Spec Driven Development
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Description from the maker (original English)
Local-first Base64, Luhn, key-component XOR, and synthetic ISO-0 PIN block tools.
These three are never merged into one score: opinions, measurements and popularity are different things.
We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.
Pick the AI app you use, then copy the settings.
You need
Which app do you use?
Pick your app above. We remember it, so next time the button says “Install in …”.
Open Claude Desktop → Settings → Developer → Edit Config, and paste this into claude_desktop_config.json
{
"mcpServers": {
"hsmkit": {
"command": "npx",
"args": [
"-y",
"@hsmkit/mcp-server"
]
}
}
}Run this in your terminal
claude mcp add hsmkit -- npx -y @hsmkit/mcp-serverPaste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json
{
"mcpServers": {
"hsmkit": {
"command": "npx",
"args": [
"-y",
"@hsmkit/mcp-server"
]
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
Paste into .vscode/mcp.json in your project
{
"servers": {
"hsmkit": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@hsmkit/mcp-server"
]
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
This one runs on your computer, and ChatGPT can only connect to servers on the internet. Pick another app.
Your choice stays on this device in a cookie; no account needed.
These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.
Runs on your computer; the tool list appears in your AI app after you install it.
We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 7, 2026
The registry name was verified with the GitHub account hsm-kit, which owns the repo
We have not read this repo from GitHub yet
We have not read this repo from GitHub yet
This one runs on your computer; there is no internet endpoint
Runs on your computer and uses local settings instead
Runs on your computer; we can only read tool lists from internet endpoints
Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.
It passed 1 of 1 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.
The registry does not list a required key, though some servers ask you to sign in on first use.
It runs on your computer. Your AI app starts it when needed, and data does not pass through the maker’s servers (unless it calls an online service itself).
The GitHub repo last changed –, and the latest version (0.1.0) reached the registry last month.
Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. You also need Node.js on your computer.
In the same category: Spec Driven Development, Remote Desktop Commander, Signoff
Servers in the same category from other makers, sorted by stars.
Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.
Five gates that make an agent's 'done' provable: run them, read the verdict, audit the record.
Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.
🔐 Professional encryption & key management tools, 100% client-side, secure & reliable
English | 简体中文 | 日本語 | 한국어 | Deutsch | Français
HSM Kit is a professional online encryption toolkit designed for developers, testers, and security engineers in finance, payment, and security domains. It provides 44+ tools covering HSM key management, payment security, PKI certificates, and cryptographic algorithms, all running entirely in the browser.
| Feature | Description |
|---|---|
| 🔒 Local Computation | All crypto operations run in browser, data never uploaded |
| 📱 PWA Support | Installable to desktop, works like native app, offline available |
| 🌐 Cross Platform | Mac/Windows/Linux/iOS/Android supported |
| 🌍 Multi-language | English, Chinese, Japanese, Korean, German, French - 100% coverage |
| 🌙 Dark Mode | Day/night theme switching to protect your eyes |
| ♿ Accessible | ARIA labels, keyboard navigation, skip-to-content, aria-live regions, WCAG 2.1 AA compliant |
| ⚡ Lazy Loading | Route-level code splitting, only loads current page |
| 🔍 SEO Optimized | Pre-rendered static HTML, Schema markup, multi-language hreflang |
| 📚 Knowledge Base | 43 English + 43 Chinese technical articles with static, indexable delivery |
| 🇨🇳 Localized Tool URLs | 8 high-demand tools have canonical Chinese URLs with reciprocal hreflang |
| 🧪 Published Test Vectors | Downloadable AES JSON vectors verified by CryptoJS and Web Crypto regression tests |
| 📝 Context-safe Examples | One-click examples preserve the selected mode, format, tab, and enabling toggles |
| ✅ Consistent Input Validation | Shared gray/green/red length and format states across all tool inputs |
| ⭐ Favorites & Recent Tools | Local favorites plus 90-day recent-tool history, with no account required |
| 🔗 Workflow Discovery | Each tool links to the next relevant tools and its supporting guides |
| 📊 Privacy-safe Events | Optional GA/Zaraz events contain action/tool IDs only, never form values or results |
| 🧪 Test Coverage | 100+ Vitest tests plus production page smoke checks for all 44 tools |
| Tool | Description | Route |
|---|---|---|
| AES Encryption | AES-128/192/256, ECB/CBC/CFB/OFB/CTR modes | /aes-encryption |
| DES/3DES Encryption | DES/Triple DES, multiple padding options | /des-encryption |
| RSA Encryption | RSA encrypt/decrypt/sign/verify, PKCS#1/OAEP | /rsa-encryption |
| ECC/ECDSA | Elliptic curve, secp256k1/P-256/P-384 | /ecc-encryption |
| FPE Format-Preserving | FF1/FF3-1 algorithms, NIST SP 800-38G | /fpe-encryption |
| Tool | Description | Route |
|---|---|---|
| Key Generator | AES/DES/3DES secure random keys, key combining, parity | /keys-dea |
| Keyshare Generator | Key splitting for secure custody, KCV calculation | /keyshare-generator |
| Futurex Keys | Futurex HSM key encrypt/decrypt/lookup | /futurex-keys |
| Atalla Keys (AKB) | Atalla AKB format key encrypt/decrypt | /atalla-keys |
| SafeNet Keys | SafeNet HSM key encrypt/decrypt/lookup | /safenet-keys |
| Thales Keys | Thales HSM LMK key encrypt/decrypt/lookup | /thales-keys |
| Thales Key Block | Thales proprietary key block encode/decode | /thales-key-block |
| TR-31 Key Block | ANSI X9.143 key block encode/decode | /tr31-key-block |
| Tool | Description | Route |
|---|---|---|
| ASN.1 Decoder | DER/BER structure decoding, X.509 certificate parsing | /asn1-parser |
| SSL Certificates (X509) | SSL/TLS certificate parsing & validation | /ssl-certificates |
| Category | Tool | Route |
|---|---|---|
| AS2805 | AS2805 Message Tool | /payments-as2805 |
| Bitmap | ISO 8583 Bitmap | /payments-bitmap |
| Card Validation | CVV/CVC | /payments-card-validation-cvvs |
| Card Validation | AMEX CSC | /payments-card-validation-amex-cscs |
| Card Validation | MasterCard CVC3 | /payments-card-validation-mastercard-cvc3 |
| DUKPT | DUKPT TDES (ISO 9797) | /payments-dukpt-iso9797 |
| DUKPT | DUKPT AES | /payments-dukpt-aes |
| MAC | ISO 9797-1 MAC | /payments-mac-iso9797-1 |
| MAC | ANSI X9.9/X9.19 | /payments-mac-ansix9 |
| MAC | AS2805 MAC | /payments-mac-as2805 |
| MAC | TDES CBC-MAC | /payments-mac-tdes-cbc-mac |
| MAC | HMAC | /payments-mac-hmac |
| MAC | CMAC | /payments-mac-cmac |
| MAC | Retail MAC | /payments-mac-retail |
| PIN | PIN Block General | /payments-pin-blocks-general |
| PIN | PIN Block AES | /payments-pin-blocks-aes |
| PIN | PIN Offset | /payments-pin-offset |
| PIN | PIN PVV | /payments-pin-pvv |
| Other | VISA Certificates | /payments-visa-certificates |
| Other | ZKA (German Banking) | /payments-zka |
| Tool | Description | Route |
|---|---|---|
| Hash Calculator | MD5/SHA/SHA-3/BLAKE2/SM3 20+ algorithms | /hashes |
| Character Encoding | ASCII/Hex/Binary/EBCDIC/ATM conversion | /character-encoding |
| BCD Encoding | Decimal to BCD encoding conversion | /bcd |
| Check Digits | Luhn (MOD 10) / Amex SE (MOD 9) | /check-digits |
| Base64 Encode/Decode | Standard Base64 encoding/decoding | /base64 |
| Base94 Encode/Decode | Base94 encoding/decoding | /base94 |
| Message Parser | ISO 8583, ATM NDC/Wincor parsing | /message-parser |
| RSA DER Public Key | RSA public key DER/PEM encode/decode | /rsa-der-public-key |
| UUID Generator | UUID v1/v3/v4/v5 generation | /uuid |
HSM Kit includes a built-in knowledge base (/guides/) with 42 in-depth technical articles in each of English and Chinese, covering encryption algorithms, payment security, HSM key management, and more. Articles are cross-linked and directly connected to corresponding tools.
hsmkit/
├── public/ # Static assets │ ├── favicon.svg # Website logo │ ├── favicon-*.png # PWA icons (48/192/512) │ ├── apple-touch-icon.png # iOS icon │ ├── sitemap.xml # Sitemap (144 URLs with hreflang) │ ├── robots.txt # Crawler instructions │ ├── _headers # HTTP headers (Cloudflare) │ └── _redirects # SPA route redirects │ ├── scripts/ # Build scripts │ ├── generate-favicon-png.js # Favicon generation │ ├── generate-guide-og.js # Per-guide social image generation │ ├── prerender-guides.js # Static guide-page generation │ ├── check-tool-pages.js # Production page smoke checks │ └── update-sitemap-lastmod.js # Guide/tool sitemap maintenance │ ├── src/ │ ├── components/ # Reusable components │ │ ├── cipher/ # Encryption tool components │ │ ├── common/ # Common components │ │ │ ├── PageLayout.tsx # Page layout + Schema.org │ │ │ ├── ToolPage.tsx # Tool page factory │ │ │ ├── SEO.tsx # SEO meta tags + prerender │ │ │ ├── ResultCard.tsx # Result display (aria-live) │ │ │ ├── ErrorCard.tsx # Error display (role="alert") │ │ │ ├── LengthIndicator.tsx # Shared input length/format states │ │ │ ├── ExampleButton.tsx # Context-preserving example loading │ │ │ ├── ErrorBoundary.tsx # Error boundary │ │ │ ├── ReloadPrompt.tsx # PWA update prompt (dark mode) │ │ │ └── ... │ │ ├── generic/ # General tool components │ │ ├── keys/ # Key management components │ │ ├── payment/ # Payment tool components │ │ └── pki/ # PKI tool components │ │ │ ├── hooks/ # Custom hooks │ │ ├── useLanguage.tsx # Multi-language switching │ │ ├── useTheme.tsx # Theme switching │ │ ├── useToolForm.ts # Tool form hook │ │ ├── useRecentTools.ts # Recent tools and local favorites │ │ └── ... │ │ │ ├── data/ # Tool metadata and examples │ │ ├── examples.ts # Non-production example values │ │ ├── toolRelations.ts # Related-tool workflow graph │ │ └── toolGuidesMap.ts # Tool-to-guide links │ │ │ ├── locales/ # Translations (6 languages) │ │ ├── en/ # English │ │ ├── zh/ # Chinese │ │ ├── ja/ # Japanese │ │ ├── ko/ # Korean │ │ ├── de/ # German │ │ └── fr/ # French │ │ │ ├── utils/ # Utility functions │ │ ├── analytics.ts # Privacy-safe tool action events │ │ ├── crypto.ts # Core crypto utilities │ │ ├── crypto.test.ts # Crypto unit tests │ │ ├── hex.ts # Hex utilities │ │ ├── hex.test.ts # Hex unit tests │ │ ├── logger.ts # Production-safe logger │ │ └── ... │ │ │ ├── App.tsx # Root component + routes │ ├── routeConfig.ts # Route configuration │ ├── routes.tsx # Lazy-loaded page components │ └── main.tsx # Entry point │ ├── vitest.config.ts # Test configuration ├── vite.config.ts # Build configuration ├── tsconfig.json # TypeScript config (strict mode) └── package.json # Dependencies
Visit https://hsmkit.com to use all tools directly.
After visiting the website, your browser will prompt "Install HSM Kit". Click to install to desktop.
# Clone repository
git clone https://github.com/hsm-kit/hsmkit.git cd hsmkit
npm install
npm run dev
# Build (includes sitemap update + Puppeteer prerender + PWA Service Worker)
npm run build
npm run preview
When a release changes tool-page functionality, refresh only the 44 tool-page dates without rewriting homepage, legal, or guide dates:
`bas
Only the beginning is shown; read the rest in the repo