@utilix-tech/mcp 0.43.0 → 0.45.0

package/CHANGELOG.md

@@ -2,6 +2,14 @@
 
 Full release notes for all Utilix surfaces (browser tools, REST API, SDKs, MCP server) live at [utilix.tech/changelog](https://utilix.tech/changelog). This file tracks just this package.
 
+## 0.45.0
+- Add `build_permissions_policy`, `parse_permissions_policy` tools: build a `Permissions-Policy` response header from browser features and their per-feature allowlist with a plain-English note per feature, or parse an existing one into the same shape.
+- Add `calculate_payback_period` tool: compute the simple and discounted payback period from an initial investment and a series of periodic cash flows.
+
+## 0.44.0
+- Add `validate_manifest` tool: validate a web app manifest.json against the W3C Web App Manifest spec's installability requirements, including a 512x512 icon and a maskable icon check.
+- Add `lint_tool_schema` tool: lint an LLM tool/function-calling definition (OpenAI, Anthropic, or MCP format) for missing descriptions, invalid names, empty enums, and required/properties mismatches.
+
 ## 0.43.0
 - Add `build_vary_header`, `parse_vary_header` tools: build a `Vary` response header from request-header names with a plain-English caching note per header, or parse an existing Vary header into the same shape.
 

package/README.md

@@ -1,6 +1,6 @@
 # @utilix-tech/mcp
 
-MCP server exposing 173 developer utility tools to Claude, Cursor, VS Code Copilot, and any [Model Context Protocol](https://modelcontextprotocol.io) compatible AI assistant.
+MCP server exposing 178 developer utility tools to Claude, Cursor, VS Code Copilot, and any [Model Context Protocol](https://modelcontextprotocol.io) compatible AI assistant.
 
 No API key required. All tools run locally. Requires Node.js 18 or later.
 
@@ -159,7 +159,7 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `convert_timezone` | Convert a date/time between timezones |
 | `convert_iso8601_duration` | Parse an ISO 8601 duration into components and total seconds, or format seconds into a duration string |
 
-### Units (26 tools)
+### Units (27 tools)
 | Tool | Description |
 |------|-------------|
 | `convert_bytes` | Convert between B, KB, MB, GB, TB, KiB, MiB, GiB, TiB |
@@ -188,8 +188,9 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `compare_unit_prices` | Compare two or more package options by price and quantity to find the true cost per unit, flag the cheapest, and report how much more expensive each other option is |
 | `calculate_cash_breakdown` | Break a cash amount down into the minimum count of bills/coins from a set of denominations, largest first |
 | `calculate_change` | Compute change owed for a payment/tender pair and break it down into the minimum count of bills/coins |
+| `calculate_payback_period` | Compute the simple and discounted payback period from an initial investment and a series of periodic cash flows |
 
-### API / Network (20 tools)
+### API / Network (23 tools)
 | Tool | Description |
 |------|-------------|
 | `decode_jwt` | Decode a JWT: header, payload, and expiry |
@@ -212,6 +213,9 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `parse_content_range_header` | Parse a Content-Range response header into its unit, byte bounds, and total resource size |
 | `build_vary_header` | Build a Vary response header from request-header names, with a plain-English caching note per header |
 | `parse_vary_header` | Parse an existing Vary header value into its individual header names, each with a caching note |
+| `validate_manifest` | Validate a web app manifest.json against the W3C spec's installability requirements: name/short_name, start_url, display mode, and icon coverage |
+| `build_permissions_policy` | Build a Permissions-Policy response header from browser features and their per-feature allowlist, with a plain-English note per feature |
+| `parse_permissions_policy` | Parse an existing Permissions-Policy header value into its individual feature directives, each with a plain-English note |
 
 ### Color (4 tools)
 | Tool | Description |
@@ -264,7 +268,7 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `unicode_inspect` | Inspect Unicode code points of a string |
 | `optimize_svg` | Optimize and minify an SVG string |
 
-### AI / Agent (27 tools)
+### AI / Agent (28 tools)
 | Tool | Description |
 |------|-------------|
 | `estimate_tokens` | Estimate token count and cost for an LLM prompt |
@@ -294,6 +298,7 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `diff_json_detailed` | Diff two parsed JSON values, returning every path with its op and unchanged paths |
 | `vector_similarity` | Cosine similarity, dot product, and Euclidean / Manhattan distance between two numeric vectors |
 | `format_few_shot_examples` | Format input/output example pairs into a numbered, XML-tagged, or delimiter-separated few-shot prompt template |
+| `lint_tool_schema` | Lint an OpenAI, Anthropic, or MCP tool/function-calling definition for missing descriptions, invalid names, empty enums, and required/properties mismatches |
 
 ### Image (3 tools)
 | Tool | Description |

package/dist/index.js

@@ -7198,5 +7198,437 @@ server.tool(
     return text(JSON.stringify(result, null, 2));
   }
 );
+var _VALID_MANIFEST_DISPLAY_MCP = /* @__PURE__ */ new Set(["fullscreen", "standalone", "minimal-ui", "browser"]);
+function _validateManifestMcp(jsonText) {
+  if (!jsonText || !jsonText.trim()) return { error: "Input is empty" };
+  let manifest;
+  try {
+    manifest = JSON.parse(jsonText);
+  } catch (e) {
+    return { error: `Invalid JSON: ${e.message}` };
+  }
+  if (typeof manifest !== "object" || manifest === null || Array.isArray(manifest)) {
+    return { error: "Manifest must be a JSON object" };
+  }
+  const m = manifest;
+  const issues = [];
+  if (!m.name && !m.short_name) {
+    issues.push({ severity: "error", path: "name", message: 'Manifest must have at least one of "name" or "short_name"' });
+  }
+  if (m.name !== void 0 && typeof m.name !== "string") {
+    issues.push({ severity: "error", path: "name", message: '"name" must be a string' });
+  } else if (typeof m.name === "string" && m.name.length > 45) {
+    issues.push({ severity: "warning", path: "name", message: `"name" is ${m.name.length} characters; keep it under ~45 to avoid truncation in install prompts` });
+  }
+  if (m.short_name !== void 0 && typeof m.short_name !== "string") {
+    issues.push({ severity: "error", path: "short_name", message: '"short_name" must be a string' });
+  } else if (typeof m.short_name === "string" && m.short_name.length > 12) {
+    issues.push({ severity: "warning", path: "short_name", message: `"short_name" is ${m.short_name.length} characters; keep it under ~12 to avoid truncation on home screens` });
+  }
+  if (!m.start_url) {
+    issues.push({ severity: "error", path: "start_url", message: 'Manifest is missing "start_url"' });
+  } else if (typeof m.start_url !== "string") {
+    issues.push({ severity: "error", path: "start_url", message: '"start_url" must be a string' });
+  } else if (m.start_url.startsWith("//")) {
+    issues.push({ severity: "warning", path: "start_url", message: '"start_url" looks protocol-relative; use a relative path (e.g. "/") or a full absolute URL instead' });
+  }
+  if (m.display !== void 0) {
+    if (typeof m.display !== "string" || !_VALID_MANIFEST_DISPLAY_MCP.has(m.display)) {
+      issues.push({ severity: "error", path: "display", message: `"display" must be one of: ${[..._VALID_MANIFEST_DISPLAY_MCP].join(", ")}` });
+    }
+  } else {
+    issues.push({ severity: "warning", path: "display", message: 'Missing "display"; it defaults to "browser", which will not open the installed app in its own standalone window' });
+  }
+  const icons = [];
+  let hasMaskableIcon = false;
+  let has512Icon = false;
+  if (!Array.isArray(m.icons) || m.icons.length === 0) {
+    issues.push({ severity: "error", path: "icons", message: 'Manifest must have a non-empty "icons" array' });
+  } else {
+    m.icons.forEach((icon, i) => {
+      const path = `icons[${i}]`;
+      if (!icon || typeof icon !== "object") {
+        issues.push({ severity: "error", path, message: "Icon entry must be an object" });
+        return;
+      }
+      const iconObj = icon;
+      if (!iconObj.src || typeof iconObj.src !== "string") {
+        issues.push({ severity: "error", path, message: 'Icon entry is missing a required "src"' });
+      }
+      if (iconObj.sizes !== void 0) {
+        if (typeof iconObj.sizes !== "string" || iconObj.sizes !== "any" && !/^\d+x\d+(\s+\d+x\d+)*$/i.test(iconObj.sizes)) {
+          issues.push({ severity: "warning", path, message: `"sizes" value "${String(iconObj.sizes)}" doesn't match the expected "WIDTHxHEIGHT" format` });
+        } else if (/(^|\s)512x512(\s|$)/i.test(iconObj.sizes)) {
+          has512Icon = true;
+        }
+      }
+      if (typeof iconObj.purpose === "string" && iconObj.purpose.toLowerCase().includes("maskable")) {
+        hasMaskableIcon = true;
+      }
+      icons.push({
+        src: typeof iconObj.src === "string" ? iconObj.src : "",
+        sizes: typeof iconObj.sizes === "string" ? iconObj.sizes : void 0,
+        type: typeof iconObj.type === "string" ? iconObj.type : void 0,
+        purpose: typeof iconObj.purpose === "string" ? iconObj.purpose : void 0
+      });
+    });
+    if (icons.length > 0) {
+      if (!has512Icon) {
+        issues.push({ severity: "warning", path: "icons", message: "No icon sized 512x512 found; this size is used for splash screens and app store listings" });
+      }
+      if (!hasMaskableIcon) {
+        issues.push({ severity: "warning", path: "icons", message: 'No icon with purpose "maskable" (or "any maskable") found; without one, Android may crop your icon into its adaptive icon mask' });
+      }
+    }
+  }
+  if (m.theme_color !== void 0 && typeof m.theme_color !== "string") {
+    issues.push({ severity: "error", path: "theme_color", message: '"theme_color" must be a CSS color string' });
+  }
+  if (m.background_color !== void 0 && typeof m.background_color !== "string") {
+    issues.push({ severity: "error", path: "background_color", message: '"background_color" must be a CSS color string' });
+  } else if (m.background_color === void 0) {
+    issues.push({ severity: "warning", path: "background_color", message: 'Missing "background_color"; without it the splash screen background defaults to white' });
+  }
+  const valid = !issues.some((i) => i.severity === "error");
+  return {
+    issues,
+    valid,
+    summary: {
+      name: typeof m.name === "string" ? m.name : void 0,
+      shortName: typeof m.short_name === "string" ? m.short_name : void 0,
+      startUrl: typeof m.start_url === "string" ? m.start_url : void 0,
+      display: typeof m.display === "string" ? m.display : void 0,
+      icons,
+      hasMaskableIcon,
+      has512Icon
+    }
+  };
+}
+server.tool(
+  "validate_manifest",
+  "Validate a web app manifest.json against the W3C Web App Manifest spec's installability requirements: name/short_name, start_url, a recognized display mode, and an icons array covering a 512x512 icon and a maskable icon, plus recommended theme_color/background_color fields.",
+  { manifest: z.string().describe("The manifest.json contents") },
+  async ({ manifest }) => {
+    const result = _validateManifestMcp(manifest);
+    if ("error" in result) return errText(result);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
+var _TOOL_NAME_RE_MCP = /^[a-zA-Z0-9_-]{1,64}$/;
+function _normalizeToolDefsMcp(data) {
+  let rawList;
+  if (Array.isArray(data)) {
+    rawList = data;
+  } else if (data && typeof data === "object" && Array.isArray(data.tools)) {
+    rawList = data.tools;
+  } else {
+    rawList = [data];
+  }
+  const out = [];
+  for (const item of rawList) {
+    if (!item || typeof item !== "object") {
+      return { error: "Each tool definition must be a JSON object" };
+    }
+    const obj = item;
+    if (obj.type === "function" && obj.function && typeof obj.function === "object") {
+      const fn = obj.function;
+      out.push({ name: String(fn.name ?? ""), description: typeof fn.description === "string" ? fn.description : void 0, schema: fn.parameters });
+    } else if ("input_schema" in obj) {
+      out.push({ name: String(obj.name ?? ""), description: typeof obj.description === "string" ? obj.description : void 0, schema: obj.input_schema });
+    } else if ("inputSchema" in obj) {
+      out.push({ name: String(obj.name ?? ""), description: typeof obj.description === "string" ? obj.description : void 0, schema: obj.inputSchema });
+    } else if ("parameters" in obj || "name" in obj) {
+      out.push({ name: String(obj.name ?? ""), description: typeof obj.description === "string" ? obj.description : void 0, schema: obj.parameters });
+    } else {
+      return { error: 'Unrecognized tool-definition format: expected an OpenAI ({type:"function",function:{...}}), Anthropic ({name,input_schema}), or MCP ({name,inputSchema}) shape' };
+    }
+  }
+  return out;
+}
+function _lintToolSchemaMcp(jsonText) {
+  if (!jsonText || !jsonText.trim()) return { error: "Input is empty" };
+  let data;
+  try {
+    data = JSON.parse(jsonText);
+  } catch (e) {
+    return { error: `Invalid JSON: ${e.message}` };
+  }
+  const normalized = _normalizeToolDefsMcp(data);
+  if ("error" in normalized) return normalized;
+  if (normalized.length === 0) return { error: "No tool definitions found" };
+  const issues = [];
+  const seenNames = /* @__PURE__ */ new Map();
+  for (const tool of normalized) {
+    const label = tool.name || "(unnamed)";
+    seenNames.set(label, (seenNames.get(label) ?? 0) + 1);
+    if (!tool.name) {
+      issues.push({ severity: "error", tool: label, path: "name", message: 'Tool is missing a "name"' });
+    } else if (!_TOOL_NAME_RE_MCP.test(tool.name)) {
+      issues.push({ severity: "error", tool: label, path: "name", message: `Tool name "${tool.name}" must match ^[a-zA-Z0-9_-]{1,64}$ (letters, digits, underscores, hyphens, max 64 chars) to be accepted by OpenAI/Anthropic function calling` });
+    }
+    if (!tool.description || !tool.description.trim()) {
+      issues.push({ severity: "error", tool: label, path: "description", message: 'Tool is missing a "description" \u2014 the model relies entirely on this text to decide when to call it' });
+    } else {
+      if (tool.description.trim().length < 10) {
+        issues.push({ severity: "warning", tool: label, path: "description", message: "Description is very short; a vague description measurably hurts the model's ability to pick the right tool" });
+      }
+      if (tool.description.length > 1024) {
+        issues.push({ severity: "warning", tool: label, path: "description", message: `Description is ${tool.description.length} characters; long descriptions cost tokens on every request that includes this tool` });
+      }
+    }
+    if (tool.schema === void 0 || tool.schema === null) {
+      issues.push({ severity: "warning", tool: label, path: "parameters", message: "Tool has no parameter schema; only correct if the tool genuinely takes no arguments" });
+      continue;
+    }
+    if (typeof tool.schema !== "object" || Array.isArray(tool.schema)) {
+      issues.push({ severity: "error", tool: label, path: "parameters", message: "Parameter schema must be a JSON Schema object" });
+      continue;
+    }
+    const schema = tool.schema;
+    if (schema.type !== void 0 && schema.type !== "object") {
+      issues.push({ severity: "error", tool: label, path: "parameters.type", message: `Top-level parameter schema type is "${String(schema.type)}"; OpenAI and Anthropic both require "object" at the top level` });
+    }
+    const properties = schema.properties;
+    if (properties !== void 0 && (typeof properties !== "object" || properties === null || Array.isArray(properties))) {
+      issues.push({ severity: "error", tool: label, path: "parameters.properties", message: '"properties" must be an object' });
+    } else if (properties && typeof properties === "object") {
+      const propsObj = properties;
+      const propNames = Object.keys(propsObj);
+      for (const propName of propNames) {
+        const prop = propsObj[propName];
+        const propPath = `parameters.properties.${propName}`;
+        if (!prop || typeof prop !== "object") {
+          issues.push({ severity: "error", tool: label, path: propPath, message: "Property schema must be an object" });
+          continue;
+        }
+        const propObj = prop;
+        if (!propObj.description) {
+          issues.push({ severity: "warning", tool: label, path: propPath, message: `Property "${propName}" has no description; missing per-parameter descriptions measurably hurt model accuracy on which value to pass` });
+        }
+        if (Array.isArray(propObj.enum) && propObj.enum.length === 0) {
+          issues.push({ severity: "error", tool: label, path: propPath, message: `Property "${propName}" has an empty "enum" array` });
+        }
+      }
+      if (Array.isArray(schema.required)) {
+        for (const req of schema.required) {
+          if (typeof req === "string" && !propNames.includes(req)) {
+            issues.push({ severity: "error", tool: label, path: "parameters.required", message: `"required" lists "${req}", which isn't defined in "properties"` });
+          }
+        }
+      }
+    }
+  }
+  for (const [name, count] of seenNames) {
+    if (count > 1 && name !== "(unnamed)") {
+      issues.push({ severity: "error", tool: name, path: "name", message: `Tool name "${name}" is used ${count} times; tool names must be unique within a single request` });
+    }
+  }
+  const valid = !issues.some((i) => i.severity === "error");
+  return { toolCount: normalized.length, issues, valid };
+}
+server.tool(
+  "lint_tool_schema",
+  'Lint an LLM tool/function-calling definition (OpenAI, Anthropic, or MCP format \u2014 a single definition, an array of them, or a {tools:[...]} wrapper) for mistakes that measurably hurt model accuracy: a missing or vague description, an invalid tool name, a non-object top-level parameter schema, properties missing descriptions, an empty enum, a "required" entry with no matching property, or duplicate tool names.',
+  { schema: z.string().describe("JSON text: a single tool definition, an array of them, or a {tools:[...]} wrapper, in OpenAI/Anthropic/MCP format") },
+  async ({ schema }) => {
+    const result = _lintToolSchemaMcp(schema);
+    if ("error" in result) return errText(result);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
+var _PERMISSIONS_POLICY_NOTES_MCP = {
+  camera: "Controls access to video capture devices (getUserMedia video).",
+  microphone: "Controls access to audio capture devices (getUserMedia audio).",
+  geolocation: "Controls access to the Geolocation API.",
+  autoplay: "Controls whether media elements can autoplay without a user gesture.",
+  fullscreen: "Controls access to the Fullscreen API (requestFullscreen).",
+  payment: "Controls access to the Payment Request API.",
+  usb: "Controls access to the WebUSB API.",
+  accelerometer: "Controls access to the Accelerometer sensor API.",
+  gyroscope: "Controls access to the Gyroscope sensor API.",
+  magnetometer: "Controls access to the Magnetometer sensor API.",
+  midi: "Controls access to the Web MIDI API.",
+  "picture-in-picture": "Controls whether video elements can enter picture-in-picture mode.",
+  "sync-xhr": "Controls whether synchronous XMLHttpRequest is allowed.",
+  "display-capture": "Controls access to screen/tab capture (getDisplayMedia).",
+  "encrypted-media": "Controls access to the Encrypted Media Extensions API (DRM playback).",
+  "clipboard-read": "Controls read access to the async Clipboard API.",
+  "clipboard-write": "Controls write access to the async Clipboard API.",
+  "screen-wake-lock": "Controls access to the Screen Wake Lock API.",
+  "web-share": "Controls access to the Web Share API.",
+  "xr-spatial-tracking": "Controls access to WebXR device sensors and spatial tracking."
+};
+function _formatPermissionsPolicyAllowlistMcp(allowlist) {
+  if (allowlist.includes("*")) return "*";
+  if (allowlist.length === 0) return "()";
+  return "(" + allowlist.map((o) => o === "self" ? "self" : `"${o}"`).join(" ") + ")";
+}
+function _buildPermissionsPolicyMcp(features) {
+  if (!Array.isArray(features) || features.length === 0) return { error: "At least one feature is required" };
+  const warnings = [];
+  const seen = /* @__PURE__ */ new Map();
+  for (const f of features) {
+    if (!f || typeof f.feature !== "string" || f.feature.trim() === "") continue;
+    const name = f.feature.trim().toLowerCase();
+    const allowlist = Array.isArray(f.allowlist) ? f.allowlist.map((o) => typeof o === "string" ? o.trim() : "").filter((o) => o.length > 0) : [];
+    if (seen.has(name)) warnings.push(`duplicate feature "${name}" was merged, the last occurrence wins`);
+    seen.set(name, { feature: name, allowlist });
+  }
+  if (seen.size === 0) return { error: "At least one feature is required" };
+  const directives = [];
+  for (const { feature, allowlist } of seen.values()) {
+    if (!_PERMISSIONS_POLICY_NOTES_MCP[feature]) {
+      warnings.push(`"${feature}" is not a widely recognized feature name, it will still be included as written`);
+    }
+    if (allowlist.includes("*") && allowlist.length > 1) {
+      warnings.push(`"${feature}" combines "*" with other origins; "*" already allows every origin so the others are redundant`);
+    }
+    const invalidOrigin = allowlist.find((o) => o !== "self" && o !== "*" && !/^https?:\/\//i.test(o));
+    if (invalidOrigin) {
+      warnings.push(`"${invalidOrigin}" on "${feature}" doesn't look like an origin (expected "self", "*", or an http(s):// URL); it will still be quoted as written`);
+    }
+    directives.push({
+      feature,
+      value: _formatPermissionsPolicyAllowlistMcp(allowlist),
+      note: _PERMISSIONS_POLICY_NOTES_MCP[feature] ?? `Controls access to the "${feature}" feature.`
+    });
+  }
+  const headerValue = directives.map((d) => `${d.feature}=${d.value}`).join(", ");
+  return { header: `Permissions-Policy: ${headerValue}`, headerValue, directives, warnings };
+}
+function _splitPermissionsPolicyTopLevelMcp(input) {
+  const segments = [];
+  let depth = 0;
+  let current = "";
+  for (const ch of input) {
+    if (ch === "(") depth++;
+    if (ch === ")") depth--;
+    if (ch === "," && depth === 0) {
+      if (current.trim()) segments.push(current.trim());
+      current = "";
+    } else {
+      current += ch;
+    }
+  }
+  if (current.trim()) segments.push(current.trim());
+  return segments;
+}
+function _parsePermissionsPolicyAllowlistMcp(rawValue) {
+  if (rawValue === "*") return ["*"];
+  if (rawValue === "()" || rawValue === "") return [];
+  const inner = rawValue.replace(/^\(/, "").replace(/\)$/, "");
+  const tokens = inner.match(/"[^"]*"|\S+/g) ?? [];
+  return tokens.map((t) => t.replace(/^"|"$/g, ""));
+}
+function _parsePermissionsPolicyMcp(raw) {
+  if (!raw || raw.trim() === "") return { error: "Input is empty" };
+  const withoutLabel = raw.trim().replace(/^permissions-policy:\s*/i, "");
+  const segments = _splitPermissionsPolicyTopLevelMcp(withoutLabel);
+  if (segments.length === 0) return { error: "No directives found" };
+  const features = [];
+  for (const segment of segments) {
+    const eq = segment.indexOf("=");
+    if (eq === -1) continue;
+    const feature = segment.slice(0, eq).trim();
+    const rawValue = segment.slice(eq + 1).trim();
+    features.push({ feature, allowlist: _parsePermissionsPolicyAllowlistMcp(rawValue) });
+  }
+  if (features.length === 0) return { error: "No directives found" };
+  return _buildPermissionsPolicyMcp(features);
+}
+server.tool(
+  "build_permissions_policy",
+  'Build a Permissions-Policy response-header value from a list of browser features (e.g. camera, microphone, geolocation) and their per-feature allowlist ("self", specific origins, "*" for all origins, or an empty allowlist to disable the feature entirely), attaching a plain-English note on what each feature restricts.',
+  {
+    features: z.array(z.object({
+      feature: z.string().describe('The Permissions-Policy feature name, e.g. "camera"'),
+      allowlist: z.array(z.string()).describe('Origins allowed to use the feature: "self", "*" for all origins, specific https:// origins, or an empty array to disable it entirely')
+    })).min(1).describe("Features and their allowlists to include in the header")
+  },
+  async ({ features }) => {
+    const result = _buildPermissionsPolicyMcp(features);
+    if ("error" in result) return errText(result);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
+server.tool(
+  "parse_permissions_policy",
+  'Parse an existing Permissions-Policy header value (with or without a leading "Permissions-Policy:" label) into its individual feature directives, each with a plain-English note on what it restricts.',
+  {
+    header: z.string().min(1).describe("The Permissions-Policy header value to parse")
+  },
+  async ({ header }) => {
+    const result = _parsePermissionsPolicyMcp(header);
+    if ("error" in result) return errText(result);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
+function _computePaybackMcp(initialInvestment, flows) {
+  const round4 = (n) => Math.round(n * 1e4) / 1e4;
+  let cumulative = 0;
+  const cumulativeCashFlows = [];
+  let period = null;
+  for (let i = 0; i < flows.length; i++) {
+    const prevCumulative = cumulative;
+    cumulative += flows[i];
+    cumulativeCashFlows.push(round4(cumulative));
+    if (period === null && cumulative >= initialInvestment) {
+      const remaining = initialInvestment - prevCumulative;
+      const fraction = flows[i] !== 0 ? remaining / flows[i] : 0;
+      period = i + fraction;
+    }
+  }
+  return { cumulative: cumulativeCashFlows, period };
+}
+function _calculatePaybackPeriodMcp(initialInvestment, cashFlows, discountRatePercent) {
+  const round4 = (n) => Math.round(n * 1e4) / 1e4;
+  if (typeof initialInvestment !== "number" || !Number.isFinite(initialInvestment) || initialInvestment <= 0) {
+    return { error: "initialInvestment must be a finite number greater than zero" };
+  }
+  if (!Array.isArray(cashFlows) || cashFlows.length === 0) {
+    return { error: "cashFlows must be a non-empty array of numbers" };
+  }
+  if (cashFlows.some((f) => typeof f !== "number" || !Number.isFinite(f))) {
+    return { error: "Every cash flow must be a finite number" };
+  }
+  const { cumulative, period } = _computePaybackMcp(initialInvestment, cashFlows);
+  const result = {
+    initialInvestment: round4(initialInvestment),
+    cashFlows: cashFlows.map(round4),
+    cumulativeCashFlows: cumulative,
+    paybackPeriod: period !== null ? round4(period) : null,
+    paybackPeriodRounded: period !== null ? Math.ceil(period) : null,
+    recovered: period !== null
+  };
+  if (discountRatePercent !== void 0) {
+    if (typeof discountRatePercent !== "number" || !Number.isFinite(discountRatePercent) || discountRatePercent < 0) {
+      return { error: "discountRatePercent must be a finite, non-negative number when provided" };
+    }
+    const r = discountRatePercent / 100;
+    const discountedCashFlows = cashFlows.map((f, i) => f / Math.pow(1 + r, i + 1));
+    const { cumulative: discountedCumulative, period: discountedPeriod } = _computePaybackMcp(initialInvestment, discountedCashFlows);
+    result.discountRatePercent = round4(discountRatePercent);
+    result.discountedCashFlows = discountedCashFlows.map(round4);
+    result.discountedCumulativeCashFlows = discountedCumulative;
+    result.discountedPaybackPeriod = discountedPeriod !== null ? round4(discountedPeriod) : null;
+    result.discountedPaybackPeriodRounded = discountedPeriod !== null ? Math.ceil(discountedPeriod) : null;
+    result.discountedRecovered = discountedPeriod !== null;
+  }
+  return result;
+}
+server.tool(
+  "calculate_payback_period",
+  "From an initial investment and a series of periodic cash flows, compute the simple payback period (the point where cumulative cash flow turns positive), plus the discounted payback period when a discount rate is supplied. Pure arithmetic over a running cumulative sum, no live rate feed.",
+  {
+    initialInvestment: z.number().describe("The initial investment amount (must be greater than zero)"),
+    cashFlows: z.array(z.number()).min(1).describe("Net cash flow for each period, in order"),
+    discountRatePercent: z.number().optional().describe("Optional discount rate per period, as a percent; when provided, also computes the discounted payback period")
+  },
+  async ({ initialInvestment, cashFlows, discountRatePercent }) => {
+    const result = _calculatePaybackPeriodMcp(initialInvestment, cashFlows, discountRatePercent);
+    if ("error" in result) return errText(result);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
 var transport = new StdioServerTransport();
 await server.connect(transport);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@utilix-tech/mcp",
-  "version": "0.43.0",
-  "description": "MCP server exposing 168 Utilix developer tools to Claude, Cursor, VS Code Copilot, and any MCP-compatible AI assistant.",
+  "version": "0.45.0",
+  "description": "MCP server exposing 175 Utilix developer tools to Claude, Cursor, VS Code Copilot, and any MCP-compatible AI assistant.",
   "author": "Utilix <hello@utilix.tech>",
   "license": "MIT",
   "homepage": "https://utilix.tech/mcp",