@wrongstack/mcp

Fetch a URL and return its content. HTML pages are automatically converted to clean markdown.

Execute a command from a **curated command roster** with argument validation and confirm gating.

Run a security audit against project dependencies (using pnpm/npm audit). Reports known vulnerabilities with severity.

Wait for an element or a bounded duration in an owned browser session.

Evaluate bounded JavaScript in the page. Requires confirmation because page code is arbitrary.

Upload project-local files through a file input in an owned browser session.

Apply a unified diff (patch) to the project. This is the correct tool when you have a diff that needs to be applied precisely, including handling of rejects.

Ask the user for proactive clarification with structured multiple-choice options ONLY when an architectural,

Manage a session-persistent strategic plan. The plan is written to disk and survives conversation resumptions within the same session, but is isolated to this session — other sessions have their own separate plans.

read

write

Test coordination tool.

echo

manage context

registered after context build

replace todos

a destructive op that must be confirmed

returns a big diff

Record after-task suggestions.

streams partial output

floods partial output

streams live preview lines

Search docs

dynamic tool

Display a project or subpath directory tree. Use it for structural layout; use index-backed `codebase-search` first for code understanding when it is live.

Execute the project's test suite. This is one of the most critical tools for validating that your changes are correct.

Run the project's TypeScript type checker (`tsc --noEmit` or equivalent). Essential for verifying type safety before making changes or committing.

Format source files according to project style (Biome). Can also run in check-only mode.

Execute a small batch of independent, read-only discovery calls. Process, mutation, browser-action, MCP, delegation, and nested meta tools are not eligible.

Read logs from files or Docker containers. Useful for debugging running applications.

Discover Playwright and Cypress projects and preview bounded E2E execution plans without loading configs or starting processes.

Parse, pretty-print, query, validate, transform, and merge JSON/JSON5/YAML. Use `action` to select the operation: parse (default), query, validate, transform, or merge.

The exact PowerShell command or script block to run.

Browse, load, customize, and enforce curated frontend/mobile UI design kits. Use BEFORE writing

Perform a search-and-replace across multiple files using a regex pattern.

Show file content with line numbers, staged/working-tree diffs via git, or commit/branch diffs. A safer and more structured alternative to raw `git diff` via shell.

Check for outdated dependencies in the project. Reports current, wanted (semver range), and latest versions available.

Manage session-persistent structured work items with dependencies, types, and priorities.

Safe wrapper around common git operations. Supports status, log, diff, commit, branch, checkout, stash, push, pull, fetch, reset, worktree, etc.

Change the current working directory for subsequent file operations and shell tools

Install, update or manage packages using the detected package manager (pnpm/npm/yarn).

Get detailed help for a specific tool, including its full input schema and usage guidance.

Directly execute any registered tool by its exact name, bypassing normal discovery.

Find files by path pattern. Results are sorted by modification time, newest first,

DEPRECATED — read-only preview stub that lists undocumented symbols as `skipped` candidates.

Run the project linter (primarily Biome in this repo). Detects style violations, potential bugs, and formatting issues.

Generate new files and folder structures from built-in templates or custom definitions.

Search the catalog of available tools by name or description. Use this to discover which tool to use for a task.

Scan source code for contract-based security vulnerabilities and performance bottlenecks

Open an isolated first-party Playwright browser session, optionally navigating to a URL.

Navigate an owned browser session to an approved http(s) URL.

Return bounded accessibility state plus redacted console and network summaries.

Capture a page or element PNG and return sensitive artifact metadata with integrity hash.

Fill an input in an owned browser session. Use secretEnv instead of text for credentials so values stay out of tool arguments and session audit.

Select an option in an owned browser session.

Press a keyboard key in an owned browser session.

Drag one element to another in an owned browser session.

Close an owned browser session, reclaim its context, and return sensitive trace metadata.

Smart targeted test runner. Automatically identifies and executes only the test suites that cover

Search code symbols using a fast SQLite+BM25 index, with optional LSP fallback.

Perform a blast radius and impact analysis before modifying or refactoring a function, class, or type.

Build or incrementally update the project-wide symbol index. This powers fast codebase search and understanding.

Surgically replace the implementation body or full definition of a function, method, class, or type alias using AST parsing.

Generate a reference-weighted, token-budgeted Repository Map (Repo Map) of the codebase.

Mathematically verify AST backward-compatibility invariants between original code and candidate mutations across TypeScript, Python, Go, Rust, Java, etc.

Scan TypeScript/JavaScript source files for exported symbols that appear

Find all callers of a function, method, or symbol — who invokes or references it.

Find all functions/methods/symbols that a given symbol calls or depends on — its callees.

Extract an AST-based skeleton of a file or directory with implementation bodies stripped.

Detect language workspaces and preview predefined language-specific command plans without executing them.

Execute predefined language-specific checks, linters, formatters, tests, builds, and debugging evidence.

Restore, mutate, audit, or report outdated packages via predefined ecosystem-specific plans.

Records deterministic E2E evidence.