Utilix Tech MCP Server
@utilix-tech/mcp
npm
v0.23.0
Published by @utilix-tech — no publish provenance, so origin is unverified, but the source is public: the repository link below is self-declared yet readable, so you can inspect the code before adopting it.
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 7 = 93. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −6 | capability blast radius (high) — client exposure if the model is manipulated |
| −1 | publisher verification (public source) — no provenance, but the source is public and inspectable |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 1
critical Completed toxic-flow trifecta across toolsMTC-FLOW-002
This server (without client built-ins) exposes a complete data-exfiltration chain: validate_robots_txt → format_sql → build_curl. Untrusted input is ingested, private data is read, and it can be sent to an external sink via the agent composing the tools (→). Static analysis proves the primitive exists, not that a specific run will occur.
Fix: Remove one leg of the trifecta: isolate untrusted-input tools from secret-reading tools and from egress tools, or require human approval between them.
Location: flow validate_robots_txt → format_sql → build_curl
Tools 134
Each tool and what it can reach — statically extracted from the published source.
build_curlnetwork egresscurl_to_codenetwork egressformat_sqlreads sensitive datavalidate_robots_txtingests untrusted inputbase32_decodeno sensitive capabilitybase32_encodeno sensitive capabilitybase58_decodeno sensitive capabilitybase58_encodeno sensitive capabilitybase62_decodeno sensitive capabilitybase62_encodeno sensitive capability
Show 124 more tools ↓
base64_decodeno sensitive capabilitybase64_encodeno sensitive capabilitybcrypt_hashno sensitive capabilitybcrypt_verifyno sensitive capabilitybuild_cache_controlno sensitive capabilitycalculate_compound_interestno sensitive capabilitycalculate_loanno sensitive capabilitycalculate_percentage_changeno sensitive capabilitycalculate_simple_interestno sensitive capabilitycalculate_taxno sensitive capabilitycalculate_time_valueno sensitive capabilitycalculate_tip_splitno sensitive capabilitycheck_contrastno sensitive capabilitychunk_textno sensitive capabilitycolor_paletteno sensitive capabilitycolor_shadesno sensitive capabilitycompress_htmlno sensitive capabilitycompress_jsonno sensitive capabilitycompress_markdownno sensitive capabilityconvert_apr_apyno sensitive capabilityconvert_bytesno sensitive capabilityconvert_caseno sensitive capabilityconvert_colorno sensitive capabilityconvert_iso8601_durationno sensitive capabilityconvert_timezoneno sensitive capabilitycors_headersno sensitive capabilitycron_next_runsno sensitive capabilitycss_gradientno sensitive capabilitycsv_to_jsonno sensitive capabilitydate_diffno sensitive capabilitydecode_jwtno sensitive capabilitydeduplicate_linesno sensitive capabilitydetect_filler_wordsno sensitive capabilitydetect_passive_voiceno sensitive capabilitydetect_piino sensitive capabilitydetect_prompt_injectionno sensitive capabilitydetect_redosno sensitive capabilitydetect_secretsno sensitive capabilitydiff_env_exampleno sensitive capabilitydiff_jsonno sensitive capabilitydiff_json_detailedno sensitive capabilityescape_stringno sensitive capabilityestimate_tokensno sensitive capabilityexpand_queryno sensitive capabilityextract_entitiesno sensitive capabilityextract_jsonno sensitive capabilityextract_keywordsno sensitive capabilityextract_tablesno sensitive capabilityextract_urlsno sensitive capabilityflatten_jsonno sensitive capabilityformat_graphqlno sensitive capabilityformat_htmlno sensitive capabilityformat_jsonno sensitive capabilityformat_ndjsonno sensitive capabilitygenerate_passwordno sensitive capabilitygenerate_qrno sensitive capabilitygenerate_random_datano sensitive capabilitygenerate_ulidno sensitive capabilitygenerate_uuidno sensitive capabilityhashno sensitive capabilityhash_allno sensitive capabilityhtml_entities_decodeno sensitive capabilityhtml_entities_encodeno sensitive capabilityhtml_to_markdownno sensitive capabilityjson_to_csvno sensitive capabilityjson_to_gono sensitive capabilityjson_to_pythonno sensitive capabilityjson_to_typescriptno sensitive capabilityjson_to_yamlno sensitive capabilityjson_to_zodno sensitive capabilityjsonpathno sensitive capabilityline_operationsno sensitive capabilitylookup_mimeno sensitive capabilitylorem_ipsumno sensitive capabilitymerge_jsonno sensitive capabilityminify_cssno sensitive capabilityminify_jsno sensitive capabilityminify_jsonno sensitive capabilitynumber_to_wordsno sensitive capabilityoptimize_svgno sensitive capabilityparse_cronno sensitive capabilityparse_csvno sensitive capabilityparse_docker_imageno sensitive capabilityparse_envno sensitive capabilityparse_github_urlno sensitive capabilityparse_harno sensitive capabilityparse_jwksno sensitive capabilityparse_user_agentno sensitive capabilitypx_to_unitsno sensitive capabilityread_exif_datano sensitive capabilityread_ico_infono sensitive capabilityread_id3_tagsno sensitive capabilityread_image_infono sensitive capabilityread_pdf_metadatano sensitive capabilityread_wav_infono sensitive capabilityrepair_jsonno sensitive capabilityrerank_chunksno sensitive capabilityresolve_json_pointerno sensitive capabilitysanitize_htmlno sensitive capabilityscore_readabilityno sensitive capabilityscore_relevanceno sensitive capabilityslugifyno sensitive capabilitysummarize_for_llmno sensitive capabilitytest_regexno sensitive capabilitytext_diffno sensitive capabilitytoml_to_jsonno sensitive capabilitytrim_to_tokensno sensitive capabilityunescape_stringno sensitive capabilityunicode_inspectno sensitive capabilityunix_timestampno sensitive capabilityurl_decodeno sensitive capabilityurl_encodeno sensitive capabilityvalidate_barcodeno sensitive capabilityvalidate_card_numberno sensitive capabilityvalidate_ibanno sensitive capabilityvalidate_isbnno sensitive capabilityvalidate_jsonno sensitive capabilityvalidate_json_schemano sensitive capabilityvalidate_sitemapno sensitive capabilityvalidate_yamlno sensitive capabilityvector_similarityno sensitive capabilityword_countno sensitive capabilityxml_to_jsonno sensitive capabilityyaml_to_jsonno sensitive capability
Toxic flows 1
Cross-tool combinations that form a data-exfiltration primitive (untrusted input → sensitive source → external sink).
What this scan could not see
- Tools were statically extracted from the published source (134 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 1
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v0.23.0 latest |
A 93/100 | 1 | 1.9.0 | 2026-07-24 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan @utilix-tech/mcp --onlineMore in Developer Tools
Security scan results for the 1stay MCP server.
Security scan results for the Adguard Home MCP server.
Security scan results for the Ado Browser MCP server.
Security scan results for the Adobe Experience Dev MCP server.
Security scan results for the Aemet MCP server.
Security scan results for the Affinity Mcp Bridge MCP server.