Artifacts for any coding agent: a durable link with versions, diffs, and comments on the page.
Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.
THING_TOKENAPI keyrequiredAPI token from usething.ai, under Settings then Tokens. Lets the server publish on your behalf with no terminal login.
Declared by the author in the official MCP registry. Forge does not store, broker, or ever see these values — the config below is scaffolded with placeholders you fill in locally.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.
server_infoReports the installed Thing MCP version and whether the Thing server recommends or requires an update. This tool remains available when other tools require a newer client.Reports the installed Thing MCP version and whether the Thing server recommends or requires an update. This tool remains available when other tools require a newer client.
No input schema was published for this tool.
push_artifactUse this whenever the user wants to share, send, show, or publish something you produced: a report, a dashboard, a prototype, a Markdown doc, a PDF, an image. Publishes it to a durable URL that stays live, and returns the link. Pushing the same name again creates a new version at the same link rath…Use this whenever the user wants to share, send, show, or publish something you produced: a report, a dashboard, a prototype, a Markdown doc, a PDF, an image. Publishes it to a durable URL that stays live, and returns the link. Pushing the same name again creates a new version at the same link rath…
No input schema was published for this tool.
list_artifactsUse this to find a link the user published earlier, or to check whether something is already published before pushing it again. Lists artifacts the signed-in user can see, with team, visibility and title.Use this to find a link the user published earlier, or to check whether something is already published before pushing it again. Lists artifacts the signed-in user can see, with team, visibility and title.
No input schema was published for this tool.
list_artifact_commentsUse this to pull review feedback, replies, and resolved state from an artifact the user can view. Returns author, quote or marked region, and the version each comment refers to.Use this to pull review feedback, replies, and resolved state from an artifact the user can view. Returns author, quote or marked region, and the version each comment refers to.
No input schema was published for this tool.
whoamiUse this to confirm the user is signed in and which team will own a new artifact. Shows the account, the server, and where pushes land when no team is named.Use this to confirm the user is signed in and which team will own a new artifact. Shows the account, the server, and where pushes land when no team is named.
No input schema was published for this tool.
5 of 5 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
Artifacts for any coding agent: a durable link with versions, diffs, and comments on the page.
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.