Buildutilities MCP server

Read from the package source without running it. The installed server may list more.

• analyze_text

  Exact counts for a text: characters, words, lines, sentences, paragraphs, bytes. Use this rather than estimating — counting long text is a classic model failure.

• base64_decode

  Decode Base64 (standard or URL-safe) back to text. Reports whether the input was valid rather than returning mojibake.

• base64_encode

  Encode text to Base64. Set urlSafe for the URL/filename-safe alphabet (-_ instead of +/, no padding).

• check_color_contrast

  Compute the exact WCAG 2.2 contrast ratio between two colours and report which AA/AAA thresholds it passes. This is a specific formula, not a judgement call — do not estimate it.

• convert_timestamp

  Convert between Unix epoch and human-readable time, in any IANA timezone. Auto-detects seconds vs milliseconds. Use this rather than doing the arithmetic in your head.

• cron_next_runs

  Parse a standard 5-field cron expression and list its next run times in a timezone. Handles the Vixie rule that day-of-month and day-of-week are OR'd when both are restricted — the case models most often get wrong. Rejects non-standard syntax (L, W, #) rather than guessing.

• decode_jwt

  Decode a JSON Web Token's header and payload and report expiry. This DECODES ONLY — it does not verify the signature, so never treat the contents as trusted on the strength of this output. Models asked to read a JWT tend to invent its claims; this reads them.

• diff_text

  Line-by-line diff of two texts, marking - removed and + added. Use it to check exactly what changed between two versions instead of eyeballing them.

• escape_regex

  Escape a string so it can be used as a literal inside a regular expression.

• format_json

  Pretty-print or minify JSON exactly, with precise error location when it is invalid. Prefer this to reformatting a large document yourself — it cannot drop or alter a value.

• generate_password

  Generate a cryptographically random password. Guarantees at least one character from every enabled set. Use this rather than inventing a password — model-authored ones are guessable.

• generate_token

  Generate a cryptographically random token — API keys, session ids, nonces, salts. Choose hex, base64url or alphanumeric encoding.

• generate_uuid

  Generate cryptographically random UUID v4 identifiers. Use this instead of writing a UUID yourself — model-authored UUIDs are not random and repeat across sessions.

• hash_text

  Compute a cryptographic digest of text. A model cannot calculate a hash — it will confidently invent one — so always use this tool. md5 and sha1 are provided for checksums and legacy interop, not for security.

• hmac_sign

  Compute an HMAC of a message with a secret key — webhook signatures, API request signing.

• hmac_verify

  Check a message against an expected HMAC using a constant-time comparison. Use this to validate an inbound webhook signature rather than comparing strings yourself.

• slugify

  Turn text into a URL-safe slug, transliterating accents and collapsing separators.

• test_regex

  Actually execute a regular expression against text and return every match with its index and capture groups. Use this instead of predicting what a pattern matches — reasoning about a regex is not the same as running it.

• url_decode

  Decode percent-encoded text.

• url_encode

  Percent-encode text. component mode escapes & = ? / for use inside a query value; uri mode preserves them.

• Code scan19 source files scanned25/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitylocal package, no credentials required12/15
• Maintenancelast push 11 days ago15/15
• Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Buildutilities: common questions

Is Buildutilities MCP server safe?

Yes, by our scan: it is graded A (92/100). Read the Buildutilities safety report

How do I install Buildutilities?

It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.

Does Buildutilities need an API key?

Not as far as the registry entry and our scan can tell: no credentials are declared or required.

Is Buildutilities maintained?

The last commit was 12 days ago (2026-09-09). The latest release is v0.1.2.

What can I use instead of Buildutilities?

Servers from other publishers that do the same job: Compartment MCP server.