@utilix-tech/mcp 0.44.0 → 0.46.0

package/CHANGELOG.md

@@ -2,6 +2,14 @@
 
 Full release notes for all Utilix surfaces (browser tools, REST API, SDKs, MCP server) live at [utilix.tech/changelog](https://utilix.tech/changelog). This file tracks just this package.
 
+## 0.46.0
+- Add `calculate_cd_maturity` tool: compute a certificate of deposit's maturity value and effective annual yield (APY) from a principal, nominal rate, term, and compounding frequency, plus the net payout if withdrawn early.
+- Add `build_client_hints`, `parse_client_hint_headers` tools: build an `Accept-CH`/`Critical-CH` response header from a list of client hint names with a plain-English note per hint, or decode raw Client Hints request-header text into structured values.
+
+## 0.45.0
+- Add `build_permissions_policy`, `parse_permissions_policy` tools: build a `Permissions-Policy` response header from browser features and their per-feature allowlist with a plain-English note per feature, or parse an existing one into the same shape.
+- Add `calculate_payback_period` tool: compute the simple and discounted payback period from an initial investment and a series of periodic cash flows.
+
 ## 0.44.0
 - Add `validate_manifest` tool: validate a web app manifest.json against the W3C Web App Manifest spec's installability requirements, including a 512x512 icon and a maskable icon check.
 - Add `lint_tool_schema` tool: lint an LLM tool/function-calling definition (OpenAI, Anthropic, or MCP format) for missing descriptions, invalid names, empty enums, and required/properties mismatches.

package/README.md

@@ -1,6 +1,6 @@
 # @utilix-tech/mcp
 
-MCP server exposing 175 developer utility tools to Claude, Cursor, VS Code Copilot, and any [Model Context Protocol](https://modelcontextprotocol.io) compatible AI assistant.
+MCP server exposing 181 developer utility tools to Claude, Cursor, VS Code Copilot, and any [Model Context Protocol](https://modelcontextprotocol.io) compatible AI assistant.
 
 No API key required. All tools run locally. Requires Node.js 18 or later.
 
@@ -159,7 +159,7 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `convert_timezone` | Convert a date/time between timezones |
 | `convert_iso8601_duration` | Parse an ISO 8601 duration into components and total seconds, or format seconds into a duration string |
 
-### Units (26 tools)
+### Units (28 tools)
 | Tool | Description |
 |------|-------------|
 | `convert_bytes` | Convert between B, KB, MB, GB, TB, KiB, MiB, GiB, TiB |
@@ -188,8 +188,10 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `compare_unit_prices` | Compare two or more package options by price and quantity to find the true cost per unit, flag the cheapest, and report how much more expensive each other option is |
 | `calculate_cash_breakdown` | Break a cash amount down into the minimum count of bills/coins from a set of denominations, largest first |
 | `calculate_change` | Compute change owed for a payment/tender pair and break it down into the minimum count of bills/coins |
+| `calculate_payback_period` | Compute the simple and discounted payback period from an initial investment and a series of periodic cash flows |
+| `calculate_cd_maturity` | Compute a certificate of deposit's maturity value and effective annual yield (APY) from a principal, nominal rate, term, and compounding frequency, plus the net early-withdrawal payout |
 
-### API / Network (21 tools)
+### API / Network (25 tools)
 | Tool | Description |
 |------|-------------|
 | `decode_jwt` | Decode a JWT: header, payload, and expiry |
@@ -213,6 +215,10 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `build_vary_header` | Build a Vary response header from request-header names, with a plain-English caching note per header |
 | `parse_vary_header` | Parse an existing Vary header value into its individual header names, each with a caching note |
 | `validate_manifest` | Validate a web app manifest.json against the W3C spec's installability requirements: name/short_name, start_url, display mode, and icon coverage |
+| `build_permissions_policy` | Build a Permissions-Policy response header from browser features and their per-feature allowlist, with a plain-English note per feature |
+| `parse_permissions_policy` | Parse an existing Permissions-Policy header value into its individual feature directives, each with a plain-English note |
+| `build_client_hints` | Build an Accept-CH (and optional Critical-CH) response header from a list of client hint names, with a plain-English note on what each hint reveals |
+| `parse_client_hint_headers` | Decode raw Client Hints request-header text into structured values: brand/version pairs, booleans, strings, and numbers |
 
 ### Color (4 tools)
 | Tool | Description |

package/dist/index.js

@@ -7436,5 +7436,380 @@ server.tool(
     return text(JSON.stringify(result, null, 2));
   }
 );
+var _PERMISSIONS_POLICY_NOTES_MCP = {
+  camera: "Controls access to video capture devices (getUserMedia video).",
+  microphone: "Controls access to audio capture devices (getUserMedia audio).",
+  geolocation: "Controls access to the Geolocation API.",
+  autoplay: "Controls whether media elements can autoplay without a user gesture.",
+  fullscreen: "Controls access to the Fullscreen API (requestFullscreen).",
+  payment: "Controls access to the Payment Request API.",
+  usb: "Controls access to the WebUSB API.",
+  accelerometer: "Controls access to the Accelerometer sensor API.",
+  gyroscope: "Controls access to the Gyroscope sensor API.",
+  magnetometer: "Controls access to the Magnetometer sensor API.",
+  midi: "Controls access to the Web MIDI API.",
+  "picture-in-picture": "Controls whether video elements can enter picture-in-picture mode.",
+  "sync-xhr": "Controls whether synchronous XMLHttpRequest is allowed.",
+  "display-capture": "Controls access to screen/tab capture (getDisplayMedia).",
+  "encrypted-media": "Controls access to the Encrypted Media Extensions API (DRM playback).",
+  "clipboard-read": "Controls read access to the async Clipboard API.",
+  "clipboard-write": "Controls write access to the async Clipboard API.",
+  "screen-wake-lock": "Controls access to the Screen Wake Lock API.",
+  "web-share": "Controls access to the Web Share API.",
+  "xr-spatial-tracking": "Controls access to WebXR device sensors and spatial tracking."
+};
+function _formatPermissionsPolicyAllowlistMcp(allowlist) {
+  if (allowlist.includes("*")) return "*";
+  if (allowlist.length === 0) return "()";
+  return "(" + allowlist.map((o) => o === "self" ? "self" : `"${o}"`).join(" ") + ")";
+}
+function _buildPermissionsPolicyMcp(features) {
+  if (!Array.isArray(features) || features.length === 0) return { error: "At least one feature is required" };
+  const warnings = [];
+  const seen = /* @__PURE__ */ new Map();
+  for (const f of features) {
+    if (!f || typeof f.feature !== "string" || f.feature.trim() === "") continue;
+    const name = f.feature.trim().toLowerCase();
+    const allowlist = Array.isArray(f.allowlist) ? f.allowlist.map((o) => typeof o === "string" ? o.trim() : "").filter((o) => o.length > 0) : [];
+    if (seen.has(name)) warnings.push(`duplicate feature "${name}" was merged, the last occurrence wins`);
+    seen.set(name, { feature: name, allowlist });
+  }
+  if (seen.size === 0) return { error: "At least one feature is required" };
+  const directives = [];
+  for (const { feature, allowlist } of seen.values()) {
+    if (!_PERMISSIONS_POLICY_NOTES_MCP[feature]) {
+      warnings.push(`"${feature}" is not a widely recognized feature name, it will still be included as written`);
+    }
+    if (allowlist.includes("*") && allowlist.length > 1) {
+      warnings.push(`"${feature}" combines "*" with other origins; "*" already allows every origin so the others are redundant`);
+    }
+    const invalidOrigin = allowlist.find((o) => o !== "self" && o !== "*" && !/^https?:\/\//i.test(o));
+    if (invalidOrigin) {
+      warnings.push(`"${invalidOrigin}" on "${feature}" doesn't look like an origin (expected "self", "*", or an http(s):// URL); it will still be quoted as written`);
+    }
+    directives.push({
+      feature,
+      value: _formatPermissionsPolicyAllowlistMcp(allowlist),
+      note: _PERMISSIONS_POLICY_NOTES_MCP[feature] ?? `Controls access to the "${feature}" feature.`
+    });
+  }
+  const headerValue = directives.map((d) => `${d.feature}=${d.value}`).join(", ");
+  return { header: `Permissions-Policy: ${headerValue}`, headerValue, directives, warnings };
+}
+function _splitPermissionsPolicyTopLevelMcp(input) {
+  const segments = [];
+  let depth = 0;
+  let current = "";
+  for (const ch of input) {
+    if (ch === "(") depth++;
+    if (ch === ")") depth--;
+    if (ch === "," && depth === 0) {
+      if (current.trim()) segments.push(current.trim());
+      current = "";
+    } else {
+      current += ch;
+    }
+  }
+  if (current.trim()) segments.push(current.trim());
+  return segments;
+}
+function _parsePermissionsPolicyAllowlistMcp(rawValue) {
+  if (rawValue === "*") return ["*"];
+  if (rawValue === "()" || rawValue === "") return [];
+  const inner = rawValue.replace(/^\(/, "").replace(/\)$/, "");
+  const tokens = inner.match(/"[^"]*"|\S+/g) ?? [];
+  return tokens.map((t) => t.replace(/^"|"$/g, ""));
+}
+function _parsePermissionsPolicyMcp(raw) {
+  if (!raw || raw.trim() === "") return { error: "Input is empty" };
+  const withoutLabel = raw.trim().replace(/^permissions-policy:\s*/i, "");
+  const segments = _splitPermissionsPolicyTopLevelMcp(withoutLabel);
+  if (segments.length === 0) return { error: "No directives found" };
+  const features = [];
+  for (const segment of segments) {
+    const eq = segment.indexOf("=");
+    if (eq === -1) continue;
+    const feature = segment.slice(0, eq).trim();
+    const rawValue = segment.slice(eq + 1).trim();
+    features.push({ feature, allowlist: _parsePermissionsPolicyAllowlistMcp(rawValue) });
+  }
+  if (features.length === 0) return { error: "No directives found" };
+  return _buildPermissionsPolicyMcp(features);
+}
+server.tool(
+  "build_permissions_policy",
+  'Build a Permissions-Policy response-header value from a list of browser features (e.g. camera, microphone, geolocation) and their per-feature allowlist ("self", specific origins, "*" for all origins, or an empty allowlist to disable the feature entirely), attaching a plain-English note on what each feature restricts.',
+  {
+    features: z.array(z.object({
+      feature: z.string().describe('The Permissions-Policy feature name, e.g. "camera"'),
+      allowlist: z.array(z.string()).describe('Origins allowed to use the feature: "self", "*" for all origins, specific https:// origins, or an empty array to disable it entirely')
+    })).min(1).describe("Features and their allowlists to include in the header")
+  },
+  async ({ features }) => {
+    const result = _buildPermissionsPolicyMcp(features);
+    if ("error" in result) return errText(result);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
+server.tool(
+  "parse_permissions_policy",
+  'Parse an existing Permissions-Policy header value (with or without a leading "Permissions-Policy:" label) into its individual feature directives, each with a plain-English note on what it restricts.',
+  {
+    header: z.string().min(1).describe("The Permissions-Policy header value to parse")
+  },
+  async ({ header }) => {
+    const result = _parsePermissionsPolicyMcp(header);
+    if ("error" in result) return errText(result);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
+function _computePaybackMcp(initialInvestment, flows) {
+  const round4 = (n) => Math.round(n * 1e4) / 1e4;
+  let cumulative = 0;
+  const cumulativeCashFlows = [];
+  let period = null;
+  for (let i = 0; i < flows.length; i++) {
+    const prevCumulative = cumulative;
+    cumulative += flows[i];
+    cumulativeCashFlows.push(round4(cumulative));
+    if (period === null && cumulative >= initialInvestment) {
+      const remaining = initialInvestment - prevCumulative;
+      const fraction = flows[i] !== 0 ? remaining / flows[i] : 0;
+      period = i + fraction;
+    }
+  }
+  return { cumulative: cumulativeCashFlows, period };
+}
+function _calculatePaybackPeriodMcp(initialInvestment, cashFlows, discountRatePercent) {
+  const round4 = (n) => Math.round(n * 1e4) / 1e4;
+  if (typeof initialInvestment !== "number" || !Number.isFinite(initialInvestment) || initialInvestment <= 0) {
+    return { error: "initialInvestment must be a finite number greater than zero" };
+  }
+  if (!Array.isArray(cashFlows) || cashFlows.length === 0) {
+    return { error: "cashFlows must be a non-empty array of numbers" };
+  }
+  if (cashFlows.some((f) => typeof f !== "number" || !Number.isFinite(f))) {
+    return { error: "Every cash flow must be a finite number" };
+  }
+  const { cumulative, period } = _computePaybackMcp(initialInvestment, cashFlows);
+  const result = {
+    initialInvestment: round4(initialInvestment),
+    cashFlows: cashFlows.map(round4),
+    cumulativeCashFlows: cumulative,
+    paybackPeriod: period !== null ? round4(period) : null,
+    paybackPeriodRounded: period !== null ? Math.ceil(period) : null,
+    recovered: period !== null
+  };
+  if (discountRatePercent !== void 0) {
+    if (typeof discountRatePercent !== "number" || !Number.isFinite(discountRatePercent) || discountRatePercent < 0) {
+      return { error: "discountRatePercent must be a finite, non-negative number when provided" };
+    }
+    const r = discountRatePercent / 100;
+    const discountedCashFlows = cashFlows.map((f, i) => f / Math.pow(1 + r, i + 1));
+    const { cumulative: discountedCumulative, period: discountedPeriod } = _computePaybackMcp(initialInvestment, discountedCashFlows);
+    result.discountRatePercent = round4(discountRatePercent);
+    result.discountedCashFlows = discountedCashFlows.map(round4);
+    result.discountedCumulativeCashFlows = discountedCumulative;
+    result.discountedPaybackPeriod = discountedPeriod !== null ? round4(discountedPeriod) : null;
+    result.discountedPaybackPeriodRounded = discountedPeriod !== null ? Math.ceil(discountedPeriod) : null;
+    result.discountedRecovered = discountedPeriod !== null;
+  }
+  return result;
+}
+server.tool(
+  "calculate_payback_period",
+  "From an initial investment and a series of periodic cash flows, compute the simple payback period (the point where cumulative cash flow turns positive), plus the discounted payback period when a discount rate is supplied. Pure arithmetic over a running cumulative sum, no live rate feed.",
+  {
+    initialInvestment: z.number().describe("The initial investment amount (must be greater than zero)"),
+    cashFlows: z.array(z.number()).min(1).describe("Net cash flow for each period, in order"),
+    discountRatePercent: z.number().optional().describe("Optional discount rate per period, as a percent; when provided, also computes the discounted payback period")
+  },
+  async ({ initialInvestment, cashFlows, discountRatePercent }) => {
+    const result = _calculatePaybackPeriodMcp(initialInvestment, cashFlows, discountRatePercent);
+    if ("error" in result) return errText(result);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
+function _calculateCdMaturityMcp(principal, annualRatePercent, termMonths, compoundsPerYear, earlyWithdrawalPenaltyMonths) {
+  const round2 = (n) => Math.round(n * 100) / 100;
+  const round4 = (n) => Math.round(n * 1e4) / 1e4;
+  if (typeof principal !== "number" || !Number.isFinite(principal) || principal <= 0) {
+    return { error: "Principal must be a finite number greater than zero" };
+  }
+  if (typeof annualRatePercent !== "number" || !Number.isFinite(annualRatePercent) || annualRatePercent < 0) {
+    return { error: "Annual interest rate must be zero or a positive number" };
+  }
+  if (typeof termMonths !== "number" || !Number.isFinite(termMonths) || termMonths <= 0) {
+    return { error: "Term must be a positive number of months" };
+  }
+  if (typeof compoundsPerYear !== "number" || !Number.isInteger(compoundsPerYear) || compoundsPerYear <= 0) {
+    return { error: "Compounding frequency must be a positive whole number of periods per year" };
+  }
+  if (earlyWithdrawalPenaltyMonths !== void 0 && (typeof earlyWithdrawalPenaltyMonths !== "number" || !Number.isFinite(earlyWithdrawalPenaltyMonths) || earlyWithdrawalPenaltyMonths < 0)) {
+    return { error: "earlyWithdrawalPenaltyMonths must be zero or a positive number when provided" };
+  }
+  const ratePerPeriod = annualRatePercent / 100 / compoundsPerYear;
+  const totalPeriods = compoundsPerYear * (termMonths / 12);
+  const growth = ratePerPeriod === 0 ? 1 : Math.pow(1 + ratePerPeriod, totalPeriods);
+  const maturityValue = principal * growth;
+  const totalInterest = maturityValue - principal;
+  const apy = ratePerPeriod === 0 ? 0 : (Math.pow(1 + ratePerPeriod, compoundsPerYear) - 1) * 100;
+  const result = {
+    principal: round2(principal),
+    annualRatePercent: round4(annualRatePercent),
+    termMonths,
+    compoundsPerYear,
+    maturityValue: round2(maturityValue),
+    totalInterest: round2(totalInterest),
+    apy: round4(apy)
+  };
+  if (earlyWithdrawalPenaltyMonths !== void 0) {
+    const monthlyRate = annualRatePercent / 100 / 12;
+    const forfeited = Math.min(principal * monthlyRate * earlyWithdrawalPenaltyMonths, Math.max(totalInterest, 0));
+    result.earlyWithdrawalPenaltyMonths = earlyWithdrawalPenaltyMonths;
+    result.earlyWithdrawalForfeitedInterest = round2(forfeited);
+    result.earlyWithdrawalPayout = round2(maturityValue - forfeited);
+  }
+  return result;
+}
+server.tool(
+  "calculate_cd_maturity",
+  "Compute the maturity value of a certificate of deposit given a principal, a nominal annual interest rate (as a percent), a term in months, and a compounding frequency (periods per year, e.g. 1 = annually, 12 = monthly). Also reports the effective annual yield (APY) implied by the nominal rate and compounding frequency, and, when an early-withdrawal penalty in months of forfeited interest is given, the net payout if withdrawn before maturity.",
+  {
+    principal: z.number().describe("The deposit principal (must be greater than zero)"),
+    annualRatePercent: z.number().describe("Nominal annual interest rate, as a percent, e.g. 5"),
+    termMonths: z.number().describe("CD term in months"),
+    compoundsPerYear: z.number().int().describe("Compounding periods per year, e.g. 1 = annually, 4 = quarterly, 12 = monthly, 365 = daily"),
+    earlyWithdrawalPenaltyMonths: z.number().optional().describe("Optional early-withdrawal penalty, in months of forfeited interest; when given, also computes the net early-withdrawal payout")
+  },
+  async ({ principal, annualRatePercent, termMonths, compoundsPerYear, earlyWithdrawalPenaltyMonths }) => {
+    const result = _calculateCdMaturityMcp(principal, annualRatePercent, termMonths, compoundsPerYear, earlyWithdrawalPenaltyMonths);
+    if ("error" in result) return errText(result);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
+var _CLIENT_HINTS_MCP = [
+  { name: "Sec-CH-UA", description: "The browser's brand(s) and significant version, sent automatically on every request without an Accept-CH opt-in.", lowEntropy: true, valueType: "sf-list-brand" },
+  { name: "Sec-CH-UA-Mobile", description: "Whether the browser is running on a mobile device (?1) or not (?0).", lowEntropy: true, valueType: "boolean" },
+  { name: "Sec-CH-UA-Platform", description: 'The platform/OS the browser is running on, e.g. "Windows" or "Android".', lowEntropy: true, valueType: "string" },
+  { name: "Sec-CH-UA-Full-Version-List", description: "The full version number for each brand in the user agent, not just the significant version.", lowEntropy: false, valueType: "sf-list-brand" },
+  { name: "Sec-CH-UA-Platform-Version", description: 'The exact OS version, e.g. "15.0.0".', lowEntropy: false, valueType: "string" },
+  { name: "Sec-CH-UA-Arch", description: 'The underlying CPU architecture, e.g. "x86" or "arm".', lowEntropy: false, valueType: "string" },
+  { name: "Sec-CH-UA-Bitness", description: 'The CPU architecture bitness, e.g. "64".', lowEntropy: false, valueType: "string" },
+  { name: "Sec-CH-UA-Model", description: "The device model, mostly populated on mobile devices.", lowEntropy: false, valueType: "string" },
+  { name: "Sec-CH-UA-WoW64", description: "Whether a 32-bit browser is running on 64-bit Windows.", lowEntropy: false, valueType: "boolean" },
+  { name: "Sec-CH-UA-Form-Factor", description: `The device's form factor, e.g. "Desktop", "Mobile", "Tablet", or "XR".`, lowEntropy: false, valueType: "string" },
+  { name: "Sec-CH-Prefers-Color-Scheme", description: "The user's preferred color scheme, mirrors the prefers-color-scheme media feature.", lowEntropy: false, valueType: "string" },
+  { name: "Sec-CH-Prefers-Reduced-Motion", description: "Whether the user has requested reduced motion.", lowEntropy: false, valueType: "string" },
+  { name: "Sec-CH-Prefers-Reduced-Transparency", description: "Whether the user has requested reduced transparency.", lowEntropy: false, valueType: "string" },
+  { name: "Sec-CH-Viewport-Width", description: "The layout viewport width in CSS pixels.", lowEntropy: false, valueType: "number" },
+  { name: "Sec-CH-Viewport-Height", description: "The layout viewport height in CSS pixels.", lowEntropy: false, valueType: "number" },
+  { name: "Sec-CH-DPR", description: "The device pixel ratio.", lowEntropy: false, valueType: "number" },
+  { name: "Sec-CH-Width", description: "The intrinsic width of a requested image resource, set per-request via the image's sizes attribute.", lowEntropy: false, valueType: "number" },
+  { name: "Sec-CH-Device-Memory", description: "Approximate device RAM in GiB, rounded to the nearest power of two for privacy.", lowEntropy: false, valueType: "number" },
+  { name: "Save-Data", description: "Legacy hint signaling the user opted into a reduced-data mode; sent automatically like a low-entropy hint.", lowEntropy: true, valueType: "boolean" }
+];
+function _findClientHintMcp(raw) {
+  const normalized = raw.trim().toLowerCase();
+  return _CLIENT_HINTS_MCP.find((d) => d.name.toLowerCase() === normalized);
+}
+function _buildClientHintsMcp(hintNames, criticalHintNames = []) {
+  if (!Array.isArray(hintNames) || hintNames.length === 0) return { error: "At least one client hint is required" };
+  const resolved = [];
+  for (const raw of hintNames) {
+    if (typeof raw !== "string" || raw.trim() === "") continue;
+    const def = _findClientHintMcp(raw);
+    if (!def) return { error: `Unknown client hint: "${raw}"` };
+    resolved.push(def);
+  }
+  if (resolved.length === 0) return { error: "At least one client hint is required" };
+  const critical = [];
+  for (const raw of criticalHintNames) {
+    if (typeof raw !== "string" || raw.trim() === "") continue;
+    const def = _findClientHintMcp(raw);
+    if (!def) return { error: `Unknown client hint: "${raw}"` };
+    if (!resolved.some((d) => d.name === def.name)) {
+      return { error: `Critical hint "${def.name}" must also be included in hintNames` };
+    }
+    critical.push(def);
+  }
+  const uniqueNames = Array.from(new Set(resolved.map((d) => d.name)));
+  const result = {
+    acceptCH: uniqueNames.join(", "),
+    hints: resolved.map((d) => ({ name: d.name, description: d.description, lowEntropy: d.lowEntropy }))
+  };
+  if (critical.length > 0) {
+    result.criticalCH = Array.from(new Set(critical.map((d) => d.name))).join(", ");
+  }
+  return result;
+}
+server.tool(
+  "build_client_hints",
+  "Build an Accept-CH response-header value from a list of client hint names (e.g. Sec-CH-UA-Platform, Sec-CH-DPR) the server wants the browser to send on future requests, attaching a plain-English note on what each hint reveals. Pass a subset of those names as criticalHintNames to also build a Critical-CH header value, for hints the server needs on the very first request of a session.",
+  {
+    hintNames: z.array(z.string()).min(1).describe('Client hint names to request, e.g. "Sec-CH-UA-Platform"'),
+    criticalHintNames: z.array(z.string()).optional().describe("Optional subset of hintNames to also mark critical (builds a Critical-CH header value)")
+  },
+  async ({ hintNames, criticalHintNames }) => {
+    const result = _buildClientHintsMcp(hintNames, criticalHintNames ?? []);
+    if ("error" in result) return errText(result);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
+function _decodeClientHintValueMcp(valueType, rawValue) {
+  switch (valueType) {
+    case "boolean":
+      if (rawValue === "?1") return true;
+      if (rawValue === "?0") return false;
+      return rawValue;
+    case "string":
+      return rawValue.replace(/^"|"$/g, "");
+    case "number": {
+      const n = Number(rawValue);
+      return Number.isFinite(n) ? n : rawValue;
+    }
+    case "sf-list-brand":
+      return rawValue.split(",").map((part) => {
+        const m = part.trim().match(/^"([^"]*)";v="([^"]*)"$/);
+        return m ? { brand: m[1], version: m[2] } : { raw: part.trim() };
+      });
+    default:
+      return rawValue;
+  }
+}
+function _parseClientHintHeadersMcp(rawHeaders) {
+  if (typeof rawHeaders !== "string" || rawHeaders.trim() === "") return { error: "Provide one or more header lines to parse" };
+  const lines = rawHeaders.split("\n").map((l) => l.trim()).filter((l) => l.length > 0);
+  const hints = [];
+  const unrecognized = [];
+  for (const line of lines) {
+    const idx = line.indexOf(":");
+    if (idx === -1) continue;
+    const name = line.slice(0, idx).trim();
+    const rawValue = line.slice(idx + 1).trim();
+    const def = _findClientHintMcp(name);
+    if (!def) {
+      unrecognized.push({ name, rawValue });
+      continue;
+    }
+    hints.push({ name: def.name, rawValue, description: def.description, value: _decodeClientHintValueMcp(def.valueType, rawValue) });
+  }
+  if (hints.length === 0 && unrecognized.length === 0) {
+    return { error: 'No parsable header lines found (expected "Header-Name: value" per line)' };
+  }
+  return { hints, unrecognized };
+}
+server.tool(
+  "parse_client_hint_headers",
+  `Parse raw request-header text, one "Header-Name: value" per line, into decoded client hint values: brand/version pairs for Sec-CH-UA-style headers, booleans for ?1/?0 values, unquoted strings, and numbers. Lines whose header name isn't a recognized client hint are returned separately under "unrecognized" rather than dropped.`,
+  {
+    headers: z.string().min(1).describe('Raw request-header text to parse, one "Header-Name: value" per line')
+  },
+  async ({ headers }) => {
+    const result = _parseClientHintHeadersMcp(headers);
+    if ("error" in result) return errText(result);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
 var transport = new StdioServerTransport();
 await server.connect(transport);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@utilix-tech/mcp",
-  "version": "0.44.0",
+  "version": "0.46.0",
   "description": "MCP server exposing 175 Utilix developer tools to Claude, Cursor, VS Code Copilot, and any MCP-compatible AI assistant.",
   "author": "Utilix <hello@utilix.tech>",
   "license": "MIT",