# io.github.First-CH/tools-mcp (npm · @first-ch/tools-mcp) MCP tools: WCAG contrast, JP char/X-weight count, WebP convert, JSON-LD, llms.txt. - Trust score: 69/100 (medium) - Change this week: +24 - Registry status: active - Liveness: live - Owner verified: no - Last scored: 2026-08-04 ## Components - npm · `@first-ch/tools-mcp`: 69/100 (this document), [markdown](https://verifymcp.io/servers/first-ch-tools-mcp/first-ch-tools-mcp.md), [page](https://verifymcp.io/servers/first-ch-tools-mcp/first-ch-tools-mcp) ## Channel facts - Registry: `npm` - Package: `@first-ch/tools-mcp` - Version: `0.4.1` - Transport: `stdio` ## Trust breakdown How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog) Scored 2026-08-04. - **Supply Chain Security**: 87/100 - No malware found by supply-chain analysis. - Only part of the dependency tree could be resolved (97 of 101), so this covers what we could see, not the whole tree. - No install/post-install scripts declared. - Only part of the dependency tree could be resolved (97 of 101), so this covers what we could see, not the whole tree. - **Provenance & Transparency**: 45/100 - Source repository is publicly reachable at the declared URL. - Provenance check failed: no build-provenance attestation is published. - Clear OSI-approved license (MIT). - Actively maintained (last published 14 days ago). - Disclosure check failed: no security disclosure policy was found in the source repository. - **Schema Quality & AI Usability**: 72/100 - AI-judged instruction clarity (excellent). - Context-footprint check failed: tool/resource definitions use about 734 tokens (~146/item across 5 items; 5 tools + 0 resources), over budget; trim descriptions and params. - Usage-examples check failed: none of the tools include examples. - **Stability & Change Management**: 30/100 - Stability observed for 9 of 30 days with no destabilising changes; credit accrues until the full window elapses. - **Tool Coverage**: 100/100 - 100% of tools have a non-trivial description (not blank, and not just the tool's name). - 100% of tool parameters carry a description. - **Capabilities**: 100/100 - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28. ## Install ### Claude ```bash claude mcp add first-ch-tools-mcp -- npx -y @first-ch/tools-mcp ``` ### Codex ```bash codex mcp add first-ch-tools-mcp -- npx -y @first-ch/tools-mcp ``` ### opencode ```json { "$schema": "https://opencode.ai/config.json", "mcp": { "first-ch-tools-mcp": { "type": "local", "command": [ "npx", "-y", "@first-ch/tools-mcp" ], "enabled": true } } } ``` ### OpenClaw ```bash openclaw mcp add first-ch-tools-mcp --command npx --arg -y --arg @first-ch/tools-mcp ``` ### Hermes ```yaml mcp_servers: first-ch-tools-mcp: command: "npx" args: ["-y", "@first-ch/tools-mcp"] ``` ### Other ```json { "mcpServers": { "first-ch-tools-mcp": { "command": "npx", "args": [ "-y", "@first-ch/tools-mcp" ] } } } ``` ## Changelog Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims. ### 2026-08-03 (score 69, +4) - [functional improvement] Stability: unverified → 0.27 ### 2026-08-02 (score 65, +30) - [security regression] Provenance: unverified → fail - [security improvement] Install scripts: unverified → pass - [security improvement] Known CVEs: unverified → partial - [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). - [functional improvement] Schema quality: unverified → excellent - [functional improvement] License: unverified → pass - [functional improvement] Dependency health: unverified → partial - [functional improvement] Maintenance: unverified → pass - [functional improvement] MCP protocol: unverified → pass - [functional] Licence: MIT ### 2026-08-01 (score 35, −1) - [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server ### 2026-07-31 (score 36, −9) - [security regression] Provenance: unverified → fail - [security regression] Malware scan: pass → unverified - [security improvement] Install scripts: unverified → pass - [functional improvement] License: unverified → pass - [functional improvement] Maintenance: unverified → pass - [functional] Licence: MIT ### 2026-07-27 (score 45) First indexed and scored. ## MCP tools (5) ### `contrast_check` (~115 tokens) WCAGコントラスト比チェック 文字色と背景色のWCAG 2.1コントラスト比を計算し、AA/AAA基準（通常/大テキスト・UI部品）の合否を返す。Webデザインの配色検証・アクセシビリティチェックに使う。 Input parameters: - `bg` (string, required): 背景色（hex。例: #ffffff） - `fg` (string, required): 文字色（hex。例: #333333 / 333 / fff） ### `count_chars` (~102 tokens) 文字数カウント（Xウェイト対応） 日本語テキストの文字数（書記素単位）・全角/半角内訳・行数と、X(Twitter)の投稿ウェイト（全角=2・半角=1・URL=一律23、上限280）を返す。SNS投稿や文字数制限のあるフォーム入力の検証に使う。 Input parameters: - `text` (string, required): カウント対象のテキスト ### `webp_convert` (~166 tokens) 画像→WebP変換 PNG/JPEG画像ファイルをWebPへ変換して保存する。エンコーダは tools.first-ch.com/webp/ と同一のlibwebp WASM（品質既定80）。Web制作の画像最適化・納品前の軽量化に使う。入力は絶対パス。出力先を省略すると入力と同じ場所に拡張子.webpで保存する。 Input parameters: - `outputDir` (string): 出力先ディレクトリ（省略時は各入力と同じ場所） - `paths` (array, required): 変換するPNG/JPEGファイルの絶対パスの配列 - `quality` (integer): 品質1-100（既定80） ### `jsonld_generate` (~197 tokens) JSON-LD構造化データ生成 schema.org準拠のJSON-LD構造化データを生成する（tools.first-ch.com/jsonld/ と同一ロジック）。対応タイプ: organization（会社情報）/ faqpage（よくある質問）/ service（提供サービス）/ breadcrumb（パンくず）。空の項目は出力から自動で省略される。返り値は json オブジェクトと