
DevUtils MCP Server
io.github.paladini由 GitHub 帳號 paladini 發布v1.1.0更新於 Oct 24, 2026
36 local developer utilities for AI agents. Hash, encoding, UUID, JWT, JSON, network, text.
概覽
本機 stdio MCP 伺服器,內建 36 個常用開發者工具(雜湊、編碼、UUID、JWT、JSON、網路與文字),供 AI 助理呼叫。
- 可以做什麼
- 以 MD5、SHA-1、SHA-256、SHA-512 與 bcrypt 計算雜湊並驗證
- 對 Base64、URL、HTML 實體與十六進位進行編碼與解碼
- 產生 UUID、NanoID、密碼與隨機十六進位字串
- 解碼與驗證 JWT,格式化、驗證 JSON 並依路徑取值
- 轉換時間戳、進位、顏色與位元組單位
- 計算 CIDR 網段、驗證 IP,並統計、轉換、比較文字(字數、命名風格、slug、正規表達式測試、差異、佔位文字)
- 適用情境
- 適合在助理執行多步驟工作時提供可靠且經驗證的工具操作,例如雜湊、編碼、產生 ID、解析 JWT 或整理 JSON,不必自行臆測結果。若只是撰寫一般應用程式碼,直接使用原生函式庫更快,不需安裝。
- 執行需求
- 以 stdio 在本機執行;npm 套件需要 Node.js 18 以上(建議 22),也可使用 Docker 映像。未宣告任何帳號、API 金鑰或環境變數,工具本身不會發出網路請求。
安裝
在 SourceWeft 中
- 開啟 儀表板中的 DevUtils MCP Server,將其新增到工作區。
- 為需要使用其工具的對話啟用該服務。
Desktop only,透過 STDIO。 STDIO 服務會啟動本機處理程序,因此需要 SourceWeft 桌面主機。
其他 MCP 客戶端
參照 儲存庫 中的啟動說明。
README
DevUtils MCP Server
36 everyday developer tools for any MCP-compatible AI assistant. Hashing, encoding, UUID generation, JWT decoding, JSON formatting, network tools, text utilities, and more — all local, no external APIs.
Think of it as busybox for developer tools — small, essential, and always useful.
[License: MIT] [MCP] [npm] [Docker] [Glama] [Smithery] [MCP Registry] [GitHub stars]
Also available as a plugin: devutils-cursor-plugin — one-click install for Cursor and Claude Code.
[Add DevUtils to Cursor] [Install DevUtils in VS Code]
[DevUtils MCP Server demo — UUID generation, JWT decode, JSON validation]
Why?
Every developer needs to hash strings, encode/decode data, generate UUIDs, decode JWTs, format JSON, calculate CIDR ranges, and convert timestamps every day. DevUtils MCP Server brings all of these tools directly into your AI assistant — works with Claude, Cursor, VS Code, Windsurf, and any other MCP-compatible client.
Installation
Prerequisite: Node.js 18+ (Node 22 recommended). Verify with
node -v.
One-click / plugin
Use the Add to Cursor / VS Code badges above, or install the plugin:
Cursor: Settings → Customize, or add from GitHub paladini/devutils-cursor-plugin.
npx (no install)
npm
Docker
Official MCP Registry
Listed as io.github.paladini/devutils-mcp-server. Search for io.github.paladini/devutils.
GitHub Packages
Releases are dual-published to npm and GitHub Packages as @paladini/devutils-mcp-server (see .github/workflows/release.yml). Prefer the public npm package for most installs; use GitHub Packages when you already authenticate against npm.pkg.github.com.
Smithery
Also available on Smithery.
Client setup
Cursor
One-click: use the Add to Cursor badge at the top of this README.
Plugin (recommended): Install DevUtils MCP from Cursor Settings → Customize.
Manual: Add to ~/.cursor/mcp.json:
Claude Desktop
Add to ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):
Or with Docker:
Claude Code
VS Code (GitHub Copilot)
One-click: use the VS Code badge at the top, or add to .vscode/mcp.json / user settings:
Windsurf
Add to ~/.codeium/windsurf/mcp_config.json:
Docker MCP Toolkit (Docker Desktop)
If this server is available in the Docker MCP Catalog:
- Open Docker Desktop → MCP Toolkit
- Search for DevUtils
- Click Enable
Local development
Available tools (36)
Hash (6)
Encoding (8)
Generators (4)
JWT (2)
Formatters (3)
Converters (5)
Network (2)
Text (6)
Architecture
Tech stack: TypeScript + Node.js 22 · @modelcontextprotocol/sdk · bcryptjs · nanoid · zod
Zero external API dependencies. All tools run locally with no network calls.
Docker
The image uses a multi-stage build for minimal size:
- Build stage: Compiles TypeScript on Node 22 Alpine
- Runtime stage: Runs compiled JS on Node 22 Alpine as a non-root user
FAQ & design philosophy
Why MCP, and not just a library?
Valid criticism: If you're writing Python scripts and need to hash something, hashlib is 2 lines of code. Why run MCP overhead?
Answer: This server is optimized for AI agents in multi-step workflows, not programmers writing code:
- AI hallucination cost >> MCP overhead — An AI model spending 50ms calling an MCP tool (vs. 1ms library call) is negligible when the alternative is the model making up a hash or using the wrong encoding.
- Reliable tool semantics — MCP enforces strict tool contracts. For example,
jwt_decodealways returns human-readable dates with timezone support. - Universally accessible — Any MCP-compatible client can use these tools. A Python library only works if your agent is Python-based.
- Multi-tenant safety — MCP provides explicit tool whitelisting with input validation.
When to use DevUtils versus alternatives
Use DevUtils if:
- You're using Claude, Cursor, VS Code Copilot, Windsurf, or any MCP-compatible AI assistant
- You want reliable, validated utility operations in AI workflows
- You need 36 tools in one package
Don't use DevUtils if:
- You're writing regular application code (use native libraries)
- You need extreme performance (direct library calls are faster)
- Your AI client does not support MCP
Design philosophy
- Small & focused: 36 utilities, zero external APIs, ~50MB container
- Security-first: Non-root user, Alpine Linux, minimal attack surface
- AI-friendly: Consistent naming (
<domain>_<operation>), strict schemas, human-readable outputs - Client-agnostic: Works with any MCP-compatible client via stdio transport
Available on
Contributing
Questions and ideas: GitHub Discussions
Security reports: see SECURITY.md.
- Fork the repository
- Create your feature branch (
git checkout -b feat/amazing-tool) - Commit your changes (
git commit -m 'feat: add amazing tool') - Push to the branch (
git push origin feat/amazing-tool) - Open a Pull Request
See CHANGELOG.md.
License
MIT © Fernando Paladini
來源:README.md,提交 831a5e9
工具
0版本歷史
1- v1.1.0最新Sep 16, 2026
評分
已滿足適用檢查項的 50%
該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。
- 近 30 天內可連通25 分
請保持端點能夠回應 MCP 握手;SourceWeft 每 30 天探測一次。
- 已宣告認證方式10 分
請在註冊中心條目中宣告憑證請求標頭,或保持端點能夠回應探測,以便判定其認證方式。
- 已列出工具15 分
請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。
- 描述必需15 分
- 圖示10 分
- 文件15 分
- 授權條款10 分