digest-mcp
Server Details
Exact hashing, base64/hex/URL encoding, JWT decoding and UUIDs for AI agents. No auth required.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
Glama MCP Gateway
Connect through Glama MCP Gateway for full control over tool access and complete visibility into every call.
Full call logging
Every tool call is logged with complete inputs and outputs, so you can debug issues and audit what your agents are doing.
Tool access control
Enable or disable individual tools per connector, so you decide what your agents can and cannot do.
Managed credentials
Glama handles OAuth flows, token storage, and automatic rotation, so credentials never expire on your clients.
Usage analytics
See which tools your agents call, how often, and when, so you can understand usage patterns and catch anomalies.
Tool Definition Quality
Average 4.1/5 across 5 of 5 tools scored.
Each tool serves a distinct purpose: decoding, encoding, UUID generation, hashing, and JWT decoding, with no overlapping functionality.
All tool names follow a consistent lowercase_with_underscore verb_noun pattern (e.g., generate_uuid, jwt_decode), with simple verb names like decode and encode.
5 tools is an ideal count for a focused utility server, covering essential encoding, hashing, and identifier generation without unnecessary bloat.
The tool set fully covers the core domain of data decoding, encoding, hashing, UUID generation, and JWT decoding, leaving no obvious gaps for common use cases.
Available Tools
5 toolsdecodeAInspect
Decode base64, base64url, hex, or URL (percent) encoded data. Returns UTF-8 text when the bytes are valid UTF-8, plus the raw bytes as hex.
| Name | Required | Description | Default |
|---|---|---|---|
| from | Yes | Source encoding. | |
| input | Yes | Encoded data. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are present, so the description carries full burden. It discloses that output is UTF-8 text if valid, otherwise raw bytes as hex. However, it does not mention error behavior for invalid input or permissions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two concise sentences with no redundant information. Front-loaded with the verb and resource.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple decoding tool with two parameters and no output schema, the description covers the input and output behavior adequately. Missing details on error handling, but generally complete for typical use.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema descriptions are minimal but cover both parameters. The description adds context about output and encoding types, but does not significantly enhance parameter understanding beyond the schema's enum and basic descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool decodes data from four specific encodings (base64, base64url, hex, URL) and describes the output format, distinguishing it from sibling tools like encode (reverse) and hash (different operation).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description does not explicitly state when to use this tool vs alternatives like jwt_decode, but the purpose is clear. No 'when not' or alternative guidance is provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
encodeAInspect
Encode UTF-8 text to base64, base64url, hex, or URL (percent) encoding. Exact, unlike LLM in-context encoding.
| Name | Required | Description | Default |
|---|---|---|---|
| to | Yes | Target encoding. | |
| input | Yes | UTF-8 text to encode. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden. It reveals a key behavioral trait ('Exact, unlike LLM in-context encoding'), indicating reliability. However, it does not disclose other traits such as error handling or whether the operation is safe to repeat.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence with two clauses, no wasted words. It effectively conveys the core action and a key differentiator. Front-loaded with the main action.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple encoding tool with 2 parameters, no output schema, and distinct sibling tools, the description is complete. It covers the function, input format, output formats, and a behavioral note. No further details necessary.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description adds little beyond the schema: it repeats the encoding types and input type, but does not provide additional semantic detail or usage examples.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'Encode' and specifies the resources (UTF-8 text) and target encodings (base64, base64url, hex, URL). It distinguishes from sibling tools like decode, hash, jwt_decode, which are fundamentally different operations.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides context by stating 'Exact, unlike LLM in-context encoding,' implying when precision is needed. While it does not explicitly exclude alternatives, the sibling tools are distinct in purpose, so this is sufficient.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
generate_uuidAInspect
Generate RFC 4122 UUIDs: random v4, or deterministic v5 from a namespace UUID and a name. LLMs cannot generate valid random or v5 UUIDs — use this tool.
| Name | Required | Description | Default |
|---|---|---|---|
| name | No | v5 only: the name to hash within the namespace. | |
| count | No | How many v4 UUIDs to generate (1-20). Ignored for v5. Default 1. | |
| version | Yes | UUID version. 4 = random, 5 = deterministic (SHA-1 of namespace + name). | |
| namespace | No | v5 only: namespace UUID, e.g. DNS namespace "6ba7b810-9dad-11d1-80b4-00c04fd430c8". |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description carries full burden. It explains v4 vs v5 behavior and provides a rationale for tool use. However, it lacks details on error handling, rate limits, or output format.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences front-loaded with purpose and rationale. No superfluous words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Covers main use cases but does not clarify required parameters for v5 (namespace, name are optional in schema but needed for v5). Lacks output format specification.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% (baseline 3). Description adds examples (DNS namespace) and notes that count is ignored for v5, adding value beyond schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states it generates RFC 4122 UUIDs, distinguishes between v4 random and v5 deterministic, and notes LLMs cannot do this. This differentiates it from sibling tools (decode, encode, hash, jwt_decode).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly tells when to use: whenever a UUID is needed because LLMs cannot generate valid ones. Does not mention alternatives, but sibling tools are unrelated so context is clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
hashAInspect
Compute a cryptographic hash (SHA-1/SHA-256/SHA-384/SHA-512) of the input. LLMs cannot compute hashes — always use this tool. Returns hex and base64 digests.
| Name | Required | Description | Default |
|---|---|---|---|
| input | Yes | Data to hash. | |
| algorithm | Yes | Hash algorithm. Prefer sha256 unless you need another. | |
| input_encoding | No | How to interpret input. Default utf-8. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description carries full burden. It states output is hex and base64 digests, but does not disclose exact return structure (e.g., object with fields). No mention of side effects or permissions. Adequate but not rich.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, no filler. Purpose, usage guidance, and output note are front-loaded in a compact form. Every sentence serves a purpose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 3-parameter tool without output schema, the description covers purpose, when to use, and output format. Lacks explicit return structure (e.g., whether hex and base64 are returned separately), but otherwise complete for typical hash use.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with descriptions. The description adds the algorithm recommendation ('Prefer sha256') but otherwise repeats schema details like input encoding. Moderate added value.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states it computes cryptographic hashes, lists supported algorithms (SHA-1/256/384/512), and distinguishes it from siblings like decode/encode by noting LLMs cannot compute hashes. It explicitly mentions output format (hex and base64).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides strong guidance: 'LLMs cannot compute hashes — always use this tool' and 'Prefer sha256 unless you need another.' Does not explicitly list when not to use or compare with siblings, but the context is clear for hashing.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
jwt_decodeAInspect
Decode a JWT's header and payload WITHOUT verifying the signature. Expands exp/iat/nbf to ISO timestamps and reports expiry. Never treat the result as authenticated.
| Name | Required | Description | Default |
|---|---|---|---|
| jwt | Yes | The JWT string (header.payload.signature). |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description fully discloses key behaviors: no signature verification, expansion of timestamps (exp/iat/nbf), and expiry reporting. This covers the essential behavioral traits for a decode-only tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two concise sentences, front-loaded with the primary action and key constraint, followed by a critical warning. No redundant information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's low complexity and single parameter, the description is adequate but lacks details on the output format (e.g., a JSON object with decoded header and payload). Without an output schema, this gap reduces completeness.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with the parameter 'jwt' described as 'The JWT string (header.payload.signature)'. The description adds meaning by explaining what happens post-decode (timestamps expansion, expiry), which goes beyond the schema's type and format.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Decode') and resource ('JWT'), clearly distinguishing from sibling tools like 'encode' and 'generate_uuid' by focusing on JWT and explicitly stating 'without verifying the signature'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides a clear context (decodes JWT without verification) and a strong warning ('Never treat the result as authenticated'), implying when not to use it. However, it lacks explicit guidance on when to use this tool versus alternatives like 'decode'.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Claim this connector by publishing a /.well-known/glama.json file on your server's domain with the following structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"maintainers": [{ "email": "your-email@example.com" }]
}The email address must match the email associated with your Glama account. Once published, Glama will automatically detect and verify the file within a few minutes.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!