# Utility Belt MCP

Utility Belt gives Codex and other MCP clients deterministic tools for common data work. It is stateless, has no external API dependencies, stores no submitted content, and requires no secrets.

Public website: https://wild-pulse-gm7zl.run.mcp-use.com

Production MCP endpoint: https://wild-pulse-gm7zl.run.mcp-use.com/mcp

## Tools

| Tool | Purpose |
| --- | --- |
| `json_format` | Validate, format, minify, and sort JSON |
| `json_diff` | Compare JSON using JSON Pointer paths |
| `csv_profile` | Detect CSV structure and data-quality issues |
| `text_transform` | Convert case, trim, sort, and deduplicate lines |
| `encode_decode` | Base64, hex, and URL encoding |
| `hash_text` | SHA-256, SHA-512, SHA-1, and MD5 digests |
| `generate_ids` | UUID v4 and URL-safe random tokens |
| `date_time` | Inspect and shift ISO dates in IANA time zones |
| `number_stats` | Descriptive statistics and quartiles |

Input text is limited to 2 MB, CSV data to 10,000 rows, and numeric input to 100,000 values.

## Run locally

Requirements: Node.js 20 or newer.

```sh
npm install
npm run build
npm test
npm run start:stdio
```

For HTTP:

```sh
npm start
```

The MCP endpoint is `http://localhost:3000/mcp`; health is available at `/health`.

## Codex plugin

The plugin manifest is in `.codex-plugin/plugin.json`. The included `.mcp.json` starts the compiled server over stdio using `${pluginRoot}`.

Install dependencies and build before loading the plugin:

```sh
npm install
npm run build
```

## Deploy

The included multi-stage `Dockerfile` is ready for a stateless cloud deployment. The server reads `PORT`, defaults to port `3000`, and exposes Streamable HTTP at `/mcp`.

Manufact deployment requires this folder to be committed to a GitHub repository. Once connected, deploy with:

- Dockerfile: `Dockerfile`
- Port: `3000`
- Health path: `/health`
- MCP path: `/mcp`

## Privacy and security

- No input is persisted.
- No analytics or outbound network calls are implemented.
- All tools are read-only computations.
- SHA-1 and MD5 are compatibility hashes and are explicitly labeled as unsuitable for security.

## License

MIT