mcp-json-yaml-toml
Health Warn
- License — License: MIT
- Description — Repository has a description
- Active repo — Last push 0 days ago
- Low visibility — Only 9 GitHub stars
Code Warn
- fs module — File system access in .github/workflows/test.yml
Permissions Pass
- Permissions — No dangerous permissions requested
This MCP server acts as a structured data reader and writer for AI agents, allowing them to safely query, validate, and modify local JSON, YAML, and TOML files. It prevents AI tools from guessing syntax or using destructive regex replacements, enforcing schema validation before writing changes.
Security Assessment
Overall Risk: Medium. The tool fundamentally operates by accessing the local file system to read and write configuration files. While no dangerous permissions are explicitly requested, the application makes network requests under the hood. It is designed to automatically download missing dependencies like 'yq' and fetch validation schemas from SchemaStore.org. There are no hardcoded secrets detected in the current codebase. File system access warnings in the repository are limited to the automated GitHub testing workflows.
Quality Assessment
The project is actively maintained, with its most recent code push happening today. It uses the highly permissive and standard MIT license, which is great for open-source adoption. However, it suffers from very low community visibility, currently sitting at only 9 GitHub stars. This means it has not been broadly battle-tested or extensively peer-reviewed by the security community, though its CI/CD pipeline appears professional and includes automated testing and publishing.
Verdict
Use with caution: The code is actively maintained and locally focused, but the low community adoption and automatic background network downloads mean it lacks widespread security auditing.
A structured data reader and writer like 'jq' and 'yq' for AI Agents
mcp-json-yaml-toml
A token-efficient, schema-aware MCP server for safely reading and modifying JSON, YAML, and TOML files
Getting Started • CLI Usage • Available Tools • Development
Stop AI coding tools from breaking your data files. No more grep guesswork, hallucinated fields, or non-schema-compliant data added to files. This MCP server gives AI assistants a strict, round-trip safe interface for working with structured data.
The Problem
AI coding tools often destroy structured data files:
- They grep through huge json, yaml, and toml files (like json logs, or AI transcript files) and guess at keys.
- They hallucinate fields that never existed.
- They use sed and regex that leave files in invalid states.
- They break YAML indentation and TOML syntax.
- They can't validate changes before writing.
The Solution
mcp-json-yaml-toml provides AI assistants with proper tools for structured data:
- Token-efficient: Extract exactly what you need without loading entire files.
- Schema validation: Enforce correctness using SchemaStore.org or custom schemas.
- Safe modifications: Enforced validation on write; preserve comments and formatting.
- Multi-format: JSON, YAML, and TOML through a unified interface.
- Directive-based detection: Support for
# yaml-language-server,#:schema, and$schemakeys in all formats. - Constraint-based guided generation: Native LMQL support for proactive validation of partial inputs.
- Local-First: All processing happens locally. No data ever leaves your machine.
- Transparent JIT Assets: The server auto-downloads
yqif missing and fetches missing schemas from SchemaStore.org for local caching.
[!NOTE]
JSONC Support: Files with
.jsoncextension (JSON with Comments) are fully supported for reading, querying, and schema validation. However, write operations will strip comments due to library limitations.
Getting Started
Prerequisites
- Python ≥ 3.11 installed.
- An MCP-compatible client (Claude Code, Cursor, Windsurf, Gemini 2.0, n8n, etc.).
Installation
The server uses uvx for automatic dependency management and zero-config execution.
AI Agents & CLI Tools
uvx mcp-json-yaml-toml
Claude Code (CLI)
claude mcp add --scope user mcp-json-yaml-toml -- uvx mcp-json-yaml-toml
Other MCP Clients
Add this to your client's MCP configuration:
{
"mcpServers": {
"json-yaml-toml": {
"command": "uvx",
"args": ["mcp-json-yaml-toml"]
}
}
}
[!TIP]
See docs/clients.md for detailed setup guides for Cursor, VS Code, and more.
Schema Discovery & Recognition
The server automatically identifies the correct JSON schema for your files using multiple strategies:
- Directives: Recognizes
# yaml-language-server: $schema=...and#:schema ...directives. - In-File Keys: Detects
$schemakeys in JSON and YAML (also supports quoted"$schema"in TOML). - Local IDE Config: Discovers schemas from VS Code/Cursor extension settings and caches.
- SchemaStore.org: Performs glob-based auto-detection against thousands of known formats.
- Manual Association: Use the
data_schematool to bind a file to a specific schema URL or name.
LMQL & Guided Generation
This server provides native support for LMQL (Language Model Query Language) to enable Guided Generation. This allows AI agents to validate partial inputs (e.g., path expressions) incrementally before execution.
- Incremental Validation: Check partial inputs (e.g.,
.data.us) and get the remaining pattern needed. - Improved Reliability: Eliminate syntax errors by guiding the LLM toward valid tool inputs.
- Rich Feedback: Get suggestions and detailed error messages for common mistakes.
[!TIP]
See the Deep Dive: LMQL Constraints for detailed usage examples.
Available Tools
| Tool | Description |
|---|---|
data |
Get, set, or delete values at specific paths |
data_query |
Advanced yq/jq expressions for transformations |
data_schema |
Manage schemas and validate files |
data_convert |
Convert between JSON, YAML, and TOML |
data_merge |
Deep merge structured data files |
constraint_validate |
Validate inputs against LMQL constraints |
constraint_list |
List available generation constraints |
[!NOTE]
Conversion TO TOML is not supported due to yq's internal encoder limitations for complex structures.
Development
Setup
git clone https://github.com/bitflight-devops/mcp-json-yaml-toml.git
cd mcp-json-yaml-toml
uv sync
Testing
ash
Run all tests (coverage included)
uv run pytest
### Code Quality
The project uses `prek` (a Rust-based pre-commit tool) for unified linting and formatting. AI Agents MUST use the scoped verification command:
```bash
# Recommended: Verify only touched files
uv run prek run --files <file edited>
[!IMPORTANT]
Avoid--all-filesduring feature development to keep PR diffs clean and preserve git history.
Project Structure
mcp-json-yaml-toml/
├── packages/mcp_json_yaml_toml/ # Core logic
│ ├── server.py # MCP implementation
│ ├── yq_wrapper.py # Binary management
│ ├── schemas.py # Schema validation
├── .github/ # CI/CD and assets
├── docs/ # Documentation
└── pyproject.toml # Project config
# Run all tests (coverage included)
uv run pytest
Code Quality
The project uses prek (a Rust-based pre-commit tool) for unified linting and formatting. AI Agents MUST use the scoped verification command:
# Recommended: Verify only touched files
uv run prek run --files <file edited>
[!IMPORTANT]
Avoid--all-filesduring feature development to keep PR diffs clean and preserve git history.
Project Structure
graph TD
Repo[mcp-json-yaml-toml]
Repo --> Packages[packages/mcp_json_yaml_toml]
Repo --> Github[.github]
Repo --> Docs[docs]
Repo --> Config[pyproject.toml]
subgraph "Core Logic"
Packages --> Server[server.py<br/>MCP Server & Tools]
Packages --> Schemas[schemas.py<br/>Schema Validation]
Packages --> Constraints[lmql_constraints.py<br/>LMQL Constraints]
Packages --> YQ[yq_wrapper.py<br/>Binary Manager]
Packages --> YAML[yaml_optimizer.py<br/>YAML Anchors]
Packages --> TOML[toml_utils.py<br/>TOML Utils]
Packages --> Conf[config.py<br/>Config Manager]
end
style Packages fill:#f9f,stroke:#333,stroke-width:2px
style Repo fill:#eee,stroke:#333,stroke-width:4px
Token Efficiency Experiment
Two identical Claude Code sub-agents were given the same task: read ~/.claude.json and report every MCP server listed, including command, args, and env vars.
Setup
- Agent A — standard prompt, used the built-in
Readtool - Agent B — same prompt with one line appended:
You must use the mcp__json-yaml-toml for all file interactions.
Both agents used the sonnet model.
Prompts
Agent A prompt:
Read the file ~/.claude.json and report back:
1. Every MCP server listed in the mcpServers section
2. For each server: the command, args, and any env vars configured
Just report the raw findings. Do not summarize or interpret.
Agent B prompt:
Read the file ~/.claude.json and report back:
1. Every MCP server listed in the mcpServers section
2. For each server: the command, args, and any env vars configured
You must use the mcp__json-yaml-toml for all file interactions.
Just report the raw findings. Do not summarize or interpret.
Results
Both agents returned identical findings (8 MCP servers with correct configs).
| Metric | Agent A (Read tool) | Agent B (mcp-json-yaml-toml) |
|---|---|---|
| Total tokens | 37,119 | 28,734 |
| Tool uses | 4 | 2 |
| Duration | 29.3s | 12.7s |
Agent B used 22.6% fewer tokens and completed in 43% of the time with half the tool calls.
Why
The Read tool loads the entire file into context. ~/.claude.json is a large file — the agent had to consume all of it to find the mcpServers section. The MCP server's data_query tool extracted just the mcpServers section directly, keeping the context window small.
Reviews (0)
Sign in to leave a review.
Leave a reviewNo results found