dev.zerm/zerm

MCPCommunitylive
v0.3.2dev.zermUnknownAktualisiert vor 1 Mon.

Agent utility belt: memory, locks, webhook inboxes, timers, DNS, email, URL, timezone, cron

Endpunkt-Statuslive
geprüft vor 16 Std. · 199 ms
100 % der letzten 4 Prüfungen haben diesen Endpunkt erreicht
Läuft in
ClaudeCursorCopilotChatGPTGemini

Abgeleitet aus den Transporten, die dieser Eintrag deklariert (streamable-http). Ein Client, der hier nicht steht, ist damit nicht ausgeschlossen — Forge kann ihn nur nicht bestätigen.

Automatisch aus öffentlichen Quellen indexiert. Vom Entwickler auf Forge noch nicht verifiziert.Diesen Eintrag beanspruchen →
vor 1 Mon.Letzte Aktualisierung
Paket
Autordev.zerm
LizenzUnknown
Version0.3.2
Quellemcp-registry
Trust-Status
B
60/100Gut
Im Forge-Index gelistet+10/10
Publisher-Identität verifiziert+0/30
Publisher: für diesen Eintrag ist kein Repository hinterlegt, daher kann `forge publish` die Inhaberschaft nicht automatisch prüfen. Nutze oben „Diesen Eintrag beanspruchen“ — Forge prüft diese Fälle von Hand.
Domain-Verifizierung+0/10
Für diesen Eintragstyp derzeit nicht verfügbar — die Domain-Prüfung läuft heute nur für npm-gestützte Pakete, diese Zeile lässt sich hier also noch nicht erreichen, unabhängig davon, was auf der Domain liegt.
Prompt-Injection-Scan · sauber+30/30
Obfuskations-/Exfiltrations-Scan · sauber+20/20
StatusVon der Community indexiert
PublisherNicht verifiziert
SignaturNicht signiert
Domain
Herkunft
AbhängigkeitenNicht auditiert
Tool-Oberfläche24 Tools · 2 privilegiert
Sicherheits-Scan✓ Saubervlive · heuteWie gut funktioniert dieser Scan?
PROMPTtool:timer_verify_origin#urlLinks to undeclared domain: example.com
EvaluierungenKeine
Indexiert22. Juli 2026

Die Verifizierung bestätigt die Identität des Publishers (die Inhaberschaft am Repo), nicht die Sicherheit des Codes. Der Sicherheits-Scan deckt bekannte CVEs und verdächtige Installationsskripte ab.

Tools

24 Tools · 2 privilegiert
Live am Endpunkt des Anbieters beobachtet16h ago

Aus einem echten MCP-Handshake initialize → tools/list gegen den deklarierten Endpunkt gelesen. Es wurde nie ein Tool aufgerufen — tools/list ist der lesende Introspektionsaufruf, den das Protokoll dafür vorsieht. Es spiegelt wider, was der Server in diesem Moment angeboten hat; ein gehosteter Endpunkt ist an keine Version gebunden und kann sich ohne Ankündigung ändern.

  • https://zerm.dev/mcp24 Tools · 199 ms
kv_setStore a value durably under (namespace, key) with a TTL. Survives across your sessions - use it as memory between stateless runs. Value must be a string (JSON-encode objects), max 8192 bytes. TTL defaults to 30 days, max 90 days. Max 1000 keys per namespace.

Store a value durably under (namespace, key) with a TTL. Survives across your sessions - use it as memory between stateless runs. Value must be a string (JSON-encode objects), max 8192 bytes. TTL defaults to 30 days, max 90 days. Max 1000 keys per namespace.

ParameterTypBeschreibung
namespace*stringYour private namespace. Pick a long unique string; it acts as the access key.
key*stringKey within the namespace.
value*stringValue to store (string; JSON-encode structured data).
ttl_secondsintegerSeconds until expiry. Default 2592000.
kv_getRetrieve a value previously stored with kv_set. Call this at the start of a run to restore state, preferences, or progress saved by earlier runs. Returns found=false if missing or expired.

Retrieve a value previously stored with kv_set. Call this at the start of a run to restore state, preferences, or progress saved by earlier runs. Returns found=false if missing or expired.

ParameterTypBeschreibung
namespace*stringYour private namespace. Pick a long unique string; it acts as the access key.
key*stringKey within the namespace.
kv_deleteprivilegiertPermanently remove one key from your namespace, freeing a slot against the 1000-key limit. Use it when a stored value is wrong or unwanted before its TTL runs out; if you only want the value to lapse on schedule, do nothing and let the TTL expire instead. Deletes exactly one key - there is no prefi…

Permanently remove one key from your namespace, freeing a slot against the 1000-key limit. Use it when a stored value is wrong or unwanted before its TTL runs out; if you only want the value to lapse on schedule, do nothing and let the TTL expire instead. Deletes exactly one key - there is no prefi…

ParameterTypBeschreibung
namespace*stringYour private namespace. Pick a long unique string; it acts as the access key.
key*stringKey within the namespace.
kv_listList the keys held in your namespace, optionally narrowed to those starting with a prefix. Use it to discover what earlier runs saved before deciding what to fetch with kv_get: it returns key names with their expiry and last-update time, never the stored values. Expired keys are filtered out, so wh…

List the keys held in your namespace, optionally narrowed to those starting with a prefix. Use it to discover what earlier runs saved before deciding what to fetch with kv_get: it returns key names with their expiry and last-update time, never the stored values. Expired keys are filtered out, so wh…

ParameterTypBeschreibung
namespace*stringYour private namespace. Pick a long unique string; it acts as the access key.
prefixstringOnly keys starting with this prefix.
limitintegerMaximum keys to return. Default and maximum 100.
timer_verify_originOne-time consent handshake before timers can deliver to an origin. Prerequisite: an HTTPS endpoint you control that can read a request body and echo part of it back - if you have no endpoint of your own, timers are not usable yet. zerm POSTs {type:"zerm.origin_verification", token, service, instruc…

One-time consent handshake before timers can deliver to an origin. Prerequisite: an HTTPS endpoint you control that can read a request body and echo part of it back - if you have no endpoint of your own, timers are not usable yet. zerm POSTs {type:"zerm.origin_verification", token, service, instruc…

HINWEISIm Parameter url: Links to undeclared domain: example.com
ParameterTypBeschreibung
url*stringAn https URL on an origin you control, e.g. "https://example.com/hooks/zerm".
timer_scheduleSchedule a durable callback: at fire time this service POSTs your JSON payload to your URL. Use it to wake up future runs of yourself or your orchestrator - agents cannot wake themselves. Prerequisite: the target origin must already pass timer_verify_origin, which requires an HTTPS endpoint you con…

Schedule a durable callback: at fire time this service POSTs your JSON payload to your URL. Use it to wake up future runs of yourself or your orchestrator - agents cannot wake themselves. Prerequisite: the target origin must already pass timer_verify_origin, which requires an HTTPS endpoint you con…

ParameterTypBeschreibung
url*stringhttps URL to POST to. The origin must already be verified.
payloadstringJSON string delivered as the request body. Default "{}".
delay_secondsintegerFire after this many seconds. Provide this OR fire_at.
fire_atstringAbsolute ISO 8601 fire time. Provide this OR delay_seconds.
timer_cancelCancel a pending timer using the id returned by timer_schedule. The id is the authorization: holding it is what proves you scheduled the timer, so keep it secret. Already-delivered or already-cancelled timers return cancelled=false.

Cancel a pending timer using the id returned by timer_schedule. The id is the authorization: holding it is what proves you scheduled the timer, so keep it secret. Already-delivered or already-cancelled timers return cancelled=false.

ParameterTypBeschreibung
id*stringThe timer id returned by timer_schedule.
timer_statusCheck a timer by the id returned by timer_schedule: status (pending|delivering|delivered|failed|cancelled), attempts, last error. Returns found=false for an unknown id.

Check a timer by the id returned by timer_schedule: status (pending|delivering|delivered|failed|cancelled), attempts, last error. Returns found=false for an unknown id.

ParameterTypBeschreibung
id*stringThe timer id returned by timer_schedule.
name_checkLive availability check for a name across domain TLDs (registry RDAP), npm, PyPI, and GitHub usernames. Real registry lookups at call time - not guesses. Each result is registered, unregistered, unknown or invalid and names the source that decided it; "unknown" means no authoritative registry answe…

Live availability check for a name across domain TLDs (registry RDAP), npm, PyPI, and GitHub usernames. Real registry lookups at call time - not guesses. Each result is registered, unregistered, unknown or invalid and names the source that decided it; "unknown" means no authoritative registry answe…

ParameterTypBeschreibung
name*stringThe name to check. A bare name is best, but "stripe.com" (checks the .com) and "Acme Global Ltd" (slugified to acme-global-ltd) are accepted; the normalized na…
targetsarrayWhich registries to check. Default: all.
tldsarrayTLDs for the domain check. Default: ["com","dev","io","net"].
email_checkDeliverability probe for an email address without sending anything: syntax validation, live MX lookup (with A/AAAA fallback per RFC 5321), disposable-domain detection, and typo suggestions for common providers. Use it to validate an address before sending to it, storing it, or accepting a signup. L…

Deliverability probe for an email address without sending anything: syntax validation, live MX lookup (with A/AAAA fallback per RFC 5321), disposable-domain detection, and typo suggestions for common providers. Use it to validate an address before sending to it, storing it, or accepting a signup. L…

ParameterTypBeschreibung
email*stringThe email address to check.
url_checkLive URL health check: follows the full redirect chain (each hop reported), returns final status, content type, response time, TLS certificate expiry and trust, and access hints (login walls, bot blocks). Fresh at call time - use it to verify links before citing them.

Live URL health check: follows the full redirect chain (each hop reported), returns final status, content type, response time, TLS certificate expiry and trust, and access hints (login walls, bot blocks). Fresh at call time - use it to verify links before citing them.

ParameterTypBeschreibung
url*stringThe URL to check (https).
cron_nextDeterministic cron expression validator and scheduler: parses a cron expression (5 or 6 field, seconds optional) and computes the next N actual fire times, timezone-aware. Use this instead of guessing - cron semantics (DOM/DOW OR-logic, DST transitions) are routinely miscalculated.

Deterministic cron expression validator and scheduler: parses a cron expression (5 or 6 field, seconds optional) and computes the next N actual fire times, timezone-aware. Use this instead of guessing - cron semantics (DOM/DOW OR-logic, DST transitions) are routinely miscalculated.

ParameterTypBeschreibung
expression*stringCron expression, e.g. "0 9 * * MON-FRI".
countintegerHow many fire times. Default 5.
timezonestringIANA timezone, e.g. "America/Chicago". Default UTC.
fromstringCompute fire times after this ISO 8601 instant. Default now.
regex_testExecute a regex against test strings and return the ACTUAL matches: match text, indices, capture groups, named groups, and optional replacement output. Deterministic proof, not prediction - run this before shipping a pattern. Patterns run sandboxed with a 250ms kill switch for catastrophic backtrac…

Execute a regex against test strings and return the ACTUAL matches: match text, indices, capture groups, named groups, and optional replacement output. Deterministic proof, not prediction - run this before shipping a pattern. Patterns run sandboxed with a 250ms kill switch for catastrophic backtrac…

ParameterTypBeschreibung
pattern*stringThe regex pattern (without slashes).
flagsstringRegex flags, e.g. "gi". Default "".
tests*arrayStrings to test the pattern against.
replacementstringIf given, also return each input with the pattern replaced (supports $1, $<name>).
fixture_rowsBulk realistic test data: generate up to 10000 rows from a field schema in one call - orders of magnitude cheaper than generating rows with tokens. Deterministic when you pass a seed (same seed + schema = identical data). Formats: json, ndjson, csv. Types: uuid, name, email, username, int, float, b…

Bulk realistic test data: generate up to 10000 rows from a field schema in one call - orders of magnitude cheaper than generating rows with tokens. Deterministic when you pass a seed (same seed + schema = identical data). Formats: json, ndjson, csv. Types: uuid, name, email, username, int, float, b…

ParameterTypBeschreibung
fields*arraySchema: ordered list of fields.
count*integerNumber of rows.
seedintegerSeed for deterministic output.
formatstringDefault json.
tz_convertDeterministic timezone conversion: convert a timestamp between IANA timezones with full DST awareness. Models routinely miscalculate DST transitions - this gives exact results. Returns the converted time, UTC offsets for both zones on that date, and whether DST is active.

Deterministic timezone conversion: convert a timestamp between IANA timezones with full DST awareness. Models routinely miscalculate DST transitions - this gives exact results. Returns the converted time, UTC offsets for both zones on that date, and whether DST is active.

ParameterTypBeschreibung
datetimestringISO 8601 datetime to convert, e.g. "2025-03-09T02:30:00". Aliases: timestamp, time.
timestampstringAlias for datetime.
timestringAlias for datetime.
fromstringSource IANA timezone, e.g. "America/Chicago". Default UTC. Alias: from_tz.
from_tzstringAlias for from.
tostringTarget IANA timezone, e.g. "Asia/Tokyo". Alias: to_tz.
to_tzstringAlias for to.
tz_infoTimezone intelligence: for a given IANA timezone and date, returns the UTC offset, whether DST is active, the exact UTC instant of each DST transition in that year, and the timezone abbreviation. Transition timestamps are the first instant the new offset is in effect. Use this to understand DST beh…

Timezone intelligence: for a given IANA timezone and date, returns the UTC offset, whether DST is active, the exact UTC instant of each DST transition in that year, and the timezone abbreviation. Transition timestamps are the first instant the new offset is in effect. Use this to understand DST beh…

ParameterTypBeschreibung
timezone*stringIANA timezone, e.g. "America/New_York".
datestringDate to query: "2026-07-26", "2026-07-26T12:00:00", or full ISO 8601. Input without a UTC offset is read as UTC. Default: now.
dns_queryFull DNS record lookup for a domain: returns A, AAAA, MX, NS, TXT, CNAME, SOA, and CAA records in one call. Automatically parses SPF and DMARC policies from TXT records. Use this for infrastructure audits, email deliverability setup, domain verification, and security checks. Live lookups - not cach…

Full DNS record lookup for a domain: returns A, AAAA, MX, NS, TXT, CNAME, SOA, and CAA records in one call. Automatically parses SPF and DMARC policies from TXT records. Use this for infrastructure audits, email deliverability setup, domain verification, and security checks. Live lookups - not cach…

ParameterTypBeschreibung
domain*stringDomain to query, e.g. "example.com".
typesarrayRecord types to query. Default: all (A, AAAA, MX, NS, TXT, CNAME, SOA, CAA).
request_toolHit a capability wall? Describe a tool you wish this server had and the task you were trying to accomplish. The operator reviews every submission; the most-requested capabilities get built. Free, no payment ever required.

Hit a capability wall? Describe a tool you wish this server had and the task you were trying to accomplish. The operator reviews every submission; the most-requested capabilities get built. Free, no payment ever required.

ParameterTypBeschreibung
description*stringWhat the tool should do, in plain language.
use_casestringThe task you were trying to accomplish when you needed it.
lock_acquireAcquire a mutual-exclusion lock so concurrent agent runs do not double-process the same work. If two runs race, exactly one gets acquired=true plus a release token; the other gets acquired=false with retry_after_ms. Locks auto-expire after ttl_seconds (default 60s, max 3600s), so a crashed run can…

Acquire a mutual-exclusion lock so concurrent agent runs do not double-process the same work. If two runs race, exactly one gets acquired=true plus a release token; the other gets acquired=false with retry_after_ms. Locks auto-expire after ttl_seconds (default 60s, max 3600s), so a crashed run can…

ParameterTypBeschreibung
namespace*stringYour private namespace. Pick a long unique string; it acts as the access key.
name*stringLock or counter name within the namespace.
ttl_secondsintegerSeconds until the lock auto-expires. Default 60.
lock_releaseRelease a lock early using the token returned by lock_acquire. Only the token holder can release; without the token the lock simply expires on its own. Returns released=false if the token is wrong or the lock already expired.

Release a lock early using the token returned by lock_acquire. Only the token holder can release; without the token the lock simply expires on its own. Returns released=false if the token is wrong or the lock already expired.

ParameterTypBeschreibung
namespace*stringYour private namespace. Pick a long unique string; it acts as the access key.
name*stringLock or counter name within the namespace.
token*stringThe release token returned by lock_acquire.
counter_nextAtomically increment a named counter and return the new value. Guaranteed unique, monotonically increasing integers across concurrent stateless runs - use it for sequence numbers, run IDs, or once-only ordering that agents cannot produce on their own. Starts at 1 on first call. Counters persist ind…

Atomically increment a named counter and return the new value. Guaranteed unique, monotonically increasing integers across concurrent stateless runs - use it for sequence numbers, run IDs, or once-only ordering that agents cannot produce on their own. Starts at 1 on first call. Counters persist ind…

ParameterTypBeschreibung
namespace*stringYour private namespace. Pick a long unique string; it acts as the access key.
namestringLock or counter name within the namespace.
keyLock or counter name within the namespace.
inbox_createCreate a URL that receives HTTP requests for you. Point any webhook (GitHub, Stripe, CI, a form) at it and read what arrives with inbox_poll - no server, no signup, no tunnel. This is the way to be notified of something when your process is not running. Returns an id, the URL, and a separate read t…

Create a URL that receives HTTP requests for you. Point any webhook (GitHub, Stripe, CI, a form) at it and read what arrives with inbox_poll - no server, no signup, no tunnel. This is the way to be notified of something when your process is not running. Returns an id, the URL, and a separate read t…

Für dieses Tool wurde kein Eingabeschema veröffentlicht.

inbox_pollRead requests delivered to an inbox since you last looked. Pass after=<the next_after from your previous poll> to get only new ones; omit it to start from the beginning. Each payload has its method, headers, body and arrival time. Set consume=true to delete what is returned. Polling also resets the…

Read requests delivered to an inbox since you last looked. Pass after=<the next_after from your previous poll> to get only new ones; omit it to start from the beginning. Each payload has its method, headers, body and arrival time. Set consume=true to delete what is returned. Polling also resets the…

ParameterTypBeschreibung
inbox_id*stringThe inbox id returned by inbox_create.
token*stringThe read token returned by inbox_create.
afterintegerReturn only payloads with seq greater than this. Use next_after from your last poll.
limitintegerMaximum payloads to return. Default and maximum 50.
consumebooleanDelete the returned payloads. Default false.
inbox_deleteprivilegiertDelete an inbox and everything delivered to it. The URL stops accepting requests immediately. Inboxes also delete themselves once unpolled past their expiry, so this is only for tearing down early.

Delete an inbox and everything delivered to it. The URL stops accepting requests immediately. Inboxes also delete themselves once unpolled past their expiry, so this is only for tearing down early.

ParameterTypBeschreibung
inbox_id*stringThe inbox id returned by inbox_create.
token*stringThe read token returned by inbox_create.

24 von 24 Tools haben eine Beschreibung veröffentlicht.

Tool-Namen und -Beschreibungen stammen vom Publisher und werden wortgetreu als inerter Text angezeigt. Es sind die Zeichenketten, die ein MCP-Client an ein Modell übergibt, deshalb prüft Forge sie auf Prompt-Injection-Muster — jeder Befund erscheint oben beim Sicherheits-Scan. „Privilegiert“ ist ein Schlagwort-Treffer im Tool-Namen, keine Prüfung dessen, was das Tool tut: ein harmlos klingender Name kann trotzdem alles tun.

Über

Agent utility belt: memory, locks, webhook inboxes, timers, DNS, email, URL, timezone, cron

Schlagwörter
mcp
Alternativen
Tool-Oberflächen werden verglichen…

Keine Abdeckung der Abhängigkeiten

Dieser Eintrag veröffentlicht kein npm-Paket, daher hat Forge keinen Abhängigkeitsbaum dafür. Das ist eine Lücke in der Abdeckung — keine Aussage, dass er keine Abhängigkeiten hat.