# io.github.kimbobmarley03/devpick (npm · @devpick/mcp-server)

43 local developer tools for AI agents: PDF, subnet, regex, JSON, conversion, and more.

- Trust score: 70/100 (medium)
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-09-20

## Components

- npm · `@devpick/mcp-server`: 70/100 (this document), [markdown](https://verifymcp.io/servers/kimbobmarley03-devpick/devpick-mcp-server.md), [page](https://verifymcp.io/servers/kimbobmarley03-devpick/devpick-mcp-server)

## Channel facts

- Registry: `npm`
- Package: `@devpick/mcp-server`
- Version: `1.0.1`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-09-20.

- **Supply Chain Security**: 98/100
  - No malware found by supply-chain analysis.
  - No known CVEs affecting this package version or its production dependencies.
  - No install/post-install scripts declared.
  - 34 of 101 dependencies flagged as unhealthy.
- **Provenance & Transparency**: 48/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 204 days ago).
  - Publishes a security disclosure policy (SECURITY.md).
- **Schema Quality & AI Usability**: 80/100
  - AI-judged instruction clarity (excellent).
  - Tool/resource definitions use about 2404 tokens (~55/item across 43 items; 43 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Tool Safety**: 75/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - 0 of 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "merge_pdfs" implies "merge" and declares no destructiveHint at all, which the MCP spec reads as destructive by default.
  - An AI judge read all 43 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

**Unverified: 1 category.** A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

## Install

### How do I install the io.github.kimbobmarley03/devpick MCP server?

io.github.kimbobmarley03/devpick runs locally as an npm package, launched with npx -y @devpick/mcp-server. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add kimbobmarley03-devpick -- npx -y @devpick/mcp-server
```

### Cursor

```json
{
  "mcpServers": {
    "kimbobmarley03-devpick": {
      "command": "npx",
      "args": [
        "-y",
        "@devpick/mcp-server"
      ]
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "kimbobmarley03-devpick": {
      "command": "npx",
      "args": [
        "-y",
        "@devpick/mcp-server"
      ]
    }
  }
}
```

### Codex

```bash
codex mcp add kimbobmarley03-devpick -- npx -y @devpick/mcp-server
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "kimbobmarley03-devpick": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@devpick/mcp-server"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add kimbobmarley03-devpick --command npx --arg -y --arg @devpick/mcp-server
```

### Hermes

```yaml
mcp_servers:
  kimbobmarley03-devpick:
    command: "npx"
    args: ["-y", "@devpick/mcp-server"]
```

### Netclaw

```json
{
  "McpServers": {
    "kimbobmarley03-devpick": {
      "Transport": "stdio",
      "Command": "npx",
      "Arguments": [
        "-y",
        "@devpick/mcp-server"
      ]
    }
  }
}
```

### Vellum

```bash
assistant mcp add kimbobmarley03-devpick -t stdio -c npx -a -y @devpick/mcp-server
```

### Other

```json
{
  "mcpServers": {
    "kimbobmarley03-devpick": {
      "command": "npx",
      "args": [
        "-y",
        "@devpick/mcp-server"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-09-15 (score 70, +15)

- [security improvement] Malware scan: unverified → pass

### 2026-09-14 (score 55)

First indexed and scored.

## MCP tools (43)

### `merge_pdfs` (~53 tokens)

Merge multiple PDF files into a single PDF. Provide absolute file paths.

Input parameters:

- `files` (array, required): Array of absolute paths to PDF files to merge
- `output` (string, required): Absolute path for the merged output PDF

### `split_pdf` (~67 tokens)

Extract specific pages from a PDF into a new file. Pages are 1-indexed.

Input parameters:

- `input` (string, required): Absolute path to the input PDF
- `output` (string, required): Absolute path for the output PDF
- `pages` (array, required): Page numbers to extract (1-indexed)

### `pdf_info` (~44 tokens)

Get metadata and page info from a PDF file (page count, title, author, file size, page dimensions).

Input parameters:

- `input` (string, required): Absolute path to the PDF file

### `rotate_pdf` (~99 tokens)

Rotate pages in a PDF by 90, 180, or 270 degrees. Rotates all pages or specific pages.

Input parameters:

- `angle` (string, required): Rotation angle: 90, 180, or 270
- `input` (string, required): Absolute path to the input PDF
- `output` (string, required): Absolute path for the output PDF
- `pages` (array): Specific pages to rotate (1-indexed). Omit to rotate all.

### `pdf_watermark` (~90 tokens)

Add a text watermark to every page of a PDF.

Input parameters:

- `fontSize` (number): Font size (default 50)
- `input` (string, required): Absolute path to the input PDF
- `opacity` (number): Watermark opacity (0-1, default 0.3)
- `output` (string, required): Absolute path for the output PDF
- `text` (string, required): Watermark text

### `remove_pdf_pages` (~64 tokens)

Remove specific pages from a PDF. Pages are 1-indexed.

Input parameters:

- `input` (string, required): Absolute path to the input PDF
- `output` (string, required): Absolute path for the output PDF
- `pages` (array, required): Page numbers to remove (1-indexed)

### `calculate_subnet` (~81 tokens)

Calculate subnet details from IP address and CIDR notation (network, broadcast, host range, mask, etc.)

Input parameters:

- `cidr` (string, required): IP address with CIDR notation (e.g. '192.168.1.0/24') or just IP
- `prefix` (number): CIDR prefix length if not included in cidr parameter

### `test_regex` (~72 tokens)

Test a regular expression pattern against text and return all matches with details

Input parameters:

- `flags` (string): Regex flags (g, i, m, s, u — default: g)
- `pattern` (string, required): Regular expression pattern (without delimiters)
- `text` (string, required): Text to test the pattern against

### `parse_cron` (~39 tokens)

Parse and describe a cron expression in human-readable language

Input parameters:

- `expression` (string, required): Cron expression with 5 fields (minute hour day month weekday)

### `parse_jwt` (~37 tokens)

Decode and inspect a JWT token (header, payload, expiry — does NOT verify signature)

Input parameters:

- `token` (string, required): JWT token string

### `calculate_chmod` (~69 tokens)

Calculate Unix file permissions — convert between numeric (755), symbolic (rwxr-xr-x), and explain each bit

Input parameters:

- `mode` (string, required): Permission mode: octal (e.g. '755', '644') or symbolic (e.g. 'rwxr-xr-x')

### `json_diff` (~54 tokens)

Compare two JSON objects and show a structured diff of all changes (added, removed, changed keys)

Input parameters:

- `left` (string, required): First (original) JSON string
- `right` (string, required): Second (modified) JSON string

### `text_diff` (~70 tokens)

Compare two text strings line-by-line and show added, removed, and unchanged lines

Input parameters:

- `text1` (string, required): First (original) text
- `text2` (string, required): Second (modified) text
- `unified` (boolean): If true, return unified diff format; otherwise return structured diff

### `generate_hash` (~59 tokens)

Generate cryptographic hash of input text (MD5, SHA-1, SHA-256, SHA-512)

Input parameters:

- `algorithm` (string): Hash algorithm
- `encoding` (string): Output encoding
- `input` (string, required): Text to hash

### `format_json` (~60 tokens)

Format, prettify, or minify JSON data

Input parameters:

- `indent` (number): Indent spaces (default 2)
- `json` (string, required): Raw JSON string
- `minify` (boolean): If true, minify instead of prettify

### `format_sql` (~48 tokens)

Format and prettify SQL queries with keyword capitalization and proper indentation

Input parameters:

- `minify` (boolean): If true, minify instead of format
- `sql` (string, required): SQL query to format

### `format_xml` (~59 tokens)

Format and prettify XML data with proper indentation

Input parameters:

- `indent` (number): Indent spaces (default 2)
- `minify` (boolean): If true, minify instead of format
- `xml` (string, required): XML string to format

### `format_html` (~59 tokens)

Format and prettify HTML markup with proper indentation

Input parameters:

- `html` (string, required): HTML string to format
- `indent` (number): Indent spaces (default 2)
- `minify` (boolean): If true, minify instead of format

### `format_css` (~60 tokens)

Format and prettify CSS stylesheets with proper indentation

Input parameters:

- `css` (string, required): CSS string to format
- `indent` (number): Indent spaces (default 2)
- `minify` (boolean): If true, minify instead of format

### `validate_yaml` (~27 tokens)

Validate YAML and report any syntax errors

Input parameters:

- `yaml` (string, required): YAML string to validate

### `validate_toml` (~32 tokens)

Validate TOML and report any syntax errors

Input parameters:

- `toml` (string, required): TOML string to validate

### `encode_base64` (~30 tokens)

Encode text or data to Base64

Input parameters:

- `input` (string, required): Text to encode to Base64

### `decode_base64` (~31 tokens)

Decode a Base64 string back to text

Input parameters:

- `input` (string, required): Base64 encoded string to decode

### `encode_url` (~61 tokens)

URL-encode (percent-encode) a string for use in URLs

Input parameters:

- `full` (boolean): If true, encode the full URL (use encodeURI); otherwise encode a component (encodeURIComponent)
- `input` (string, required): String to URL-encode

### `decode_url` (~59 tokens)

Decode a URL-encoded (percent-encoded) string

Input parameters:

- `full` (boolean): If true, decode a full URL (use decodeURI); otherwise decode a component (decodeURIComponent)
- `input` (string, required): URL-encoded string to decode

### `encode_html_entities` (~39 tokens)

Encode special characters to HTML entities (&, <, >, etc.)

Input parameters:

- `input` (string, required): Text to encode HTML entities in

### `decode_html_entities` (~30 tokens)

Decode HTML entities back to their original characters

Input parameters:

- `input` (string, required): HTML with entities to decode

### `escape_string` (~53 tokens)

Escape special characters in a string (newlines, tabs, quotes, backslashes)

Input parameters:

- `input` (string, required): String to escape
- `mode` (string): Escape mode: json, js, regex, or shell

### `unescape_string` (~56 tokens)

Unescape escape sequences in a string (\n, \t, \\, \", etc.)

Input parameters:

- `input` (string, required): String with escape sequences to unescape
- `mode` (string): Unescape mode: json or unicode

### `yaml_to_json` (~35 tokens)

Convert YAML to JSON

Input parameters:

- `indent` (number): JSON indent spaces
- `yaml` (string, required): YAML string to convert

### `json_to_yaml` (~25 tokens)

Convert JSON to YAML

Input parameters:

- `json` (string, required): JSON string to convert

### `csv_to_json` (~51 tokens)

Convert CSV data to JSON array

Input parameters:

- `csv` (string, required): CSV string with header row
- `delimiter` (string): Column delimiter (default: comma)
- `indent` (number): JSON indent spaces

### `json_to_csv` (~45 tokens)

Convert a JSON array to CSV format

Input parameters:

- `delimiter` (string): Column delimiter (default: comma)
- `json` (string, required): JSON array (or object) to convert

### `json_to_typescript` (~50 tokens)

Generate TypeScript interfaces/types from a JSON object or array

Input parameters:

- `json` (string, required): JSON string to convert
- `root_name` (string): Name for the root interface (default: Root)

### `markdown_to_html` (~26 tokens)

Convert Markdown text to HTML

Input parameters:

- `markdown` (string, required): Markdown text to convert

### `number_base_convert` (~97 tokens)

Convert a number between bases (binary, octal, decimal, hex, or any base 2-36)

Input parameters:

- `from_base` (number, required): Source base (e.g. 10 for decimal, 16 for hex, 2 for binary)
- `to_base` (number, required): Target base
- `value` (string, required): Number to convert (as string, e.g. '255', 'FF', '11111111')

### `hex_to_rgb` (~52 tokens)

Convert a hex color code to RGB (and HSL) values

Input parameters:

- `hex` (string, required): Hex color code (e.g. '#FF5733' or 'FF5733' or '#F53')

### `rgb_to_hex` (~58 tokens)

Convert RGB color values to a hex color code

Input parameters:

- `b` (number, required): Blue channel (0-255)
- `g` (number, required): Green channel (0-255)
- `r` (number, required): Red channel (0-255)

### `generate_uuid` (~49 tokens)

Generate one or more random UUID v4 identifiers

Input parameters:

- `count` (number): Number of UUIDs to generate (1-100)
- `uppercase` (boolean): If true, return uppercase UUIDs

### `generate_lorem_ipsum` (~55 tokens)

Generate Lorem Ipsum placeholder text

Input parameters:

- `classic` (boolean): Start with the classic 'Lorem ipsum' opening
- `count` (number): Number of units to generate
- `unit` (string): Unit of generation

### `generate_slug` (~64 tokens)

Generate a URL-safe slug from text

Input parameters:

- `lowercase` (boolean): Convert to lowercase
- `max_length` (number): Maximum slug length
- `separator` (string): Word separator (default: hyphen)
- `text` (string, required): Text to convert to a slug

### `generate_cron_expression` (~163 tokens)

Generate a cron expression from common schedule descriptions or explicit fields

Input parameters:

- `day_of_month` (string): Day of month field (1-31, *, */n)
- `day_of_week` (string): Day of week field (0-7, *, 0=Sunday, MON-SUN)
- `hour` (string): Hour field (0-23, *, */n, or comma-separated)
- `minute` (string): Minute field (0-59, *, */n, or comma-separated)
- `month` (string): Month field (1-12, *, */n, or JAN-DEC)
- `preset` (string): Common schedule description (e.g. 'every 5 minutes', 'every day at midnight', 'every weekday')

### `count_words` (~32 tokens)

Count words, characters, lines, sentences, and paragraphs in text

Input parameters:

- `text` (string, required): Text to analyze

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/kimbobmarley03-devpick/devpick-mcp-server#diagnostics

## Score history

- 2026-09-20: 70
- 2026-09-19: 70
- 2026-09-18: 70
- 2026-09-17: 70
- 2026-09-16: 70
- 2026-09-15: 70
- 2026-09-14: 55

## Common questions

### What is the io.github.kimbobmarley03/devpick MCP server?

io.github.kimbobmarley03/devpick is an MCP server listed in the public MCP registry as io.github.kimbobmarley03/devpick. 43 local developer tools for AI agents: PDF, subnet, regex, JSON, conversion, and more. This page covers its npm package (@devpick/mcp-server).

### Is the io.github.kimbobmarley03/devpick MCP server safe to use?

io.github.kimbobmarley03/devpick scores 70 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the io.github.kimbobmarley03/devpick MCP server expose?

io.github.kimbobmarley03/devpick exposes 43 tools: merge_pdfs, split_pdf, pdf_info, rotate_pdf, pdf_watermark, and 38 more. Their descriptions and schemas cost roughly 2,404 tokens of context every time the server is loaded.

### Is the io.github.kimbobmarley03/devpick MCP server still maintained?

io.github.kimbobmarley03/devpick is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

### What licence is the io.github.kimbobmarley03/devpick MCP server under?

io.github.kimbobmarley03/devpick declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.

## Links

- npm package: https://www.npmjs.com/package/@devpick/mcp-server
- Socket report: https://socket.dev/npm/package/@devpick/mcp-server
- Repository: https://github.com/kimbobmarley03/devpick.sh
- Changelog RSS feed: https://verifymcp.io/servers/kimbobmarley03-devpick/devpick-mcp-server.xml
- Changelog JSON feed: https://verifymcp.io/servers/kimbobmarley03-devpick/devpick-mcp-server.json
- HTML version of this page: https://verifymcp.io/servers/kimbobmarley03-devpick/devpick-mcp-server