Cross-session idempotency, URLs as schema-validated JSON, and a record of missing capabilities.
Inferido de los transportes que declara este listado (streamable-http). Que un cliente no aparezca aquí no significa que se haya descartado: simplemente Forge no puede confirmarlo.
La verificación confirma la identidad del publicador (la propiedad del repo), no la seguridad del código. El análisis de seguridad cubre los CVE conocidos y los scripts de instalación sospechosos.
Leído de un handshake MCP real initialize → tools/list contra el endpoint declarado. No se invocó ninguna herramienta: tools/list es la llamada de introspección de solo lectura que el protocolo define para esto. Refleja lo que el servidor anunciaba en ese momento; un endpoint alojado no está fijado a ninguna versión y puede cambiar sin avisar.
https://agent-rescue.vercel.app/api/mcp3 herramientas · 158 mscheck_and_claimAtomically check whether an action identified by a key was already performed, and claim it if not. Use it before performing a non-idempotent action that may have completed in an earlier attempt (a payment, a message, a write), or when you need to remember something across sessions. Returns 'claimed…Atomically check whether an action identified by a key was already performed, and claim it if not. Use it before performing a non-idempotent action that may have completed in an earlier attempt (a payment, a message, a write), or when you need to remember something across sessions. Returns 'claimed…
| Parámetro | Tipo | Descripción |
|---|---|---|
| key* | string | Stable identifier for the action, e.g. 'invoice-2026-07-A491:pay'. |
| ttl_seconds | integer | How long the claim lasts, in seconds. Default 86400 (1 day), max 30 days. |
| metadata | object | Small payload returned alongside the claim. Do not include secrets. |
fetch_structuredFetch a public URL and return its content as JSON validated against the schema you pass. Use it when you need data from a page and cannot parse it reliably yourself. Do not use it for URLs requiring authentication or a session, for internal networks, or when you already have the content — extract i…Fetch a public URL and return its content as JSON validated against the schema you pass. Use it when you need data from a page and cannot parse it reliably yourself. Do not use it for URLs requiring authentication or a session, for internal networks, or when you already have the content — extract i…
| Parámetro | Tipo | Descripción |
|---|---|---|
| url* | string | Public http(s) URL. |
| schema* | object | JSON Schema of the object you want back. Missing fields come back as null. |
| instructions | string | Optional. What exactly to look for if the page is ambiguous. |
request_capabilityRecord a specific need that none of the tools available to you can cover. Today it almost always answers that the capability is unavailable, and suggests alternatives only when they genuinely exist; its purpose is to measure what agents ask for and nobody serves. Use it when you are blocked by a mi…Record a specific need that none of the tools available to you can cover. Today it almost always answers that the capability is unavailable, and suggests alternatives only when they genuinely exist; its purpose is to measure what agents ask for and nobody serves. Use it when you are blocked by a mi…
| Parámetro | Tipo | Descripción |
|---|---|---|
| need* | string | What exactly you need, in one or two sentences. Do not include personal data. |
| context | string | Optional. What you tried and why it did not work. |
| deadline | string | Optional. ISO 8601. |
| would_pay | boolean | Optional. Whether your policy allows paying to get this solved. Answer honestly: a false answer unlocks nothing and degrades the measurement. |
3 de 3 herramientas publicaron una descripción.
Los nombres y descripciones de las herramientas los escribe el publicador y se muestran literalmente como texto inerte. Son las cadenas que un cliente MCP pasa al modelo, así que Forge las analiza en busca de patrones de inyección de prompts — cualquier hallazgo aparece junto al análisis de seguridad de arriba. «Privilegiada» es una coincidencia de palabra clave en el nombre de la herramienta, no una auditoría de lo que hace: un nombre inofensivo puede hacer cualquier cosa.
Cross-session idempotency, URLs as schema-validated JSON, and a record of missing capabilities.
Los nombres enlazados abren el índice de Forge con todas las entradas que se observó que exponen esa herramienta. Ver todas las herramientas indexadas.
Esta entrada no publica ningún paquete de npm, así que Forge no tiene un árbol de dependencias para ella. Es una carencia de cobertura, no una afirmación de que no tenga dependencias.