@utilix-tech/mcp 0.97.0 → 0.99.0

package/CHANGELOG.md

@@ -2,6 +2,14 @@
 
 Full release notes for all Utilix surfaces (browser tools, REST API, SDKs, MCP server) live at [utilix.tech/changelog](https://utilix.tech/changelog). This file tracks just this package.
 
+## 0.99.0
+- Add `calculate_dividend_yield` tool: compute a stock's dividend yield from annual dividend per share and share price, plus payout ratio and retention ratio when trailing EPS is given.
+- Add `check_known_hosts_fingerprints` tool: compute SHA256/MD5 fingerprints for ssh_known_hosts entries the way `ssh-keygen -lf` does, decoding key type and RSA bit length to flag weak or deprecated keys.
+
+## 0.98.0
+- Add `convert_timecode` tool: convert between a frame count, SMPTE timecode (HH:MM:SS:FF), and seconds at a given frame rate, handling NTSC drop-frame timecode's skipped frame numbers correctly.
+- Add `validate_geojson` tool: validate a GeoJSON document against RFC 7946's structural rules, geometry type/coordinates shape, polygon ring closure and winding, and a FeatureCollection's required fields.
+
 ## 0.97.0
 - Add `calculate_position_size` tool: compute a trade's position size from account size, risk percent per trade, entry price, and stop-loss price, plus the risk/reward ratio against an optional target price.
 - Add `detect_weasel_words` tool: scan text for weasel words, vague hedging phrases that imply evidence or consensus without naming a checkable source, like "studies show" or "many experts believe".

package/README.md

@@ -1,6 +1,6 @@
 # @utilix-tech/mcp
 
-MCP server exposing 287 developer utility tools to Claude, Cursor, VS Code Copilot, and any [Model Context Protocol](https://modelcontextprotocol.io) compatible AI assistant.
+MCP server exposing 291 developer utility tools to Claude, Cursor, VS Code Copilot, and any [Model Context Protocol](https://modelcontextprotocol.io) compatible AI assistant.
 
 No API key required. All tools run locally. Requires Node.js 18 or later.
 
@@ -89,6 +89,7 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `diff_json_patch` | Compare two JSON documents and generate an RFC 6902 JSON Patch operation list |
 | `apply_json_patch` | Apply a sequence of RFC 6902 JSON Patch operations (add, remove, replace, move, copy, test) to a target document |
 | `validate_json` | Validate JSON against a JSON Schema |
+| `validate_geojson` | Validate a GeoJSON document against RFC 7946's structural rules: geometry type/coordinates shape, polygon ring closure and winding, and a FeatureCollection's required fields |
 | `yaml_to_json` | Convert YAML to JSON |
 | `json_to_yaml` | Convert JSON to YAML |
 | `json_to_typescript` | Generate TypeScript interfaces from JSON |
@@ -113,7 +114,7 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `base62_encode` | Encode text as Base62 (alphanumeric, URL-safe) |
 | `base62_decode` | Decode a Base62 string back to text |
 
-### Hashing (6 tools)
+### Hashing (7 tools)
 | Tool | Description |
 |------|-------------|
 | `hash` | Hash a string with MD5, SHA-1, SHA-256, SHA-384, or SHA-512 |
@@ -122,6 +123,7 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `bcrypt_verify` | Verify a password against a bcrypt hash |
 | `generate_sri_hash` | Compute a Subresource Integrity hash (SHA-256/384/512) for a script or stylesheet's content, formatted for an HTML `integrity` attribute |
 | `generate_etag` | Compute a content-hash ETag (MD5/SHA-1/SHA-256) for a response header, with an optional weak-validator prefix |
+| `check_known_hosts_fingerprints` | Parse an ssh_known_hosts file and compute each key's SHA256/MD5 fingerprint the way `ssh-keygen -lf` does, decoding key type and RSA bit length to flag weak or deprecated keys |
 
 ### Generators (7 tools)
 | Tool | Description |
@@ -170,7 +172,7 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `convert_timezone` | Convert a date/time between timezones |
 | `convert_iso8601_duration` | Parse an ISO 8601 duration into components and total seconds, or format seconds into a duration string |
 
-### Units (53 tools)
+### Units (54 tools)
 | Tool | Description |
 |------|-------------|
 | `convert_bytes` | Convert between B, KB, MB, GB, TB, KiB, MiB, GiB, TiB |
@@ -194,6 +196,7 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `calculate_break_even` | Compute the break-even unit count and revenue from fixed costs, variable cost per unit, and price per unit |
 | `calculate_video_bitrate` | Calculate a video's file size from a bitrate and duration, or the bitrate needed to hit a target file size |
 | `calculate_rule_of_72` | Estimate years to double an investment from a rate, or the rate needed to double in a given number of years, via the Rule of 72 shortcut and the exact logarithmic result |
+| `convert_timecode` | Convert between a frame count, SMPTE timecode, and seconds at a given frame rate, handling NTSC drop-frame timecode's skipped frame numbers correctly |
 | `calculate_emi` | Compute the Equated Monthly Installment for a loan from principal, annual rate, and tenure in years or months, with a year-by-year principal/interest breakdown |
 | `calculate_savings_goal` | Solve for months to reach a savings goal at a fixed monthly contribution, or the monthly contribution required to hit a goal by a target month count |
 | `calculate_annuity_payout` | Solve the standard annuity formula in either direction: the periodic payout a lump sum funds, or the lump sum required to fund a target payout, for an ordinary or annuity-due structure |
@@ -226,6 +229,7 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `intersect_semver_ranges` | Determine whether two semver ranges overlap and, if so, the intersecting range, supporting the same caret/tilde/comparison-operator/exact-version syntax as the semver tool |
 | `validate_routing_number` | Validate a 9-digit US bank routing number (ABA/RTN) via its weighted mod-10 checksum, and identify its routing number type and Federal Reserve district |
 | `calculate_position_size` | Compute a trade's position size from account size, risk percent per trade, entry price, and stop-loss price, plus the risk/reward ratio against an optional target price |
+| `calculate_dividend_yield` | Compute a stock's dividend yield from annual dividend per share and share price, plus payout ratio and retention ratio when trailing EPS is given |
 
 ### API / Network (55 tools)
 | Tool | Description |

package/dist/index.js

@@ -6003,6 +6003,295 @@ server.tool(
     return text(JSON.stringify(result, null, 2));
   }
 );
+var _TIMECODE_NOMINAL_FPS_MCP = {
+  "23.976": 24,
+  "24": 24,
+  "25": 25,
+  "29.97": 30,
+  "30": 30,
+  "50": 50,
+  "59.94": 60,
+  "60": 60
+};
+function _framesToPlainTimecodeMcp(frameNumber, nominalFps) {
+  const framesPerDay = nominalFps * 86400;
+  const fn = (frameNumber % framesPerDay + framesPerDay) % framesPerDay;
+  const frames = fn % nominalFps;
+  const totalSeconds = Math.floor(fn / nominalFps);
+  return {
+    hours: Math.floor(totalSeconds / 3600) % 24,
+    minutes: Math.floor(totalSeconds / 60) % 60,
+    seconds: totalSeconds % 60,
+    frames
+  };
+}
+function _plainTimecodeToFramesMcp(hh, mm, ss, ff, nominalFps) {
+  return nominalFps * 3600 * hh + nominalFps * 60 * mm + nominalFps * ss + ff;
+}
+function _framesToDropFrameTimecodeMcp(frameNumber, nominalFps, frameRate) {
+  const dropFrames = nominalFps === 30 ? 2 : 4;
+  const framesPer24Hours = Math.round(frameRate * 86400);
+  const framesPer10Minutes = Math.round(frameRate * 600);
+  const framesPerMinute = nominalFps * 60 - dropFrames;
+  const fn = (frameNumber % framesPer24Hours + framesPer24Hours) % framesPer24Hours;
+  const d = Math.floor(fn / framesPer10Minutes);
+  const m = fn % framesPer10Minutes;
+  let frameNumberOut = fn + 9 * dropFrames * d;
+  if (m > dropFrames) {
+    frameNumberOut += dropFrames * Math.floor((m - dropFrames) / framesPerMinute);
+  }
+  const frames = frameNumberOut % nominalFps;
+  const totalSeconds = Math.floor(frameNumberOut / nominalFps);
+  return {
+    hours: Math.floor(totalSeconds / 3600) % 24,
+    minutes: Math.floor(totalSeconds / 60) % 60,
+    seconds: totalSeconds % 60,
+    frames
+  };
+}
+function _dropFrameTimecodeToFramesMcp(hh, mm, ss, ff, nominalFps) {
+  const dropFrames = nominalFps === 30 ? 2 : 4;
+  const totalMinutes = 60 * hh + mm;
+  return nominalFps * 3600 * hh + nominalFps * 60 * mm + nominalFps * ss + ff - dropFrames * (totalMinutes - Math.floor(totalMinutes / 10));
+}
+function _formatTimecodeMcp(parts, dropFrame) {
+  const p2 = (n) => String(n).padStart(2, "0");
+  const sep = dropFrame ? ";" : ":";
+  return `${p2(parts.hours)}:${p2(parts.minutes)}:${p2(parts.seconds)}${sep}${p2(parts.frames)}`;
+}
+function _convertTimecodeMcp(mode, frameRate, dropFrame, frameCount, timecode) {
+  const nominalFps = _TIMECODE_NOMINAL_FPS_MCP[String(frameRate)] ?? null;
+  if (nominalFps === null) return { error: "frameRate must be one of 23.976, 24, 25, 29.97, 30, 50, 59.94, 60" };
+  if (dropFrame && frameRate !== 29.97 && frameRate !== 59.94) {
+    return { error: "dropFrame is only valid for frameRate 29.97 or 59.94" };
+  }
+  if (mode === "frames-to-timecode") {
+    if (typeof frameCount !== "number" || !Number.isFinite(frameCount) || frameCount < 0 || Math.floor(frameCount) !== frameCount) {
+      return { error: 'frameCount must be a non-negative integer for mode "frames-to-timecode"' };
+    }
+    const parts = dropFrame ? _framesToDropFrameTimecodeMcp(frameCount, nominalFps, frameRate) : _framesToPlainTimecodeMcp(frameCount, nominalFps);
+    return {
+      mode,
+      frameRate,
+      dropFrame,
+      frameCount,
+      timecode: _formatTimecodeMcp(parts, dropFrame),
+      seconds: Math.round(frameCount / frameRate * 1e6) / 1e6
+    };
+  }
+  if (mode === "timecode-to-frames") {
+    if (typeof timecode !== "string") return { error: 'timecode must be a string for mode "timecode-to-frames"' };
+    const match = /^(\d{2}):(\d{2}):(\d{2})[:;](\d{2})$/.exec(timecode.trim());
+    if (!match) return { error: "timecode must be in the form HH:MM:SS:FF (or HH:MM:SS;FF)" };
+    const [, hhS, mmS, ssS, ffS] = match;
+    const hh = Number(hhS), mm = Number(mmS), ss = Number(ssS), ff = Number(ffS);
+    if (hh > 23) return { error: "hours must be 00-23" };
+    if (mm > 59) return { error: "minutes must be 00-59" };
+    if (ss > 59) return { error: "seconds must be 00-59" };
+    if (ff >= nominalFps) return { error: `frames must be 00-${nominalFps - 1} at this frame rate` };
+    if (dropFrame && ff <= 1 && ss === 0 && mm % 10 !== 0) {
+      return { error: `frame ${ffS} at ${hhS}:${mmS}:${ssS} does not exist in drop-frame timecode: frames 00 and 01 are dropped at the start of every minute except every 10th minute` };
+    }
+    const frameCountOut = dropFrame ? _dropFrameTimecodeToFramesMcp(hh, mm, ss, ff, nominalFps) : _plainTimecodeToFramesMcp(hh, mm, ss, ff, nominalFps);
+    return {
+      mode,
+      frameRate,
+      dropFrame,
+      frameCount: frameCountOut,
+      timecode: _formatTimecodeMcp({ hours: hh, minutes: mm, seconds: ss, frames: ff }, dropFrame),
+      seconds: Math.round(frameCountOut / frameRate * 1e6) / 1e6
+    };
+  }
+  return { error: 'mode must be "frames-to-timecode" or "timecode-to-frames"' };
+}
+server.tool(
+  "convert_timecode",
+  "Convert between a frame count, SMPTE timecode (HH:MM:SS:FF, or HH:MM:SS;FF for drop-frame), and seconds at a given frame rate. Handles NTSC drop-frame timecode (29.97/59.94 fps) correctly via the standard SMPTE 12M algorithm, which skips frame numbers 00 and 01 at the start of every minute except every 10th minute so the nominal 30/60 fps digit count stays in sync with the true 29.97/59.94 fps signal. Pure arithmetic; no video file or container is read.",
+  {
+    mode: z.enum(["frames-to-timecode", "timecode-to-frames"]).describe("frames-to-timecode requires frameCount; timecode-to-frames requires timecode"),
+    frameRate: z.number().describe("One of 23.976, 24, 25, 29.97, 30, 50, 59.94, 60"),
+    dropFrame: z.boolean().default(false).describe("Only valid for frameRate 29.97 or 59.94"),
+    frameCount: z.number().optional().describe('Required for mode "frames-to-timecode"'),
+    timecode: z.string().optional().describe('Required for mode "timecode-to-frames"; "HH:MM:SS:FF" or "HH:MM:SS;FF"')
+  },
+  async ({ mode, frameRate, dropFrame, frameCount, timecode }) => {
+    const result = _convertTimecodeMcp(mode, frameRate, dropFrame, frameCount, timecode);
+    if ("error" in result) return errText(result);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
+var _GEOJSON_GEOMETRY_TYPES_MCP = /* @__PURE__ */ new Set([
+  "Point",
+  "MultiPoint",
+  "LineString",
+  "MultiLineString",
+  "Polygon",
+  "MultiPolygon",
+  "GeometryCollection"
+]);
+function _isGeoJsonNumberMcp(v) {
+  return typeof v === "number" && Number.isFinite(v);
+}
+function _isGeoJsonPositionMcp(v) {
+  return Array.isArray(v) && (v.length === 2 || v.length === 3) && v.every(_isGeoJsonNumberMcp);
+}
+function _geoJsonPositionsEqualMcp(a, b) {
+  return a.length === b.length && a.every((v, i) => v === b[i]);
+}
+function _geoJsonRingSignedAreaMcp(ring) {
+  let sum = 0;
+  for (let i = 0; i < ring.length - 1; i++) {
+    const [x1, y1] = ring[i];
+    const [x2, y2] = ring[i + 1];
+    sum += x1 * y2 - x2 * y1;
+  }
+  return sum / 2;
+}
+function _validateGeoJsonPolygonCoordsMcp(coords, path, errors, warnings) {
+  if (!Array.isArray(coords) || coords.length === 0) {
+    errors.push({ path, message: "Polygon coordinates must be a non-empty array of linear rings" });
+    return;
+  }
+  coords.forEach((ring, i) => {
+    const ringPath = `${path}[${i}]`;
+    if (!Array.isArray(ring) || ring.length < 4 || !ring.every(_isGeoJsonPositionMcp)) {
+      errors.push({ path: ringPath, message: "each linear ring must have at least 4 positions" });
+      return;
+    }
+    const first = ring[0];
+    const last = ring[ring.length - 1];
+    if (!_geoJsonPositionsEqualMcp(first, last)) {
+      errors.push({ path: ringPath, message: "the first and last positions of a linear ring must be identical (the ring must be closed)" });
+      return;
+    }
+    const area = _geoJsonRingSignedAreaMcp(ring);
+    const isExterior = i === 0;
+    if (isExterior && area < 0) {
+      warnings.push({ path: ringPath, message: "exterior ring winds clockwise; RFC 7946 recommends counterclockwise for exterior rings (right-hand rule)" });
+    } else if (!isExterior && area > 0) {
+      warnings.push({ path: ringPath, message: "interior ring (hole) winds counterclockwise; RFC 7946 recommends clockwise for interior rings (right-hand rule)" });
+    }
+  });
+}
+function _validateGeoJsonGeometryMcp(geom, path, errors, warnings) {
+  if (geom === null) return;
+  if (typeof geom !== "object" || Array.isArray(geom)) {
+    errors.push({ path, message: "geometry must be an object or null" });
+    return;
+  }
+  const type = geom.type;
+  if (typeof type !== "string" || !_GEOJSON_GEOMETRY_TYPES_MCP.has(type)) {
+    errors.push({ path: `${path}.type`, message: `geometry type must be one of ${[..._GEOJSON_GEOMETRY_TYPES_MCP].join(", ")}` });
+    return;
+  }
+  if (type === "GeometryCollection") {
+    if (!Array.isArray(geom.geometries)) {
+      errors.push({ path: `${path}.geometries`, message: 'GeometryCollection must have a "geometries" array' });
+      return;
+    }
+    geom.geometries.forEach((g, i) => _validateGeoJsonGeometryMcp(g, `${path}.geometries[${i}]`, errors, warnings));
+    return;
+  }
+  const coords = geom.coordinates;
+  const coordPath = `${path}.coordinates`;
+  switch (type) {
+    case "Point":
+      if (!_isGeoJsonPositionMcp(coords)) errors.push({ path: coordPath, message: "Point coordinates must be an array of 2 or 3 numbers" });
+      break;
+    case "MultiPoint":
+      if (!Array.isArray(coords) || !coords.every(_isGeoJsonPositionMcp)) {
+        errors.push({ path: coordPath, message: "MultiPoint coordinates must be an array of positions" });
+      }
+      break;
+    case "LineString":
+      if (!Array.isArray(coords) || coords.length < 2 || !coords.every(_isGeoJsonPositionMcp)) {
+        errors.push({ path: coordPath, message: "LineString coordinates must be an array of at least 2 positions" });
+      }
+      break;
+    case "MultiLineString":
+      if (!Array.isArray(coords) || !coords.every((line) => Array.isArray(line) && line.length >= 2 && line.every(_isGeoJsonPositionMcp))) {
+        errors.push({ path: coordPath, message: "MultiLineString coordinates must be an array of LineString coordinate arrays" });
+      }
+      break;
+    case "Polygon":
+      _validateGeoJsonPolygonCoordsMcp(coords, coordPath, errors, warnings);
+      break;
+    case "MultiPolygon":
+      if (!Array.isArray(coords)) {
+        errors.push({ path: coordPath, message: "MultiPolygon coordinates must be an array of Polygon coordinate arrays" });
+      } else {
+        coords.forEach((poly, i) => _validateGeoJsonPolygonCoordsMcp(poly, `${coordPath}[${i}]`, errors, warnings));
+      }
+      break;
+  }
+}
+function _validateGeoJsonBboxMcp(bbox, path, errors) {
+  if (bbox === void 0) return;
+  if (!Array.isArray(bbox) || bbox.length % 2 !== 0 || bbox.length < 4 || !bbox.every(_isGeoJsonNumberMcp)) {
+    errors.push({ path: `${path}.bbox`, message: "bbox must be an array of 2*n numbers (min/max per axis)" });
+  }
+}
+function _validateGeoJsonFeatureMcp(feature, path, errors, warnings) {
+  if (typeof feature !== "object" || feature === null || Array.isArray(feature)) {
+    errors.push({ path, message: "Feature must be an object" });
+    return;
+  }
+  if (feature.type !== "Feature") {
+    errors.push({ path: `${path}.type`, message: '"type" must be "Feature"' });
+  }
+  if (!("properties" in feature) || typeof feature.properties !== "object") {
+    errors.push({ path: `${path}.properties`, message: '"properties" member is required and must be an object or null' });
+  }
+  if (!("geometry" in feature)) {
+    errors.push({ path: `${path}.geometry`, message: '"geometry" member is required (an object or null)' });
+  } else {
+    _validateGeoJsonGeometryMcp(feature.geometry, `${path}.geometry`, errors, warnings);
+  }
+  _validateGeoJsonBboxMcp(feature.bbox, path, errors);
+}
+function _validateGeoJsonMcp(input) {
+  let doc;
+  try {
+    doc = JSON.parse(input);
+  } catch (e) {
+    return { valid: false, type: null, errors: [{ path: "$", message: `invalid JSON: ${e.message}` }], warnings: [] };
+  }
+  if (typeof doc !== "object" || doc === null || Array.isArray(doc)) {
+    return { valid: false, type: null, errors: [{ path: "$", message: "document must be a JSON object" }], warnings: [] };
+  }
+  const type = doc.type;
+  if (typeof type !== "string") {
+    return { valid: false, type: null, errors: [{ path: "$.type", message: '"type" member is required' }], warnings: [] };
+  }
+  const errors = [];
+  const warnings = [];
+  _validateGeoJsonBboxMcp(doc.bbox, "$", errors);
+  if (type === "FeatureCollection") {
+    if (!Array.isArray(doc.features)) {
+      errors.push({ path: "$.features", message: 'FeatureCollection must have a "features" array' });
+    } else {
+      doc.features.forEach((feature, i) => _validateGeoJsonFeatureMcp(feature, `$.features[${i}]`, errors, warnings));
+    }
+  } else if (type === "Feature") {
+    _validateGeoJsonFeatureMcp(doc, "$", errors, warnings);
+  } else if (_GEOJSON_GEOMETRY_TYPES_MCP.has(type)) {
+    _validateGeoJsonGeometryMcp(doc, "$", errors, warnings);
+  } else {
+    errors.push({ path: "$.type", message: '"type" must be one of Feature, FeatureCollection, or a geometry type' });
+  }
+  return { valid: errors.length === 0, type, errors, warnings };
+}
+server.tool(
+  "validate_geojson",
+  `Validate a GeoJSON document's structure against RFC 7946: the correct geometry type and coordinates shape for each of the seven geometry types, linear ring closure for Polygon/MultiPolygon, a Feature's required properties/geometry members, and a FeatureCollection's required features array. Also returns non-failing warnings when a Polygon ring winds the "wrong" way under RFC 7946's right-hand rule recommendation. Pure structural validation; no map is rendered and no tile server is contacted.`,
+  {
+    geojson: z.string().describe("The GeoJSON document, as a JSON string")
+  },
+  async ({ geojson }) => {
+    const result = _validateGeoJsonMcp(geojson);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
 function _videoReadU32BE(bytes, offset) {
   return (bytes[offset] << 24 | bytes[offset + 1] << 16 | bytes[offset + 2] << 8 | bytes[offset + 3]) >>> 0;
 }
@@ -15455,6 +15744,130 @@ server.tool(
     return text(JSON.stringify(result, null, 2));
   }
 );
+function _calculateDividendYieldMcp(input) {
+  const { annualDividendPerShare, sharePrice, epsPerShare } = input;
+  if (!(annualDividendPerShare >= 0)) return { error: "annualDividendPerShare must be greater than or equal to zero" };
+  if (!(sharePrice > 0)) return { error: "sharePrice must be greater than zero" };
+  const round4 = (n) => Math.round(n * 1e4) / 1e4;
+  const result = {
+    annualDividendPerShare: round4(annualDividendPerShare),
+    sharePrice: round4(sharePrice),
+    dividendYieldPercent: round4(annualDividendPerShare / sharePrice * 100)
+  };
+  if (epsPerShare !== void 0) {
+    if (!(epsPerShare > 0)) return { error: "epsPerShare must be greater than zero when provided" };
+    const payoutRatioPercent = annualDividendPerShare / epsPerShare * 100;
+    result.epsPerShare = round4(epsPerShare);
+    result.payoutRatioPercent = round4(payoutRatioPercent);
+    result.retentionRatioPercent = round4(100 - payoutRatioPercent);
+  }
+  return result;
+}
+server.tool(
+  "calculate_dividend_yield",
+  "Compute a stock's dividend yield (annual dividend per share / share price) and, given trailing EPS, its payout ratio (dividend / EPS) and retention ratio (100 - payout ratio). A payout ratio over 100% is valid and reported as-is. Pure arithmetic, no live quote feed.",
+  {
+    annualDividendPerShare: z.number().describe("Total dividend paid per share over the trailing year"),
+    sharePrice: z.number().describe("Current share price"),
+    epsPerShare: z.number().optional().describe("Optional trailing earnings per share, used to compute payout and retention ratio")
+  },
+  async ({ annualDividendPerShare, sharePrice, epsPerShare }) => {
+    const result = _calculateDividendYieldMcp({ annualDividendPerShare, sharePrice, epsPerShare });
+    if ("error" in result) return errText(result);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
+function _readSshStringFieldMcp(buf, offset) {
+  if (offset + 4 > buf.length) return null;
+  const len = buf.readUInt32BE(offset);
+  const start = offset + 4;
+  const end = start + len;
+  if (end > buf.length) return null;
+  return { value: buf.subarray(start, end), next: end };
+}
+function _mpintBitLengthMcp(buf) {
+  let i = 0;
+  while (i < buf.length - 1 && buf[i] === 0) i++;
+  const trimmed = buf.subarray(i);
+  if (trimmed.length === 0) return 0;
+  let bits = (trimmed.length - 1) * 8;
+  let firstByte = trimmed[0];
+  while (firstByte > 0) {
+    bits++;
+    firstByte >>= 1;
+  }
+  return bits;
+}
+function _analyzeKnownHostsKeyMcp(keyType, blob) {
+  if (keyType === "ssh-dss") {
+    return { weak: true, weakReason: "DSA (ssh-dss) keys are deprecated and considered weak" };
+  }
+  if (keyType === "ssh-rsa") {
+    const typeField = _readSshStringFieldMcp(blob, 0);
+    if (!typeField) return { weak: false };
+    const eField = _readSshStringFieldMcp(blob, typeField.next);
+    if (!eField) return { weak: false };
+    const nField = _readSshStringFieldMcp(blob, eField.next);
+    if (!nField) return { weak: false };
+    const bits = _mpintBitLengthMcp(nField.value);
+    return bits > 0 && bits < 2048 ? { bits, weak: true, weakReason: `RSA modulus is only ${bits} bits; 2048+ is recommended` } : { bits, weak: false };
+  }
+  if (keyType === "ssh-ed25519") {
+    return { bits: 256, weak: false };
+  }
+  if (keyType.startsWith("ecdsa-sha2-")) {
+    const curve = keyType.split("-").pop() ?? "";
+    const bits = curve === "nistp256" ? 256 : curve === "nistp384" ? 384 : curve === "nistp521" ? 521 : void 0;
+    return { bits, weak: false };
+  }
+  return { weak: false };
+}
+function _checkKnownHostsFingerprintsMcp(input) {
+  if (typeof input !== "string" || input.trim().length === 0) {
+    return { error: "input is required" };
+  }
+  const lines = input.split("\n").map((l) => l.trim()).filter((l) => l.length > 0 && !l.startsWith("#"));
+  if (lines.length === 0) {
+    return { error: "No known_hosts entries found" };
+  }
+  const entries = [];
+  for (const line of lines) {
+    const parts = line.split(/\s+/);
+    let idx = 0;
+    if (parts[0] === "@cert-authority" || parts[0] === "@revoked") idx = 1;
+    if (parts.length < idx + 3) return { error: `Malformed line: "${line}"` };
+    const host = parts[idx];
+    const keyType = parts[idx + 1];
+    const base64Key = parts[idx + 2];
+    const blob = Buffer.from(base64Key, "base64");
+    if (blob.length === 0) return { error: `Invalid base64 key for host "${host}"` };
+    const sha256 = createHash("sha256").update(blob).digest("base64").replace(/=+$/, "");
+    const md5 = createHash("md5").update(blob).digest("hex").replace(/(.{2})(?=.)/g, "$1:");
+    const analysis = _analyzeKnownHostsKeyMcp(keyType, blob);
+    entries.push({
+      host,
+      keyType,
+      fingerprintSha256: `SHA256:${sha256}`,
+      fingerprintMd5: `MD5:${md5}`,
+      bits: analysis.bits,
+      weak: analysis.weak,
+      weakReason: analysis.weakReason
+    });
+  }
+  return { entries };
+}
+server.tool(
+  "check_known_hosts_fingerprints",
+  "Parse an ssh_known_hosts file (or a single `host keytype base64key` line) and compute each entry's SHA256 and MD5 fingerprint the same way `ssh-keygen -lf` does, decoding the key type and, for RSA, the modulus bit length, flagging a weak RSA key (<2048 bits) or a deprecated ssh-dss (DSA) key.",
+  {
+    input: z.string().describe("ssh_known_hosts file contents, or a single entry line")
+  },
+  async ({ input }) => {
+    const result = _checkKnownHostsFingerprintsMcp(input);
+    if ("error" in result) return errText(result);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
 var _WEASEL_PHRASES_MCP = [
   "many experts believe",
   "some experts say",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@utilix-tech/mcp",
-  "version": "0.97.0",
-  "description": "MCP server exposing 287 Utilix developer tools to Claude, Cursor, VS Code Copilot, and any MCP-compatible AI assistant.",
+  "version": "0.99.0",
+  "description": "MCP server exposing 291 Utilix developer tools to Claude, Cursor, VS Code Copilot, and any MCP-compatible AI assistant.",
   "author": "Utilix <hello@utilix.tech>",
   "license": "MIT",
   "homepage": "https://utilix.tech/mcp",