Geratools MCP server

Read from the package source without running it. The installed server may list more.

• base64

  Encode text or hex bytes to Base64, or decode Base64 / Base64url back to text. Binary-safe via UTF-8 so emoji and non-ASCII round-trip correctly. Supports standard (+ / with = padding) and URL-safe (- _ no padding) variants. Decoding auto-restores padding and falls back to raw hex if the bytes are not valid UTF-8. Runs entirely offline — same logic as the GeraTools Base64 tool.

• css_unit_convert

  Convert a CSS length value from one unit to every other CSS unit (px, rem, em, pt, pc, in, cm, mm, Q). Absolute units use 1in = 96px; rem depends on root font size and em on parent font size (both default 16px). Offline — same logic as the GeraTools CSS Unit Converter.

• hash

  Compute a cryptographic digest of the input using Node crypto — the same algorithms a browser SubtleCrypto produces. Input can be utf8 (default), hex, or base64; output as hex (default) or base64. Deterministic and offline. Note: MD5 and SHA-1 are provided for checksums/legacy interop only, not for security.

• jwt_decode

  Base64url-decode a JWT into its header and payload JSON, list the iat/nbf/exp time claims as ISO timestamps, and report whether the token is expired. Does NOT verify the signature — never trust an unverified payload for authorization. Offline — same logic as the GeraTools JWT Decoder.

• regex_testwrite action

  Run a JavaScript regular expression against a test string and return every match (with index, capture groups and named groups), the match count, and a plain-English, token-by-token explanation of the pattern. Invalid patterns return the engine error rather than throwing. Offline — same logic as the GeraTools Regex Tester.

• word_count

  Analyse a block of text: word count, characters (with and without spaces), sentence count, paragraph count, line count, and estimated reading time (200 wpm). Offline — same logic as the GeraTools Word Counter.

• Code scan7 source files scanned25/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitylocal package, no credentials required12/15
• Maintenancerepository not readable: repo not found3/15
• Maintainer identityverified namespace with website, no repo4/10

Geratools: common questions

Is Geratools MCP server safe?

With care: it is graded C, so read the findings first (68/100). Read the Geratools safety report

How do I install Geratools?

It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.

Does Geratools need an API key?

Not as far as the registry entry and our scan can tell: no credentials are declared or required.

Is Geratools maintained?

The latest release is v1.0.1.