# io.github.cyanheads/toolkit-mcp-server (npm · @cyanheads/toolkit-mcp-server)

Generate IDs, QR codes, and hashes, encode values, geolocate IPs, plus gated host diagnostics.

- Trust score: 66/100 (medium)
- Change this week: +28
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-07

## Components

- npm · `@cyanheads/toolkit-mcp-server`: 66/100 (this document), [markdown](https://verifymcp.io/servers/cyanheads-toolkit-mcp-server/cyanheads-toolkit-mcp-server.md), [page](https://verifymcp.io/servers/cyanheads-toolkit-mcp-server/cyanheads-toolkit-mcp-server)

## Channel facts

- Registry: `npm`
- Package: `@cyanheads/toolkit-mcp-server`
- Version: `2.0.1`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-07.

- **Supply Chain Security**: 98/100
  - No malware found by supply-chain analysis.
  - No known CVEs affecting this package version or its production dependencies.
  - No install/post-install scripts declared.
  - 51 of 156 dependencies flagged as unhealthy.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (Apache-2.0).
  - Actively maintained (last published 39 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 63/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 1229 tokens (~245/item across 5 items; 5 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
  - Structured output schemas are declared (100% of tools); any adoption earns full credit.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

**Unverified: 1 category.** A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

## Install

### Claude

```bash
claude mcp add cyanheads-toolkit-mcp-server -- npx -y @cyanheads/toolkit-mcp-server
```

### Codex

```bash
codex mcp add cyanheads-toolkit-mcp-server -- npx -y @cyanheads/toolkit-mcp-server
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "cyanheads-toolkit-mcp-server": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@cyanheads/toolkit-mcp-server"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add cyanheads-toolkit-mcp-server --command npx --arg -y --arg @cyanheads/toolkit-mcp-server
```

### Hermes

```yaml
mcp_servers:
  cyanheads-toolkit-mcp-server:
    command: "npx"
    args: ["-y", "@cyanheads/toolkit-mcp-server"]
```

### Other

```json
{
  "mcpServers": {
    "cyanheads-toolkit-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@cyanheads/toolkit-mcp-server"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-07 (score 66, +4)

- [security improvement] Known CVEs: partial → pass
- [functional] Dependency health: partial → 0.83

### 2026-08-06 (score 62, +27)

- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [functional improvement] MCP protocol: unverified → pass
- [functional improvement] Tool coverage: unverified → 100
- [functional] First check of Tool coverage: 100
- [functional] First check of Schema quality: fail
- [functional] First check of Schema quality: excellent
- [functional] First check of Schema quality: fail
- [functional] First check of Tool coverage: 100

### 2026-08-05 (score 35, +1)

- [security improvement] CVE-2026-69207 no longer affects this package
- [security improvement] Known CVEs: fail → partial

### 2026-08-04 (score 34, −1)

- [security regression] CVE-2026-69207 affects this package: medium
- [security regression] Known CVEs: partial → fail

### 2026-08-02 (score 35, +7)

- [security regression] Provenance: fail → unverified
- [security regression] Install scripts: pass → unverified
- [security improvement] Known CVEs: unverified → partial
- [functional regression] License: pass → unverified
- [functional regression] Maintenance: pass → unverified
- [functional improvement] Dependency health: unverified → partial
- [functional] Licence: Apache-2.0

### 2026-08-01 (score 28, −10)

- [security regression] Known CVEs: partial → unverified
- [functional regression] Dependency health: partial → unverified

### 2026-07-31 (score 38, −8)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-29 (score 46, +22)

- [security regression] Provenance: unverified → fail
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Install scripts: unverified → pass
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] License: unverified → pass
- [functional] Schema quality: Schema quality not yet verified: our sandbox run of this package did not complete, so we have no schema to assess.
- [functional] Tool coverage: Tool coverage not yet verified: our sandbox run of this package did not complete, so we have no tool definitions to assess.
- [functional] Licence: Apache-2.0

## MCP tools (5)

### `toolkit_hash_value` (~293 tokens)

toolkit-mcp-server: hash value

Generate a cryptographic digest of a value, or verify a value against an expected digest. Set operation to "generate" for a lowercase-hex digest, or "compare" to constant-time-check value against the expected digest — compare is timing-safe and avoids manual string equality checks. Algorithm defaults to sha256; sha512 is also secure, while md5 and sha1 are exposed for checksum and file-integrity compatibility ONLY and must not be used for passwords, signatures, or any security purpose. inputEncoding controls how value and expected are read before hashing (utf8 default, or hex/base64 for raw binary data) so binary blobs need no decode round-trip. The canonical use is matching a download against a vendor-published checksum.

Input parameters:

- `algorithm` (string): Digest algorithm. sha256 (default) or sha512 for security; md5/sha1 are checksum/compat only — not for security.
- `expected` (string): The expected lowercase-hex digest to compare against. Required when operation is "compare".
- `inputEncoding` (string): How value (and expected's pre-image, when relevant) is decoded before hashing: utf8 text, hex, or base64.
- `operation` (string): "generate" produces a digest; "compare" constant-time-checks value against expected.
- `value` (string, required): The data to hash, interpreted per inputEncoding (raw text by default).

Output parameters:

- `algorithm` (string): The algorithm used.
- `digest` (string): Lowercase-hex digest of value. Present for operation "generate".
- `lengthInBytes` (number): Digest size in bytes (32 for sha256, 64 for sha512, 20 for sha1, 16 for md5). Present for "generate".
- `matches` (boolean): Constant-time equality of the computed digest against expected. Present for operation "compare".
- `operation` (string): The operation performed.

### `toolkit_generate_id` (~226 tokens)

toolkit-mcp-server: generate id

Mint cryptographically-random identifiers using the platform CSPRNG — the correct source for IDs that must be unpredictable, unlike model-generated values. type selects the format: uuid_v4 (random, the default), uuid_v7 (time-ordered, sortable by creation), or ulid (26-char Crockford-base32, lexicographically sortable). Set count to mint a batch in one call (up to 1000); the returned ids array always contains exactly count values and is never truncated. For uuid_v7 and ulid, a batch is monotonic — strictly increasing even within the same millisecond — so the ids array stays in sorted creation order. IDs from this tool feed into toolkit_generate_qr (pass ids[0] as data) to create a scannable code.

Input parameters:

- `count` (integer): How many identifiers to mint (1–1000). The full batch is always returned.
- `type` (string): Identifier format: uuid_v4 (random), uuid_v7 (time-ordered), or ulid (sortable Crockford-base32).

Output parameters:

- `count` (number): The number of identifiers minted (equals the requested count).
- `ids` (array): The minted identifiers — exactly count of them, in mint order; for uuid_v7 and ulid that order is strictly increasing (sorted by creation).
- `type` (string): The identifier format that was minted.

### `toolkit_generate_qr` (~304 tokens)

toolkit-mcp-server: generate QR code

Encode text or a URL into a QR code. data is the content to encode (a link, a generated identifier such as toolkit_generate_id's ids[0], or any string). format selects the output: svg returns inline SVG markup, png_base64 returns base64-encoded PNG bytes (with mimeType and byteLength), and terminal returns a block of Unicode block characters renderable in a monospace terminal. errorCorrection (L/M/Q/H) trades data capacity for damage tolerance, margin sets the quiet-zone width, and scale sets pixels per module for raster output. The returned version (1–40) reflects how dense the encoded data is.

Input parameters:

- `data` (string, required): The text or URL to encode. 2953 is the absolute ceiling (QR version 40, level L, byte mode); usable capacity drops at higher errorCorrection levels, so over-capacity data is rejected with a typed dat…
- `errorCorrection` (string): Error-correction level: L (~7% recoverable) to H (~30%). Higher tolerance lowers data capacity.
- `format` (string): Output format: svg markup, png_base64 (raster bytes), or a terminal-renderable string.
- `margin` (integer): Quiet-zone width in modules around the symbol. The spec recommends 4.
- `scale` (integer): Pixels per module for raster (png_base64) output. Ignored for terminal.

Output parameters:

- `byteLength` (number): Decoded byte size of the PNG. Present only for png_base64.
- `content` (string): The QR artifact: SVG markup, a terminal-renderable string, or base64 PNG bytes for png_base64.
- `format` (string): The format that was produced.
- `mimeType` (string): MIME type of content for image formats. Absent for the terminal format.
- `version` (number): QR symbol version (1–40); higher versions hold denser data and indicate denser content.

### `toolkit_encode_value` (~194 tokens)

toolkit-mcp-server: encode value

Encode or decode a value across base64, base64url, hex, or URL (percent) encoding, in either direction. Set operation to "encode" to transform raw UTF-8 text into the chosen encoding, or "decode" to recover the original text from an encoded value. base64url uses the URL-safe alphabet (- and _ instead of + and /); url applies encodeURIComponent / decodeURIComponent. Decoding a value that is malformed for the chosen encoding is reported as a recoverable error, not a silent best-effort.

Input parameters:

- `encoding` (string, required): The encoding to apply: base64, URL-safe base64url, hex, or URL percent-encoding.
- `operation` (string, required): "encode" transforms text into the encoding; "decode" recovers text from an encoded value.
- `value` (string, required): The value to transform — raw text for encode, an encoded string for decode.

Output parameters:

- `encoding` (string): The encoding that was applied.
- `operation` (string): The operation that was performed.
- `result` (string): The transformed value (encoded text, or the decoded original).

### `toolkit_geolocate_ip` (~212 tokens)

toolkit-mcp-server: geolocate IP

Resolve a public IP address (or hostname) to geographic and network metadata: country, region, city, latitude/longitude, the owning ASN and organization, and timezone. target accepts an IPv4/IPv6 address or a hostname — a hostname is DNS-resolved first and the resolvedIp field echoes which IP was actually located. The provider is called directly (never the target), so this is SSRF-free and safe to expose anywhere. Results are best-effort and provider-bounded: VPNs, proxies, mobile NAT, and anycast all defeat IP-to-location, accuracy is city-level at best, and many fields can be absent for reserved or thinly-documented ranges — absent fields are reported as unknown, never invented. Private/reserved addresses have no public geolocation and are rejected. The source field names which provider answered.

Input parameters:

- `target` (required): A public IPv4/IPv6 address or a hostname (e.g. "8.8.8.8" or "example.com").

Output parameters:

- `asn` (string): Autonomous System number, e.g. "AS15169". Absent on providers that omit it.
- `city` (string): City name. Absent when unknown.
- `country` (string): Country name. Absent when the provider does not report it.
- `countryCode` (string): ISO 3166-1 alpha-2 country code. Absent when unknown.
- `latitude` (number): Latitude in decimal degrees. Absent when unknown.
- `longitude` (number): Longitude in decimal degrees. Absent when unknown.
- `org` (string): Owning organization or ISP, e.g. "Google LLC". Absent when unknown.
- `region` (string): Region or state name. Absent when unknown.
- `resolvedIp` (string): The IP that was actually located (a supplied hostname is resolved to this first).
- `source` (string): The provider that answered the lookup, e.g. "ip-api".
- `target` (string): The target as supplied (IP or hostname).
- `timezone` (string): IANA timezone, e.g. "America/Los_Angeles". Absent when unknown.

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/cyanheads-toolkit-mcp-server/cyanheads-toolkit-mcp-server#diagnostics

## Score history

- 2026-08-07: 66
- 2026-08-06: 62
- 2026-08-05: 35
- 2026-08-04: 34
- 2026-08-03: 35
- 2026-08-02: 35
- 2026-08-01: 28
- 2026-07-31: 38
- 2026-07-30: 46
- 2026-07-29: 46
- 2026-07-28: 24
- 2026-07-27: 24

## Links

- npm package: https://www.npmjs.com/package/@cyanheads/toolkit-mcp-server
- Socket report: https://socket.dev/npm/package/@cyanheads/toolkit-mcp-server
- Repository: https://github.com/cyanheads/toolkit-mcp-server
- Changelog RSS feed: https://verifymcp.io/servers/cyanheads-toolkit-mcp-server/cyanheads-toolkit-mcp-server.xml
- Changelog JSON feed: https://verifymcp.io/servers/cyanheads-toolkit-mcp-server/cyanheads-toolkit-mcp-server.json
- HTML version of this page: https://verifymcp.io/servers/cyanheads-toolkit-mcp-server/cyanheads-toolkit-mcp-server