Agent Tools MCP

io.github.why-seePublished by GitHub account why-seev1.1.0Updated Nov 1, 2026

32 free MCP tools for data validation, text optimization, and synthetic test data.

VerifiedStreamable HTTPWeb executableDeveloper ToolsData & Analytics

Overview

AI-generated overview

A free remote MCP endpoint with 32 utilities for validating input formats, minifying text and markup, and generating synthetic test data.

What you can do
  • Validate formats: check card numbers, emails, IBANs, VAT and US tax IDs, IPs, URLs, UUIDs, dates, phone numbers, JSON and password strength
  • Optimize text: clean JSON/JSONL/CSV datasets, rebuild GA4 gtag markup, minify HTML, JS, CSS and prompts, strip ANSI codes
  • Generate fixtures: fake users, companies, addresses and datasets, plus card numbers, SSNs, phone numbers, tokens, hashes, colors, avatars, slugs and lorem ipsum
  • Fill prompt templates with supplied variables
When to use it
Useful when an assistant needs quick, stateless checks on form-field formats, cleanup of small snippets or datasets, or placeholder data for demos, UI prototypes and import/export tests without writing throwaway scripts.
Requirements
Nothing to install: connect an MCP client to the remote Streamable HTTP endpoint. No authentication, API keys or environment variables are declared. The README notes an optional MCP_API_TOKEN Cloudflare secret on the server side and a rate limit of 30 requests per minute per IP.
Before you install
The endpoint is public and unauthenticated, so anything sent to it should be treated as exposed: do not submit real passwords, card data, tax or bank identifiers, private documents or API secrets. Generated card numbers, SSNs and seeded passwords are synthetic fixtures, not real credentials, and seeded output is predictable. Minified or optimized output should be regression-tested.

Installation

In SourceWeft

  1. Open Agent Tools MCP in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.why-see%2Fagent-tools-mcp/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "agent-tools": {
      "type": "http",
      "url": "https://agent-tools-mcp.yvan11.workers.dev/mcp"
    }
  }
}

README

Agent Tools MCP

32 free remote MCP tools for validation, optimization and synthetic test data.

Website · 32-tool directory · Health · Registry metadata · MIT License

Connect an agent

Streamable HTTP (all 32 tools): https://agent-tools-mcp.yvan11.workers.dev/mcp

Specialized connectors (same Cloudflare Worker; no extra deploys or credentials):

ConnectorToolsURL
Validators MCP12https://agent-tools-mcp.yvan11.workers.dev/mcp/validators
Optimizers MCP7https://agent-tools-mcp.yvan11.workers.dev/mcp/optimizers
Generators MCP13https://agent-tools-mcp.yvan11.workers.dev/mcp/generators

Choose the smallest relevant connector. All endpoints share the same rate limits, privacy cautions, source and deployments.

Claude Code:

sh
claude mcp add --transport http agent-tools https://agent-tools-mcp.yvan11.workers.dev/mcp

VS Code / Copilot: Command Palette → MCP: Add Server → HTTP → paste the endpoint URL.

Claude Code project .mcp.json configuration:

json
{ "mcpServers": { "agent-tools": { "type": "http", "url": "https://agent-tools-mcp.yvan11.workers.dev/mcp" } } }

VS Code .vscode/mcp.json configuration:

json
{ "servers": { "agent-tools": { "type": "http", "url": "https://agent-tools-mcp.yvan11.workers.dev/mcp" } } }

Use an MCP client rather than a browser GET request to /mcp, which can return Method not allowed by design.

Security and publishing

This is a public endpoint without authentication. Never submit real passwords, payment-card data, tax identifiers, bank information, private documents, or API secrets. Synthetic generated IDs and seeded passwords are development fixtures only. Read SECURITY.md.

The repo is public and MIT licensed, preserving the vendored source licenses. Cloudflare Workers Builds tests and deploys on commits to main; no GitHub Actions. The official registry descriptor uses io.github.why-see/agent-tools-mcp; Glama metadata identifies the maintainer. See PUBLISHING.md for a no-local-repository submission procedure. These files do not automatically publish a registry listing.

Tool inventory

Validators (12): is-card-safe, is-email-safe, is-iban-safe, is-iso-date-safe, is-ip-safe, is-json-safe, is-password-safe, is-phone-e164, is-uuid-safe, is-url-safe, is-us-tin-safe, is-vat-safe.

Optimizers (7 tools / 6 modules): optimize-dataset, optimize-google-tag, minify-html, minify-js, minify-css, minify-prompt, strip-ansi.

Generators (13): generate-avatar, generate-card-number, generate-color, generate-dataset, generate-fake-data, generate-hash, generate-lorem, generate-password, generate-phone-number, generate-prompt, generate-slug, generate-ssn, generate-token.

Optimizer MCP tool names are action-oriented, while vendored upstream file paths retain their original names. Implementations are derived from the upstream module files. Exact upstream versions and update policy are documented in UPSTREAM.md. The upstream catalogs are not complete or consistent enough to serve as the runtime source of truth; we use explicit audited function adapters.

Tests and deployment

On GitHub, push to main → Cloudflare Workers Builds performs npm test, then npx wrangler deploy only if tests pass. No GitHub Actions are present.

The test suite invokes all 32 MCP tools through the actual handler, including the initialize, tools/list, and tools/call protocol methods. It also verifies the three specialized MCP endpoints, their isolated inventories, and backward compatibility with /mcp.

The Worker has a Cloudflare native rate-limit binding (30 requests per minute per IP per data center), 8-KiB body guard and per-tool input/output bounds.

Optional MCP_API_TOKEN must be a Cloudflare secret, not a GitHub secret or a variable in wrangler.toml.

Restrictions

This public endpoint runs pure software utilities and cannot access your GitHub, Cloudflare, OpenAI or payment accounts. It is not a remotely editable filesystem. Do not send real passwords, payment details or private personal data to its validators. Generated financial identifiers and SSNs are synthetic test fixtures only. This service does not provide OAuth, client billing, SLA, global quotas or user identity.

Current catalog size is 32 MCP tool names backed by 31 original upstream modules. An update to an upstream source repo does not automatically rebuild this MCP Worker; see the explicit update policy.

The original four endpoint URLs are unchanged. The seven optimizer operation names were standardized to action-oriented forms in October 2026; clients that explicitly call a previous is-* optimizer name must refresh their tool catalog. The underlying code, inputs, outputs and tool counts are unchanged.

Source: README.md at commit 3b83f75

Tools

32

is-card-safe

Check card number structure

Check payment-card brand, length and Luhn checksum. Use with synthetic card numbers in payment-form tests. Returns {ok, normalized?, brand?, last4?, issues}; not a payment authorization or fraud check.

Parametersnumberrequired

is-email-safe

Validate email address syntax

Check conservative ASCII email address syntax. Use to reject malformed addresses in forms and test fixtures. Returns true or false; does not check mailbox existence or deliverability.

Parametersemailrequired

is-iban-safe

Check IBAN syntax and checksum

Check IBAN country rules, length and checksum against a bundled registry. Use to screen public or synthetic IBANs in test data. Returns {ok, normalized?, issues}; does not verify account ownership or transferability.

Parametersibanrequired

is-iso-date-safe

Validate an ISO calendar date

Check Gregorian YYYY-MM-DD calendar dates, including leap days. Use for date-only form fields, not timestamps or timezone offsets. Returns true for a valid date, otherwise false.

Parametersdaterequired

is-ip-safe

Validate IPv4 or IPv6 address syntax

Check IPv4 or IPv6 literal-address syntax. Use to screen candidate IP strings, not test reachability or geolocation. Returns {ok, version, issues}; version is 4, 6 or null.

Parametersiprequired

is-json-safe

Parse JSON under safety limits

Parse JSON with bounded depth, key counts and input size. Use to screen JSON without execution; use optimize-dataset for JSONL or CSV cleanup. Returns {ok, issues, bytes, depth, keys, value?}; parsed value is included only when valid.

Parametersjsonrequired

is-password-safe

Assess password strength heuristically

Evaluate password strength using local heuristics. Use only with dummy passwords when testing password policies. Returns {ok, score, entropyBits, length, sets, reasons, suggestions}; no breach-database lookup.

Parameterspasswordrequired

is-phone-e164

Validate E.164 phone number syntax

Check phone number syntax against E.164 after local normalization. Use to test international number formats, including spaces or 00 prefixes. Returns true or false, not the normalized number; no subscriber or reachability check.

Parametersphonerequired

is-uuid-safe

Validate canonical UUID syntax

Check canonical UUID syntax and optional RFC variant/version. Use to validate UUIDs; use generate-token to create them. Returns true or false; does not check uniqueness or resource existence.

Parametersuuidrequiredversion

is-url-safe

Validate HTTP or HTTPS URL syntax

Check absolute HTTP or HTTPS URL syntax. Use to screen links before display or storage. Returns true or false; does not visit or assess the site's safety.

Parametersurlrequired

is-us-tin-safe

Check US tax ID format

Check synthetic US EIN, SSN or ITIN number formats. Use with tax-ID input fixtures, never real personal identifiers. Returns {ok, normalized?, type, issues}; does not verify IRS issuance or identity.

Parameterstinrequired

is-vat-safe

Validate European VAT number format

Check country-specific VAT number patterns. Use to screen VAT fixtures before form submission. Returns {ok, country?, normalized?, issues}; no VIES lookup or active-registration check.

Parametersvatrequired

optimize-dataset

Minify small structured datasets

Clean and compact JSON, JSONL or CSV rows. Use for small datasets; use is-json-safe to check JSON syntax without changes. Returns text in the selected format; trims strings, deduplicates rows and may drop mostly empty columns.

Parametersinputrequiredformat

optimize-google-tag

Optimize an existing Google tag snippet

Rebuild GA4 gtag.js markup from a G- measurement ID. Use on existing GA4 snippets, not GTM containers or consent setup. Returns replacement HTML with async loading and a config call, or original input if no G- ID exists. Review lost settings and consent.

Parametershtmlrequired

minify-html

Minify an HTML fragment

Remove comments and compact whitespace in HTML fragments. Use for small, controlled HTML snippets, not full document compilation. Returns an HTML string; preserves pre, textarea, script and style contents. Regression-test rendered output.

Parametershtmlrequired

minify-js

Compact JavaScript source

Compact small JavaScript snippets. Use for basic source cleanup, not AST-aware production minification. Returns JavaScript text, sometimes unchanged for complex syntax; regression-test its behavior.

Parameterscoderequired

minify-css

Compact CSS source

Reduce whitespace in CSS snippets. Use for basic stylesheet cleanup rather than production minification. Not a full CSS parser; visually test the result.

Parameterscoderequired

minify-prompt

Reduce prompt verbosity and whitespace

Normalize prompt whitespace and line breaks. Use to compact formatting before calling a model; filler phrases are not removed. Returns trimmed text with normalized spacing; review prompts where whitespace carries meaning.

Parameterstextrequired

strip-ansi

Remove terminal ANSI escape codes

Strip terminal ANSI escape codes from text. Use to make colorized logs readable for indexing or display. Returns plain text without interpreting log entries.

Parameterstextrequired

generate-avatar

Generate an SVG placeholder avatar

Create an SVG placeholder profile icon. Use for synthetic avatars in demos and UI prototypes. Returns SVG markup, not a photorealistic likeness.

Parametersseedsizetextpattern

generate-card-number

Generate a synthetic payment card fixture

Generate a synthetic payment-card fixture. Use for payment-form UI tests requiring a Luhn-valid card number. Returns {number, brand, expiry, cvc}; values are synthetic, not issued credentials.

Parametersseedbrand

generate-color

Generate an illustrative color palette

Generate a palette from a base color and harmony scheme. Use for design prototypes; defaults: random base, triadic scheme, five hex colors. Returns {base, scheme, colors, textOnBase}; text color is heuristic, not a WCAG contrast check.

Parametersbaseseedcountformatscheme

generate-dataset

Generate a small synthetic dataset

Generate synthetic rows as JSON, JSONL or CSV. Use for data import/export tests; use generate-fake-data for preset people or company fixtures. Returns at most eight records without accessing a database.

Parametersseedcountformatschema

generate-fake-data

Generate fictional people and company records

Create fictional users, companies, addresses or rows. Use to seed demos with preset records; use generate-dataset for custom fields. Synthetic values are not verified identities.

Parameterskindrequiredseedcount

generate-hash

Compute a text digest

Compute SHA-256 or legacy MD5 text digests. Use for non-secret content fingerprints; generate-token creates new IDs instead. Returns a hex digest; unsuitable for password storage or key derivation.

Parametersalgotextrequired

generate-lorem

Create filler copy for layouts

Generate lorem ipsum placeholder copy. Use for mock layouts needing filler words, sentences or paragraphs. Returns synthetic copy, not sourced editorial content.

Parametersseedcountunits

generate-password

Generate a random test password

Generate random or seeded test passwords. Use for demo login fields; use generate-token for identifiers. Seeded values are predictable and visible to MCP clients; not a secure credential vault.

Parametersseedlengthsymbols

generate-phone-number

Generate fictional US phone fixtures

Generate fictional US-format phone numbers. Use for US demo phone fields; when supplied, city selects a local area-code pool and must match state. Returns an array of fictional (AAA) 555-01XX numbers; no subscriber lookup.

Parameterscityseedcountstate

generate-prompt

Fill a prompt template with variables

Fill a prompt template with supplied variables. Use {name} placeholders with matching vars.name; missing variables become empty text. Returns a prompt string without invoking a model; code/image modes can add framing.

Parametersseedtypevarstemplaterequired

generate-slug

Turn a title into a URL slug

Convert a title into a Unicode-aware URL slug. Use when forming new path segments from headings. Inspect output before publishing permanent URLs.

ParameterstextrequiredmaxLength

generate-ssn

Generate fictional US SSN-style identifiers

Generate fictional US SSN-style test identifiers. Use for SSN test fields; use generate-fake-data for mixed-record fixtures. Returns a string for count=1, otherwise an array; structural validity does not confirm issuance.

Parametersseedcountvalidformatted

generate-token

Generate random tokens or UUIDs

Generate token strings or UUIDs. Use for test identifiers; use generate-password for password fixtures. Seeded output is predictable and unsuitable for authentication credentials.

Parametersseedtyperequiredlength

Version history

1
  1. v1.1.0LatestOct 18, 2026

Score

90% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.