it-tools-mcp (wrenchpilot/it-tools-mcp) is an MCP server listed on the M8ven Trust Index. It scores 30 out of 100, grade F. It declares 118 tools. No publisher has claimed this listing.
A comprehensive Model Context Protocol (MCP) server that provides access to over 100 IT tools and utilities commonly used by developers, system administrators, and IT professionals. Inspired by https://github.com/CorentinTh/it-tools
Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
wrenchpilot
Source: github_topic
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.
These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.
decrypt_ansible_vaultDecrypt Ansible Vault encrypted text
encrypt_ansible_vaultEncrypt text using Ansible Vault format
generate_ansible_inventoryParse and validate Ansible inventory files
parse_ansible_inventoryParse and validate Ansible inventory files
show_ansible_referenceGet Ansible commands reference and cheatsheet
validate_ansible_playbookValidate Ansible playbook syntax and structure
convert_hex_to_rgbConvert HEX color to RGB
convert_rgb_to_hexConvert RGB color to HEX
decode_jwtDecode JWT token (header and payload only)
generate_basic_authGenerate HTTP Basic Authentication header
generate_bip39Generate BIP39 mnemonic phrases
generate_hmacGenerate HMAC (Hash-based Message Authentication Code)
generate_otpGenerate Time-based One-Time Password (TOTP) codes
generate_passwordGenerate a secure password
generate_tokenGenerate secure random tokens
hash_bcryptGenerate bcrypt hash or verify password against hash
hash_md5Generate MD5 hash
hash_sha1Generate SHA1 hash
hash_sha256Generate SHA256 hash of input text. Example: "hello" → "2cf24dba4f21d..."
hash_sha512Generate SHA512 hash
compare_jsonCompare two JSON objects and show differences
convert_html_to_markdownConvert HTML to Markdown
convert_json_to_csvConvert JSON to CSV format
convert_json_to_tomlConvert JSON to TOML format
convert_markdown_to_htmlConvert Markdown to HTML
convert_toml_to_jsonConvert TOML to JSON format
format_jsonFormat and prettify JSON with proper indentation. Example: {"a":1,"b":2} → formatted JSON with customizable spacing
format_phoneParse and format phone numbers
format_sqlFormat and prettify SQL queries
format_xmlFormat and prettify XML
format_yamlFormat and prettify YAML
minify_jsonMinify JSON by removing whitespace and unnecessary characters. Example: formatted JSON → compact single-line JSON
convert_listConvert between different list formats (comma-separated, line-separated, etc.)
format_htmlFormat and beautify HTML code
format_javascriptFormat and beautify JavaScript/CSS code
generate_crontabGenerate crontab expressions
generate_markdown_tocGenerate a table of contents from Markdown headers
convert_docker_compose_to_runConvert Docker Compose files to docker run commands
convert_docker_run_to_composeConvert docker run commands to Docker Compose format
generate_traefik_composeGenerate Traefik Docker Compose configuration
show_docker_referenceGet Docker commands reference and cheatsheet
validate_docker_composeValidate Docker Compose files for syntax errors, compatibility issues, and best practices. Example: check YAML syntax, service configuration, network setup
convert_text_to_binaryConvert text to binary and vice versa
decode_base64Decode Base64 text back to original text. Example: "SGVsbG8gV29ybGQ=" → "Hello World"
decode_htmlDecode HTML entities
decode_urlURL decode text
encode_base64Encode text to Base64 format. Example: "Hello World" → "SGVsbG8gV29ybGQ="
encode_htmlEncode HTML entities
encode_html_entitiesExtended HTML entity encoding/decoding
encode_urlURL encode text
decode_safelinkDecode Microsoft Outlook SafeLink URLs
fang_urlDefang or refang URLs for safe sharing (security analysis)
identify_file_typeIdentify file type based on magic numbers/file signatures
generate_qr_codeGenerate QR code for any text including URLs, WiFi networks, contact info, etc.
generate_svg_placeholderGenerate SVG placeholder images
generate_ulidGenerate Universally Unique Lexicographically Sortable Identifier (ULID). Example: creates time-sortable unique IDs like '01ARZ3NDEKTSV4RRFFQ69G5FAV'
generate_uuidGenerate a universally unique identifier (UUID). Example: generates "550e8400-e29b-41d4-a716-446655440000"
calculate_percentageCalculate percentages, percentage of a number, or percentage change
convert_number_baseConvert numbers between different bases (binary, octal, decimal, hexadecimal)
convert_roman_numeralsConvert between Arabic numbers and Roman numerals
convert_temperatureConvert temperatures between Celsius, Fahrenheit, and Kelvin
convert_unix_timestampConvert between Unix timestamps and human-readable dates
evaluate_mathSafely evaluate mathematical expressions
calculate_ip_subnetCalculate subnet information for IPv4
calculate_ipv4_subnetCalculate IPv4 subnet information
calculate_ipv6_subnetCalculate IPv6 subnet information
catDisplay content of a file
convert_cidr_to_ip_rangeConvert CIDR notation to IP address range
convert_ip_range_to_cidrConvert IP address range to CIDR notation(s)
curlMake HTTP requests to web endpoints. Example: GET request to an API or POST data to a server
digPerform DNS lookup with dig command
generate_ipv6_ulaGenerate IPv6 Unique Local Address (ULA) prefix
generate_mac_addressGenerate random MAC address
generate_random_portGenerate random port numbers
grepSearch for patterns in files
headDisplay the beginning of a file
nslookupPerform DNS lookup on a hostname or IP address
parse_urlParse URL into components
pingTest network connectivity to a host. Example: ping google.com to check if it's reachable
psList running processes
scpCopy files to or from a remote host using SFTP (SCP-like)
sshConnect to a target via SSH
tailDisplay the end of a file
telnetTest TCP connectivity to a host and port
topDisplay system processes (snapshot)
validate_ibanValidate and parse IBAN (International Bank Account Number)
convert_angleConvert between different angle units
convert_energyConvert between different energy units
convert_powerConvert between different power units
analyze_distinct_wordsCount distinct words in text and show their frequency
analyze_text_statsGet statistics about text (character count, word count, etc.)
capitalize_textCapitalize first letter of each word
compare_textCompare two texts and show differences
convert_text_to_camelcaseConvert text to camelCase format. Example: 'hello world' → 'helloWorld', 'my-variable-name' → 'myVariableName'
convert_text_to_kebabcaseConvert text to kebab-case
convert_text_to_lowercaseConvert text to lowercase
convert_text_to_natoConvert text to NATO phonetic alphabet
convert_text_to_pascalcaseConvert text to PascalCase
convert_text_to_unicodeConvert text to Unicode code points and vice versa
convert_text_to_uppercaseConvert text to uppercase
18 further tools are not listed here. The complete surface is in the source.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
js-yaml: YAML merge-key chains can force quadratic CPU consumption
JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported
JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases
MCP_DEV_MODEMCP_TEST_MODETool annotations
116/118 tools have annotations
Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.
All four hints declared on every tool
118/118 tools missing one or more hints — decrypt_ansible_vault (missing: destructiveHint, idempotentHint, openWorldHint); encrypt_ansible_vault (missing: destructiveHint, idempotentHint, openWorldHint); generate_ansible_inventory (missing: destructiveHint, idempotentHint, openWorldHint), +115 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
Production dependencies are patched
0 critical, 2 high severity in production deps — js-yaml@4.1.1 (high), js-yaml@4.1.1 (high)
Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.
Dependency freshness
4/34 production deps abandoned (no release in 2+ years): iban@2022-06-18 (4.2y), shell-escape@2022-06-26 (4.2y), speakeasy@2022-06-26 (4.2y)
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/wrenchpilot/it-tools-mcp)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check