What is io.github.aapd-studio/omnideck?

Local privacy-first tools: redact secrets, decode JWTs, compare LLM costs. No network calls.

How do I install io.github.aapd-studio/omnideck?

Clone io.github.aapd-studio/omnideck from https://github.com/aapd-studio/omnideck-mcp and configure it as an MCP server in your client (Claude Desktop, Cursor, or VS Code).

Is io.github.aapd-studio/omnideck open source?

Yes, io.github.aapd-studio/omnideck is open source under the MIT license. Source code is available at https://github.com/aapd-studio/omnideck-mcp.

What category does io.github.aapd-studio/omnideck belong to?

io.github.aapd-studio/omnideck is listed under Security & Auth MCP servers on MCPFind.

io.github.aapd-studio/omnideck — MCP Server for Security & Auth

OmniDeck MCP

Local, privacy-first tools for AI agents. No network calls, ever.

Some tasks are awkward to hand to an AI agent because doing them normally means pasting a secret into a website: decoding a JWT, hashing a password, scrubbing a log file before it goes to an API. This server does those locally instead.

Every tool is pure computation inside your own process. The server opens no sockets and makes no outbound requests — nothing you pass to it leaves your machine.

Install

npm install -g omnideck-mcp

Or run it without installing:

npx omnideck-mcp

Configure

Claude Desktop — add to claude_desktop_config.json:

{
  "mcpServers": {
    "omnideck": {
      "command": "npx",
      "args": ["-y", "omnideck-mcp"]
    }
  }
}

Claude Code:

claude mcp add omnideck -- npx -y omnideck-mcp

Any MCP client that speaks stdio works the same way.

Tools

`redact_sensitive_data`

Masks emails, API keys, credit cards, IBANs, IP addresses and phone numbers. Run it over logs, config files or user-pasted text before that content reaches an external API or a shared transcript.

Patterns are applied most-specific-first, so a key like sk-ant-… is matched whole rather than being chopped up by the generic phone-number pattern.

Contact me at john@example.com, key sk-ant-abcdefghij1234567890
→ Contact me at [EMAIL REDACTED], key [API KEY REDACTED]

Optional categories argument restricts which classes are masked.

`decode_jwt`

Decodes a token's header and payload and reports whether it has expired. The signature is not verified — no secret is needed, and none should be pasted anywhere. A JWT is a live credential; this exists so you never have to paste one into an online decoder.

`estimate_llm_cost`

Compares what a single request would cost across eight GPT, Claude and Gemini models, cheapest first. Pass text (tokens are counted exactly via gpt-tokenizer) or pass input_tokens directly. Useful before committing to a model for a large batch job.

List prices are current as of 2026-08 and are refreshed periodically — check your provider's pricing page before relying on them for billing decisions.

`split_for_context`

Splits a long document into chunks that fit a token budget, cutting on paragraph boundaries and falling back to sentence boundaries, so no chunk ends mid-thought.

`check_output_fidelity`

Flags names, numbers and dates that appear in an AI-generated summary but not in the source it was based on — the usual shape of a fabricated detail.

This is a lexical heuristic, not a fact-checker. It catches invented specifics, not faulty reasoning, and a correctly-rephrased term can be flagged. Treat the output as a list of things to verify by hand.

`hash_text`

MD5, SHA-1, SHA-256 or SHA-512 digest of a string, computed locally. For when the input is a password or other private value that has no business going into an online hash generator.

Privacy

No network requests. No telemetry. No analytics. No logging of your inputs.
Three runtime dependencies: the MCP SDK, zod, and gpt-tokenizer.
MIT licensed — read index.js and verify all of the above; it is a single readable file.

Full documentation for this server, in English and Spanish: omnideck.cc/mcp

These tools also run as free browser-based utilities, alongside ~125 others, at omnideck.cc — same principle, everything client-side.

License

Set up in your AI client

AI clientOperating system

Merge this template into ~/Library/Application Support/Claude/claude_desktop_config.json. Keep existing servers. Add any arguments, credentials, and permissions required by the maintainer; this template has not been install-tested.

json

{
  "mcpServers": {
    "io-github-aapd-studio-omnideck": {
      "command": "npx",
      "args": [
        "-y",
        "omnideck-mcp"
      ]
    }
  }
}

Restart Claude Desktop completely for changes to take effect. Confirm the server appears connected in the client’s tool list, then try a read-only example from its documentation.

Claude Desktop setup reference

Compatible MCP Clients

io.github.aapd-studio/omnideck works with any MCP-compatible client. Copy the config snippet from the Configuration section above and add it to the file shown for your client, then restart the application.

Claude Desktop~/Library/Application Support/Claude/claude_desktop_config.jsonRestart Claude Desktop completely for changes to take effect.

Cursor~/.cursor/mcp.jsonRestart Cursor for changes to take effect.

VS Code.vscode/mcp.jsonReload VS Code window for changes to take effect.

Windsurf~/.codeium/windsurf/mcp_config.jsonRestart Windsurf for changes to take effect.

Claude Code.mcp.jsonSave at the project root, then start Claude Code in that project and review the MCP server approval prompt. Keep real credentials out of shared files.

io.github.aapd-studio/omnideck