@utilix-tech/mcp 0.4.0 → 0.5.0

package/CHANGELOG.md

@@ -0,0 +1,19 @@
+# Changelog
+
+Full release notes for all Utilix surfaces (browser tools, REST API, SDKs, MCP server) live at [utilix.tech/changelog](https://utilix.tech/changelog). This file tracks just this package.
+
+## 0.4.1
+- Bumped the `@utilix-tech/sdk` dependency from `^0.2.0` to `^0.3.0` to match the SDK version actually in use, closing a gap where a future tool addition could have silently pinned to a stale SDK release.
+- Corrected repository/bug tracker links.
+
+## 0.4.0
+- Added `detect_passive_voice` and `read_image_info`, bringing the total to 97 tools.
+
+## 0.3.1
+- Fixed a duplicate tool registration (`diff_json` was registered twice, silently shadowing the richer variant). Renamed the shadowed tool to `diff_json_detailed`.
+
+## 0.3.0
+- Expanded to 95+ tools.
+
+## 0.1.0
+- Initial release.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Utilix
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,6 +1,6 @@
 # @utilix-tech/mcp
 
-MCP server exposing 97 developer utility tools to Claude, Cursor, VS Code Copilot, and any [Model Context Protocol](https://modelcontextprotocol.io) compatible AI assistant.
+MCP server exposing 99 developer utility tools to Claude, Cursor, VS Code Copilot, and any [Model Context Protocol](https://modelcontextprotocol.io) compatible AI assistant.
 
 No API key required. All tools run locally. Requires Node.js 18 or later.
 
@@ -150,13 +150,14 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `convert_bytes` | Convert between B, KB, MB, GB, TB, KiB, MiB, GiB, TiB |
 | `px_to_units` | Convert pixels to rem, em, pt, and vw |
 
-### API / Network (4 tools)
+### API / Network (5 tools)
 | Tool | Description |
 |------|-------------|
-| `decode_jwt` | Decode a JWT — header, payload, and expiry |
+| `decode_jwt` | Decode a JWT: header, payload, and expiry |
 | `build_curl` | Build a cURL command from method, URL, headers, and body |
 | `curl_to_code` | Convert a cURL command to fetch, axios, Python, Go, PHP, or Ruby |
 | `cors_headers` | Generate CORS response headers for a configuration |
+| `parse_har` | Parse a DevTools .har network export into requests and summary stats |
 
 ### Color (4 tools)
 | Tool | Description |
@@ -177,13 +178,14 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `parse_env` | Parse a .env file and return all key-value pairs |
 | `parse_docker_image` | Parse a Docker image reference into its components |
 
-### Data (4 tools)
+### Data (5 tools)
 | Tool | Description |
 |------|-------------|
 | `validate_yaml` | Validate YAML syntax |
 | `toml_to_json` | Convert TOML to JSON |
 | `xml_to_json` | Convert XML to JSON |
 | `parse_csv` | Parse a CSV string and return the data as JSON |
+| `format_ndjson` | Validate and pretty-print newline-delimited JSON (NDJSON) |
 
 ### CSS (2 tools)
 | Tool | Description |
@@ -230,7 +232,7 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 ### Image (1 tool)
 | Tool | Description |
 |------|-------------|
-| `read_image_info` | Read format, dimensions, bit depth, and alpha channel from image bytes — no decoding required. Supports PNG, JPEG, GIF, WebP, BMP |
+| `read_image_info` | Read format, dimensions, bit depth, and alpha channel from image bytes: no decoding required. Supports PNG, JPEG, GIF, WebP, BMP |
 
 ## Requirements
 
@@ -238,12 +240,12 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 
 ## Publishing (maintainers)
 
-CI publishes automatically via npm Trusted Publishing (OIDC) on every push to `main` that bumps `version`. Requires npm **>=11.5.1** — older versions (e.g. the npm bundled with Node 20) sign provenance but skip the OIDC auth exchange, so `npm publish` fails with a 404 as if unauthenticated.
+CI publishes automatically via npm Trusted Publishing (OIDC) on every push to `main` that bumps `version`. Requires npm **>=11.5.1**: older versions (e.g. the npm bundled with Node 20) sign provenance but skip the OIDC auth exchange, so `npm publish` fails with a 404 as if unauthenticated.
 
 ## Links
 
-- [Utilix web app](https://utilix.tech) — use these tools in the browser
-- [API Playground](https://utilix.tech/api) — try 10 endpoints live, no signup required
-- [REST API docs](https://utilix.tech/docs#rest-api) — 100+ endpoints at `api.utilix.tech/v1` (1,000 req/day free)
-- [Node.js SDK](https://www.npmjs.com/package/@utilix-tech/sdk) — use in your Node.js projects
-- [Python SDK](https://pypi.org/project/utilix-sdk/) — use in your Python projects
+- [Utilix web app](https://utilix.tech): use these tools in the browser
+- [API Playground](https://utilix.tech/api): try 10 endpoints live, no signup required
+- [REST API docs](https://utilix.tech/docs#rest-api): 100+ endpoints at `api.utilix.tech/v1` (1,000 req/day free)
+- [Node.js SDK](https://www.npmjs.com/package/@utilix-tech/sdk): use in your Node.js projects
+- [Python SDK](https://pypi.org/project/utilix-sdk/): use in your Python projects

package/SECURITY.md

@@ -0,0 +1,16 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+If you discover a security vulnerability in this package, please report it privately rather than opening a public issue.
+
+Email **hello@utilix.tech** with the subject line "Security report" and include:
+- A description of the vulnerability and its potential impact
+- Steps to reproduce, if possible
+- Any suggested fix
+
+We aim to acknowledge reports within 3 business days. Please give us a reasonable window to release a fix before disclosing publicly.
+
+## Supported Versions
+
+Only the latest published version of `@utilix-tech/mcp` receives security fixes. We recommend always running the latest release (the package is invoked via `npx`, which always fetches the latest version by default).

package/dist/index.js

@@ -393,7 +393,7 @@ server.tool(
   },
   async ({ password, hash }) => {
     const valid = await verifyPassword(password, hash);
-    return text(valid ? "Valid \u2014 password matches hash." : "Invalid \u2014 password does not match hash.");
+    return text(valid ? "Valid: password matches hash." : "Invalid: password does not match hash.");
   }
 );
 server.tool(
@@ -1033,7 +1033,7 @@ server.tool(
   "Estimate the token count and API cost for a text string across popular LLMs (GPT-4o, Claude, Gemini, etc.).",
   {
     text: z.string().describe("Text to estimate tokens for"),
-    model: z.string().optional().describe("Model slug (e.g. gpt-4o, claude-sonnet-4) \u2014 omit for all models"),
+    model: z.string().optional().describe("Model slug (e.g. gpt-4o, claude-sonnet-4): omit for all models"),
     output_tokens: z.number().int().min(0).optional().describe("Expected output tokens (defaults to same as input)")
   },
   async ({ text: text2, model, output_tokens }) => {
@@ -1113,7 +1113,7 @@ server.tool("extract_keywords", "Extract top keywords using TF-IDF scoring.", {
 server.tool("validate_json_schema", "Validate JSON data against a JSON Schema (Draft-07).", { data: z.unknown(), schema: z.record(z.unknown()) }, async ({ data, schema }) => {
   return { content: [{ type: "text", text: JSON.stringify(validateJsonSchema(data, schema), null, 2) }] };
 });
-server.tool("diff_json_detailed", "Diff two JSON objects (parsed values, not strings) \u2014 returns a flat list of every path with its op (added/removed/changed/unchanged), plus counts.", { a: z.unknown(), b: z.unknown() }, async ({ a, b }) => {
+server.tool("diff_json_detailed", "Diff two JSON objects (parsed values, not strings): returns a flat list of every path with its op (added/removed/changed/unchanged), plus counts.", { a: z.unknown(), b: z.unknown() }, async ({ a, b }) => {
   return { content: [{ type: "text", text: JSON.stringify(diffJsonDetailed(a, b), null, 2) }] };
 });
 server.tool("extract_tables", "Extract HTML tables into JSON arrays with headers and rows.", { html: z.string() }, async ({ html }) => {
@@ -1140,7 +1140,7 @@ server.tool("score_relevance", "Score a passage relevance to a query (0-1 score
 server.tool("expand_query", "Expand a search query with synonyms and stemmed variants for better retrieval.", { query: z.string(), max_synonyms: z.number().int().min(1).max(5).default(2) }, async ({ query, max_synonyms }) => {
   return { content: [{ type: "text", text: JSON.stringify(expandQuery(query, max_synonyms), null, 2) }] };
 });
-server.tool("summarize_for_llm", "Extractive summarization \u2014 pick key sentences to fit a token budget.", { text: z.string(), max_tokens: z.number().int().min(10).default(200), strategy: z.enum(["extractive", "first", "last"]).default("extractive") }, async ({ text: text2, max_tokens, strategy }) => {
+server.tool("summarize_for_llm", "Extractive summarization: pick key sentences to fit a token budget.", { text: z.string(), max_tokens: z.number().int().min(10).default(200), strategy: z.enum(["extractive", "first", "last"]).default("extractive") }, async ({ text: text2, max_tokens, strategy }) => {
   return { content: [{ type: "text", text: JSON.stringify(summarizeForLlm(text2, max_tokens, strategy), null, 2) }] };
 });
 var _BE_VERBS = /* @__PURE__ */ new Set(["am", "is", "are", "was", "were", "be", "been", "being"]);
@@ -1389,14 +1389,112 @@ function _readImageInfo(bytes) {
     }
     return { error: "No SOF marker found in JPEG (file may be corrupt)" };
   }
-  return { error: "Unrecognized image format \u2014 supported: PNG, JPEG, GIF, WebP, BMP" };
+  return { error: "Unrecognized image format. Supported formats: PNG, JPEG, GIF, WebP, BMP" };
 }
 server.tool("detect_passive_voice", 'Heuristically flag sentences containing passive-voice constructions, e.g. "was written", "were approved by the team".', { text: z.string() }, async ({ text: text2 }) => {
   return { content: [{ type: "text", text: JSON.stringify(_detectPassiveVoice(text2), null, 2) }] };
 });
-server.tool("read_image_info", "Read image format, dimensions, and color info directly from file bytes \u2014 no decoding required. Supports PNG, JPEG, GIF, WebP, BMP.", { image_base64: z.string().describe("Base64-encoded image bytes, optionally prefixed with a data: URL scheme") }, async ({ image_base64 }) => {
+server.tool("read_image_info", "Read image format, dimensions, and color info directly from file bytes: no decoding required. Supports PNG, JPEG, GIF, WebP, BMP.", { image_base64: z.string().describe("Base64-encoded image bytes, optionally prefixed with a data: URL scheme") }, async ({ image_base64 }) => {
   const bytes = new Uint8Array(Buffer.from(image_base64.replace(/^data:.*;base64,/, ""), "base64"));
   return { content: [{ type: "text", text: JSON.stringify(_readImageInfo(bytes), null, 2) }] };
 });
+function _parseHar(input) {
+  if (!input || !input.trim()) return { error: "Input is empty" };
+  let data;
+  try {
+    data = JSON.parse(input);
+  } catch (e) {
+    return { error: `Invalid JSON: ${e instanceof Error ? e.message : String(e)}` };
+  }
+  if (typeof data !== "object" || data === null || !("log" in data)) {
+    return { error: 'Not a valid HAR file: missing "log" property' };
+  }
+  const log = data.log;
+  if (typeof log !== "object" || log === null || !Array.isArray(log.entries)) {
+    return { error: 'Not a valid HAR file: "log.entries" must be an array' };
+  }
+  const logObj = log;
+  const entries = [];
+  const methods = {};
+  const statusCodes = {};
+  let totalSize = 0;
+  let totalTime = 0;
+  let failedRequests = 0;
+  for (const raw of logObj.entries) {
+    if (typeof raw !== "object" || raw === null) continue;
+    const e = raw;
+    const request = e.request ?? {};
+    const response = e.response ?? {};
+    const content = response.content ?? {};
+    const method = typeof request.method === "string" ? request.method : "GET";
+    const url = typeof request.url === "string" ? request.url : "";
+    const status = typeof response.status === "number" ? response.status : 0;
+    const statusText = typeof response.statusText === "string" ? response.statusText : "";
+    const httpVersion = typeof response.httpVersion === "string" ? response.httpVersion : "";
+    const mimeType = typeof content.mimeType === "string" ? content.mimeType : "";
+    const size = typeof content.size === "number" && content.size > 0 ? content.size : 0;
+    const time = typeof e.time === "number" ? e.time : 0;
+    const startedDateTime = typeof e.startedDateTime === "string" ? e.startedDateTime : "";
+    entries.push({ method, url, status, statusText, httpVersion, mimeType, size, time, startedDateTime });
+    methods[method] = (methods[method] ?? 0) + 1;
+    if (status > 0) statusCodes[String(status)] = (statusCodes[String(status)] ?? 0) + 1;
+    totalSize += size;
+    totalTime += time;
+    if (status === 0 || status >= 400) failedRequests++;
+  }
+  const totalRequests = entries.length;
+  const avgTime = totalRequests > 0 ? Math.round(totalTime / totalRequests * 100) / 100 : 0;
+  const creator = logObj.creator ?? {};
+  return {
+    version: typeof logObj.version === "string" ? logObj.version : "",
+    creator: { name: typeof creator.name === "string" ? creator.name : "", version: typeof creator.version === "string" ? creator.version : "" },
+    entries,
+    summary: { totalRequests, totalSize, totalTime, avgTime, failedRequests, methods, statusCodes }
+  };
+}
+function _validateNdjson(input) {
+  const rawLines = input.split("\n");
+  const lines = [];
+  let validCount = 0;
+  rawLines.forEach((raw, idx) => {
+    if (raw.trim() === "") return;
+    const lineNum = idx + 1;
+    try {
+      JSON.parse(raw);
+      lines.push({ line: lineNum, raw, valid: true });
+      validCount++;
+    } catch (e) {
+      lines.push({ line: lineNum, raw, valid: false, error: e instanceof Error ? e.message : String(e) });
+    }
+  });
+  return { valid: lines.length > 0 && validCount === lines.length, totalLines: lines.length, validLines: validCount, invalidLines: lines.length - validCount, lines };
+}
+server.tool(
+  "parse_har",
+  "Parse a browser DevTools .har network export into a readable list of requests (method, URL, status, size, timing) plus aggregate summary stats.",
+  { har: z.string().describe("Raw HAR file contents (JSON)") },
+  async ({ har }) => {
+    const result = _parseHar(har);
+    if ("error" in result) return errText(result);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
+server.tool(
+  "format_ndjson",
+  "Validate newline-delimited JSON (NDJSON/JSON Lines), report per-line errors, and pretty-print each valid line.",
+  {
+    input: z.string().describe("NDJSON content: one JSON value per line"),
+    indent: z.number().int().default(2).describe("Spaces per indent level")
+  },
+  async ({ input, indent }) => {
+    const validation = _validateNdjson(input);
+    if (!validation.valid) {
+      const firstError = validation.lines.find((l) => !l.valid);
+      return errText({ error: firstError ? `Line ${firstError.line}: ${firstError.error}` : "Invalid NDJSON" });
+    }
+    const formatted = validation.lines.map((l) => JSON.stringify(JSON.parse(l.raw), null, indent)).join("\n");
+    return text(formatted);
+  }
+);
 var transport = new StdioServerTransport();
 await server.connect(transport);

package/package.json

@@ -1,10 +1,17 @@
 {
   "name": "@utilix-tech/mcp",
-  "version": "0.4.0",
-  "description": "MCP server exposing 97 Utilix developer tools to Claude, Cursor, VS Code Copilot, and any MCP-compatible AI assistant.",
+  "version": "0.5.0",
+  "description": "MCP server exposing 99 Utilix developer tools to Claude, Cursor, VS Code Copilot, and any MCP-compatible AI assistant.",
   "author": "Utilix <hello@utilix.tech>",
   "license": "MIT",
-  "homepage": "https://utilix.tech/docs",
+  "homepage": "https://utilix.tech/mcp",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/utilix-tech/utilix-mcp.git"
+  },
+  "bugs": {
+    "url": "https://github.com/utilix-tech/utilix-mcp/issues"
+  },
   "keywords": [
     "mcp",
     "model-context-protocol",
@@ -16,7 +23,10 @@
     "json",
     "encoding",
     "hashing",
-    "utilix"
+    "utilix",
+    "ai-agent",
+    "llm-tools",
+    "stdio"
   ],
   "engines": {
     "node": ">=18"
@@ -29,7 +39,10 @@
   "files": [
     "dist",
     "smithery.yaml",
-    "README.md"
+    "README.md",
+    "LICENSE",
+    "CHANGELOG.md",
+    "SECURITY.md"
   ],
   "scripts": {
     "build": "tsup && chmod +x dist/index.js",
@@ -40,7 +53,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.12.0",
-    "@utilix-tech/sdk": "^0.2.0",
+    "@utilix-tech/sdk": "^0.3.0",
     "zod": "^3.23.0"
   },
   "devDependencies": {

package/smithery.yaml

@@ -1,5 +1,5 @@
 name: utilix
-description: 70 developer utility tools for Claude, Cursor, VS Code, Windsurf, and any MCP-compatible AI assistant. Covers JSON, hashing, encoding, JWT, UUID, cron, color, SQL, regex, CSS, QR codes, and more. All tools run locally — no API key required.
+description: 70 developer utility tools for Claude, Cursor, VS Code, Windsurf, and any MCP-compatible AI assistant. Covers JSON, hashing, encoding, JWT, UUID, cron, color, SQL, regex, CSS, QR codes, and more. All tools run locally: no API key required.
 homepage: https://utilix.tech/mcp
 license: MIT
 repository: https://github.com/utilix-tech/utilix-mcp