@utilix-tech/mcp 0.39.0 → 0.40.0

package/CHANGELOG.md

@@ -2,6 +2,10 @@
 
 Full release notes for all Utilix surfaces (browser tools, REST API, SDKs, MCP server) live at [utilix.tech/changelog](https://utilix.tech/changelog). This file tracks just this package.
 
+## 0.40.0
+- Add `generate_sri_hash` tool: compute SHA-256/384/512 Subresource Integrity hashes for a script or stylesheet's content, formatted as the `<algorithm>-<base64>` string an HTML `integrity` attribute expects.
+- Add `analyze_email_headers` tool: parse a raw email header block into structured From/To/Subject fields, the Received hop chain in order, and SPF/DKIM/DMARC results from an Authentication-Results header.
+
 ## 0.39.0
 - Add `compare_unit_prices` tool: compare two or more package options by price and quantity to find the true cost per unit, flag the cheapest, and report how much more expensive each other option is by percentage.
 - Add `csv_to_sql_insert` tool: convert CSV data with a header row into parameterless SQL INSERT statements, with basic type inference (numbers/booleans unquoted, empty cells NULL) and ANSI/MySQL identifier quoting.

package/README.md

@@ -1,6 +1,6 @@
 # @utilix-tech/mcp
 
-MCP server exposing 163 developer utility tools to Claude, Cursor, VS Code Copilot, and any [Model Context Protocol](https://modelcontextprotocol.io) compatible AI assistant.
+MCP server exposing 165 developer utility tools to Claude, Cursor, VS Code Copilot, and any [Model Context Protocol](https://modelcontextprotocol.io) compatible AI assistant.
 
 No API key required. All tools run locally. Requires Node.js 18 or later.
 
@@ -110,13 +110,14 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `base62_encode` | Encode text as Base62 (alphanumeric, URL-safe) |
 | `base62_decode` | Decode a Base62 string back to text |
 
-### Hashing (4 tools)
+### Hashing (5 tools)
 | Tool | Description |
 |------|-------------|
 | `hash` | Hash a string with MD5, SHA-1, SHA-256, SHA-384, or SHA-512 |
 | `hash_all` | Hash a string with all algorithms at once |
 | `bcrypt_hash` | Hash a password using bcrypt |
 | `bcrypt_verify` | Verify a password against a bcrypt hash |
+| `generate_sri_hash` | Compute a Subresource Integrity hash (SHA-256/384/512) for a script or stylesheet's content, formatted for an HTML `integrity` attribute |
 
 ### Generators (6 tools)
 | Tool | Description |
@@ -185,7 +186,7 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `calculate_roi` | Compute return on investment percent from an initial and final value, plus the annualized (CAGR) return given an optional holding period in years |
 | `compare_unit_prices` | Compare two or more package options by price and quantity to find the true cost per unit, flag the cheapest, and report how much more expensive each other option is |
 
-### API / Network (15 tools)
+### API / Network (16 tools)
 | Tool | Description |
 |------|-------------|
 | `decode_jwt` | Decode a JWT: header, payload, and expiry |
@@ -203,6 +204,7 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `parse_ipv6_address` | Expand an IPv6 address to its full 8-group form or compress it to its RFC 5952 canonical shortest form, classify its address type, and handle an embedded IPv4 suffix or zone ID |
 | `build_link_header` | Build and explain an HTTP Link response header from URL/rel pairs (preload, preconnect, prefetch, canonical, pagination, etc.) |
 | `check_set_cookie_header` | Parse a Set-Cookie header and validate its attribute combination: SameSite=None requires Secure, __Host-/__Secure- prefix rules, missing Secure, overly long Max-Age |
+| `analyze_email_headers` | Parse a raw email header block into structured fields, the Received hop chain, and SPF/DKIM/DMARC results from an Authentication-Results header |
 
 ### Color (4 tools)
 | Tool | Description |

package/dist/index.js

@@ -6715,5 +6715,120 @@ server.tool(
     return text(JSON.stringify(result, null, 2));
   }
 );
+var _SRI_ALGORITHMS_MCP = ["SHA-256", "SHA-384", "SHA-512"];
+var _SRI_NODE_ALG_MAP_MCP = {
+  "SHA-256": "sha256",
+  "SHA-384": "sha384",
+  "SHA-512": "sha512"
+};
+function _generateSriAllMcp(content) {
+  if (!content) return { error: "Content is required" };
+  const results = _SRI_ALGORITHMS_MCP.map((algorithm) => {
+    const nodeAlg = _SRI_NODE_ALG_MAP_MCP[algorithm];
+    const base64 = createHash(nodeAlg).update(content, "utf8").digest("base64");
+    return { algorithm, base64, integrity: `${nodeAlg}-${base64}` };
+  });
+  return { results };
+}
+server.tool(
+  "generate_sri_hash",
+  "Compute a Subresource Integrity (SRI) hash for a script or stylesheet's content: digest it with SHA-256, SHA-384, and SHA-512 and return each as the `<algorithm>-<base64>` string an HTML `integrity` attribute expects. Returns all three algorithms at once.",
+  {
+    content: z.string().min(1).describe("The exact file/script content to hash, byte-for-byte")
+  },
+  async ({ content }) => {
+    const result = _generateSriAllMcp(content);
+    if ("error" in result) return errText(result);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
+function _analyzeEmailHeadersMcp(raw) {
+  if (!raw || !raw.trim()) return { error: "Raw email header text is required" };
+  const normalized = raw.replace(/\r\n/g, "\n");
+  const blockEnd = normalized.indexOf("\n\n");
+  const headerBlock = blockEnd === -1 ? normalized : normalized.slice(0, blockEnd);
+  const rawLines = headerBlock.split("\n");
+  const unfolded = [];
+  for (const line of rawLines) {
+    if (/^[ \t]/.test(line) && unfolded.length > 0) {
+      unfolded[unfolded.length - 1] += " " + line.trim();
+    } else if (line.trim() !== "") {
+      unfolded.push(line);
+    }
+  }
+  const headers = [];
+  for (const line of unfolded) {
+    const colonIdx = line.indexOf(":");
+    if (colonIdx === -1) continue;
+    const name = line.slice(0, colonIdx).trim();
+    const value = line.slice(colonIdx + 1).trim();
+    if (!name) continue;
+    headers.push({ name, value });
+  }
+  if (headers.length === 0) {
+    return { error: 'No parseable headers found \u2014 expected lines like "From: ..." or "Received: ..."' };
+  }
+  const findFirst = (name) => headers.find((h) => h.name.toLowerCase() === name.toLowerCase())?.value ?? null;
+  const findAll = (name) => headers.filter((h) => h.name.toLowerCase() === name.toLowerCase());
+  const receivedHops = findAll("received").map((h, i) => {
+    const fromMatch = h.value.match(/from\s+([^\s;]+(?:\s*\([^)]*\))?)/i);
+    const byMatch = h.value.match(/\bby\s+([^\s;]+)/i);
+    const segments = h.value.split(";");
+    const date = segments.length > 1 ? segments[segments.length - 1].trim() : null;
+    return {
+      index: i + 1,
+      raw: h.value,
+      from: fromMatch ? fromMatch[1].trim() : null,
+      by: byMatch ? byMatch[1].trim() : null,
+      date: date || null
+    };
+  });
+  const authResultsHeader = findFirst("authentication-results");
+  const authResults = [];
+  if (authResultsHeader) {
+    const re = /\b(spf|dkim|dmarc)=(\w+)/gi;
+    let m;
+    while ((m = re.exec(authResultsHeader)) !== null) {
+      authResults.push({ mechanism: m[1].toLowerCase(), result: m[2].toLowerCase() });
+    }
+  }
+  const findAuth = (mechanism) => authResults.find((a) => a.mechanism === mechanism)?.result ?? null;
+  const warnings = [];
+  if (receivedHops.length === 0) {
+    warnings.push("No Received headers found \u2014 this may be a partial header block rather than a full raw source.");
+  }
+  if (!authResultsHeader) {
+    warnings.push("No Authentication-Results header found \u2014 SPF/DKIM/DMARC cannot be determined from this header block alone.");
+  }
+  return {
+    headers,
+    from: findFirst("from"),
+    to: findFirst("to"),
+    subject: findFirst("subject"),
+    date: findFirst("date"),
+    messageId: findFirst("message-id"),
+    returnPath: findFirst("return-path"),
+    replyTo: findFirst("reply-to"),
+    receivedHops,
+    hopCount: receivedHops.length,
+    authResults,
+    spf: findAuth("spf"),
+    dkim: findAuth("dkim"),
+    dmarc: findAuth("dmarc"),
+    warnings
+  };
+}
+server.tool(
+  "analyze_email_headers",
+  `Parse a raw email header block (e.g. Gmail's "Show original", or the headers from a .eml file) into structured fields, the Received hop chain in the order they appear, and any SPF/DKIM/DMARC verdicts already present in an Authentication-Results header. Never performs a live DNS/SPF/DKIM check, it only reports what the pasted headers already claim.`,
+  {
+    headers: z.string().min(1).describe("The raw email header block (From/To/Received/Authentication-Results/...)")
+  },
+  async ({ headers }) => {
+    const result = _analyzeEmailHeadersMcp(headers);
+    if ("error" in result) return errText(result);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
 var transport = new StdioServerTransport();
 await server.connect(transport);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@utilix-tech/mcp",
-  "version": "0.39.0",
+  "version": "0.40.0",
   "description": "MCP server exposing 152 Utilix developer tools to Claude, Cursor, VS Code Copilot, and any MCP-compatible AI assistant.",
   "author": "Utilix <hello@utilix.tech>",
   "license": "MIT",