New:Introducing Socket Scanning for VS Code Marketplace Extensions.Learn more →
Get Started

@vymalo/opencode-devtools

Package Overview
Dependencies
Maintainers
1
Versions
10
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@vymalo/opencode-devtools

OpenCode plugin of everyday developer utilities the model can call locally: math (precise arithmetic, unit & base conversion, stats), codec (base64/hex/url, JWT decode, gzip), crypto (hash/hmac, uuid/ulid, random, keypairs), datetime (parse/format/diff, t

latest
Source
npmnpm
Version
0.17.0
Version published
Weekly downloads
5
-28.57%
Maintainers
1
Weekly downloads
 
Created
Source

@vymalo/opencode-devtools

A belt of everyday, deterministic, local developer utilities for the model — maths, encoding, crypto, date/time, structured-data conversion, and an opt-in HTTP client.

npm node: >=22 license: MIT

An OpenCode plugin that registers a set of pure, in-process tools the model can call — no bridge, no server, no auth. Tools are organised into groups (gated by the groups option, like the browser plugin): math, codec, crypto, datetime, convert (on by default) and an opt-in, SSRF-guarded http group. The same tool surface ships as an MCP server: @vymalo/opencode-devtools-mcp.

Install

// opencode.json
{
  "plugin": ["@vymalo/opencode-devtools"]
}

Enable the http group (off by default — it performs network egress):

{
  "plugin": [
    ["@vymalo/opencode-devtools", {
      "groups": ["math", "codec", "crypto", "datetime", "convert", "http"],
      "http": { "allowPrivateNetwork": false }
    }]
  ]
}

Tools at a glance

GroupTools
mathmath_eval (64-digit), math_convert_unit, math_stats, math_base
codeccodec_base64, codec_hex, codec_url, codec_jwt_decode, codec_gzip
cryptocrypto_hash, crypto_hmac, crypto_uuid (v4/v7), crypto_ulid, crypto_random, crypto_keypair
datetimedatetime_now, datetime_parse, datetime_format, datetime_diff, datetime_convert_tz, datetime_cron
convertconvert_data (JSON/YAML/TOML/CSV), convert_query (JSONPath)
http (opt-in)http_request, http_graphql

Full reference, config, and the security model: docs/devtools.md.

Why not memory / adb / database too?

Those already have mature MCP servers, so we adopt them rather than rebuild — see docs/recommended-mcps.md. devtools fills only the gaps: the small deterministic utilities nobody else maintains well.

License

MIT

Keywords

opencode

FAQs

Package last updated on 04 Sep 2026

Related posts