
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
@devpick/mcp-server
Advanced tools
43 developer tools for AI agents — PDF merge/split, subnet calc, regex tester, JSON diff, and more. 100% local, no API keys.
Developer tools for AI agents. Merge PDFs, calculate subnets, test regex, diff JSON — things your AI agent can't do alone.
43 tools • 100% local • No API keys • Works offline
From devpick.sh — developer tools that don't suck.
claude mcp add devpick -- npx -y @devpick/mcp-server
Add to .cursor/mcp.json:
{
"mcpServers": {
"devpick": {
"command": "npx",
"args": ["-y", "@devpick/mcp-server"]
}
}
}
Add to .vscode/mcp.json:
{
"servers": {
"devpick": {
"command": "npx",
"args": ["-y", "@devpick/mcp-server"]
}
}
}
codex mcp add devpick -- npx -y @devpick/mcp-server
Your AI agent can't manipulate PDF files. Now it can.
| Tool | Description |
|---|---|
merge_pdfs | Merge multiple PDFs into one |
split_pdf | Extract specific pages from a PDF |
pdf_info | Get page count, metadata, dimensions |
rotate_pdf | Rotate pages by 90°, 180°, or 270° |
pdf_watermark | Add text watermark to every page |
remove_pdf_pages | Remove specific pages from a PDF |
Things LLMs get wrong — subnet math, regex execution, cron scheduling.
| Tool | Description |
|---|---|
calculate_subnet | CIDR subnet calculator (network, broadcast, hosts) |
test_regex | Execute regex against test strings with match details |
parse_cron | Parse cron expression and show next N execution times |
parse_jwt | Decode JWT header + payload |
calculate_chmod | Unix permission octal ↔ symbolic conversion |
json_diff | Structural diff between two JSON objects |
text_diff | Line-by-line text comparison |
generate_hash | MD5, SHA-1, SHA-256, SHA-512 hashing |
| Tool | Description |
|---|---|
format_json | Prettify or minify JSON |
format_sql | Beautify SQL queries |
format_xml | Format XML documents |
format_html | Beautify HTML |
format_css | Format CSS |
validate_yaml | Validate YAML syntax |
validate_toml | Validate TOML syntax |
| Tool | Description |
|---|---|
encode_base64 / decode_base64 | Base64 encoding/decoding |
encode_url / decode_url | URL encoding/decoding |
encode_html_entities / decode_html_entities | HTML entity encoding |
escape_string / unescape_string | String escape sequences |
| Tool | Description |
|---|---|
yaml_to_json / json_to_yaml | YAML ↔ JSON |
csv_to_json / json_to_csv | CSV ↔ JSON |
json_to_typescript | Generate TypeScript interfaces from JSON |
markdown_to_html | Convert Markdown to HTML |
number_base_convert | Convert between binary, octal, decimal, hex |
hex_to_rgb / rgb_to_hex | Color format conversion |
| Tool | Description |
|---|---|
generate_uuid | Generate UUID v4 |
generate_lorem_ipsum | Generate placeholder text |
generate_slug | URL-friendly slug from text |
generate_cron_expression | Build cron expressions from description |
count_words | Word, character, sentence, paragraph count |
Your AI coding agent can format JSON. It can encode Base64. But it can't:
This MCP server gives your agent real tools for real work. Everything runs locally on your machine — no API keys, no network calls, no rate limits.
MIT — devpick.sh
FAQs
Developer tools for AI agents. Merge PDFs, calculate subnets, test regex, diff JSON — things your agent can't do alone. 43 tools, 100% local, no API keys.
The npm package @devpick/mcp-server receives a total of 28 weekly downloads. As such, @devpick/mcp-server popularity was classified as not popular.
We found that @devpick/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.