# paladini/devutils-mcp-server [Health: Active]

**Category:** 🔑 Cryptography  
**Repository:** https://github.com/paladini/devutils-mcp-server  
**GitHub Stars:** 5  
**npm Downloads (last month):** 160  
**Views:** 2  
**Installs:** 0  
**Upvotes:** 0  
**Directory Page:** https://allmcps.com/mcp/paladini-devutils-mcp-server

## Description
36 zero-auth developer utilities: MD5/SHA/bcrypt hashing, Base64/hex/URL encoding, UUID/password/passphrase generation, JWT decoding, JSON/YAML/XML formatting, timestamp conversion, CIDR calculator, and text tools.

## Tools
Capabilities this server exposes over MCP:

- **hash_md5** — Generate an MD5 hash of the given input string.
- **hash_sha1** — Generate a SHA-1 hash of the given input string.
- **hash_sha256** — Generate a SHA-256 hash of the given input string.
- **hash_sha512** — Generate a SHA-512 hash of the given input string.
- **hash_bcrypt** — Generate a bcrypt hash of the given input string. Useful for password hashing.
- **hash_bcrypt_verify** — Verify a string against a bcrypt hash. Returns true if matches.
- **base64_encode** — Encode a string to Base64.
- **base64_decode** — Decode a Base64 string back to plain text.
- **url_encode** — URL-encode a string (percent-encoding).
- **url_decode** — Decode a URL-encoded string.
- **html_encode** — Encode special characters in a string to HTML entities.
- **html_decode** — Decode HTML entities in a string back to their original characters.
- **hex_encode** — Encode a string to its hexadecimal representation.
- **hex_decode** — Decode a hexadecimal string back to plain text.
- **generate_uuid** — Generate a cryptographically secure UUID v4.
- **generate_nanoid** — Generate a NanoID — a compact, URL-friendly unique ID.
- **generate_password** — Generate a secure random password with configurable options.
- **generate_random_hex** — Generate a random hexadecimal string of the specified byte length.
- **jwt_decode** — Decode a JWT (JSON Web Token) and display its header and payload without verifying the signature. Useful for debugging and inspecting tokens.
- **jwt_validate** — Validate the structure of a JWT. Checks format, Base64URL encoding, JSON validity, and expiration status. Does NOT verify the cryptographic signature.
- **json_format** — Format (pretty-print) a JSON string with configurable indentation. Can also minify JSON.
- **json_validate** — Validate a JSON string and report any parsing errors with their approximate location.
- **json_path_query** — Extract a value from a JSON object using a dot-notation path (e.g., 'user.address.city' or 'items[0].name').
- **timestamp_to_date** — Convert a Unix timestamp (seconds or milliseconds) to a human-readable ISO 8601 date string.
- **date_to_timestamp** — Convert a date string to a Unix timestamp. Accepts ISO 8601 and common date formats.
- **number_base_convert** — Convert a number between different bases (binary, octal, decimal, hexadecimal, or any base 2-36).
- **color_convert** — Convert colors between HEX, RGB, and HSL formats.
- **byte_convert** — Convert between byte units (B, KB, MB, GB, TB, PB). Supports both binary (1024) and SI (1000) standards.
- **cidr_calculate** — Calculate network details from a CIDR notation (e.g., '192.168.1.0/24'). Returns network address, broadcast, host range, and host count.
- **ip_validate** — Validate and classify an IPv4 or IPv6 address. Returns type, class, scope, and whether it's private/loopback/multicast.
- **text_stats** — Analyze text and return detailed statistics: character count, word count, line count, sentence count, paragraph count, and reading time.
- **lorem_ipsum** — Generate Lorem Ipsum placeholder text.
- **case_convert** — Convert a string between different casing styles: camelCase, PascalCase, snake_case, kebab-case, CONSTANT_CASE, Title Case, and more.
- **slugify** — Convert a string to a URL-friendly slug. Removes special characters, replaces spaces with hyphens, and lowercases everything.
- **regex_test** — Test a regular expression pattern against an input string. Returns all matches with groups and indices.
- **text_diff** — Compare two strings and show a simple line-by-line diff. Lines prefixed with '+' are additions, '-' are deletions, ' ' are unchanged.

## Claude Desktop Quick Installation
Install path detected from listing signals. Uses `npx` (confidence: high):

```json
"mcpServers": {
  "devutils-mcp-server": {
    "command": "npx",
    "args": ["-y","devutils-mcp-server"]
  }
}
```

## Documentation

## What paladini/devutils-mcp-server does

paladini/devutils-mcp-server provides a collection of local utilities through the Model Context Protocol. It is intended for MCP-compatible assistants that need to perform common developer operations without calling an external service.

Hashing tools cover MD5, SHA-1, SHA-256, SHA-512, and bcrypt. Bcrypt verification is also available for checking a string against an existing bcrypt hash. Encoding tools handle Base64, URL percent-encoding, HTML entities, and hexadecimal values in both directions.

Generation tools create UUID v4 values, NanoIDs, configurable passwords, and random hexadecimal strings. JWT tools decode the header and payload or validate token structure, Base64URL encoding, JSON validity, and expiration status. JWT validation does not verify a cryptographic signature.

## How it works

The server communicates with an MCP client over stdio. An assistant selects a named tool and supplies its inputs, while the local process returns the calculated or generated result. No API credentials or service-specific account are listed as prerequisites.

JSON tools can pretty-print or minify JSON, report parsing errors, and retrieve values through dot-notation paths such as `user.address.city` or `items[0].name`. Conversion tools handle Unix timestamps and dates, numeric bases from 2 through 36, HEX/RGB/HSL colors, and byte units using binary or SI standards. Network tools calculate CIDR details and classify IPv4 or IPv6 addresses.

## Setup and configuration

paladini/devutils-mcp-server requires Node.js 18 or newer; the README recommends Node.js 22. The simplest launch command is `npx -y devutils-mcp-server`. It can also be installed globally with npm and started as `devutils-mcp-server`, or run in Docker with the published image or a locally built image.

For a stdio client, configure the command as `npx` with `-y` and `devutils-mcp-server` as arguments. The README provides configuration examples for Claude Desktop, Cursor, VS Code, and Windsurf. Cursor and Claude Code also have an optional plugin installation path. The project is additionally listed in the official MCP Registry and on Smithery.

## Tools and capabilities

- Hash strings with MD5, SHA-1, SHA-256, SHA-512, or bcrypt.
- Verify bcrypt hashes.
- Encode and decode Base64, URLs, HTML entities, and hexadecimal strings.
- Generate UUID v4 values, NanoIDs, passwords, and random hexadecimal data.
- Decode and structurally validate JWTs without signature verification.
- Format, minify, validate, and query JSON.
- Convert timestamps, dates, number bases, colors, and byte units.
- Calculate CIDR network information and validate or classify IP addresses.

## Limitations and notes

The tools operate locally and do not provide cryptographic JWT signature verification. JWT decoding exposes token contents but does not establish trust.

_Full upstream README: https://allmcps.com/mcp/paladini-devutils-mcp-server/readme_