# consolelog dev tools (npm · consolelog-mcp)

Deterministic dev tools for AI agents over MCP: hashing, encoding, formatting, codegen, and more.

- Trust score: 64/100 (medium)
- Change this week: −9
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `consolelog-mcp`: 64/100 (this document), [markdown](https://verifymcp.io/servers/mbdev3-consolelog-mcp/consolelog-mcp.md), [page](https://verifymcp.io/servers/mbdev3-consolelog-mcp/consolelog-mcp)

## Channel facts

- Registry: `npm`
- Package: `consolelog-mcp`
- Version: `0.1.0`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 89/100
  - No malware found by supply-chain analysis.
  - No known CVEs affecting this package version or its production dependencies.
  - No install/post-install scripts declared.
  - 5 of 5 dependencies flagged as unhealthy (4 deprecated).
- **Provenance & Transparency**: 19/100
  - Repository check failed: the declared repository URL returned HTTP 404.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (Apache-2.0).
  - Actively maintained (last published 60 days ago).
  - Security-disclosure policy not yet verified: we couldn't inspect the source repository.
- **Schema Quality & AI Usability**: 88/100
  - 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).
  - AI-judged instruction clarity (excellent).
  - Tool/resource definitions use about 1638 tokens (~58/item across 28 items; 27 tools + 1 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 23/100
  - Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 78/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 33% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add mbdev3-consolelog-mcp -- npx -y consolelog-mcp
```

### Codex

```bash
codex mcp add mbdev3-consolelog-mcp -- npx -y consolelog-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "mbdev3-consolelog-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "consolelog-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add mbdev3-consolelog-mcp --command npx --arg -y --arg consolelog-mcp
```

### Hermes

```yaml
mcp_servers:
  mbdev3-consolelog-mcp:
    command: "npx"
    args: ["-y", "consolelog-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "mbdev3-consolelog-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "consolelog-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 64, +16)

- [security improvement] Malware scan: unverified → pass
- [functional regression] Dependency health: 0.68 → 0.16
- [functional improvement] Stability: unverified → 0.20

### 2026-08-01 (score 48, −7)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-31 (score 55, −18)

- [security regression] Malware scan: pass → unverified

### 2026-07-27 (score 73, +34)

- [functional improvement] Tool coverage: unverified → 100
- [functional improvement] Schema quality: unverified → 100
- [functional] First check of Schema quality: fail
- [functional] First check of Schema quality: excellent
- [functional] First check of Tool coverage: 33
- [functional] First check of Schema quality: pass

### 2026-07-26 (score 39)

First indexed and scored.

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

## MCP tools (27)

### `hash` (~75 tokens)

Hash

Compute a cryptographic hash (MD5, SHA-1, SHA-256, SHA-512) of a string. Use this instead of computing the hash yourself — language models cannot produce correct cryptographic hashes. Returns the lowercase hex digest.

Input parameters:

- `algorithm` (string)
- `text` (string, required): The input string to hash.

### `hmac` (~71 tokens)

HMAC

Compute an HMAC (keyed hash) of a message with a secret key. Use this instead of doing it yourself — models cannot compute HMACs. Returns hex.

Input parameters:

- `algorithm` (string)
- `key` (string, required): The secret key.
- `message` (string, required): The message to authenticate.

### `pbkdf2_hash` (~75 tokens)

Password hash (PBKDF2)

Hash a password with PBKDF2-SHA256 and a random salt (a browser/edge-safe alternative to bcrypt). Use this to store passwords instead of inventing a scheme. Returns a self-describing salted hash string.

Input parameters:

- `iterations` (integer)
- `password` (string, required): The password to hash.

### `uuid` (~49 tokens)

Generate UUID(s)

Generate random RFC-4122 v4 UUIDs. Use this instead of inventing UUIDs yourself — model-produced IDs are not random and may collide. One per line.

Input parameters:

- `count` (integer)

### `nano_id` (~58 tokens)

Generate Nano ID(s)

Generate compact, URL-safe Nano IDs. Use this instead of inventing IDs — they must be truly random. One per line.

Input parameters:

- `alphabet` (string): Character set preset.
- `count` (integer)
- `length` (integer)

### `random_bytes` (~55 tokens)

Generate random bytes

Generate cryptographically random bytes in a chosen encoding (good for API keys, secrets, salts). Use this instead of inventing "random" strings.

Input parameters:

- `format` (string)
- `length` (integer): Number of bytes.

### `password` (~99 tokens)

Generate password(s)

Generate strong random password(s) with configurable character classes. Use this instead of inventing passwords — they must be random. One per line.

Input parameters:

- `count` (integer)
- `exclude_similar` (boolean): Exclude lookalikes like i/l/1/O/0.
- `length` (integer)
- `lowercase` (boolean)
- `numbers` (boolean)
- `symbols` (boolean)
- `uppercase` (boolean)

### `token_count` (~90 tokens)

Count LLM tokens

Estimate the LLM token count, cost, and context-window fit of a piece of text for a given model. Use this instead of guessing — models cannot count their own tokens. Returns JSON.

Input parameters:

- `model` (string): Model id, e.g. gpt-5.4.
- `output_tokens` (integer): Expected output tokens for cost.
- `text` (string, required): The text to measure.

### `base64_encode` (~33 tokens)

Base64 encode

Encode a UTF-8 string to Base64. Models are unreliable on longer strings.

Input parameters:

- `text` (string, required)

### `base64_decode` (~34 tokens)

Base64 decode

Decode a Base64 string to UTF-8 text. Models are unreliable on longer strings.

Input parameters:

- `text` (string, required)

### `url_encode` (~31 tokens)

URL encode

Percent-encode a string for safe use in a URL (encodeURIComponent semantics).

Input parameters:

- `text` (string, required)

### `url_decode` (~27 tokens)

URL decode

Decode a percent-encoded URL string back to plain text.

Input parameters:

- `text` (string, required)

### `html_encode` (~36 tokens)

HTML entity encode

Escape a string into HTML entities (&, <, >, ", ’) so it renders as text.

Input parameters:

- `text` (string, required)

### `html_decode` (~24 tokens)

HTML entity decode

Decode HTML entities back to their literal characters.

Input parameters:

- `text` (string, required)

### `jwt_decode` (~58 tokens)

Decode JWT

Decode a JSON Web Token into its header and payload (signature is NOT verified). Use this to inspect a token instead of base64-decoding segments yourself. Returns pretty-printed JSON.

Input parameters:

- `token` (string, required): The JWT (header.payload.signature).

### `regex_test` (~79 tokens)

Test a regular expression

Run a JavaScript regular expression against a test string and return the actual matches (with indices and capture groups). Use this instead of predicting matches yourself — models routinely hallucinate regex results.

Input parameters:

- `flags` (string)
- `pattern` (string, required): The regex pattern (no surrounding slashes).
- `text` (string, required): The string to test against.

### `json_format` (~73 tokens)

Format JSON

Pretty-print (and validate) a JSON string with configurable indentation and optional key sorting. Use this to format large JSON instead of regenerating it yourself — it offloads the work and reports parse errors with a line.

Input parameters:

- `indent` (integer)
- `json` (string, required)
- `sort_keys` (boolean)

### `json_minify` (~30 tokens)

Minify JSON

Strip all insignificant whitespace from a JSON string. Offloads bulk rewriting.

Input parameters:

- `json` (string, required)

### `yaml_to_json` (~43 tokens)

YAML to JSON

Convert YAML to JSON. Use this instead of hand-translating — it is error-prone.

Input parameters:

- `indent` (integer)
- `yaml` (string, required)

### `json_to_yaml` (~44 tokens)

JSON to YAML

Convert JSON to YAML. Use this instead of hand-translating — it is error-prone.

Input parameters:

- `json` (string, required)
- `sort_keys` (boolean)

### `sql_format` (~47 tokens)

Format SQL

Pretty-print a SQL query for a given dialect. Offloads tedious reformatting.

Input parameters:

- `dialect` (string)
- `keyword_case` (string)
- `sql` (string, required)

### `xml_format` (~32 tokens)

Format XML

Pretty-print and validate an XML string. Reports the line/column on parse errors.

Input parameters:

- `xml` (string, required)

### `csv_to_json` (~63 tokens)

CSV to JSON

Convert CSV to a JSON array of objects (delimiter auto-detected). Use this instead of parsing CSV by hand — quoting/escaping rules are easy to get wrong.

Input parameters:

- `csv` (string, required)
- `header` (boolean): Treat the first row as column names.

### `json_to_typescript` (~70 tokens)

JSON to TypeScript

Generate TypeScript types/interfaces from a sample JSON object. Use this to derive types from real data instead of writing them by hand.

Input parameters:

- `json` (string, required)
- `output` (string)
- `readonly` (boolean)
- `root_name` (string): Name of the root type.

### `json_to_zod` (~57 tokens)

JSON to Zod schema

Generate a Zod schema from a sample JSON object. Use this to derive a validator from real data instead of writing it by hand.

Input parameters:

- `json` (string, required)
- `schema_name` (string): Variable name for the schema.

### `color_convert` (~95 tokens)

Convert a color

Convert a CSS color across formats (HEX/RGB/HSL/HSV/CMYK + nearest name). Use this instead of doing the arithmetic yourself — models fumble it. Returns JSON of all formats, or one format if requested.

Input parameters:

- `color` (string, required): Any CSS color, e.g. "#3b82f6", "rgb(59,130,246)", "tomato".
- `format` (string)

### `contrast_check` (~63 tokens)

Check color contrast (WCAG)

Compute the WCAG contrast ratio between a foreground and background color and report which accessibility levels pass. Use this instead of estimating it. Returns JSON.

Input parameters:

- `background` (string, required): Background color (any CSS color).
- `foreground` (string, required): Text color (any CSS color).

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/mbdev3-consolelog-mcp/consolelog-mcp#diagnostics

## Score history

- 2026-08-03: 64
- 2026-08-02: 64
- 2026-08-01: 48
- 2026-07-31: 55
- 2026-07-29: 73
- 2026-07-28: 73
- 2026-07-27: 73
- 2026-07-26: 39

## Links

- npm package: https://www.npmjs.com/package/consolelog-mcp
- Socket report: https://socket.dev/npm/package/consolelog-mcp
- Website: https://consolelog.tools/mcp
- Changelog RSS feed: https://verifymcp.io/servers/mbdev3-consolelog-mcp/consolelog-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/mbdev3-consolelog-mcp/consolelog-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/mbdev3-consolelog-mcp/consolelog-mcp