Runtime MCP Server

by formatho Your server? Claim it

answering

Runtime is answering right now. Last checked 5 min ago. It exposes 26 tools.

Self-hosted MCP server: 26 deterministic dev, security, and EVM tools.

Uptime history 51 days of history · worst day 92%

51 days agonow

100.0%

Uptime 24h

91 of 91 checks

Tools

read from the server

136 ms

Response time

average over 24h

authentication required

Access

streamable-http

What changed 2

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 6 September 2026. No other catalogue keeps this.

6 Sep a tool description was rewritten formatho.registry

6 Sep a tool changed version

Nothing serious here today

Today is the operative word: we check Runtime every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 5 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add runtime --transport http https://mcp.formatho.com/mcp

Settings → Connectors → Add custom connector, then paste this address

https://mcp.formatho.com/mcp

~/.codex/config.toml

[mcp_servers.runtime]
url = "https://mcp.formatho.com/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "runtime": {
      "url": "https://mcp.formatho.com/mcp"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "runtime": {
      "type": "http",
      "url": "https://mcp.formatho.com/mcp"
    }
  }
}

This endpoint answered with an authorization challenge. The server is running, but it did not say what kind of credentials it expects.

Available tools 26

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

evm

evm.checksum_address

EIP-55 checksum an Ethereum address, or verify a checksummed one. [web3 · v1.0.0 · deterministic: true · permissions: none]

evm.create2_address

Compute the deterministic CREATE2 address: keccak256(0xff ‖ factory ‖ salt ‖ initCodeHash)[12:]. [web3 · v1.0.0 · deterministic: true · permissions: none]

evm.decode_calldata

Extract the 4-byte selector from raw calldata, match it against common signatures, and decode static (word-based) arguments: address, uint256, int256, bytes32, bool. [web3 · v1.0.0 · deterministic: true · permissions: none]

evm.function_selector

Compute the 4-byte function selector from a canonical signature, with reverse lookup against common signatures. [web3 · v1.0.0 · deterministic: true · permissions: none]

evm.keccak256

Keccak-256 (Ethereum flavor, NOT NIST SHA3-256) of arbitrary hex or text. [web3 · v1.0.0 · deterministic: true · permissions: none]

evm.storage_slot

Compute Solidity storage slots: simple variables, mapping values (keccak(key ‖ p)), and dynamic array elements (keccak(p) + index). [web3 · v1.0.0 · deterministic: true · permissions: none]

evm.unit_convert

Convert EVM amounts between wei, gwei, and ether with exact BigInt math. [web3 · v1.0.0 · deterministic: true · permissions: none]

evm.v4_hook_permissions

Uniswap v4 hook permissions: compute the 14-bit permission field from hook-call names, or decode the field from a hook address (bits live in the LOW 14 bits: address & 0x3FFF). [web3 · v1.0.0 · deterministic: true · permissions: none]

json

json.format

Validate and pretty-print JSON with a configurable indent level. [data · v1.0.0 · deterministic: true · permissions: none]

json.minify

Validate JSON and strip all insignificant whitespace. [data · v1.0.0 · deterministic: true · permissions: none]

json.validate

Validate JSON and report the parse error position if invalid. [data · v1.0.0 · deterministic: true · permissions: none]

base64

base64.decode

Base64-decode to text. [data · v1.0.0 · deterministic: true · permissions: none]

base64.encode

Base64-encode text (standard alphabet). [data · v1.0.0 · deterministic: true · permissions: none]

url

url.decode

Decode percent-encoded text. [network · v1.0.0 · deterministic: true · permissions: none]

url.encode

Percent-encode text (component encoding). [network · v1.0.0 · deterministic: true · permissions: none]

case

case.convert

Convert an identifier between camelCase, snake_case, kebab-case, CONSTANT_CASE, and Title Case. [dev · v1.0.0 · deterministic: true · permissions: none]

erc4626

erc4626.math

Exact EIP-4626 vault math in BigInt: convert assets to shares (round down) and shares to assets (round down), with optional virtual offsets. [defi · v1.0.0 · deterministic: true · permissions: none]

formatho

formatho.registry

List every registered Formatho tool with version, category, deterministic flag, permissions, and Formatho Verified status. [meta · v1.0.0 · deterministic: true · permissions: none]

hash

hash.text

Hash text with md5/sha1/sha256/sha384/sha512 (hex output). MD5/SHA1 are for compatibility checks only, not security. [security · v1.0.0 · deterministic: true · permissions: none]

hex

hex.encode

Encode text to hex, or decode hex (with or without 0x) to text. [data · v1.0.0 · deterministic: true · permissions: none]

jwt

jwt.decode

Decode a JWT (JWS compact serialization) header and claims WITHOUT verifying the signature. Reports expiry status from the exp claim. [security · v1.0.0 · deterministic: true · permissions: none]

random

random.string

Generate a cryptographically random alphanumeric string. [security · v1.0.0 · deterministic: false · permissions: none]

regex

regex.test

Test a regular expression against text: match result plus all capture groups. [dev · v1.0.0 · deterministic: true · permissions: none]

slug

slug.generate

Convert text to a URL-safe kebab-case slug. [dev · v1.0.0 · deterministic: true · permissions: none]

timestamp

timestamp.convert

Convert Unix seconds/milliseconds to ISO 8601 (UTC) and back. [dev · v1.0.0 · deterministic: true · permissions: none]

uuid

uuid.v4

Generate random UUID v4 values. [security · v1.0.0 · deterministic: false · permissions: none]

Endpoints

URL	Transport	State	Latency	Checked
https://mcp.formatho.com/mcp	streamable-http	needs auth	110 ms	5 min ago

Alternatives to Runtime

same job, measured the same way

New Relic MCP Server

by meet-bhalodiya

Secure, self-hosted New Relic observability and administration tools for MCP clients

37 installs/wk local only

DechoNet

by node-man

Moved to com.dechonet/mcp. 25 security tools, hosted at https://dechonet.com/mcp

local only

n8n MCP Community

by drzamarian

A security-focused MCP server for self-hosted n8n Community Edition.

58 installs/wk local only

MCP Firefly Iii

by yakupemreyerli

Security-first, self-hosted MCP server for Firefly III — 152 operations behind 5 scoped tools.

20 installs/wk local only

Guardvibe

by goklab

Deterministic security layer your AI can't be. 618 rules, 39 tools, CLI + doctor + host audit.

1 441 installs/wk local only

MCP ZAP Server

by dtkmn

Safe, self-hosted ZAP operator for guided AI security scans and reports.

local only

SkillTotal

by skilltotal

Deterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally.

5 062 installs/wk local only

Mcpshield

by mcpshield-dev

Security scanner for MCP servers - detects tool poisoning and injection

22 installs/wk local only

Runtime — questions

Answers built from our own checks of this server.

What can Runtime do?

It exposes 26 tools, read directly from the server on our last check. Among them: base64.decode, base64.encode, case.convert, erc4626.math, evm.checksum_address, evm.create2_address and 20 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

What is Runtime mostly used for?

Its tools cluster around evm, json and base64. That is what this server is built to work with — the grouping comes from the actual tool names, not from a category we assigned.

Is Runtime working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 136 ms. The bar chart above shows every period we have measured.

How do I connect Runtime?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address. You will need your own credentials: it refuses anonymous clients.

Does Runtime need an API key?

Yes. Every time we knock, Runtime answers with an authorization challenge instead of its tool list — that is how we know it is running and gated rather than broken. Bring your own credentials and it will talk.

How fast is Runtime?

It answers our handshake in 136 ms on average, which is faster than 92% of all working MCP servers we measure. That puts it in the quick quarter of the ecosystem. The comparison comes from our own checks across the whole registry, every 15 minutes.