it-tools-mcp (wrenchpilot/it-tools-mcp) is an MCP server listed on the M8ven Trust Index. It scores 30 out of 100, grade F. It declares 118 tools. No publisher has claimed this listing.

F
Caution
30/100

it-tools-mcp

A comprehensive Model Context Protocol (MCP) server that provides access to over 100 IT tools and utilities commonly used by developers, system administrators, and IT professionals. Inspired by https://github.com/CorentinTh/it-tools

Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

wrenchpilot

Source: github_topic

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

Install from

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings
⚠️
Known vulnerabilities in dependencies: 2 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
118 tools verified — handlers match their declared behaviour
10 read-only tools verified — handlers contain no write/delete/exec
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
// tools this server exposes118 tools

These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.

decrypt_ansible_vault

Decrypt Ansible Vault encrypted text

encrypt_ansible_vault

Encrypt text using Ansible Vault format

generate_ansible_inventory

Parse and validate Ansible inventory files

parse_ansible_inventory

Parse and validate Ansible inventory files

show_ansible_reference

Get Ansible commands reference and cheatsheet

validate_ansible_playbook

Validate Ansible playbook syntax and structure

convert_hex_to_rgb

Convert HEX color to RGB

convert_rgb_to_hex

Convert RGB color to HEX

decode_jwt

Decode JWT token (header and payload only)

generate_basic_auth

Generate HTTP Basic Authentication header

generate_bip39

Generate BIP39 mnemonic phrases

generate_hmac

Generate HMAC (Hash-based Message Authentication Code)

generate_otp

Generate Time-based One-Time Password (TOTP) codes

generate_password

Generate a secure password

generate_token

Generate secure random tokens

hash_bcrypt

Generate bcrypt hash or verify password against hash

hash_md5

Generate MD5 hash

hash_sha1

Generate SHA1 hash

hash_sha256

Generate SHA256 hash of input text. Example: "hello" → "2cf24dba4f21d..."

hash_sha512

Generate SHA512 hash

compare_json

Compare two JSON objects and show differences

convert_html_to_markdown

Convert HTML to Markdown

convert_json_to_csv

Convert JSON to CSV format

convert_json_to_toml

Convert JSON to TOML format

convert_markdown_to_html

Convert Markdown to HTML

convert_toml_to_json

Convert TOML to JSON format

format_json

Format and prettify JSON with proper indentation. Example: {"a":1,"b":2} → formatted JSON with customizable spacing

format_phone

Parse and format phone numbers

format_sql

Format and prettify SQL queries

format_xml

Format and prettify XML

format_yaml

Format and prettify YAML

minify_json

Minify JSON by removing whitespace and unnecessary characters. Example: formatted JSON → compact single-line JSON

convert_list

Convert between different list formats (comma-separated, line-separated, etc.)

format_html

Format and beautify HTML code

format_javascript

Format and beautify JavaScript/CSS code

generate_crontab

Generate crontab expressions

generate_markdown_toc

Generate a table of contents from Markdown headers

convert_docker_compose_to_run

Convert Docker Compose files to docker run commands

convert_docker_run_to_compose

Convert docker run commands to Docker Compose format

generate_traefik_compose

Generate Traefik Docker Compose configuration

show_docker_reference

Get Docker commands reference and cheatsheet

validate_docker_compose

Validate Docker Compose files for syntax errors, compatibility issues, and best practices. Example: check YAML syntax, service configuration, network setup

convert_text_to_binary

Convert text to binary and vice versa

decode_base64

Decode Base64 text back to original text. Example: "SGVsbG8gV29ybGQ=" → "Hello World"

decode_html

Decode HTML entities

decode_url

URL decode text

encode_base64

Encode text to Base64 format. Example: "Hello World" → "SGVsbG8gV29ybGQ="

encode_html

Encode HTML entities

encode_html_entities

Extended HTML entity encoding/decoding

encode_url

URL encode text

decode_safelink

Decode Microsoft Outlook SafeLink URLs

fang_url

Defang or refang URLs for safe sharing (security analysis)

identify_file_type

Identify file type based on magic numbers/file signatures

generate_qr_code

Generate QR code for any text including URLs, WiFi networks, contact info, etc.

generate_svg_placeholder

Generate SVG placeholder images

generate_ulid

Generate Universally Unique Lexicographically Sortable Identifier (ULID). Example: creates time-sortable unique IDs like '01ARZ3NDEKTSV4RRFFQ69G5FAV'

generate_uuid

Generate a universally unique identifier (UUID). Example: generates "550e8400-e29b-41d4-a716-446655440000"

calculate_percentage

Calculate percentages, percentage of a number, or percentage change

convert_number_base

Convert numbers between different bases (binary, octal, decimal, hexadecimal)

convert_roman_numerals

Convert between Arabic numbers and Roman numerals

convert_temperature

Convert temperatures between Celsius, Fahrenheit, and Kelvin

convert_unix_timestamp

Convert between Unix timestamps and human-readable dates

evaluate_math

Safely evaluate mathematical expressions

calculate_ip_subnet

Calculate subnet information for IPv4

calculate_ipv4_subnet

Calculate IPv4 subnet information

calculate_ipv6_subnet

Calculate IPv6 subnet information

cat

Display content of a file

convert_cidr_to_ip_range

Convert CIDR notation to IP address range

convert_ip_range_to_cidr

Convert IP address range to CIDR notation(s)

curl

Make HTTP requests to web endpoints. Example: GET request to an API or POST data to a server

dig

Perform DNS lookup with dig command

generate_ipv6_ula

Generate IPv6 Unique Local Address (ULA) prefix

generate_mac_address

Generate random MAC address

generate_random_port

Generate random port numbers

grep

Search for patterns in files

head

Display the beginning of a file

nslookup

Perform DNS lookup on a hostname or IP address

parse_url

Parse URL into components

ping

Test network connectivity to a host. Example: ping google.com to check if it's reachable

ps

List running processes

scp

Copy files to or from a remote host using SFTP (SCP-like)

ssh

Connect to a target via SSH

tail

Display the end of a file

telnet

Test TCP connectivity to a host and port

top

Display system processes (snapshot)

validate_iban

Validate and parse IBAN (International Bank Account Number)

convert_angle

Convert between different angle units

convert_energy

Convert between different energy units

convert_power

Convert between different power units

analyze_distinct_words

Count distinct words in text and show their frequency

analyze_text_stats

Get statistics about text (character count, word count, etc.)

capitalize_text

Capitalize first letter of each word

compare_text

Compare two texts and show differences

convert_text_to_camelcase

Convert text to camelCase format. Example: 'hello world' → 'helloWorld', 'my-variable-name' → 'myVariableName'

convert_text_to_kebabcase

Convert text to kebab-case

convert_text_to_lowercase

Convert text to lowercase

convert_text_to_nato

Convert text to NATO phonetic alphabet

convert_text_to_pascalcase

Convert text to PascalCase

convert_text_to_unicode

Convert text to Unicode code points and vice versa

convert_text_to_uppercase

Convert text to uppercase

18 further tools are not listed here. The complete surface is in the source.

// known CVEs in dependencies2 high1 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

highjs-yaml@4.1.1GHSA-52cp-r559-cp3m

js-yaml: YAML merge-key chains can force quadratic CPU consumption

highjs-yaml@4.1.1GHSA-5p4m-2wfm-xmqj

JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported

lowjs-yaml@4.1.1GHSA-h67p-54hq-rp68

JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
configMCP_DEV_MODE
configMCP_TEST_MODE
// quality suggestions

Tool annotations

116/118 tools have annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

118/118 tools missing one or more hints — decrypt_ansible_vault (missing: destructiveHint, idempotentHint, openWorldHint); encrypt_ansible_vault (missing: destructiveHint, idempotentHint, openWorldHint); generate_ansible_inventory (missing: destructiveHint, idempotentHint, openWorldHint), +115 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Production dependencies are patched

0 critical, 2 high severity in production deps — js-yaml@4.1.1 (high), js-yaml@4.1.1 (high)

Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.

Dependency freshness

4/34 production deps abandoned (no release in 2+ years): iban@2022-06-18 (4.2y), shell-escape@2022-06-26 (4.2y), speakeasy@2022-06-26 (4.2y)

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Verified](https://m8ven.ai/badge/mcp/wrenchpilot/it-tools-mcp?variant=verified)](https://m8ven.ai/mcp/wrenchpilot/it-tools-mcp)
Shows verification status without the grade. Want the grade badge instead? Remove ?variant=verified from the URL.
commit: 16838e5bfb1a4d4d70f15335b0e5001fb490ae8e
code hash: fcc1aad4f4de4f01c0510ba2e308d17f650f9b8c8defb15d95eb7ecec92394dd
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client