io.github.matetools/mcp-server

NPM · @MATE-TOOLS/MCP-SERVER · SCANNED AUG 3

35 utility tools for AI agents — mate.tools API. Hash, regex, SEO, random, DNS, SSL, JWT.

Available components

−11 this week 66 66 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security100

No malware found by supply-chain analysis.Pass
No known CVEs affecting this package version or its production dependencies.Pass
No install/post-install scripts declared.Pass
No production dependencies, so there is no dependency health to assess. View diagnostics → Pass

Provenance & Transparency45

Source repository is publicly reachable at the declared URL. View diagnostics → Pass
Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
Clear OSI-approved license (MIT).Pass
Actively maintained (last published 77 days ago).Pass
Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail

Schema Quality & AI Usability75

AI-judged instruction clarity (good).Pass
Tool/resource definitions use about 3255 tokens (~93/item across 35 items; 35 tools + 0 resources), lean.Pass
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management23

Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial

Tool Coverage75

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
25% of tool parameters carry a description.Partial

Capabilities20

Spec-recency check failed: implements MCP spec 2024-11-05; the latest is 2026-07-28. See how to fix → Fail

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · @mate-tools/mcp-server

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add matetools-mcp-server -- npx -y @mate-tools/mcp-server

# add to Codex CLI

codex mcp add matetools-mcp-server -- npx -y @mate-tools/mcp-server

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "matetools-mcp-server": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@mate-tools/mcp-server"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add matetools-mcp-server --command npx --arg -y --arg @mate-tools/mcp-server

# ~/.hermes/config.yaml

mcp_servers:
  matetools-mcp-server:
    command: "npx"
    args: ["-y", "@mate-tools/mcp-server"]

// mcp.json

{
  "mcpServers": {
    "matetools-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@mate-tools/mcp-server"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

2 Aug 26 +18
- Malware scan: unverified → pass ▲ security
- Stability: unverified → 0.20 ▲ functional
31 Jul 26 −11
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
30 Jul 26 −18
- Malware scan: pass → unverified ▼ security
27 Jul 26 +30
- Tool coverage: unverified → 100 ▲ functional
- First check of Schema quality: fail functional
- First check of Tool coverage: 25 functional
- First check of Schema quality: pass functional
- First check of Schema quality: good functional
26 Jul 26 47

First indexed and scored.
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional

Show 3 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/@mate-tools/[email protected]

Provenance none

Ecosystem: npm · Outcome: none

Dependencies 0 packages

0 packages in the resolved dependency tree.

MCP tools — 35 exposed · ~3,255 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

age_calc ~94

Compute age in years/months/days from a date of birth. Returns next birthday, days until, Western zodiac sign, generation (Gen Z / Millennial / Gen X / Boomer / Silent / Greatest / Gen Alpha), birth weekday, and leap-year info.

Input Output Examples

Name	Type	Req	Description
date_of_birth	string	yes	—
reference	string	—	Date to compute age against. Default: now.
timezone	string	—	—

No output schema declared.

No examples provided.

aspect_ratio ~87

Compute the reduced aspect ratio (16:9, 4:3, 21:9, ...) from a width and height; OR scale a given width OR height to a target ratio.

Input Output Examples

Name	Type	Req	Description
height	number	—	—
ratio	string	—	e.g. "16:9", "4:3", "1.85:1".
width	number	—	—

No output schema declared.

No examples provided.

base64_decode ~50

Base64-decode a string. Accepts both standard and URL-safe Base64; missing padding is auto-fixed. Returns text when valid UTF-8, otherwise hex.

Input Output Examples

Name	Type	Req	Description
encoded	string	yes	—

No output schema declared.

No examples provided.

base64_encode ~62

Base64-encode a string. Optional URL-safe variant (RFC 4648 §5: `-`/`_` instead of `+`/`/`, no padding).

Input Output Examples

Name	Type	Req	Description
text	string	yes	—
url_safe	boolean	—	—

No output schema declared.

No examples provided.

case_convert ~61

Convert text into multiple case styles in one call: upper, lower, title, sentence, snake, kebab, camel, pascal, constant. Pass `cases` to limit the response.

Input Output Examples

Name	Type	Req	Description
cases	array	—	—
text	string	yes	—

No output schema declared.

No examples provided.

color_convert ~98

Convert any color (hex, rgb, rgba, hsl, hsla, named) into all standard color spaces. Returns hex, rgb, rgba, hsl, hsv, cmyk, closest CSS named color, WCAG luminance and contrast ratios vs. white and black (with AA/AAA flags).

Input Output Examples

Name	Type	Req	Description
color	string	yes	#ff5733, rgb(255,87,51), hsl(...), tomato, ...

No output schema declared.

No examples provided.

count_lines ~72

Count lines, words, sentences, paragraphs and characters in a chunk of text. Returns sixteen text metrics including duplicate-line detection, longest word, reading and speaking time estimates, and the dominant line-ending style (LF, CRLF or CR).

Input Output Examples

Name	Type	Req	Description
text	string	yes	UTF-8 text. Max 1 MB.

No output schema declared.

No examples provided.

credit_card_validate ~92

Validate a card number using the Luhn algorithm and detect the brand (Visa, MasterCard, Amex, Discover, JCB, Diners, UnionPay, Maestro, RuPay). The card number is never logged — only its length, IIN prefix, last 4, masked form, and Luhn outcome leave the server.

Input Output Examples

Name	Type	Req	Description
number	string	yes	Card number (spaces and dashes OK).

No output schema declared.

No examples provided.

date_math ~124

Date arithmetic. Two modes: provide `start` + `add` (e.g. "+90 days", "-2 weeks") to compute the resulting date, OR provide `start` + `end` to compute the diff. Diff mode optionally counts business days only.

Input Output Examples

Name	Type	Req	Description
add	string	—	Relative duration like "+90 days", "-2 weeks", "next friday".
business_days	boolean	—	—
end	string	—	Optional end date — when present, returns a diff instead.
start	string	yes	ISO 8601 / human-readable date.

No output schema declared.

No examples provided.

dns_lookup ~117

Resolve DNS records for a domain via the system resolver. Default lookup covers A, AAAA, MX, TXT, NS, CNAME, SOA, CAA. Also resolves reverse PTR records for A results. Use this to debug mail config (MX), domain ownership signals (TXT), name-server delegation (NS), CAA policy, and IP resolution. No SSRF risk — DNS only, no outbound connections.

Input Output Examples

Name	Type	Req	Description
domain	string	yes	Hostname (not URL). e.g. example.com
types	array	—	—

No output schema declared.

No examples provided.

finance_calc ~85

Multi-mode financial calculations. `mode` selects: loan (principal+rate+term [+extra]), compound_interest (principal+rate+years [+contribution]), simple_interest, discount, tip, sales_tax, roi (gain+cost), percentage (sub_mode: of / is_what_percent / change / increase), markup (cost + percent).

Input Output Examples

Name	Type	Req	Description
mode	string	yes	—

No output schema declared.

No examples provided.

hash ~67

Compute one or more cryptographic hashes of a text input. Defaults to MD5, SHA-1, SHA-256, SHA-384, SHA-512, CRC32, SHA3-256, SHA3-512.

Input Output Examples

Name	Type	Req	Description
algorithms	array	—	—
text	string	yes	—

No output schema declared.

No examples provided.

hashtag_tools ~134

Hashtag operations on text. mode=extract (pull #hashtags out of text with offsets), remove (strip them out + tidy whitespace), generate (suggest #hashtags from text content via stop-word-filtered word frequency), format (normalize an array of hashtag strings to camel/snake/lower/preserve style). Unicode-aware (#日本語 works).

Input Output Examples

Name	Type	Req	Description
hashtags	array	—	For format.
max	integer	—	For generate.
min_length	integer	—	For generate.
mode	string	yes	—
style	string	—	For format.
text	string	—	For extract / remove / generate.

No output schema declared.

No examples provided.

json_format ~57

Validate, pretty-print, minify or analyse a JSON document. Returns a structural summary (node counts, max depth, top distinct keys).

Input Output Examples

Name	Type	Req	Description
indent	integer	—	—
json	string	yes	—
mode	string	—	—

No output schema declared.

No examples provided.

json_to_csv ~94

Convert a JSON array of objects to CSV. Configurable delimiter, columns, optional flattening of nested objects with dot-keys (e.g. `meta.city`). Max 50,000 rows per request.

Input Output Examples

Name	Type	Req	Description
columns	array	—	—
delimiter	string	—	—
flatten	boolean	—	—
include_headers	boolean	—	—
json	string	yes	—
newline	string	—	—

No output schema declared.

No examples provided.

jwt_decode ~182

Decode a JSON Web Token (JWT) and analyse its claims. Always returns header, payload, signature info, and expiry status (active/expired/not_yet_valid) computed from exp/nbf/iat. When `secret` is provided, verifies HS256/HS384/HS512 via HMAC. When `public_key` is provided in PEM format, verifies RS256/RS384/RS512 via openssl_verify. ES* and EdDSA are decoded but not verified. The token is never logged.

Input Output Examples

Name	Type	Req	Description
public_key	string	—	PEM-format RSA public key for RS256/384/512 verification. Optional.
secret	string	—	Shared secret for HS256/384/512 verification. Optional.
token	string	yes	Full JWT (three base64url segments joined with dots). "Bearer " prefix is stripped automatically.

No output schema declared.

No examples provided.

lorem_ipsum ~56

Generate placeholder text — N paragraphs, sentences or words of lorem ipsum. Suitable for mocks, fixtures and test data.

Input Output Examples

Name	Type	Req	Description
count	integer	—	—
kind	string	—	—
start_with_lorem	boolean	—	—

No output schema declared.

No examples provided.

meta_tags_generate ~165

Generate a complete HTML head block — standard <meta>, OpenGraph, Twitter Card and Schema.org JSON-LD — from a small set of inputs (title, description, url, image, author, keywords, type). Returns ready-to-paste HTML plus an SEO score 0-100 with concrete warnings (title length, description length, missing OG image, etc.).

Input Output Examples

Name	Type	Req	Description
author	string	—	—
description	string	yes	—
image	string	—	—
keywords	array	—	—
locale	string	—	—
site_name	string	—	—
title	string	yes	—
twitter_card	string	—	—
twitter_site	string	—	@handle
type	string	—	—
url	string	—	—

No output schema declared.

No examples provided.

number_base ~103

Convert integers between any base 2..36 plus Roman numerals. Big-int safe when GMP is available. Use from_base="roman" to parse a Roman numeral input, or include "roman" in to_bases to convert to Roman.

Input Output Examples

Name	Type	Req	Description
from_base	—	—	Integer 2..36 or "roman".
to_bases	array	—	Bases to convert to. Each is an integer 2..36 or "roman".
value	string	yes	—

No output schema declared.

No examples provided.

password ~83

Generate cryptographically random passwords using a CSPRNG. Configurable length, count, character classes and ambiguous-character exclusion.

Input Output Examples

Name	Type	Req	Description
count	integer	—	—
digits	boolean	—	—
exclude_ambiguous	boolean	—	—
length	integer	—	—
lowercase	boolean	—	—
symbols	boolean	—	—
uppercase	boolean	—	—

No output schema declared.

No examples provided.

password_strength ~53

Score a password (0-4 zxcvbn-style), compute entropy bits, identify common-password fingerprints and keyboard sequences, and estimate offline-GPU crack time. Password is never logged.

Input Output Examples

Name	Type	Req	Description
password	string	yes	—

No output schema declared.

No examples provided.

random_gen ~109

Cryptographically random generator backed by random_int / random_bytes. mode=number (min/max), string (length + charset: alpha/alphanumeric/numeric/lower/upper/hex/hex_upper/base58/base64url), word (English word list), picker (pick N from a list, with/without replacement), team (balanced round-robin team allocation), dice (NdM notation), coin, country (ISO list), uuid (v4 or v7).

Input Output Examples

Name	Type	Req	Description
mode	string	yes	—

No output schema declared.

No examples provided.

regex_test ~96

Match, replace or split text with a PCRE regular expression. Returns offsets and capture groups. ReDoS-protected: catastrophic patterns return an error rather than hanging.

Input Output Examples

Name	Type	Req	Description
flags	string	—	any of i, m, s, u, x
operation	string	—	—
pattern	string	yes	—
replacement	string	—	—
split_limit	integer	—	—
text	string	yes	—

No output schema declared.

No examples provided.

sitemap_extract ~126

Fetch and parse an XML sitemap or sitemap index from a public HTTPS URL (or paste raw XML). SSRF-protected: refuses private/loopback/link-local/cloud-metadata addresses, re-validates redirects. Optional recursive expansion of sub-sitemaps. Returns lastmod, changefreq, priority when present.

Input Output Examples

Name	Type	Req	Description
include_metadata	boolean	—	—
max_sub_sitemaps	integer	—	—
max_urls	integer	—	—
recursive	boolean	—	—
url	string	—	—
xml	string	—	Paste raw XML instead of fetching by URL.

No output schema declared.

No examples provided.

slugify ~86

Convert any text to a URL-safe slug. Unicode-aware: by default transliterates non-Latin characters to ASCII (set `transliterate=false` to keep them). Configurable separator and length.

Input Output Examples

Name	Type	Req	Description
lowercase	boolean	—	—
max_length	integer	—	—
separator	string	—	—
text	string	yes	—
transliterate	boolean	—	—

No output schema declared.

No examples provided.

sort_lines ~107

Sort lines of text. Supports asc/desc, case-insensitive, locale-aware collation, natural-sort (line2 before line10), dedupe, line-trim and empty-line drop.

Input Output Examples

Name	Type	Req	Description
case_sensitive	boolean	—	—
dedupe	boolean	—	—
drop_empty	boolean	—	—
locale	string	—	—
natural	boolean	—	—
order	string	—	—
text	string	yes	—
trim_lines	boolean	—	—

No output schema declared.

No examples provided.

ssl_check ~126

Connect to {domain}:{port} over TLS and return the leaf certificate + full chain: subject, issuer, validity dates, days remaining, fingerprint (SHA-256), subject alternative names, signature algorithm, negotiated protocol and cipher. Useful for verifying a domain has HTTPS, the cert is not expired, and the chain is properly configured. SSRF-protected: refuses private/loopback/link-local/cloud-metadata IPs. 5s connect timeout.

Input Output Examples

Name	Type	Req	Description
domain	string	yes	Hostname only (no scheme/path). e.g. example.com
port	integer	—	—

No output schema declared.

No examples provided.

stats ~66

Descriptive statistics for a list of numbers: count, sum, mean, median, mode, min/max/range, variance, stddev (population AND sample), MAD, quartiles, IQR, percentiles (1-99), geometric mean, harmonic mean.

Input Output Examples

Name	Type	Req	Description
numbers	—	yes	—

No output schema declared.

No examples provided.

text_cleanup ~105

Apply chained text cleanup operations in sequence. Operations: trim, collapse_spaces, normalize_whitespace, remove_line_breaks, normalize_line_breaks, dedupe_lines, reverse_lines, strip_html, strip_emoji, strip_urls, strip_emails, normalize_quotes (curly → straight), normalize_dashes (em/en → hyphen), lowercase, uppercase. Returns cleaned text plus per-operation chars/lines removed.

Input Output Examples

Name	Type	Req	Description
operations	array	yes	—
text	string	yes	—

No output schema declared.

No examples provided.

text_diff ~84

Diff two strings by line, word or character. Returns structured changes (+/-/=), git-style unified diff, and a Jaccard similarity score. Use line mode for code/config; word mode for prose; char mode for short strings.

Input Output Examples

Name	Type	Req	Description
a	string	yes	—
b	string	yes	—
context	integer	—	—
mode	string	—	—

No output schema declared.

No examples provided.

timestamp ~103

Convert any moment in time between formats. Bidirectional Unix epoch ↔ ISO 8601 ↔ RFC 3339 ↔ human-readable. Auto-detects epoch resolution. Accepts strtotime-style natural language ("next monday", "+2 weeks"). Optional timezone for local components.

Input Output Examples

Name	Type	Req	Description
input	string	—	Date/time string or Unix epoch as a string. Omit for current time.
timezone	string	—	IANA timezone name e.g. 'Europe/Madrid'

No output schema declared.

No examples provided.

url_decode ~50

Decode a percent-encoded URL string. mode=component (rawurldecode, default) or form (interprets + as space).

Input Output Examples

Name	Type	Req	Description
encoded	string	yes	—
mode	string	—	—

No output schema declared.

No examples provided.

url_encode ~60

Percent-encode a string for URL use. mode=component (RFC 3986 strict, default), form (application/x-www-form-urlencoded), or path (keeps slashes intact).

Input Output Examples

Name	Type	Req	Description
mode	string	—	—
text	string	yes	—

No output schema declared.

No examples provided.

url_metadata ~141

Fetch a public HTTPS URL and extract structured page metadata: title, description, keywords, canonical, language, charset, full OpenGraph dictionary, Twitter Card, favicon (absolute URL), hreflang map, JSON-LD blocks, response headers and counts (h1/h2/images/links/scripts). SSRF-protected: refuses private/loopback/link-local/cloud-metadata addresses and re-validates every redirect. 2 MB body cap.

Input Output Examples

Name	Type	Req	Description
follow_redirects	boolean	—	—
timeout	integer	—	—
url	string	yes	http:// or https:// URL to fetch.
user_agent	string	—	Override the User-Agent header.

No output schema declared.

No examples provided.

xml_validate ~60

Validate XML well-formedness; with optional XSD schema. Reports errors with line/column. Network and DTD fetches are disabled (no XXE risk).

Input Output Examples

Name	Type	Req	Description
schema	string	—	Optional XSD source.
xml	string	yes	—

No output schema declared.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

26 Jul 3 Aug

Day	Score
26 Jul	47
27 Jul	77
28 Jul	77
29 Jul	77
30 Jul	59
31 Jul	48
1 Aug	48
2 Aug	66
3 Aug	66