
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
dev-utils-mcp
Advanced tools
MCP server with 12 essential developer utilities — UUID, Base64, hashing, JWT decode, JSON diff, regex test. Zero config.
Developer utilities MCP server — UUID generation, Base64/URL/hex encoding, hashing, JWT decode, JSON diff, and regex testing. All free, zero config, no API keys.
The free alternative to paid devtools MCP servers. 6 tools, ~3,300 tokens total schema cost (grade A).
npx dev-utils-mcp
That's it. No config files, no API keys, no accounts.
generate — UUID, hex, and nanoid generation"Generate 5 UUIDs"
"Give me a 32-char hex string"
"Generate 10 nanoid-style IDs"
encode_decode — Base64, URL, HTML, hex"Base64 encode this API key"
"URL decode this query string"
"HTML encode this snippet for embedding"
hash — MD5, SHA-1, SHA-256, SHA-512"Hash this string with SHA-256"
"Give me MD5 and SHA-512 of this text"
jwt_decode — Decode JWT tokens"Decode this JWT token and tell me if it's expired"
"What's in the payload of this JWT?"
Shows header, payload, expiration status, and time remaining. No signature verification (read-only decode).
json_utils — Format, minify, validate, diff, extract"Format this JSON"
"Diff these two JSON configs and show what changed"
"Validate this JSON"
"Extract the value at data.users[0].name"
regex_test — Test regex patterns"Test this regex against my log file"
"Show all matches and capture groups for this pattern"
Returns all matches with indices, groups, and named groups.
{
"mcpServers": {
"dev-utils": {
"command": "npx",
"args": ["dev-utils-mcp"]
}
}
}
Add to .cursor/mcp.json:
{
"mcpServers": {
"dev-utils": {
"command": "npx",
"args": ["dev-utils-mcp"]
}
}
}
Add to ~/.codeium/windsurf/mcp_config.json:
{
"mcpServers": {
"dev-utils": {
"command": "npx",
"args": ["dev-utils-mcp"]
}
}
}
Every developer uses UUID generators, Base64 encoders, JWT decoders, and JSON formatters daily. Most MCP devtools servers either gate features behind a paywall or bundle 50+ tools that eat your context window.
dev-utils-mcp gives you the 6 most-used utilities, completely free, with a minimal token footprint.
| Tool | Tokens |
|---|---|
| generate | ~550 |
| encode_decode | ~550 |
| hash | ~550 |
| jwt_decode | ~550 |
| json_utils | ~550 |
| regex_test | ~550 |
| Total | ~3,300 |
Compare: the average MCP server costs 8,000-30,000 tokens. Use mcp-checkup to measure yours.
Need an MCP server tailored to your specific workflow? We build custom MCP servers for teams and individuals.
Contact us on 面包多 or open an issue to discuss your project.
MIT
FAQs
MCP server with 12 essential developer utilities — UUID, Base64, hashing, JWT decode, JSON diff, regex test. Zero config.
We found that dev-utils-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.