Prototype · Preview: every server in the official registry, synced every 30 minutes. Reviews and accounts come in a later step.
PopNx MCPMCP servers for people who use AI · explained in plain words

HSM Kit

by hsm-kitversion 0.1.0i★ –iRuns on your computer
Registry nameio.github.hsm-kit/hsmkit

Install

Overview

Description from the maker (original English)

Local-first Base64, Luhn, key-component XOR, and synthetic ISO-0 PIN block tools.

PopNx MCP’s three pillars

These three are never merged into one score: opinions, measurements and popularity are different things.

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

  • Connection: Runs on your computer
  • Transport: stdio
  • Category: Other

Install

Pick the AI app you use, then copy the settings.

Before you install

  • Basic checks: 1 of 1 passed
  • Runs on your computer with your user’s permissions (files, network, apps).
  • The registry lists no key to fill in.

You need

  • npmNode.js installed (for the npx command)

Which app do you use?

Pick your app above. We remember it, so next time the button says “Install in …”.

Open Claude Desktop → Settings → Developer → Edit Config, and paste this into claude_desktop_config.json

{
  "mcpServers": {
    "hsmkit": {
      "command": "npx",
      "args": [
        "-y",
        "@hsmkit/mcp-server"
      ]
    }
  }
}

Run this in your terminal

claude mcp add hsmkit -- npx -y @hsmkit/mcp-server

Open in Cursor

Or copy the settings yourself

Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "hsmkit": {
      "command": "npx",
      "args": [
        "-y",
        "@hsmkit/mcp-server"
      ]
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

Open in VS Code

Or copy the settings yourself

Paste into .vscode/mcp.json in your project

{
  "servers": {
    "hsmkit": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@hsmkit/mcp-server"
      ]
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

This one runs on your computer, and ChatGPT can only connect to servers on the internet. Pick another app.

Your choice stays on this device in a cookie; no account needed.

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

What it can do

Runs on your computer; the tool list appears in your AI app after you install it.

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 7, 2026

  • ✓ Pass

    Maker matches the repo

    The registry name was verified with the GitHub account hsm-kit, which owns the repo

  • … Not checked yet

    Still maintained

    We have not read this repo from GitHub yet

  • … Not checked yet

    Has a licence

    We have not read this repo from GitHub yet

  • – Not applicable

    Endpoint responds

    This one runs on your computer; there is no internet endpoint

  • – Not applicable

    Sign-in with OAuth

    Runs on your computer and uses local settings instead

  • … Not checked yet

    No hidden instructions in tool descriptions

    Runs on your computer; we can only read tool lists from internet endpoints

Compared with others in Otheri

  • More stars than 0% of the other 18333 servers in this category
  • Published to the registry more recently than 51% of the other 18333 servers in this category
  • Basic checks equal to or better than 100% of the other 18333 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Common questions

Is HSM Kit safe?

It passed 1 of 1 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.

What keys or codes does it need?

The registry does not list a required key, though some servers ask you to sign in on first use.

Does it run on my computer or in the cloud?

It runs on your computer. Your AI app starts it when needed, and data does not pass through the maker’s servers (unless it calls an online service itself).

Is it still maintained?

The GitHub repo last changed –, and the latest version (0.1.0) reached the registry last month.

Which apps can use it?

Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. You also need Node.js on your computer.

What can I use instead?

In the same category: Spec Driven Development, Remote Desktop Commander, Signoff

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

Spec Driven Development

by formulahendry

MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.

Runs on your computer★ 440MITUpdated 14 months ago
Install

Remote Desktop Commander

by desktop-commander

Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.

Runs in the cloud★ 211Updated 2 days ago
Install

Signoff

by ayuanxx-max

Five gates that make an agent's 'done' provable: run them, read the verdict, audit the record.

Runs on your computerUpdated today
Install

README from the maker

Open the README

Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.

HSM Kit - Professional Online Encryption Toolkit

🔐 Professional encryption & key management tools, 100% client-side, secure & reliable

English | 简体中文 | 日本語 | 한국어 | Deutsch | Français


📖 Introduction

HSM Kit is a professional online encryption toolkit designed for developers, testers, and security engineers in finance, payment, and security domains. It provides 44+ tools covering HSM key management, payment security, PKI certificates, and cryptographic algorithms, all running entirely in the browser.

Core Values
  • Security First - 100% client-side computation, keys and sensitive data never leave your device
  • Professional & Complete - 44+ tools covering HSM key management, payment security, PKI certificates, and cryptographic algorithms
  • Ready to Use - Open browser and start working, supports PWA installation, works on Mac/Windows/Linux/mobile
  • Open Source - Code is publicly auditable, meets financial industry compliance requirements

✨ Features

FeatureDescription
🔒 Local ComputationAll crypto operations run in browser, data never uploaded
📱 PWA SupportInstallable to desktop, works like native app, offline available
🌐 Cross PlatformMac/Windows/Linux/iOS/Android supported
🌍 Multi-languageEnglish, Chinese, Japanese, Korean, German, French - 100% coverage
🌙 Dark ModeDay/night theme switching to protect your eyes
♿ AccessibleARIA labels, keyboard navigation, skip-to-content, aria-live regions, WCAG 2.1 AA compliant
⚡ Lazy LoadingRoute-level code splitting, only loads current page
🔍 SEO OptimizedPre-rendered static HTML, Schema markup, multi-language hreflang
📚 Knowledge Base43 English + 43 Chinese technical articles with static, indexable delivery
🇨🇳 Localized Tool URLs8 high-demand tools have canonical Chinese URLs with reciprocal hreflang
🧪 Published Test VectorsDownloadable AES JSON vectors verified by CryptoJS and Web Crypto regression tests
📝 Context-safe ExamplesOne-click examples preserve the selected mode, format, tab, and enabling toggles
✅ Consistent Input ValidationShared gray/green/red length and format states across all tool inputs
⭐ Favorites & Recent ToolsLocal favorites plus 90-day recent-tool history, with no account required
🔗 Workflow DiscoveryEach tool links to the next relevant tools and its supporting guides
📊 Privacy-safe EventsOptional GA/Zaraz events contain action/tool IDs only, never form values or results
🧪 Test Coverage100+ Vitest tests plus production page smoke checks for all 44 tools

🛠️ Tool Modules

🔐 Encryption/Decryption Tools (5)
ToolDescriptionRoute
AES EncryptionAES-128/192/256, ECB/CBC/CFB/OFB/CTR modes/aes-encryption
DES/3DES EncryptionDES/Triple DES, multiple padding options/des-encryption
RSA EncryptionRSA encrypt/decrypt/sign/verify, PKCS#1/OAEP/rsa-encryption
ECC/ECDSAElliptic curve, secp256k1/P-256/P-384/ecc-encryption
FPE Format-PreservingFF1/FF3-1 algorithms, NIST SP 800-38G/fpe-encryption
🔑 Key Management Tools (8)
ToolDescriptionRoute
Key GeneratorAES/DES/3DES secure random keys, key combining, parity/keys-dea
Keyshare GeneratorKey splitting for secure custody, KCV calculation/keyshare-generator
Futurex KeysFuturex HSM key encrypt/decrypt/lookup/futurex-keys
Atalla Keys (AKB)Atalla AKB format key encrypt/decrypt/atalla-keys
SafeNet KeysSafeNet HSM key encrypt/decrypt/lookup/safenet-keys
Thales KeysThales HSM LMK key encrypt/decrypt/lookup/thales-keys
Thales Key BlockThales proprietary key block encode/decode/thales-key-block
TR-31 Key BlockANSI X9.143 key block encode/decode/tr31-key-block
🔐 PKI Tools (2)
ToolDescriptionRoute
ASN.1 DecoderDER/BER structure decoding, X.509 certificate parsing/asn1-parser
SSL Certificates (X509)SSL/TLS certificate parsing & validation/ssl-certificates
💳 Payment Security Tools (21)
CategoryToolRoute
AS2805AS2805 Message Tool/payments-as2805
BitmapISO 8583 Bitmap/payments-bitmap
Card ValidationCVV/CVC/payments-card-validation-cvvs
Card ValidationAMEX CSC/payments-card-validation-amex-cscs
Card ValidationMasterCard CVC3/payments-card-validation-mastercard-cvc3
DUKPTDUKPT TDES (ISO 9797)/payments-dukpt-iso9797
DUKPTDUKPT AES/payments-dukpt-aes
MACISO 9797-1 MAC/payments-mac-iso9797-1
MACANSI X9.9/X9.19/payments-mac-ansix9
MACAS2805 MAC/payments-mac-as2805
MACTDES CBC-MAC/payments-mac-tdes-cbc-mac
MACHMAC/payments-mac-hmac
MACCMAC/payments-mac-cmac
MACRetail MAC/payments-mac-retail
PINPIN Block General/payments-pin-blocks-general
PINPIN Block AES/payments-pin-blocks-aes
PINPIN Offset/payments-pin-offset
PINPIN PVV/payments-pin-pvv
OtherVISA Certificates/payments-visa-certificates
OtherZKA (German Banking)/payments-zka
🧰 General Tools (9)
ToolDescriptionRoute
Hash CalculatorMD5/SHA/SHA-3/BLAKE2/SM3 20+ algorithms/hashes
Character EncodingASCII/Hex/Binary/EBCDIC/ATM conversion/character-encoding
BCD EncodingDecimal to BCD encoding conversion/bcd
Check DigitsLuhn (MOD 10) / Amex SE (MOD 9)/check-digits
Base64 Encode/DecodeStandard Base64 encoding/decoding/base64
Base94 Encode/DecodeBase94 encoding/decoding/base94
Message ParserISO 8583, ATM NDC/Wincor parsing/message-parser
RSA DER Public KeyRSA public key DER/PEM encode/decode/rsa-der-public-key
UUID GeneratorUUID v1/v3/v4/v5 generation/uuid

📚 Knowledge Base

HSM Kit includes a built-in knowledge base (/guides/) with 42 in-depth technical articles in each of English and Chinese, covering encryption algorithms, payment security, HSM key management, and more. Articles are cross-linked and directly connected to corresponding tools.

Knowledge Base Features
  • 📝 Markdown Rendering - Code blocks, tables, internal links
  • 🔗 Tool Integration - Direct links to related tools and articles
  • 🌍 Bilingual - English and Chinese, 43 articles each, fully translated
  • 📖 Table of Contents - Right-side TOC navigation with scroll highlighting
  • 🔍 Search - Full-text search across articles

📁 Project Structure

hsmkit/

├── public/ # Static assets │ ├── favicon.svg # Website logo │ ├── favicon-*.png # PWA icons (48/192/512) │ ├── apple-touch-icon.png # iOS icon │ ├── sitemap.xml # Sitemap (144 URLs with hreflang) │ ├── robots.txt # Crawler instructions │ ├── _headers # HTTP headers (Cloudflare) │ └── _redirects # SPA route redirects │ ├── scripts/ # Build scripts │ ├── generate-favicon-png.js # Favicon generation │ ├── generate-guide-og.js # Per-guide social image generation │ ├── prerender-guides.js # Static guide-page generation │ ├── check-tool-pages.js # Production page smoke checks │ └── update-sitemap-lastmod.js # Guide/tool sitemap maintenance │ ├── src/ │ ├── components/ # Reusable components │ │ ├── cipher/ # Encryption tool components │ │ ├── common/ # Common components │ │ │ ├── PageLayout.tsx # Page layout + Schema.org │ │ │ ├── ToolPage.tsx # Tool page factory │ │ │ ├── SEO.tsx # SEO meta tags + prerender │ │ │ ├── ResultCard.tsx # Result display (aria-live) │ │ │ ├── ErrorCard.tsx # Error display (role="alert") │ │ │ ├── LengthIndicator.tsx # Shared input length/format states │ │ │ ├── ExampleButton.tsx # Context-preserving example loading │ │ │ ├── ErrorBoundary.tsx # Error boundary │ │ │ ├── ReloadPrompt.tsx # PWA update prompt (dark mode) │ │ │ └── ... │ │ ├── generic/ # General tool components │ │ ├── keys/ # Key management components │ │ ├── payment/ # Payment tool components │ │ └── pki/ # PKI tool components │ │ │ ├── hooks/ # Custom hooks │ │ ├── useLanguage.tsx # Multi-language switching │ │ ├── useTheme.tsx # Theme switching │ │ ├── useToolForm.ts # Tool form hook │ │ ├── useRecentTools.ts # Recent tools and local favorites │ │ └── ... │ │ │ ├── data/ # Tool metadata and examples │ │ ├── examples.ts # Non-production example values │ │ ├── toolRelations.ts # Related-tool workflow graph │ │ └── toolGuidesMap.ts # Tool-to-guide links │ │ │ ├── locales/ # Translations (6 languages) │ │ ├── en/ # English │ │ ├── zh/ # Chinese │ │ ├── ja/ # Japanese │ │ ├── ko/ # Korean │ │ ├── de/ # German │ │ └── fr/ # French │ │ │ ├── utils/ # Utility functions │ │ ├── analytics.ts # Privacy-safe tool action events │ │ ├── crypto.ts # Core crypto utilities │ │ ├── crypto.test.ts # Crypto unit tests │ │ ├── hex.ts # Hex utilities │ │ ├── hex.test.ts # Hex unit tests │ │ ├── logger.ts # Production-safe logger │ │ └── ... │ │ │ ├── App.tsx # Root component + routes │ ├── routeConfig.ts # Route configuration │ ├── routes.tsx # Lazy-loaded page components │ └── main.tsx # Entry point │ ├── vitest.config.ts # Test configuration ├── vite.config.ts # Build configuration ├── tsconfig.json # TypeScript config (strict mode) └── package.json # Dependencies


🚀 Quick Start

Online

Visit https://hsmkit.com to use all tools directly.

PWA Install

After visiting the website, your browser will prompt "Install HSM Kit". Click to install to desktop.

Local Development
# Clone repository

git clone https://github.com/hsm-kit/hsmkit.git cd hsmkit

Install dependencies

npm install

Start development server

npm run dev

Visit http://localhost:5173

Build for Production
# Build (includes sitemap update + Puppeteer prerender + PWA Service Worker)

npm run build

Preview production build

npm run preview

When a release changes tool-page functionality, refresh only the 44 tool-page dates without rewriting homepage, legal, or guide dates:

`bas

Only the beginning is shown; read the rest in the repo

Ask PopNx