@utilix-tech/mcp 0.42.0 → 0.44.0

package/CHANGELOG.md

@@ -2,6 +2,13 @@
 
 Full release notes for all Utilix surfaces (browser tools, REST API, SDKs, MCP server) live at [utilix.tech/changelog](https://utilix.tech/changelog). This file tracks just this package.
 
+## 0.44.0
+- Add `validate_manifest` tool: validate a web app manifest.json against the W3C Web App Manifest spec's installability requirements, including a 512x512 icon and a maskable icon check.
+- Add `lint_tool_schema` tool: lint an LLM tool/function-calling definition (OpenAI, Anthropic, or MCP format) for missing descriptions, invalid names, empty enums, and required/properties mismatches.
+
+## 0.43.0
+- Add `build_vary_header`, `parse_vary_header` tools: build a `Vary` response header from request-header names with a plain-English caching note per header, or parse an existing Vary header into the same shape.
+
 ## 0.42.0
 - Add `build_range_header`, `parse_content_range_header` tools: build an HTTP `Range` request header from explicit, open-ended, or suffix ("last N bytes") byte ranges, and parse a server's `Content-Range` response to verify what it actually sent back.
 - Add `find_csv_duplicate_rows` tool: group CSV/TSV rows that share the same value across a chosen set of key columns, or the entire row, and report each duplicate group's occurrence count and data row numbers.

package/README.md

@@ -1,6 +1,6 @@
 # @utilix-tech/mcp
 
-MCP server exposing 171 developer utility tools to Claude, Cursor, VS Code Copilot, and any [Model Context Protocol](https://modelcontextprotocol.io) compatible AI assistant.
+MCP server exposing 175 developer utility tools to Claude, Cursor, VS Code Copilot, and any [Model Context Protocol](https://modelcontextprotocol.io) compatible AI assistant.
 
 No API key required. All tools run locally. Requires Node.js 18 or later.
 
@@ -189,7 +189,7 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `calculate_cash_breakdown` | Break a cash amount down into the minimum count of bills/coins from a set of denominations, largest first |
 | `calculate_change` | Compute change owed for a payment/tender pair and break it down into the minimum count of bills/coins |
 
-### API / Network (18 tools)
+### API / Network (21 tools)
 | Tool | Description |
 |------|-------------|
 | `decode_jwt` | Decode a JWT: header, payload, and expiry |
@@ -210,6 +210,9 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `analyze_email_headers` | Parse a raw email header block into structured fields, the Received hop chain, and SPF/DKIM/DMARC results from an Authentication-Results header |
 | `build_range_header` | Build an HTTP Range request header from explicit, open-ended, or suffix ("last N bytes") byte ranges |
 | `parse_content_range_header` | Parse a Content-Range response header into its unit, byte bounds, and total resource size |
+| `build_vary_header` | Build a Vary response header from request-header names, with a plain-English caching note per header |
+| `parse_vary_header` | Parse an existing Vary header value into its individual header names, each with a caching note |
+| `validate_manifest` | Validate a web app manifest.json against the W3C spec's installability requirements: name/short_name, start_url, display mode, and icon coverage |
 
 ### Color (4 tools)
 | Tool | Description |
@@ -262,7 +265,7 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `unicode_inspect` | Inspect Unicode code points of a string |
 | `optimize_svg` | Optimize and minify an SVG string |
 
-### AI / Agent (27 tools)
+### AI / Agent (28 tools)
 | Tool | Description |
 |------|-------------|
 | `estimate_tokens` | Estimate token count and cost for an LLM prompt |
@@ -292,6 +295,7 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `diff_json_detailed` | Diff two parsed JSON values, returning every path with its op and unchanged paths |
 | `vector_similarity` | Cosine similarity, dot product, and Euclidean / Manhattan distance between two numeric vectors |
 | `format_few_shot_examples` | Format input/output example pairs into a numbered, XML-tagged, or delimiter-separated few-shot prompt template |
+| `lint_tool_schema` | Lint an OpenAI, Anthropic, or MCP tool/function-calling definition for missing descriptions, invalid names, empty enums, and required/properties mismatches |
 
 ### Image (3 tools)
 | Tool | Description |

package/dist/index.js

@@ -7136,5 +7136,305 @@ server.tool(
     return text(JSON.stringify(result, null, 2));
   }
 );
+var _VARY_HEADER_NOTES_MCP = {
+  "accept-encoding": "Caches must store a separate response per compression scheme (gzip, br, etc.) the client accepts.",
+  "accept-language": "Caches must store a separate response per requested language, which can fragment a shared cache badly if Accept-Language values are highly varied.",
+  "accept": "Caches must store a separate response per requested content type (e.g. JSON vs HTML).",
+  "user-agent": "Caches must store a separate response per distinct User-Agent string, which is often unique enough to make caching nearly ineffective.",
+  "authorization": "Signals the response is user-specific; most shared caches will refuse to cache it at all rather than key on this header.",
+  "cookie": "Same effect as Authorization: shared caches typically treat the response as private and skip caching rather than key on cookie values.",
+  "origin": "Caches must store a separate response per requesting Origin, needed whenever a response includes CORS headers that differ by origin.",
+  "x-requested-with": "Caches must store a separate response depending on whether the request was made via an XHR/fetch client hint.",
+  "x-forwarded-proto": "Caches must store a separate response for HTTP vs HTTPS requests, relevant behind a proxy or load balancer that terminates TLS."
+};
+function _buildVaryHeaderMcp(headers) {
+  if (!Array.isArray(headers) || headers.length === 0) return { error: "At least one header is required" };
+  const trimmed = headers.map((h) => typeof h === "string" ? h.trim() : "").filter((h) => h.length > 0);
+  if (trimmed.length === 0) return { error: "At least one header is required" };
+  const warnings = [];
+  if (trimmed.some((h) => h === "*") && trimmed.length > 1) {
+    warnings.push('"*" makes every request effectively uncacheable; combining it with other header names is redundant, most caches will just skip caching entirely');
+  }
+  const seen = /* @__PURE__ */ new Map();
+  for (const h of trimmed) {
+    const key = h.toLowerCase();
+    if (!seen.has(key)) seen.set(key, h);
+  }
+  if (seen.size < trimmed.length) warnings.push("duplicate header names were removed");
+  const entries = Array.from(seen.values()).map((h) => ({
+    header: h,
+    note: h === "*" ? "Every response is considered unique; most caches will not store it at all." : _VARY_HEADER_NOTES_MCP[h.toLowerCase()] ?? `Caches must store a separate response per distinct ${h} value.`
+  }));
+  const headerValue = entries.map((e) => e.header).join(", ");
+  return { header: `Vary: ${headerValue}`, headerValue, entries, warnings };
+}
+function _parseVaryHeaderMcp(raw) {
+  if (!raw || raw.trim() === "") return { error: "Input is empty" };
+  const withoutLabel = raw.trim().replace(/^vary:\s*/i, "");
+  const headers = withoutLabel.split(",").map((h) => h.trim()).filter((h) => h.length > 0);
+  return _buildVaryHeaderMcp(headers);
+}
+server.tool(
+  "build_vary_header",
+  "Build a Vary response-header value from a list of request-header names (e.g. Accept-Encoding, Accept-Language, Authorization), de-duplicating case-insensitively and attaching a plain-English caching note for each well-known header explaining what it does to shared caches.",
+  {
+    headers: z.array(z.string()).min(1).describe("Request-header names to vary the response by")
+  },
+  async ({ headers }) => {
+    const result = _buildVaryHeaderMcp(headers);
+    if ("error" in result) return errText(result);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
+server.tool(
+  "parse_vary_header",
+  'Parse an existing Vary header value (with or without a leading "Vary:" label) into its individual header names, each with a plain-English note on what it does to shared caching.',
+  {
+    header: z.string().min(1).describe("The Vary header value to parse")
+  },
+  async ({ header }) => {
+    const result = _parseVaryHeaderMcp(header);
+    if ("error" in result) return errText(result);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
+var _VALID_MANIFEST_DISPLAY_MCP = /* @__PURE__ */ new Set(["fullscreen", "standalone", "minimal-ui", "browser"]);
+function _validateManifestMcp(jsonText) {
+  if (!jsonText || !jsonText.trim()) return { error: "Input is empty" };
+  let manifest;
+  try {
+    manifest = JSON.parse(jsonText);
+  } catch (e) {
+    return { error: `Invalid JSON: ${e.message}` };
+  }
+  if (typeof manifest !== "object" || manifest === null || Array.isArray(manifest)) {
+    return { error: "Manifest must be a JSON object" };
+  }
+  const m = manifest;
+  const issues = [];
+  if (!m.name && !m.short_name) {
+    issues.push({ severity: "error", path: "name", message: 'Manifest must have at least one of "name" or "short_name"' });
+  }
+  if (m.name !== void 0 && typeof m.name !== "string") {
+    issues.push({ severity: "error", path: "name", message: '"name" must be a string' });
+  } else if (typeof m.name === "string" && m.name.length > 45) {
+    issues.push({ severity: "warning", path: "name", message: `"name" is ${m.name.length} characters; keep it under ~45 to avoid truncation in install prompts` });
+  }
+  if (m.short_name !== void 0 && typeof m.short_name !== "string") {
+    issues.push({ severity: "error", path: "short_name", message: '"short_name" must be a string' });
+  } else if (typeof m.short_name === "string" && m.short_name.length > 12) {
+    issues.push({ severity: "warning", path: "short_name", message: `"short_name" is ${m.short_name.length} characters; keep it under ~12 to avoid truncation on home screens` });
+  }
+  if (!m.start_url) {
+    issues.push({ severity: "error", path: "start_url", message: 'Manifest is missing "start_url"' });
+  } else if (typeof m.start_url !== "string") {
+    issues.push({ severity: "error", path: "start_url", message: '"start_url" must be a string' });
+  } else if (m.start_url.startsWith("//")) {
+    issues.push({ severity: "warning", path: "start_url", message: '"start_url" looks protocol-relative; use a relative path (e.g. "/") or a full absolute URL instead' });
+  }
+  if (m.display !== void 0) {
+    if (typeof m.display !== "string" || !_VALID_MANIFEST_DISPLAY_MCP.has(m.display)) {
+      issues.push({ severity: "error", path: "display", message: `"display" must be one of: ${[..._VALID_MANIFEST_DISPLAY_MCP].join(", ")}` });
+    }
+  } else {
+    issues.push({ severity: "warning", path: "display", message: 'Missing "display"; it defaults to "browser", which will not open the installed app in its own standalone window' });
+  }
+  const icons = [];
+  let hasMaskableIcon = false;
+  let has512Icon = false;
+  if (!Array.isArray(m.icons) || m.icons.length === 0) {
+    issues.push({ severity: "error", path: "icons", message: 'Manifest must have a non-empty "icons" array' });
+  } else {
+    m.icons.forEach((icon, i) => {
+      const path = `icons[${i}]`;
+      if (!icon || typeof icon !== "object") {
+        issues.push({ severity: "error", path, message: "Icon entry must be an object" });
+        return;
+      }
+      const iconObj = icon;
+      if (!iconObj.src || typeof iconObj.src !== "string") {
+        issues.push({ severity: "error", path, message: 'Icon entry is missing a required "src"' });
+      }
+      if (iconObj.sizes !== void 0) {
+        if (typeof iconObj.sizes !== "string" || iconObj.sizes !== "any" && !/^\d+x\d+(\s+\d+x\d+)*$/i.test(iconObj.sizes)) {
+          issues.push({ severity: "warning", path, message: `"sizes" value "${String(iconObj.sizes)}" doesn't match the expected "WIDTHxHEIGHT" format` });
+        } else if (/(^|\s)512x512(\s|$)/i.test(iconObj.sizes)) {
+          has512Icon = true;
+        }
+      }
+      if (typeof iconObj.purpose === "string" && iconObj.purpose.toLowerCase().includes("maskable")) {
+        hasMaskableIcon = true;
+      }
+      icons.push({
+        src: typeof iconObj.src === "string" ? iconObj.src : "",
+        sizes: typeof iconObj.sizes === "string" ? iconObj.sizes : void 0,
+        type: typeof iconObj.type === "string" ? iconObj.type : void 0,
+        purpose: typeof iconObj.purpose === "string" ? iconObj.purpose : void 0
+      });
+    });
+    if (icons.length > 0) {
+      if (!has512Icon) {
+        issues.push({ severity: "warning", path: "icons", message: "No icon sized 512x512 found; this size is used for splash screens and app store listings" });
+      }
+      if (!hasMaskableIcon) {
+        issues.push({ severity: "warning", path: "icons", message: 'No icon with purpose "maskable" (or "any maskable") found; without one, Android may crop your icon into its adaptive icon mask' });
+      }
+    }
+  }
+  if (m.theme_color !== void 0 && typeof m.theme_color !== "string") {
+    issues.push({ severity: "error", path: "theme_color", message: '"theme_color" must be a CSS color string' });
+  }
+  if (m.background_color !== void 0 && typeof m.background_color !== "string") {
+    issues.push({ severity: "error", path: "background_color", message: '"background_color" must be a CSS color string' });
+  } else if (m.background_color === void 0) {
+    issues.push({ severity: "warning", path: "background_color", message: 'Missing "background_color"; without it the splash screen background defaults to white' });
+  }
+  const valid = !issues.some((i) => i.severity === "error");
+  return {
+    issues,
+    valid,
+    summary: {
+      name: typeof m.name === "string" ? m.name : void 0,
+      shortName: typeof m.short_name === "string" ? m.short_name : void 0,
+      startUrl: typeof m.start_url === "string" ? m.start_url : void 0,
+      display: typeof m.display === "string" ? m.display : void 0,
+      icons,
+      hasMaskableIcon,
+      has512Icon
+    }
+  };
+}
+server.tool(
+  "validate_manifest",
+  "Validate a web app manifest.json against the W3C Web App Manifest spec's installability requirements: name/short_name, start_url, a recognized display mode, and an icons array covering a 512x512 icon and a maskable icon, plus recommended theme_color/background_color fields.",
+  { manifest: z.string().describe("The manifest.json contents") },
+  async ({ manifest }) => {
+    const result = _validateManifestMcp(manifest);
+    if ("error" in result) return errText(result);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
+var _TOOL_NAME_RE_MCP = /^[a-zA-Z0-9_-]{1,64}$/;
+function _normalizeToolDefsMcp(data) {
+  let rawList;
+  if (Array.isArray(data)) {
+    rawList = data;
+  } else if (data && typeof data === "object" && Array.isArray(data.tools)) {
+    rawList = data.tools;
+  } else {
+    rawList = [data];
+  }
+  const out = [];
+  for (const item of rawList) {
+    if (!item || typeof item !== "object") {
+      return { error: "Each tool definition must be a JSON object" };
+    }
+    const obj = item;
+    if (obj.type === "function" && obj.function && typeof obj.function === "object") {
+      const fn = obj.function;
+      out.push({ name: String(fn.name ?? ""), description: typeof fn.description === "string" ? fn.description : void 0, schema: fn.parameters });
+    } else if ("input_schema" in obj) {
+      out.push({ name: String(obj.name ?? ""), description: typeof obj.description === "string" ? obj.description : void 0, schema: obj.input_schema });
+    } else if ("inputSchema" in obj) {
+      out.push({ name: String(obj.name ?? ""), description: typeof obj.description === "string" ? obj.description : void 0, schema: obj.inputSchema });
+    } else if ("parameters" in obj || "name" in obj) {
+      out.push({ name: String(obj.name ?? ""), description: typeof obj.description === "string" ? obj.description : void 0, schema: obj.parameters });
+    } else {
+      return { error: 'Unrecognized tool-definition format: expected an OpenAI ({type:"function",function:{...}}), Anthropic ({name,input_schema}), or MCP ({name,inputSchema}) shape' };
+    }
+  }
+  return out;
+}
+function _lintToolSchemaMcp(jsonText) {
+  if (!jsonText || !jsonText.trim()) return { error: "Input is empty" };
+  let data;
+  try {
+    data = JSON.parse(jsonText);
+  } catch (e) {
+    return { error: `Invalid JSON: ${e.message}` };
+  }
+  const normalized = _normalizeToolDefsMcp(data);
+  if ("error" in normalized) return normalized;
+  if (normalized.length === 0) return { error: "No tool definitions found" };
+  const issues = [];
+  const seenNames = /* @__PURE__ */ new Map();
+  for (const tool of normalized) {
+    const label = tool.name || "(unnamed)";
+    seenNames.set(label, (seenNames.get(label) ?? 0) + 1);
+    if (!tool.name) {
+      issues.push({ severity: "error", tool: label, path: "name", message: 'Tool is missing a "name"' });
+    } else if (!_TOOL_NAME_RE_MCP.test(tool.name)) {
+      issues.push({ severity: "error", tool: label, path: "name", message: `Tool name "${tool.name}" must match ^[a-zA-Z0-9_-]{1,64}$ (letters, digits, underscores, hyphens, max 64 chars) to be accepted by OpenAI/Anthropic function calling` });
+    }
+    if (!tool.description || !tool.description.trim()) {
+      issues.push({ severity: "error", tool: label, path: "description", message: 'Tool is missing a "description" \u2014 the model relies entirely on this text to decide when to call it' });
+    } else {
+      if (tool.description.trim().length < 10) {
+        issues.push({ severity: "warning", tool: label, path: "description", message: "Description is very short; a vague description measurably hurts the model's ability to pick the right tool" });
+      }
+      if (tool.description.length > 1024) {
+        issues.push({ severity: "warning", tool: label, path: "description", message: `Description is ${tool.description.length} characters; long descriptions cost tokens on every request that includes this tool` });
+      }
+    }
+    if (tool.schema === void 0 || tool.schema === null) {
+      issues.push({ severity: "warning", tool: label, path: "parameters", message: "Tool has no parameter schema; only correct if the tool genuinely takes no arguments" });
+      continue;
+    }
+    if (typeof tool.schema !== "object" || Array.isArray(tool.schema)) {
+      issues.push({ severity: "error", tool: label, path: "parameters", message: "Parameter schema must be a JSON Schema object" });
+      continue;
+    }
+    const schema = tool.schema;
+    if (schema.type !== void 0 && schema.type !== "object") {
+      issues.push({ severity: "error", tool: label, path: "parameters.type", message: `Top-level parameter schema type is "${String(schema.type)}"; OpenAI and Anthropic both require "object" at the top level` });
+    }
+    const properties = schema.properties;
+    if (properties !== void 0 && (typeof properties !== "object" || properties === null || Array.isArray(properties))) {
+      issues.push({ severity: "error", tool: label, path: "parameters.properties", message: '"properties" must be an object' });
+    } else if (properties && typeof properties === "object") {
+      const propsObj = properties;
+      const propNames = Object.keys(propsObj);
+      for (const propName of propNames) {
+        const prop = propsObj[propName];
+        const propPath = `parameters.properties.${propName}`;
+        if (!prop || typeof prop !== "object") {
+          issues.push({ severity: "error", tool: label, path: propPath, message: "Property schema must be an object" });
+          continue;
+        }
+        const propObj = prop;
+        if (!propObj.description) {
+          issues.push({ severity: "warning", tool: label, path: propPath, message: `Property "${propName}" has no description; missing per-parameter descriptions measurably hurt model accuracy on which value to pass` });
+        }
+        if (Array.isArray(propObj.enum) && propObj.enum.length === 0) {
+          issues.push({ severity: "error", tool: label, path: propPath, message: `Property "${propName}" has an empty "enum" array` });
+        }
+      }
+      if (Array.isArray(schema.required)) {
+        for (const req of schema.required) {
+          if (typeof req === "string" && !propNames.includes(req)) {
+            issues.push({ severity: "error", tool: label, path: "parameters.required", message: `"required" lists "${req}", which isn't defined in "properties"` });
+          }
+        }
+      }
+    }
+  }
+  for (const [name, count] of seenNames) {
+    if (count > 1 && name !== "(unnamed)") {
+      issues.push({ severity: "error", tool: name, path: "name", message: `Tool name "${name}" is used ${count} times; tool names must be unique within a single request` });
+    }
+  }
+  const valid = !issues.some((i) => i.severity === "error");
+  return { toolCount: normalized.length, issues, valid };
+}
+server.tool(
+  "lint_tool_schema",
+  'Lint an LLM tool/function-calling definition (OpenAI, Anthropic, or MCP format \u2014 a single definition, an array of them, or a {tools:[...]} wrapper) for mistakes that measurably hurt model accuracy: a missing or vague description, an invalid tool name, a non-object top-level parameter schema, properties missing descriptions, an empty enum, a "required" entry with no matching property, or duplicate tool names.',
+  { schema: z.string().describe("JSON text: a single tool definition, an array of them, or a {tools:[...]} wrapper, in OpenAI/Anthropic/MCP format") },
+  async ({ schema }) => {
+    const result = _lintToolSchemaMcp(schema);
+    if ("error" in result) return errText(result);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
 var transport = new StdioServerTransport();
 await server.connect(transport);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@utilix-tech/mcp",
-  "version": "0.42.0",
-  "description": "MCP server exposing 168 Utilix developer tools to Claude, Cursor, VS Code Copilot, and any MCP-compatible AI assistant.",
+  "version": "0.44.0",
+  "description": "MCP server exposing 175 Utilix developer tools to Claude, Cursor, VS Code Copilot, and any MCP-compatible AI assistant.",
   "author": "Utilix <hello@utilix.tech>",
   "license": "MIT",
   "homepage": "https://utilix.tech/mcp",