@utilix-tech/mcp 0.74.0 → 0.75.0

package/CHANGELOG.md

@@ -2,6 +2,10 @@
 
 Full release notes for all Utilix surfaces (browser tools, REST API, SDKs, MCP server) live at [utilix.tech/changelog](https://utilix.tech/changelog). This file tracks just this package.
 
+## 0.75.0
+- Add `verify_webhook_signature` tool: recompute an HMAC over a raw webhook payload and compare it to a provided signature, supporting the `sha256=` prefix style (Stripe/GitHub-style webhooks) plus raw hex or base64 encoding.
+- Add `estimate_data_transfer_time` tool: estimate the theoretical time to transfer a file over a connection of a given speed, or the reverse: the bandwidth required to hit a target time.
+
 ## 0.74.0
 - Add `calculate_loan_prepayment_penalty` tool: compute the dollar penalty cost of paying a loan off early, given its payoff balance and a prepayment penalty structure (a flat percent of balance, or a fixed number of months of interest).
 - Add `validate_aria` tool: check every role and aria-* attribute in an HTML snippet against a curated WAI-ARIA 1.2 role table, flagging unknown roles, disallowed attributes, and missing required states.

package/README.md

@@ -1,6 +1,6 @@
 # @utilix-tech/mcp
 
-MCP server exposing 243 developer utility tools to Claude, Cursor, VS Code Copilot, and any [Model Context Protocol](https://modelcontextprotocol.io) compatible AI assistant.
+MCP server exposing 245 developer utility tools to Claude, Cursor, VS Code Copilot, and any [Model Context Protocol](https://modelcontextprotocol.io) compatible AI assistant.
 
 No API key required. All tools run locally. Requires Node.js 18 or later.
 
@@ -162,7 +162,7 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `convert_timezone` | Convert a date/time between timezones |
 | `convert_iso8601_duration` | Parse an ISO 8601 duration into components and total seconds, or format seconds into a duration string |
 
-### Units (44 tools)
+### Units (45 tools)
 | Tool | Description |
 |------|-------------|
 | `convert_bytes` | Convert between B, KB, MB, GB, TB, KiB, MiB, GiB, TiB |
@@ -209,8 +209,9 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `validate_isin` | Validate a 12-character ISIN via its Luhn-style mod-10 check digit and break it into its country code and security identifier |
 | `calculate_mortgage_points` | Compare a loan with no discount points against the same loan at a reduced rate bought with points, and compute the monthly savings and the break-even month where cumulative savings recoup the points cost |
 | `calculate_loan_prepayment_penalty` | Compute the dollar penalty cost of paying a loan off early, given its remaining payoff balance and a prepayment penalty structure: either a flat percent of the payoff balance, or a fixed number of months of interest at the loan's annual rate |
+| `estimate_data_transfer_time` | Estimate the theoretical time to transfer a file of a given size over a connection of a given speed, or (given a target time instead) the bandwidth required to hit it |
 
-### API / Network (49 tools)
+### API / Network (50 tools)
 | Tool | Description |
 |------|-------------|
 | `decode_jwt` | Decode a JWT: header, payload, and expiry |
@@ -264,6 +265,7 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `build_robots_meta_tag` | Build a `<meta name="robots" content="...">` tag from directives (noindex, nofollow, max-snippet, etc.), the same vocabulary as X-Robots-Tag, optionally scoped to a crawler via the name attribute |
 | `parse_robots_meta_tag` | Parse an existing robots meta tag (or bare content value) into the same shape |
 | `calculate_cookie_size_budget` | Parse a Cookie header's name=value pairs and compute each cookie's and the total header's byte size against RFC 6265's 4096-byte per-cookie guarantee and a configurable budget |
+| `verify_webhook_signature` | Recompute an HMAC over a raw webhook payload and compare it to a provided signature, accepting a `sha256=` prefix style and matching against hex or base64 encoding |
 
 ### Color (4 tools)
 | Tool | Description |

package/dist/index.js

@@ -11845,5 +11845,120 @@ server.tool(
     return text(JSON.stringify(result, null, 2));
   }
 );
+var _WEBHOOK_HASH_ALGORITHMS_MCP = ["sha1", "sha256", "sha512"];
+function _webhookConstantTimeEqualMcp(a, b) {
+  if (a.length !== b.length) return false;
+  let diff = 0;
+  for (let i = 0; i < a.length; i++) diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
+  return diff === 0;
+}
+function _verifyWebhookSignatureMcp(payload, secret, signature, algorithm) {
+  if (!payload) return { error: "Payload is required" };
+  if (!secret) return { error: "Secret is required" };
+  if (!signature || !signature.trim()) return { error: "Signature is required" };
+  if (!_WEBHOOK_HASH_ALGORITHMS_MCP.includes(algorithm)) {
+    return { error: "Algorithm must be one of sha1, sha256, sha512" };
+  }
+  const trimmedSignature = signature.trim();
+  const prefixMatch = trimmedSignature.match(/^(sha1|sha256|sha512)=(.+)$/i);
+  const providedSignature = prefixMatch ? prefixMatch[2].trim() : trimmedSignature;
+  const expectedHex = createHmac(algorithm, secret).update(payload, "utf8").digest("hex");
+  const expectedBase64 = createHmac(algorithm, secret).update(payload, "utf8").digest("base64");
+  let matchedEncoding = null;
+  if (_webhookConstantTimeEqualMcp(providedSignature.toLowerCase(), expectedHex.toLowerCase())) {
+    matchedEncoding = "hex";
+  } else if (_webhookConstantTimeEqualMcp(providedSignature, expectedBase64)) {
+    matchedEncoding = "base64";
+  }
+  return {
+    valid: matchedEncoding !== null,
+    algorithm,
+    expectedHex,
+    expectedBase64,
+    providedSignature: trimmedSignature,
+    matchedEncoding
+  };
+}
+server.tool(
+  "verify_webhook_signature",
+  'Recompute an HMAC over a raw webhook payload and compare it to a provided signature, the check every webhook receiver (Stripe, GitHub, Shopify, etc.) has to do before trusting a request. Accepts a signature with or without the common "sha256=" prefix style, and matches against either hex or base64 encoding since providers differ on which they send.',
+  {
+    payload: z.string().describe("The raw webhook request body, exactly as received (do not re-serialize JSON)"),
+    secret: z.string().describe("The shared webhook signing secret"),
+    signature: z.string().describe('The signature to verify, with or without a "sha256=" style prefix, hex or base64 encoded'),
+    algorithm: z.enum(["sha1", "sha256", "sha512"]).optional().describe("The HMAC hash algorithm the signature was computed with (default sha256)")
+  },
+  async ({ payload, secret, signature, algorithm }) => {
+    const result = _verifyWebhookSignatureMcp(payload, secret, signature, algorithm ?? "sha256");
+    if ("error" in result) return errText(result);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
+var _FILE_SIZE_UNIT_BYTES_MCP = { B: 1, KB: 1e3, MB: 1e6, GB: 1e9, TB: 1e12 };
+var _SPEED_UNIT_BITS_PER_SECOND_MCP = {
+  Kbps: 1e3,
+  Mbps: 1e6,
+  Gbps: 1e9,
+  KBps: 1e3 * 8,
+  MBps: 1e6 * 8,
+  GBps: 1e9 * 8
+};
+function _formatDurationSecondsMcp(totalSeconds) {
+  if (totalSeconds < 1) return `${(totalSeconds * 1e3).toFixed(0)}ms`;
+  if (totalSeconds < 60) {
+    const decimals = totalSeconds < 10 && totalSeconds % 1 !== 0 ? 1 : 0;
+    return `${totalSeconds.toFixed(decimals)}s`;
+  }
+  const days = Math.floor(totalSeconds / 86400);
+  const hours = Math.floor(totalSeconds % 86400 / 3600);
+  const minutes = Math.floor(totalSeconds % 3600 / 60);
+  const seconds = Math.round(totalSeconds % 60);
+  const parts = [];
+  if (days > 0) parts.push(`${days}d`);
+  if (hours > 0) parts.push(`${hours}h`);
+  if (minutes > 0) parts.push(`${minutes}m`);
+  if (seconds > 0 || parts.length === 0) parts.push(`${seconds}s`);
+  return parts.join(" ");
+}
+function _calculateTransferTimeMcp(fileSize, fileSizeUnit, speed, speedUnit) {
+  if (!Number.isFinite(fileSize) || fileSize <= 0) return { error: "File size must be a positive number" };
+  if (!Number.isFinite(speed) || speed <= 0) return { error: "Connection speed must be a positive number" };
+  if (!(fileSizeUnit in _FILE_SIZE_UNIT_BYTES_MCP)) return { error: `Unsupported file size unit: ${fileSizeUnit}` };
+  if (!(speedUnit in _SPEED_UNIT_BITS_PER_SECOND_MCP)) return { error: `Unsupported speed unit: ${speedUnit}` };
+  const fileSizeBytes = fileSize * _FILE_SIZE_UNIT_BYTES_MCP[fileSizeUnit];
+  const speedBitsPerSecond = speed * _SPEED_UNIT_BITS_PER_SECOND_MCP[speedUnit];
+  const transferTimeSeconds = fileSizeBytes * 8 / speedBitsPerSecond;
+  return { fileSizeBytes, speedBitsPerSecond, transferTimeSeconds, formattedTime: _formatDurationSecondsMcp(transferTimeSeconds) };
+}
+function _calculateRequiredBandwidthMcp(fileSize, fileSizeUnit, targetSeconds) {
+  if (!Number.isFinite(fileSize) || fileSize <= 0) return { error: "File size must be a positive number" };
+  if (!Number.isFinite(targetSeconds) || targetSeconds <= 0) return { error: "Target time must be a positive number of seconds" };
+  if (!(fileSizeUnit in _FILE_SIZE_UNIT_BYTES_MCP)) return { error: `Unsupported file size unit: ${fileSizeUnit}` };
+  const fileSizeBytes = fileSize * _FILE_SIZE_UNIT_BYTES_MCP[fileSizeUnit];
+  const requiredBitsPerSecond = fileSizeBytes * 8 / targetSeconds;
+  return {
+    fileSizeBytes,
+    targetSeconds,
+    requiredBitsPerSecond,
+    requiredMbps: requiredBitsPerSecond / 1e6,
+    requiredMBps: requiredBitsPerSecond / 8 / 1e6
+  };
+}
+server.tool(
+  "estimate_data_transfer_time",
+  "Estimate the theoretical time to transfer a file of a given size over a connection of a given speed (decimal/SI file size units, standard networking speed units where Mbps is megabits/second and MBps is megabytes/second). Pass targetSeconds instead of speed/speedUnit to run the reverse calculation: the bandwidth required to hit that target time.",
+  {
+    fileSize: z.number().positive().describe("The file size, in fileSizeUnit"),
+    fileSizeUnit: z.enum(["B", "KB", "MB", "GB", "TB"]).describe("The unit fileSize is expressed in"),
+    speed: z.number().positive().optional().describe("The connection speed, in speedUnit (omit and pass targetSeconds for the reverse calculation)"),
+    speedUnit: z.enum(["Kbps", "Mbps", "Gbps", "KBps", "MBps", "GBps"]).optional().describe("The unit speed is expressed in"),
+    targetSeconds: z.number().positive().optional().describe("Target transfer time in seconds; when set, computes the required bandwidth instead of the transfer time")
+  },
+  async ({ fileSize, fileSizeUnit, speed, speedUnit, targetSeconds }) => {
+    const result = targetSeconds !== void 0 ? _calculateRequiredBandwidthMcp(fileSize, fileSizeUnit, targetSeconds) : speed !== void 0 && speedUnit !== void 0 ? _calculateTransferTimeMcp(fileSize, fileSizeUnit, speed, speedUnit) : { error: "Provide either (speed and speedUnit) or targetSeconds" };
+    if ("error" in result) return errText(result);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
 var transport = new StdioServerTransport();
 await server.connect(transport);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@utilix-tech/mcp",
-  "version": "0.74.0",
+  "version": "0.75.0",
   "description": "MCP server exposing 198 Utilix developer tools to Claude, Cursor, VS Code Copilot, and any MCP-compatible AI assistant.",
   "author": "Utilix <hello@utilix.tech>",
   "license": "MIT",