com.cnrcode/tillpad

MCPcommunitylive
v0.1.4com.cnrcodeUnknownUpdated 14d agoGitHub

Bounded KVP, RAG search, and wipe receipts for agent jobs over remote MCP

Endpoint healthlive
checked 8 days ago · 341ms · auth required
100% of the last 5 checks reached this endpoint
Works in
ClaudeCursorCopilotChatGPTGemini

Inferred from the transports this listing declares (streamable-http). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →
1GitHub stars
14d agoLast update
Package
Authorcom.cnrcode
LicenseUnknown
Version0.1.4
Sourcemcp-registry
GitHubCNR-Consulting/tillpad-mcp
SBOMCycloneDX 1.6 ↓
Trust Status
D
30/100Risk
Hosted endpoint only: this assessment covers who publishes it and whether it answers, not the code behind it. No CVE, dependency or source analysis applies, so nothing here is a clean bill for that code.
✓Listed in Forge index+10/10
—Publisher identity verified+0/30
→ Publisher: run `forge publish` from the repo to claim ownership
—Domain verification+0/10
→ Not currently available for this listing type — the domain-verification check only runs for npm-backed packages today, so this row cannot be earned here yet regardless of what's hosted at the domain.
—Prompt-injection scan · findings+0/30
→ Publisher: remove instructions in the source aimed at AI clients rather than human readers
✓Obfuscation / exfil scan · clean+20/20
Paste into Claude Code, Cursor, or any AI assistant to fix all gaps
StatusCommunity-indexed
PublisherUnverified
SignatureUnsigned
Domain—
Provenance—
DependenciesNot audited
Tool surface35 tools · 5 privileged
Security scan⚠ Warnings (2)vHEAD · 1mo agoHow well does this scan work?
PROMPTtool:billing_machine_payExfiltration-shaped instruction
PROMPTtool:keys_createExfiltration-shaped instruction
EvalsNone
IndexedAug 25, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

35 tools · 5 privileged · 2 flagged for injection
Statically extracted from the published packagevHEAD · 1mo ago

Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.

usage_getGet current period usage and quotas for the authenticated account

Get current period usage and quotas for the authenticated account

No input schema was published for this tool.

budget_getGet remaining quotas, soft thresholds, and checkout URL for topping up

Get remaining quotas, soft thresholds, and checkout URL for topping up

No input schema was published for this tool.

budget_estimateEstimate whether an operation would hit 402/429 before spending. For rag_index you can pass textLength/byteLength instead of amount.

Estimate whether an operation would hit 402/429 before spending. For rag_index you can pass textLength/byteLength instead of amount.

No input schema was published for this tool.

billing_machine_payinjection riskDescribe how to unlock Pro or purchase agent SKUs via Stripe MPP. Optional sku (default pro_prepaid_30d). Returns POST URL and amount; agent must call HTTP with MPP Payment credential.

Describe how to unlock Pro or purchase agent SKUs via Stripe MPP. Optional sku (default pro_prepaid_30d). Returns POST URL and amount; agent must call HTTP with MPP Payment credential.

INJECTIONExfiltration-shaped instructionult pro_prepaid_30d). Returns POST URL and amount; agent must call HTTP with MPP Payment credential.

No input schema was published for this tool.

billing_portalGet Stripe Customer Portal URL for subscription management and invoice history (human billing).

Get Stripe Customer Portal URL for subscription management and invoice history (human billing).

No input schema was published for this tool.

billing_purchases_listList local payment history (MPP purchases and logged Stripe events). Optional includeStripe merges unlogged Stripe charges/invoices.

List local payment history (MPP purchases and logged Stripe events). Optional includeStripe merges unlogged Stripe charges/invoices.

No input schema was published for this tool.

agent_bootstrapStart zero-human onboarding: create bootstrap token from email (no outbound mail). Next POST /api/billing/machine-pay with Bearer bootstrapToken.

Start zero-human onboarding: create bootstrap token from email (no outbound mail). Next POST /api/billing/machine-pay with Bearer bootstrapToken.

No input schema was published for this tool.

keys_createinjection riskMint a run or sub API key from an account key (REST POST /api/keys). Requires account tp_ key.

Mint a run or sub API key from an account key (REST POST /api/keys). Requires account tp_ key.

INJECTIONExfiltration-shaped instructionkey from an account key (REST POST /api/keys). Requires account tp_ key.

No input schema was published for this tool.

kvp_putStore a string value under a namespace/key. Response includes budget remaining.

Store a string value under a namespace/key. Response includes budget remaining.

No input schema was published for this tool.

kvp_getRead a value from namespaced KVP storage

Read a value from namespaced KVP storage

No input schema was published for this tool.

kvp_deleteprivilegedDelete a KVP key

Delete a KVP key

No input schema was published for this tool.

kvp_listList keys in a KVP namespace

List keys in a KVP namespace

No input schema was published for this tool.

file_uploadprivilegedUpload a UTF-8 text document for RAG indexing into a namespace. PrefLights rag_index capacity.

Upload a UTF-8 text document for RAG indexing into a namespace. PrefLights rag_index capacity.

No input schema was published for this tool.

files_listList uploaded files (optionally filter by namespace)

List uploaded files (optionally filter by namespace)

No input schema was published for this tool.

files_typesList supported RAG upload file types (extensions, MIME types, extract notes)

List supported RAG upload file types (extensions, MIME types, extract notes)

No input schema was published for this tool.

rag_searchSemantic search over indexed documents

Semantic search over indexed documents

No input schema was published for this tool.

inspect_storageSummarize namespaces, key counts, file/vector inventory

Summarize namespaces, key counts, file/vector inventory

No input schema was published for this tool.

run_finishWipe all namespaces bound to this run key and return a signed wipe receipt. Only valid for run keys.

Wipe all namespaces bound to this run key and return a signed wipe receipt. Only valid for run keys.

No input schema was published for this tool.

support_contactContact Tillpad support from a Pro account. Delivers your subject and message to the Tillpad team; replies go to the account email. Requires an active Pro subscription.

Contact Tillpad support from a Pro account. Delivers your subject and message to the Tillpad team; replies go to the account email. Requires an active Pro subscription.

No input schema was published for this tool.

inbox_createCreate a receive-only email inbox (temporary or permanent) on the configured inbound domain.

Create a receive-only email inbox (temporary or permanent) on the configured inbound domain.

No input schema was published for this tool.

inbox_listList active receive-only inboxes for the account.

List active receive-only inboxes for the account.

No input schema was published for this tool.

inbox_getGet one inbox by id.

Get one inbox by id.

No input schema was published for this tool.

inbox_deleteprivilegedDelete an inbox and purge stored messages.

Delete an inbox and purge stored messages.

No input schema was published for this tool.

inbox_messages_listList message metadata for an inbox.

List message metadata for an inbox.

No input schema was published for this tool.

inbox_message_getGet message metadata and attachment list.

Get message metadata and attachment list.

No input schema was published for this tool.

inbox_message_rawDownload raw MIME for a message (meters 1 kvp_op).

Download raw MIME for a message (meters 1 kvp_op).

No input schema was published for this tool.

inbox_attachment_getDownload an attachment (meters 1 kvp_op). Returns base64 body.

Download an attachment (meters 1 kvp_op). Returns base64 body.

No input schema was published for this tool.

inbox_webhook_createRegister HTTPS webhook for email.received notifications (metadata only).

Register HTTPS webhook for email.received notifications (metadata only).

No input schema was published for this tool.

inbox_webhook_listList registered email webhooks.

List registered email webhooks.

No input schema was published for this tool.

inbox_webhook_deleteprivilegedDisable an email webhook.

Disable an email webhook.

No input schema was published for this tool.

inbox_webhook_deliveries_listList recent webhook delivery attempts. Use status=failed for delivery failures after all retries.

List recent webhook delivery attempts. Use status=failed for delivery failures after all retries.

No input schema was published for this tool.

inbox_audit_listList inbox audit log entries for the account.

List inbox audit log entries for the account.

No input schema was published for this tool.

inbox_blocklist_listList blocked sender addresses and domains for inbound email.

List blocked sender addresses and domains for inbound email.

No input schema was published for this tool.

inbox_blocklist_addBlock a sender email address or entire domain from all account inboxes.

Block a sender email address or entire domain from all account inboxes.

No input schema was published for this tool.

inbox_blocklist_deleteprivilegedRemove a blocklist entry by id.

Remove a blocklist entry by id.

No input schema was published for this tool.

35 of 35 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

Bounded KVP, RAG search, and wipe receipts for agent jobs over remote MCP

Keywords
mcp
Alternatives
Comparing tool surfaces…

Tools exposed

35 tools · 5 privileged · observed by static extraction. A tool surface is what one scan read on one day, not a live capability list.

Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.

No dependency coverage

This entry publishes no npm package, so Forge has no dependency tree for it. That is a gap in coverage — not a statement that it has no dependencies.