Textavia MCP
NPM · @TEXTAVIA/MCP
Local-first MCP server for text, JSON, Base64, CSV, regex, and developer utilities.
Available components
Last scanned (9 hours ago)
Scores higher than 33% of npm servers
Category Developer Tools
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security80
- No malware found by supply-chain analysis.Pass
- CVE check failed: a known high-severity CVE affects zod 3.25.76, a direct dependency. A fixed version is available. View diagnostics → Fail
- No install/post-install scripts declared.Pass
- 45 of 129 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency19
- Repository check failed: no source repository is declared. See how to fix → View diagnostics → Fail
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 111 days ago).Pass
- Security-disclosure policy not yet verified: we couldn't inspect the source repository.Unverified
Schema Quality & AI Usability51
- AI-judged instruction clarity (fair).Partial
- Tool/resource definitions use about 7411 tokens (~45/item across 163 items; 163 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage67
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 0% of tool parameters carry a description.Fail
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 10 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "textavia.csv_dedupe" implies "remove" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 163 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 5 Nov 26 0
- Security disclosure: fail → unverified ▼ functional
- 4 Nov 26 +1
- Stability: 0.97 → pass security
- 3 Nov 26 −1
- Security disclosure: unverified → fail ▼ functional
- Stability: pass → 0.97 functional
- 2 Nov 26 0
- Security disclosure: fail → unverified ▼ functional
- 28 Oct 26 +1
- Stability: 0.97 → pass security
- 26 Oct 26 −1
- Stability: pass → 0.93 functional
- 24 Oct 26 −5
- CVE-2023-54404 affects this package: high ▼ security
- Known CVEs: pass → fail ▼ security
- 17 Oct 26 +2
- Stability: 0.87 → pass security
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Analysed npm/@textavia/mcp@0.1.2
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Vulnerabilities 1 finding
| ID | CVE | Severity | Vector | Fix available |
|---|---|---|---|---|
| GHSA-mrhx-c7xc-m3w5 | CVE-2023-54404 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | yes |
Background: What a vulnerability scan can and cannot prove →
Dependencies 129 packages
| Packages resolved | 129 |
|---|---|
| Stale | 41 |
| No linked repository | 4 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
textavia.numbers_stats numbers.stats ~46
Reports count, min, max, sum, mean, and median.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.random_boolean random.boolean ~39
Outputs true or false with equal probability.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.random_choice random.choice ~44
Chooses one or more random non-empty lines from the input.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.random_date random.date ~42
Generates random ISO dates between --from and --to.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.random_float random.float ~40
Alias-style float generator for decimal random values.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.random_integer random.integer ~41
Generates random integers between --min and --max.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.random_ip random.ip ~37
Generates random IPv4 addresses.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.random_letter random.letter ~36
Generates random lowercase letters.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.random_month random.month ~36
Picks random month names.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.random_number random.number ~43
Generates random floating point numbers between --min and --max.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.random_password random.password ~41
Generates a secure password with configurable pools and length.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.random_uuid random.uuid ~45
Generates RFC 4122 v4 UUIDs using node:crypto.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.regex_explain dev.regex.explain ~44
Provides a concise structural summary of a JavaScript regular expression.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.regex_test dev.regex.test ~49
Evaluates a JavaScript regex in a worker thread so catastrophic backtracking can be terminated.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.roman_from_number encoding.roman.from-number ~48
Converts integers from 1 to 3999 into canonical Roman numerals.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.roman_to_number encoding.roman.to-number ~46
Parses canonical Roman numerals from I to MMMCMXCIX.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.text_alternating_case text.alternating-case ~44
Alternates casing across letters in the input text.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.text_capitalize text.capitalize ~43
Capitalizes each word for a readable capitalized style.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.text_clean text.clean ~44
Collapses runs of whitespace into single spaces and trims the result.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.text_diff text.diff ~52
Reports added, removed, and unchanged lines. Use --other or separate blocks with a line containing "---".
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.text_duplicate_words text.duplicate-words ~43
Reports case-insensitive words that appear more than once.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.text_frequency text.frequency ~41
Produces a case-insensitive word frequency map.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.text_inverse_case text.inverse-case ~39
Swaps uppercase and lowercase letters.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.text_lower text.lower ~45
Lowercases all characters. Supports stdin, positional text, and files.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.text_normalize_whitespace text.normalize-whitespace ~46
Collapses repeated whitespace into single spaces and trims the result.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.text_plain text.plain ~39
Removes markup tags and collapses whitespace.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.text_privacy_scrub text.privacy-scrub ~72
Replaces emails, phone numbers, IPs, URLs, JWTs, basic auth, common API keys, and credit-card-like numbers with placeholders. Heuristic; review output before sharing.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.text_remove_chars text.remove-chars ~43
Removes every character listed in --chars from the input.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.text_remove_formatting text.remove-formatting ~47
Removes zero-width characters, BOM, and non-printable control characters.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.text_remove_line_breaks text.remove-line-breaks ~46
Converts multi-line text into a single line with normalized spacing.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.text_repeat text.repeat ~44
Repeats the input --count times with an optional separator.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.text_replace text.replace ~42
Replaces every occurrence of --search with --replacement.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.text_reverse text.reverse ~47
Reverses text by grapheme cluster so emoji and combining marks are preserved.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.text_sentence_case text.sentence-case ~43
Capitalizes the first character and lowercases the rest.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.text_sentence_count text.sentence-count ~42
Counts sentences using the same heuristic as text stats.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.text_stats text.stats ~41
Computes counts and byte size for the input text.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.text_syllables text.syllables ~44
Estimates syllable count using a heuristic vowel-group rule.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.text_title_case text.title-case ~38
Title-cases the text.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.text_upper text.upper ~36
Uppercases all characters.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.timestamp_from_date dev.timestamp.from-date ~43
Parses a date string and returns the Unix epoch value.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.timestamp_now dev.timestamp.now ~41
Returns the current ISO time and Unix epoch value.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.timestamp_parse dev.timestamp.parse ~47
Parses an ISO 8601 string or Unix number into ISO and Unix forms.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.timestamp_to_date dev.timestamp.to-date ~45
Converts a Unix epoch value to an ISO and local date string.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.toml_format data.toml.format ~45
Parses simple TOML and re-emits keys in sorted order.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.toml_to_json data.toml.to-json ~42
Converts simple key/value TOML to JSON.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.toml_to_yaml data.toml.to-yaml ~44
Converts simple TOML to a JSON-compatible YAML subset.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.toml_validate data.toml.validate ~46
Validates simple key/value TOML used by Textavia conversion tools.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.unicode_inspect unicode.inspect ~49
Reports each code point with its value, hex, name, and combining status.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.unicode_normalize unicode.normalize ~51
Normalizes text to NFC, NFD, NFKC, or NFKD.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
textavia.url_decode encoding.url.decode ~42
Decodes a URL-encoded component or full URL.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| input | string | – | – |
| options | object | – | – |
No output schema declared.
No examples provided.
How do I install the Textavia MCP server?
Textavia MCP runs locally as an npm package, launched with npx -y @textavia/mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · @textavia/mcp
claude mcp add catorch-textavia-mcp -- npx -y @textavia/mcp
What is the Textavia MCP server?
Textavia MCP is listed in the public MCP registry as io.github.catorch/textavia-mcp. Local-first MCP server for text, JSON, Base64, CSV, regex, and developer utilities. This page covers its npm package (@textavia/mcp).
Is the Textavia MCP server safe to use?
Textavia MCP scores 65 out of 100 on VerifyMCP. We recorded 1 known advisory against it as of 5 November 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Textavia MCP server expose?
Textavia MCP exposes 163 tools: textavia.case_alternating, textavia.case_camel, textavia.case_capitalized, textavia.case_dot, textavia.case_inverse, and 158 more. Their descriptions and schemas cost roughly 7,411 tokens of context every time the server is loaded.
Is the Textavia MCP server still maintained?
Textavia MCP is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the Textavia MCP server under?
Textavia MCP declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.