Utilix Tech MCP Server
@utilix-tech/mcp
npm
v0.55.0
Published by @utilix-tech — no publish provenance, so origin is unverified, but the source is public: the repository link below is self-declared yet readable, so you can inspect the code before adopting it.
MCP server exposing 139 Utilix developer tools to Claude, Cursor, VS Code Copilot, and any MCP-compatible AI assistant.
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 7 = 93. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −6 | capability blast radius (high) — client exposure if the model is manipulated |
| −1 | publisher verification (public source) — no provenance, but the source is public and inspectable |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 1
critical Completed toxic-flow trifecta across toolsMTC-FLOW-002
This server (without client built-ins) exposes a complete data-exfiltration chain: build_content_disposition → format_sql → build_curl. Untrusted input is ingested, private data is read, and it can be sent to an external sink via the agent composing the tools (→). Static analysis proves the primitive exists, not that a specific run will occur.
Fix: Remove one leg of the trifecta: isolate untrusted-input tools from secret-reading tools and from egress tools, or require human approval between them.
Location: flow build_content_disposition → format_sql → build_curl
Tools 198
Each tool and what it can reach — statically extracted from the published source.
build_content_dispositioningests untrusted inputbuild_curlnetwork egresscurl_to_codenetwork egressformat_sqlreads sensitive datavalidate_robots_txtingests untrusted inputanalyze_caption_speedno sensitive capabilityanalyze_email_headersno sensitive capabilityanalyze_keyword_densityno sensitive capabilityanalyze_sentence_lengthsno sensitive capabilitybase32_decodeno sensitive capability
Show 188 more tools ↓
base32_encodeno sensitive capabilitybase58_decodeno sensitive capabilitybase58_encodeno sensitive capabilitybase62_decodeno sensitive capabilitybase62_encodeno sensitive capabilitybase64_decodeno sensitive capabilitybase64_encodeno sensitive capabilitybcrypt_hashno sensitive capabilitybcrypt_verifyno sensitive capabilitybuild_cache_controlno sensitive capabilitybuild_client_hintsno sensitive capabilitybuild_link_headerno sensitive capabilitybuild_permissions_policyno sensitive capabilitybuild_range_headerno sensitive capabilitybuild_referrer_policyno sensitive capabilitybuild_vary_headerno sensitive capabilitybuild_x_content_type_options_headerno sensitive capabilitycalculate_break_evenno sensitive capabilitycalculate_cash_breakdownno sensitive capabilitycalculate_cash_roundingno sensitive capabilitycalculate_cd_maturityno sensitive capabilitycalculate_changeno sensitive capabilitycalculate_compound_interestno sensitive capabilitycalculate_credit_utilizationno sensitive capabilitycalculate_depreciation_scheduleno sensitive capabilitycalculate_discountno sensitive capabilitycalculate_emino sensitive capabilitycalculate_gpano sensitive capabilitycalculate_loanno sensitive capabilitycalculate_margin_markupno sensitive capabilitycalculate_markdown_task_list_progressno sensitive capabilitycalculate_moving_averagesno sensitive capabilitycalculate_payback_periodno sensitive capabilitycalculate_percentage_changeno sensitive capabilitycalculate_roino sensitive capabilitycalculate_rule_of_72no sensitive capabilitycalculate_savings_goalno sensitive capabilitycalculate_simple_interestno sensitive capabilitycalculate_string_distanceno sensitive capabilitycalculate_taxno sensitive capabilitycalculate_time_valueno sensitive capabilitycalculate_tip_splitno sensitive capabilitycalculate_video_bitrateno sensitive capabilitycheck_contrastno sensitive capabilitycheck_set_cookie_headerno sensitive capabilitychunk_textno sensitive capabilitycolor_paletteno sensitive capabilitycolor_shadesno sensitive capabilitycompare_unit_pricesno sensitive capabilitycompress_htmlno sensitive capabilitycompress_jsonno sensitive capabilitycompress_markdownno sensitive capabilitycompute_jwk_thumbprintno sensitive capabilityconvert_apr_apyno sensitive capabilityconvert_bytesno sensitive capabilityconvert_caseno sensitive capabilityconvert_colorno sensitive capabilityconvert_iso8601_durationno sensitive capabilityconvert_subtitlesno sensitive capabilityconvert_timezoneno sensitive capabilitycors_headersno sensitive capabilitycron_next_runsno sensitive capabilitycss_gradientno sensitive capabilitycsv_to_jsonno sensitive capabilitycsv_to_sql_insertno sensitive capabilitydate_diffno sensitive capabilitydecode_jwtno sensitive capabilitydeduplicate_linesno sensitive capabilitydetect_filler_wordsno sensitive capabilitydetect_passive_voiceno sensitive capabilitydetect_piino sensitive capabilitydetect_prompt_injectionno sensitive capabilitydetect_redosno sensitive capabilitydetect_secretsno sensitive capabilitydiff_env_exampleno sensitive capabilitydiff_jsonno sensitive capabilitydiff_json_detailedno sensitive capabilityescape_stringno sensitive capabilityestimate_password_entropyno sensitive capabilityestimate_tokensno sensitive capabilityexpand_queryno sensitive capabilityextract_entitiesno sensitive capabilityextract_jsonno sensitive capabilityextract_keywordsno sensitive capabilityextract_tablesno sensitive capabilityextract_urlsno sensitive capabilityfind_csv_duplicate_rowsno sensitive capabilityflatten_jsonno sensitive capabilityformat_few_shot_examplesno sensitive capabilityformat_graphqlno sensitive capabilityformat_htmlno sensitive capabilityformat_jsonno sensitive capabilityformat_ndjsonno sensitive capabilitygenerate_etagno sensitive capabilitygenerate_markdown_tocno sensitive capabilitygenerate_passwordno sensitive capabilitygenerate_qrno sensitive capabilitygenerate_random_datano sensitive capabilitygenerate_sri_hashno sensitive capabilitygenerate_ulidno sensitive capabilitygenerate_uuidno sensitive capabilityhashno sensitive capabilityhash_allno sensitive capabilityhtml_entities_decodeno sensitive capabilityhtml_entities_encodeno sensitive capabilityhtml_to_markdownno sensitive capabilityinspect_gif_framesno sensitive capabilityjson_schema_to_typescriptno sensitive capabilityjson_to_csvno sensitive capabilityjson_to_gono sensitive capabilityjson_to_pythonno sensitive capabilityjson_to_typescriptno sensitive capabilityjson_to_yamlno sensitive capabilityjson_to_zodno sensitive capabilityjsonpathno sensitive capabilityline_operationsno sensitive capabilitylint_conventional_commitno sensitive capabilitylint_tool_schemano sensitive capabilitylookup_emojino sensitive capabilitylookup_mimeno sensitive capabilitylorem_ipsumno sensitive capabilitymerge_jsonno sensitive capabilityminify_cssno sensitive capabilityminify_jsno sensitive capabilityminify_jsonno sensitive capabilitynumber_to_wordsno sensitive capabilityoptimize_svgno sensitive capabilityparse_client_hint_headersno sensitive capabilityparse_content_dispositionno sensitive capabilityparse_content_range_headerno sensitive capabilityparse_cronno sensitive capabilityparse_csvno sensitive capabilityparse_docker_imageno sensitive capabilityparse_envno sensitive capabilityparse_github_urlno sensitive capabilityparse_harno sensitive capabilityparse_ipv6_addressno sensitive capabilityparse_jwksno sensitive capabilityparse_markdown_front_matterno sensitive capabilityparse_permissions_policyno sensitive capabilityparse_user_agentno sensitive capabilityparse_vary_headerno sensitive capabilitypx_to_unitsno sensitive capabilityread_exif_datano sensitive capabilityread_flac_infono sensitive capabilityread_ico_infono sensitive capabilityread_id3_tagsno sensitive capabilityread_image_infono sensitive capabilityread_pdf_metadatano sensitive capabilityread_pdf_page_dimensionsno sensitive capabilityread_video_infono sensitive capabilityread_wav_infono sensitive capabilityrepair_jsonno sensitive capabilityrerank_chunksno sensitive capabilityresolve_json_pointerno sensitive capabilityresolve_yaml_anchorsno sensitive capabilitysanitize_htmlno sensitive capabilityscore_readabilityno sensitive capabilityscore_relevanceno sensitive capabilityslugifyno sensitive capabilitysplit_sitemapno sensitive capabilitysummarize_for_llmno sensitive capabilitytest_gitignore_patternsno sensitive capabilitytest_regexno sensitive capabilitytext_diffno sensitive capabilitytoml_to_jsonno sensitive capabilitytrim_to_tokensno sensitive capabilityunescape_stringno sensitive capabilityunicode_inspectno sensitive capabilityunix_timestampno sensitive capabilityurl_decodeno sensitive capabilityurl_encodeno sensitive capabilityvalidate_barcodeno sensitive capabilityvalidate_card_numberno sensitive capabilityvalidate_editorconfigno sensitive capabilityvalidate_ibanno sensitive capabilityvalidate_isbnno sensitive capabilityvalidate_jsonno sensitive capabilityvalidate_json_schemano sensitive capabilityvalidate_manifestno sensitive capabilityvalidate_package_exportsno sensitive capabilityvalidate_sitemapno sensitive capabilityvalidate_tsconfigno sensitive capabilityvalidate_yamlno sensitive capabilityvector_similarityno sensitive capabilityword_countno sensitive capabilityxml_to_jsonno sensitive capabilityyaml_to_jsonno sensitive capability
Toxic flows 1
Cross-tool combinations that form a data-exfiltration primitive (untrusted input → sensitive source → external sink).
What this scan could not see
- Tools were statically extracted from the published source (198 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 10
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v0.55.0 latest |
A 93/100 | 1 | 1.13.0 | 2026-09-09 |
v0.54.0 |
A 93/100 | 1 | 1.13.0 | 2026-09-08 |
v0.53.0 |
A 93/100 | 1 | 1.13.0 | 2026-09-07 |
v0.52.0 |
A 93/100 | 1 | 1.13.0 | 2026-09-06 |
v0.51.0 |
A 93/100 | 1 | 1.13.0 | 2026-09-05 |
Show 5 more versions ↓
v0.49.0 |
A 93/100 | 1 | 1.13.0 | 2026-08-25 |
v0.48.0 |
A 93/100 | 1 | 1.12.1 | 2026-08-24 |
v0.47.0 |
A 93/100 | 1 | 1.12.1 | 2026-08-23 |
v0.46.0 |
A 93/100 | 1 | 1.12.1 | 2026-08-21 |
v0.45.0 |
A 93/100 | 1 | 1.12.1 | 2026-08-20 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan @utilix-tech/mcp --onlineMore in Developer Tools
Hotel booking MCP server — 300K+ properties, real confirmation numbers, loyalty programs. Builders monetize every booking via Stripe Connect. The first MCP server that completes real hotel reservations inside AI conversations.
Manage AdGuard Home through AI assistants
Read-only Azure DevOps for MCP clients using only your existing browser session — no PAT, no Azure CLI. Browse work items, pull requests, comments, attachments and Artifacts feeds across every project, repo and feed you can access.
MCP server for Adobe Experience Manager Assets integration development
Servidor MCP para el tiempo oficial de España (API pública OpenData de AEMET). Predicción, observación y avisos como herramientas MCP tipadas.
A standalone MCP stdio bridge for Affinity by Canva's local MCP SSE server.