
Security News
Lovable’s OJ Rewrites Vite’s Dev Server in Rust as AI Lowers the Cost of Forking Open Source
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.
@devpick/mcp-server
Advanced tools
Developer tools for AI agents. Merge PDFs, calculate subnets, test regex, diff JSON — things your agent can't do alone. 43 tools, 100% local, no API keys.
Developer tools for AI agents. Merge PDFs, calculate subnets, test regex, diff JSON — things your AI agent can't do alone.
43 tools • 100% local • No API keys • Works offline
From devpick.sh — developer tools that don't suck.
claude mcp add devpick -- npx -y @devpick/mcp-server
Add to .cursor/mcp.json:
{
"mcpServers": {
"devpick": {
"command": "npx",
"args": ["-y", "@devpick/mcp-server"]
}
}
}
Add to .vscode/mcp.json:
{
"servers": {
"devpick": {
"command": "npx",
"args": ["-y", "@devpick/mcp-server"]
}
}
}
codex mcp add devpick -- npx -y @devpick/mcp-server
Your AI agent can't manipulate PDF files. Now it can.
| Tool | Description |
|---|---|
merge_pdfs | Merge multiple PDFs into one |
split_pdf | Extract specific pages from a PDF |
pdf_info | Get page count, metadata, dimensions |
rotate_pdf | Rotate pages by 90°, 180°, or 270° |
pdf_watermark | Add text watermark to every page |
remove_pdf_pages | Remove specific pages from a PDF |
Things LLMs get wrong — subnet math, regex execution, cron scheduling.
| Tool | Description |
|---|---|
calculate_subnet | CIDR subnet calculator (network, broadcast, hosts) |
test_regex | Execute regex against test strings with match details |
parse_cron | Parse cron expression and show next N execution times |
parse_jwt | Decode JWT header + payload |
calculate_chmod | Unix permission octal ↔ symbolic conversion |
json_diff | Structural diff between two JSON objects |
text_diff | Line-by-line text comparison |
generate_hash | MD5, SHA-1, SHA-256, SHA-512 hashing |
| Tool | Description |
|---|---|
format_json | Prettify or minify JSON |
format_sql | Beautify SQL queries |
format_xml | Format XML documents |
format_html | Beautify HTML |
format_css | Format CSS |
validate_yaml | Validate YAML syntax |
validate_toml | Validate TOML syntax |
| Tool | Description |
|---|---|
encode_base64 / decode_base64 | Base64 encoding/decoding |
encode_url / decode_url | URL encoding/decoding |
encode_html_entities / decode_html_entities | HTML entity encoding |
escape_string / unescape_string | String escape sequences |
| Tool | Description |
|---|---|
yaml_to_json / json_to_yaml | YAML ↔ JSON |
csv_to_json / json_to_csv | CSV ↔ JSON |
json_to_typescript | Generate TypeScript interfaces from JSON |
markdown_to_html | Convert Markdown to HTML |
number_base_convert | Convert between binary, octal, decimal, hex |
hex_to_rgb / rgb_to_hex | Color format conversion |
| Tool | Description |
|---|---|
generate_uuid | Generate UUID v4 |
generate_lorem_ipsum | Generate placeholder text |
generate_slug | URL-friendly slug from text |
generate_cron_expression | Build cron expressions from description |
count_words | Word, character, sentence, paragraph count |
Your AI coding agent can format JSON. It can encode Base64. But it can't:
This MCP server gives your agent real tools for real work. Everything runs locally on your machine — no API keys, no network calls, no rate limits.
MIT — devpick.sh
FAQs
Developer tools for AI agents. Merge PDFs, calculate subnets, test regex, diff JSON — things your agent can't do alone. 43 tools, 100% local, no API keys.
The npm package @devpick/mcp-server receives a total of 28 weekly downloads. As such, @devpick/mcp-server popularity was classified as not popular.
We found that @devpick/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.