dev.workers.mockbird.mockbird/mockbird

MCPcomunidaden línea
v1.6.0dev.workers.mockbird.mockbirdUnknownActualizado hace 5 d

Mock REST APIs, fake OAuth2/OIDC provider, uptime monitors + heartbeats, live badge/QR images.

Estado del endpointen línea
comprobado hace 20 h · 170 ms
100 % de las últimas 5 comprobaciones llegaron a este endpoint
Funciona en
ClaudeCursorCopilotChatGPTGemini

Inferido de los transportes que declara este listado (streamable-http). Que un cliente no aparezca aquí no significa que se haya descartado: simplemente Forge no puede confirmarlo.

Indexado automáticamente desde fuentes públicas. Aún sin verificar por su desarrollador en Forge.Reclamar este listado →
hace 5 dÚltima actualización
Paquete
Autordev.workers.mockbird.mockbird
LicenciaUnknown
Versión1.6.0
Fuentemcp-registry
Estado de confianza
B
60/100Bueno
Listado en el índice de Forge+10/10
Identidad del publicador verificada+0/30
Publicador: este listado no tiene ningún repositorio registrado, así que `forge publish` no puede verificar la propiedad de forma automática. Usa «Reclamar este listado» arriba — en Forge lo revisamos a mano.
Verificación de dominio+0/10
Ahora mismo no está disponible para este tipo de listado: hoy la comprobación de dominio solo se ejecuta para paquetes publicados en npm, así que esta fila todavía no se puede conseguir aquí, sea lo que sea lo que haya alojado en el dominio.
Análisis de inyección de prompts · limpio+30/30
Análisis de ofuscación / exfiltración · limpio+20/20
EstadoIndexado por la comunidad
PublicadorSin verificar
FirmaSin firmar
Dominio
Procedencia
DependenciasSin auditar
Superficie de herramientas19 herramientas · 2 privilegiadas
Análisis de seguridad✓ Limpiovlive · hoy¿Qué tan bien funciona este análisis?
PROMPTtool:uptime_monitor#urlLinks to undeclared domain: api.example.com
EvaluacionesNinguna
Indexado11 ago 2026

La verificación confirma la identidad del publicador (la propiedad del repo), no la seguridad del código. El análisis de seguridad cubre los CVE conocidos y los scripts de instalación sospechosos.

Herramientas

19 herramientas · 2 privilegiadas
Observado en vivo desde el endpoint del proveedor20h ago

Leído de un handshake MCP real initialize → tools/list contra el endpoint declarado. No se invocó ninguna herramienta: tools/list es la llamada de introspección de solo lectura que el protocolo define para esto. Refleja lo que el servidor anunciaba en ese momento; un endpoint alojado no está fijado a ninguna versión y puede cambiar sin avisar.

  • https://mockbird.mockbird.workers.dev/mcp19 herramientas · 170 ms
create_projectCreate a new mock REST API project. Returns {id, adminKey, baseUrl, resources[]}. SAVE the adminKey — it is required for admin operations (add_resource, custom_route, snapshots) and is shown only once. Presets seed a full backend: blog (posts/comments/authors), ecommerce (products/orders/customers/…

Create a new mock REST API project. Returns {id, adminKey, baseUrl, resources[]}. SAVE the adminKey — it is required for admin operations (add_resource, custom_route, snapshots) and is shown only once. Presets seed a full backend: blog (posts/comments/authors), ecommerce (products/orders/customers/…

ParámetroTipoDescripción
namestringProject name (max 60 chars). Optional.
presetstringSeeded preset; 'blank' = truly empty. Omit for a starter project. Optional.
ttlnumberOptional: self-expiring project — auto-deletes after this many seconds (60–604800, i.e. 1 min to 7 days). Perfect for CI/eval sandboxes that must not leak even…
import_dataCreate a live mock API from existing artifacts. Auto-detects: OpenAPI 3.x / Swagger 2.0 spec (JSON or YAML) → resources with realistic seeded data, and non-CRUD paths (login, /search, RPC verbs like POST /invoices/{id}/send) become custom routes serving the spec's own examples verbatim; json-server…

Create a live mock API from existing artifacts. Auto-detects: OpenAPI 3.x / Swagger 2.0 spec (JSON or YAML) → resources with realistic seeded data, and non-CRUD paths (login, /search, RPC verbs like POST /invoices/{id}/send) become custom routes serving the spec's own examples verbatim; json-server…

ParámetroTipoDescripción
content*stringThe raw spec / db.json / collection / CSV text.
namestringProject name override. Optional.
resourcestringCSV only: collection name (default items).
seednumberRecords to seed per resource for OpenAPI specs (default 20, max 100).
ttlnumberOptional: self-expiring project — auto-deletes after this many seconds (60–604800). Sandboxes for CI/eval runs clean themselves up.
fork_projectCopy an entire project — resources + records verbatim, custom routes, behavior settings — into a brand-new project with its own id + adminKey. Built for parallel eval/CI runs: keep a template project, fork_project per run with a ttl (crashed runs can't leak sandboxes — the fork deletes itself), let…

Copy an entire project — resources + records verbatim, custom routes, behavior settings — into a brand-new project with its own id + adminKey. Built for parallel eval/CI runs: keep a template project, fork_project per run with a ttl (crashed runs can't leak sandboxes — the fork deletes itself), let…

ParámetroTipoDescripción
project*stringSource project id to fork (or "demo").
adminKeystringSource project's adminKey. Not needed when forking "demo".
namestringName for the fork (default: <source name>-fork). Optional.
withSnapshotsbooleanAlso copy the source's snapshots into the fork (answer keys travel with it). Optional.
ttlnumberSelf-expiring fork: auto-deletes after this many seconds (60–604800), even if your run crashes. Optional.
add_resourceAdd a resource (collection) to a project and seed it with realistic fake data. Either pass template (one of the built-ins, e.g. users, products, posts, comments, orders, todos, reviews, customers, events) or fields: an array of {name, type} where type ∈ uuid|firstName|lastName|fullName|username|ema…

Add a resource (collection) to a project and seed it with realistic fake data. Either pass template (one of the built-ins, e.g. users, products, posts, comments, orders, todos, reviews, customers, events) or fields: an array of {name, type} where type ∈ uuid|firstName|lastName|fullName|username|ema…

ParámetroTipoDescripción
projectstringProject id. Omit (together with adminKey) to auto-create a fresh project.
adminKeystringThe project's adminKey. Omit (together with project) to auto-create.
name*stringResource name, plural (e.g. products).
templatestringBuilt-in template name. Optional (use this OR fields).
fieldsarrayArray of {name, type} (or {name, type:'oneOf', values:[…]}). Optional.
seednumberRecords to seed (default 20, max 100).
project_infoGet a project's public root index: every resource with record counts and URLs, custom routes, auth mode, and export links (openapi.json, types.ts, postman.json, db.json, GraphQL). No adminKey needed. Try project "demo" for the shared public playground.

Get a project's public root index: every resource with record counts and URLs, custom routes, auth mode, and export links (openapi.json, types.ts, postman.json, db.json, GraphQL). No adminKey needed. Try project "demo" for the shared public playground.

ParámetroTipoDescripción
project*stringProject id (e.g. demo).
query_recordsGET records from a mock resource. params is an object of query parameters, all optional: exact filters (field=value), operator suffixes (price_gte, date_lte, name_like, status_ne), full-text q, _sort/_order (or _page/_limit for pagination), select (field projection, e.g. "name,price"), _expand=<par…

GET records from a mock resource. params is an object of query parameters, all optional: exact filters (field=value), operator suffixes (price_gte, date_lte, name_like, status_ne), full-text q, _sort/_order (or _page/_limit for pagination), select (field projection, e.g. "name,price"), _expand=<par…

ParámetroTipoDescripción
project*string
resource*stringResource name (e.g. products).
idstringSingle record id. Optional.
paramsobjectQuery params as key→value. Optional.
write_recordprivilegiadaCreate, update, or delete records in a mock resource. Writes persist (unlike JSONPlaceholder/FakeStoreAPI). POST creates (auto-id), PUT replaces, PATCH merges, DELETE removes. id required for PUT/PATCH/DELETE.

Create, update, or delete records in a mock resource. Writes persist (unlike JSONPlaceholder/FakeStoreAPI). POST creates (auto-id), PUT replaces, PATCH merges, DELETE removes. id required for PUT/PATCH/DELETE.

ParámetroTipoDescripción
project*string
resource*string
method*string
idstringRecord id (PUT/PATCH/DELETE).
bodyobjectRecord fields (POST/PUT/PATCH).
generate_fake_dataGenerate realistic fake data instantly — stateless, nothing is created or stored, no project or adminKey needed. Ready-made resource shapes (FakerAPI-compatible): persons, users, addresses, companies, books, products, texts, images, places, credit_cards (credit cards are Luhn-valid; book EAN13/ISBN…

Generate realistic fake data instantly — stateless, nothing is created or stored, no project or adminKey needed. Ready-made resource shapes (FakerAPI-compatible): persons, users, addresses, companies, books, products, texts, images, places, credit_cards (credit cards are Luhn-valid; book EAN13/ISBN…

ParámetroTipoDescripción
resourcestringOne of persons|users|addresses|companies|books|products|texts|images|places|credit_cards. Default persons. Ignored when fields is set.
quantitynumberRows to generate (1-100, default 5).
seednumberDeterministic seed — same seed returns the same rows. Optional.
fieldsobjectCustom shape: {outputKey: type}, e.g. {"id":"counter","name":"firstName","mail":"email","signup":"dateTime"}. Optional.
paramsobjectExtra FakerAPI-compatible query params, e.g. {"_gender":"female"}, {"_price_min":10,"_price_max":500}, {"_characters":500}, {"_width":640}. Optional.
custom_routeDefine a custom endpoint on a project (like /health, /config/:key, or a catch-all /webhooks/* request bin). body is a response template: {{query.x}} {{params.x}} {{body.x}} {{headers.x}} {{method}} {{path}} {{now}} {{ts}} {{uuid}} {{rand}}; triple braces {{{body}}} insert raw JSON. Custom routes ta…

Define a custom endpoint on a project (like /health, /config/:key, or a catch-all /webhooks/* request bin). body is a response template: {{query.x}} {{params.x}} {{body.x}} {{headers.x}} {{method}} {{path}} {{now}} {{ts}} {{uuid}} {{rand}}; triple braces {{{body}}} insert raw JSON. Custom routes ta…

ParámetroTipoDescripción
project*string
adminKey*string
methodstringDefault GET.
path*stringe.g. /health, /config/:key, /webhooks/*
statusnumberResponse status (default 200).
bodystringResponse body template (string; JSON works).
contentTypestringDefault application/json.
delayMsnumberArtificial latency in ms.
inspect_requestsRead the project's request inspector: the most recent requests that hit the mock API (method, path, query, status, origin, captured headers incl. x-* — authorization redacted to its scheme — and a body snippet for writes). Use it to VERIFY what your app / tests / webhook sender actually sent: point…

Read the project's request inspector: the most recent requests that hit the mock API (method, path, query, status, origin, captured headers incl. x-* — authorization redacted to its scheme — and a body snippet for writes). Use it to VERIFY what your app / tests / webhook sender actually sent: point…

ParámetroTipoDescripción
project*stringProject id.
adminKeystringProject adminKey (not needed for demo).
limitnumberNewest N entries to return (default 20, max 50).
methodstringFilter: HTTP method, comma-list ok (e.g. "DELETE" or "PUT,PATCH,DELETE").
pathstringFilter: segment-aware path prefix ("/tasks" matches /tasks and /tasks/5, not /tasksomething).
statusnumberFilter: exact response status (comma-list ok as a string via status_gte/lte for ranges).
status_gtenumberFilter: status >= this (400 = any error).
status_ltenumberFilter: status <= this.
sincestringFilter: only requests at/after this time (epoch ms or ISO-8601) — record the episode start, assert about only that episode.
share_projectMint (or manage) a READ-ONLY share link for a project: a browser URL you can hand to a human reviewer — they can browse the data, endpoints, snapshots and the live request inspector, but can't write and never see the adminKey. Agent workflow: build or mutate a sandbox, then share_project and give y…

Mint (or manage) a READ-ONLY share link for a project: a browser URL you can hand to a human reviewer — they can browse the data, endpoints, snapshots and the live request inspector, but can't write and never see the adminKey. Agent workflow: build or mutate a sandbox, then share_project and give y…

ParámetroTipoDescripción
project*stringProject id.
adminKey*stringThe project's adminKey.
actionstringDefault: create.
delete_projectprivilegiadaPermanently delete a project and ALL its data (records, resources, snapshots, custom routes, webhooks, request log). Irreversible. Good practice for short-lived test projects: clean up when your session is done. Requires the adminKey.

Permanently delete a project and ALL its data (records, resources, snapshots, custom routes, webhooks, request log). Irreversible. Good practice for short-lived test projects: clean up when your session is done. Requires the adminKey.

ParámetroTipoDescripción
project*stringProject id.
adminKey*stringThe project's adminKey.
snapshotsDeterministic test fixtures + eval grading: save the project's entire dataset under a name, restore it exactly later, or DIFF it against live data (list/delete too). action:"diff" is machine-checkable grading — compares the named snapshot (expected) against live data (actual, or another snapshot vi…

Deterministic test fixtures + eval grading: save the project's entire dataset under a name, restore it exactly later, or DIFF it against live data (list/delete too). action:"diff" is machine-checkable grading — compares the named snapshot (expected) against live data (actual, or another snapshot vi…

ParámetroTipoDescripción
project*string
adminKey*string
action*string
namestringSnapshot name (required for restore/delete/diff; default for save: snapshot-<n>).
againststringdiff only, optional: compare the named snapshot against THIS other snapshot instead of live data.
ignorestringdiff only, optional: comma-separated field names excluded from comparison (volatile timestamps etc.), e.g. "updatedAt,id".
dataobjectsave only, optional: AUTHOR the snapshot inline instead of capturing live state — {"tasks":[{...records...}],"labels":[]} (records verbatim, ids preserved, []…
verdictOne call = the whole eval grade. Composes the state check (snapshot diff vs live data) with trajectory constraints on the request log into a single {pass, checks[]} verdict. Pass snapshot:"expected" to require live data to match that snapshot (author it as the answer key first via snapshots action:…

One call = the whole eval grade. Composes the state check (snapshot diff vs live data) with trajectory constraints on the request log into a single {pass, checks[]} verdict. Pass snapshot:"expected" to require live data to match that snapshot (author it as the answer key first via snapshots action:…

ParámetroTipoDescripción
project*stringProject id.
adminKey*stringThe project's adminKey.
namestringOptional: run a saved verdict spec by name instead of an inline spec (mutually exclusive with snapshot/ignore/trajectory).
snapshotstringOptional: snapshot name to diff live data against — pass means identical.
ignorestringOptional (with snapshot): comma-separated field names excluded from the state comparison, e.g. "updatedAt,createdAt".
trajectoryarrayOptional: constraint objects — filters (method comma-list, path segment-prefix, status, status_gte, status_lte, since) + expectation (count exact, min, max). E…
check_api_statusLive status of ~58 public mock/testing APIs — JSONPlaceholder, httpbin.org, ReqRes, FakeStoreAPI, DummyJSON, Postman Echo, httpstat.us, Mocky, Mockbin, CrudCrud, restcountries, and more — checked with a plain keyless GET every 30 minutes from Cloudflare's network (a service answering HTTP 200 error…

Live status of ~58 public mock/testing APIs — JSONPlaceholder, httpbin.org, ReqRes, FakeStoreAPI, DummyJSON, Postman Echo, httpstat.us, Mocky, Mockbin, CrudCrud, restcountries, and more — checked with a plain keyless GET every 30 minutes from Cloudflare's network (a service answering HTTP 200 error…

ParámetroTipoDescripción
servicestringService id, name, or hostname substring (e.g. httpbin, reqres.in). Optional — omit for the summary.
uptime_monitorFree downtime alerts for any public URL — no account, armed in one call. action:"create" {url, notify?}: Mockbird GETs the url every 30 minutes from Cloudflare's network (8s timeout, 2xx/3xx = up; a timeout/TLS/DNS blip on an otherwise-up url is confirmed with a same-run retry before it counts); wi…

Free downtime alerts for any public URL — no account, armed in one call. action:"create" {url, notify?}: Mockbird GETs the url every 30 minutes from Cloudflare's network (8s timeout, 2xx/3xx = up; a timeout/TLS/DNS blip on an otherwise-up url is confirmed with a same-run retry before it counts); wi…

NOTAEn el parámetro url: Links to undeclared domain: api.example.com
ParámetroTipoDescripción
action*stringWhat to do.
urlstringcreate: the public https URL to watch (e.g. https://api.example.com/health).
notifystringcreate (optional): the webhook URL to alert (Slack/Discord webhook, or any HTTPS endpoint — gets HMAC-signed JSON). Omit it to get a pollable monitor instead.
idstringpoll/info/delete: the monitor id (mon-…) returned by create.
secretstringpoll/info/delete: the secret returned by create.
heartbeatDead man's switch for cron jobs, scheduled tasks, and recurring agent runs — the INVERSE of uptime_monitor: the JOB pings Mockbird, and if the ping stops arriving the alert fires once (plus one recovery message when pings resume). action:"create" {name?, period_minutes, grace_minutes?, notify?}: pe…

Dead man's switch for cron jobs, scheduled tasks, and recurring agent runs — the INVERSE of uptime_monitor: the JOB pings Mockbird, and if the ping stops arriving the alert fires once (plus one recovery message when pings resume). action:"create" {name?, period_minutes, grace_minutes?, notify?}: pe…

ParámetroTipoDescripción
action*stringWhat to do.
namestringcreate: a label for the job (shown on the status page), e.g. "nightly backup".
period_minutesnumbercreate: how often the job is supposed to run, in minutes (30–10080).
grace_minutesnumbercreate: extra slack before alerting (5–1440). Default: half the period.
notifystringcreate (optional): the webhook URL to alert when the ping stops. Omit it to get a pollable heartbeat instead.
ping_urlstringping: the ping URL returned by create (https://…/ping/p-…).
idstringpoll/info/delete: the heartbeat id (hb-…) returned by create.
secretstringpoll/info/delete: the secret returned by create.
watch_service_statusSubscribe to down/recovered alerts for any of the public mock/testing APIs tracked by check_api_status (httpbin, JSONPlaceholder, ReqRes, FakeStoreAPI, DummyJSON …). action:"subscribe" {service, notify?}: service is an id from check_api_status (or "*" for all tracked services). With notify, that we…

Subscribe to down/recovered alerts for any of the public mock/testing APIs tracked by check_api_status (httpbin, JSONPlaceholder, ReqRes, FakeStoreAPI, DummyJSON …). action:"subscribe" {service, notify?}: service is an id from check_api_status (or "*" for all tracked services). With notify, that we…

ParámetroTipoDescripción
action*stringWhat to do.
servicestringsubscribe: service id from check_api_status (e.g. "reqres", "httpbin"), or "*" for all tracked services.
notifystringsubscribe (optional): webhook URL to alert (Slack/Discord webhook, or any HTTPS endpoint — gets HMAC-signed JSON). Omit it to get a pollable subscription inste…
idstringpoll/info/unsubscribe: the watch id (w…) returned by subscribe.
secretstringpoll/info/unsubscribe: the secret returned by subscribe.
image_urlMint a permanent, keyless image URL rendered by Mockbird — README badges (including LIVE record-count badges), chart images, QR codes, Open Graph cards, placeholder images, initials avatars. Deterministic: the same URL renders the same image forever (no account, no expiry, no watermark). Params are…

Mint a permanent, keyless image URL rendered by Mockbird — README badges (including LIVE record-count badges), chart images, QR codes, Open Graph cards, placeholder images, initials avatars. Deterministic: the same URL renders the same image forever (no account, no expiry, no watermark). Params are…

ParámetroTipoDescripción
kind*stringWhich image to mint.
paramsobjectQuery params for the endpoint (see the per-kind lists in the tool description). Values are strings or numbers (arrays of numbers join with commas). Passing the…
sizestringOptional size path: "WxH" for chart/og/placeholder (e.g. "800x400"), a single number for qr (e.g. "512") or a square placeholder.
formatstringOptional. badge is always SVG; chart/qr/og/placeholder default to PNG (og/chart/qr) or SVG (placeholder/avatar) — svg forces the vector twin.
projectstringOptional project id (default "demo", the shared public playground). Use your own project id so live badge counts track your data.

19 de 19 herramientas publicaron una descripción.

Los nombres y descripciones de las herramientas los escribe el publicador y se muestran literalmente como texto inerte. Son las cadenas que un cliente MCP pasa al modelo, así que Forge las analiza en busca de patrones de inyección de prompts — cualquier hallazgo aparece junto al análisis de seguridad de arriba. «Privilegiada» es una coincidencia de palabra clave en el nombre de la herramienta, no una auditoría de lo que hace: un nombre inofensivo puede hacer cualquier cosa.

Acerca de

Mock REST APIs, fake OAuth2/OIDC provider, uptime monitors + heartbeats, live badge/QR images.

Palabras clave
mcp
Alternativas
Comparando superficies de herramientas…

Sin cobertura de dependencias

Esta entrada no publica ningún paquete de npm, así que Forge no tiene un árbol de dependencias para ella. Es una carencia de cobertura, no una afirmación de que no tenga dependencias.