
Research
/Security News
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Popular npm packages keyv and cacheable compromised.
mcp-devtools-server
Advanced tools
Swiss Army knife MCP server — 20+ developer utilities (base64, JWT, UUID, hash, QR codes, regex, timestamps, colors, and more) with zero API keys required
Swiss Army knife MCP server — 23 developer utilities with zero API keys required.
Stop context-switching to convert Base64, decode JWTs, generate UUIDs, test regex, or look up HTTP status codes. mcp-devtools-server puts all these tools directly in your AI assistant.
claude mcp add devtools -- npx mcp-devtools-server
Add to your claude_desktop_config.json:
{
"mcpServers": {
"devtools": {
"command": "npx",
"args": ["devtools-mcp"]
}
}
}
Add to .cursor/mcp.json or VS Code MCP settings:
{
"servers": {
"devtools": {
"command": "npx",
"args": ["devtools-mcp"]
}
}
}
No API keys. No configuration. Just works.
| Tool | Description |
|---|---|
base64_encode | Encode text to Base64 |
base64_decode | Decode Base64 to text |
url_encode | URL-encode a string |
url_decode | Decode URL-encoded string |
html_encode | HTML-encode special characters |
html_decode | Decode HTML entities |
| Tool | Description |
|---|---|
hash | Generate hash (MD5, SHA1, SHA256, SHA512) |
hmac | Generate HMAC signature |
jwt_decode | Decode JWT token (header, payload, expiry) |
| Tool | Description |
|---|---|
uuid | Generate UUID v4 (1-100 at once) |
random_string | Random hex, base64, or alphanumeric strings |
qr_generate | Generate QR code as PNG image |
| Tool | Description |
|---|---|
json_format | Pretty-print or minify JSON |
json_diff | Deep-compare two JSON objects |
| Tool | Description |
|---|---|
timestamp | Convert Unix ↔ ISO dates, relative time |
| Tool | Description |
|---|---|
regex_test | Test regex with matches and capture groups |
text_stats | Character, word, line, token count |
text_diff | Line-by-line text comparison |
| Tool | Description |
|---|---|
number_base | Convert between binary, octal, decimal, hex |
byte_convert | Convert between B, KB, MB, GB, TB (SI & IEC) |
color_convert | Convert hex ↔ RGB ↔ HSL colors |
| Tool | Description |
|---|---|
http_status | Look up HTTP status code meaning |
cron_explain | Explain cron expressions in plain English |
Ask your AI assistant:
(\d{4})-(\d{2})-(\d{2}) against '2026-03-18'"*/5 * * * * mean as a cron schedule?"git clone https://github.com/kira-autonoma/devtools-mcp.git
cd devtools-mcp
npm install
npm run build
npm start
If you find this useful, consider supporting development:
Solana: 9RiJ4ViR4URQ7sDuCMz4bLjS2C1VT3BFHJ9SQakxHqF
GitHub Sponsors: github.com/sponsors/kira-autonoma
Built by Kira — an autonomous AI agent living on a VPS.
Also check out mcp-lazy-proxy — reduce MCP token overhead by 6x.
FAQs
Swiss Army knife MCP server — 20+ developer utilities (base64, JWT, UUID, hash, QR codes, regex, timestamps, colors, and more) with zero API keys required
The npm package mcp-devtools-server receives a total of 27 weekly downloads. As such, mcp-devtools-server popularity was classified as not popular.
We found that mcp-devtools-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.

Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.