPublished by GitHub account paladiniv1.1.0Updated Oct 24, 2026
36 local developer utilities for AI agents. Hash, encoding, UUID, JWT, JSON, network, text.
Overview
A local stdio MCP server bundling 36 everyday developer utilities — hashing, encoding, UUIDs, JWT, JSON, network and text tools — for AI assistants.
- What you can do
- Hash and verify strings with MD5, SHA-1, SHA-256, SHA-512 and bcrypt
- Encode and decode Base64, URL, HTML entities and hex
- Generate UUIDs, NanoIDs, passwords and random hex strings
- Decode and validate JWTs, format, validate and query JSON by path
- Convert timestamps, number bases, colors and byte units
- Calculate CIDR ranges, validate IPs, and analyze or transform text (stats, case, slugify, regex test, diff, lorem ipsum)
- When to use it
- Useful when an assistant needs reliable, validated utility operations inside multi-step workflows — hashing, encoding, ID generation, JWT inspection or JSON cleanup — instead of improvising them. Not needed for writing ordinary application code, where native libraries are faster.
- Requirements
- Runs locally over stdio; Node.js 18+ (Node 22 recommended) for the npm package, or Docker for the container image. No accounts, API keys or environment variables are declared, and the tools make no network calls.
Installation
In SourceWeft
- Open DevUtils MCP Server in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
DevUtils MCP Server
36 everyday developer tools for any MCP-compatible AI assistant. Hashing, encoding, UUID generation, JWT decoding, JSON formatting, network tools, text utilities, and more — all local, no external APIs.
Think of it as busybox for developer tools — small, essential, and always useful.
[License: MIT] [MCP] [npm] [Docker] [Glama] [Smithery] [MCP Registry] [GitHub stars]
Also available as a plugin: devutils-cursor-plugin — one-click install for Cursor and Claude Code.
[Add DevUtils to Cursor] [Install DevUtils in VS Code]
[DevUtils MCP Server demo — UUID generation, JWT decode, JSON validation]
Why?
Every developer needs to hash strings, encode/decode data, generate UUIDs, decode JWTs, format JSON, calculate CIDR ranges, and convert timestamps every day. DevUtils MCP Server brings all of these tools directly into your AI assistant — works with Claude, Cursor, VS Code, Windsurf, and any other MCP-compatible client.
Installation
Prerequisite: Node.js 18+ (Node 22 recommended). Verify with
node -v.
One-click / plugin
Use the Add to Cursor / VS Code badges above, or install the plugin:
Cursor: Settings → Customize, or add from GitHub paladini/devutils-cursor-plugin.
npx (no install)
npm
Docker
Official MCP Registry
Listed as io.github.paladini/devutils-mcp-server. Search for io.github.paladini/devutils.
GitHub Packages
Releases are dual-published to npm and GitHub Packages as @paladini/devutils-mcp-server (see .github/workflows/release.yml). Prefer the public npm package for most installs; use GitHub Packages when you already authenticate against npm.pkg.github.com.
Smithery
Also available on Smithery.
Client setup
Cursor
One-click: use the Add to Cursor badge at the top of this README.
Plugin (recommended): Install DevUtils MCP from Cursor Settings → Customize.
Manual: Add to ~/.cursor/mcp.json:
Claude Desktop
Add to ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):
Or with Docker:
Claude Code
VS Code (GitHub Copilot)
One-click: use the VS Code badge at the top, or add to .vscode/mcp.json / user settings:
Windsurf
Add to ~/.codeium/windsurf/mcp_config.json:
Docker MCP Toolkit (Docker Desktop)
If this server is available in the Docker MCP Catalog:
- Open Docker Desktop → MCP Toolkit
- Search for DevUtils
- Click Enable
Local development
Available tools (36)
Hash (6)
Encoding (8)
Generators (4)
JWT (2)
Formatters (3)
Converters (5)
Network (2)
Text (6)
Architecture
Tech stack: TypeScript + Node.js 22 · @modelcontextprotocol/sdk · bcryptjs · nanoid · zod
Zero external API dependencies. All tools run locally with no network calls.
Docker
The image uses a multi-stage build for minimal size:
- Build stage: Compiles TypeScript on Node 22 Alpine
- Runtime stage: Runs compiled JS on Node 22 Alpine as a non-root user
FAQ & design philosophy
Why MCP, and not just a library?
Valid criticism: If you're writing Python scripts and need to hash something, hashlib is 2 lines of code. Why run MCP overhead?
Answer: This server is optimized for AI agents in multi-step workflows, not programmers writing code:
- AI hallucination cost >> MCP overhead — An AI model spending 50ms calling an MCP tool (vs. 1ms library call) is negligible when the alternative is the model making up a hash or using the wrong encoding.
- Reliable tool semantics — MCP enforces strict tool contracts. For example,
jwt_decodealways returns human-readable dates with timezone support. - Universally accessible — Any MCP-compatible client can use these tools. A Python library only works if your agent is Python-based.
- Multi-tenant safety — MCP provides explicit tool whitelisting with input validation.
When to use DevUtils versus alternatives
Use DevUtils if:
- You're using Claude, Cursor, VS Code Copilot, Windsurf, or any MCP-compatible AI assistant
- You want reliable, validated utility operations in AI workflows
- You need 36 tools in one package
Don't use DevUtils if:
- You're writing regular application code (use native libraries)
- You need extreme performance (direct library calls are faster)
- Your AI client does not support MCP
Design philosophy
- Small & focused: 36 utilities, zero external APIs, ~50MB container
- Security-first: Non-root user, Alpine Linux, minimal attack surface
- AI-friendly: Consistent naming (
<domain>_<operation>), strict schemas, human-readable outputs - Client-agnostic: Works with any MCP-compatible client via stdio transport
Available on
Contributing
Questions and ideas: GitHub Discussions
Security reports: see SECURITY.md.
- Fork the repository
- Create your feature branch (
git checkout -b feat/amazing-tool) - Commit your changes (
git commit -m 'feat: add amazing tool') - Push to the branch (
git push origin feat/amazing-tool) - Open a Pull Request
See CHANGELOG.md.
License
MIT © Fernando Paladini
Source: README.md at commit 831a5e9
Tools
0Version history
1- v1.1.0LatestSep 16, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts