# com.grabbitapp/grabblist Save and organize web finds in persistent, user-controlled collections for AI assistants. - **Type:** MCP server - **Trust:** 60/100 (B), scored on the content rubric - **Verification:** community-indexed — nobody has claimed this listing - **Version:** 2.1.0 - **Author:** com.grabbitapp - **License:** Unknown - **Endpoints:** streamable-http https://mcp.grabbitapp.com/api/mcp - **Source:** https://grabbitapp.com/docs/mcp - **Endpoint health:** reachable (last checked 2026-09-25T12:15:20.347Z, 5 samples) — uptime is not a security property and is not part of the trust score - **Compatible clients:** claude-code, cursor, copilot, chatgpt, gemini (basis: transport) ## Trust 60/100 (B), scored on the content rubric - Publisher verified: no - Install scripts: nothing suspicious found - Prompt-injection scan: clean - Obfuscation scan: clean - Evidence age: 11 days ## Security scan - **Status:** clean - **Scanned:** 2026-09-25T12:15:20.347Z - **Version scanned:** live - **CVEs:** no coverage — this entry has no package coordinates to query OSV against, so "no known CVEs" is NOT asserted for it. ## Tools 23 declared. Observed from a live `tools/list` probe. - `ping` — Test connectivity to Grabblist and return service version. - `get_wishlist` — Get all saved items from the user's Grabblist. Each item is a static snapshot — data reflects the moment it was saved, not current prices. - `get_item` — Get full details of a saved item by ID. Returns a static snapshot from the user's Grabblist. - `add_item` — Save an item to the user's Grabblist. Creates a static snapshot — Grabblist does not monitor prices or auto-update data. Only include fields with values availab - `delete_item` — Remove one or more items from the user's Grabblist (soft-delete). Pass a single id or an array of ids for batch operations. - `restore_item` — Restore one or more deleted (archived) items back to the Grabblist. Pass a single id or an array of ids for batch restore. - `search_saved` — Search within the user's saved items by keyword - `update_price` — Manually update the price on a saved item. Records old and new price for comparison. This is a manual correction, not automatic price tracking. - `update_item` — Edit fields on one or more saved items. Pass a single id or an array of ids for batch updates (same fields applied to all). For batch: attributes are REPLACED n - `list_collections` — List all collections OR get a specific collection with its items. Without id: returns all collections with counts/values. With id: returns that collection's met - `create_collection` — Create a new collection (folder) in the user's Grabblist to organize saved items. - `add_to_collection` — Add a saved item to a collection. Both the item and collection must already exist. - `remove_from_collection` — Remove one or more items from a collection. Pass a single item_id or an array of item_ids for batch removal. Items are NOT deleted — they stay in the Grabblist. - `delete_collection` — Permanently delete a collection. Items inside are not deleted — they stay in the Grabblist. - `update_collection` — Update a collection's name, icon, description, budget, or sharing status. Only provide the fields you want to change — omitted fields stay unchanged. Set is_pub - `link_items` — Create typed relations between items: alternative (A or B), complement (A and B together), upgrade (B replaces A), duplicate (same item different site), same_se - `get_item_graph` — Get all relations for an item — alternatives, complements, upgrades, duplicates. Returns the item and all connected items with their relation types. - `unlink_items` — Remove a relation between two items. - `get_item_history` — Get the change history for a saved item — who changed what and when. - `get_collection_activity` — Get recent activity on a collection — additions, removals, edits. - `set_pinned_items` — Set the pinned "Top Picks" items for a collection (max 3). Pinned items are highlighted on the share page. - `send_feedback` — Send feedback, bug report, or feature request to the Grabbit team. Use this when you encounter parsing failures, missing features, broken URLs, or have improvem - `ask_agent` — Delegate a task to Grabblist's built-in AI assistant. The agent knows the user's Grabblist and can answer questions, compare items, give shopping advice, or ana ## Install **Verdict: review** — Installable, but 2 things to check first: No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it. **Cautions** (coverage gaps and advisories — never blocking) - No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it. - No publisher has proved control of this listing; it is indexed, not vouched for. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"grabblist\": {\n \"type\": \"http\",\n \"url\": \"https://mcp.grabbitapp.com/api/mcp\"\n }\n }\n}" ``` ## Blast radius Extensive blast radius — deletes data; runs on someone else's infrastructure. - Floor 34, ceiling 58 (tier: extensive) - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/com.grabbitapp%2Fgrabblist - Install plan: https://forgeregistry.com/api/v1/packages/com.grabbitapp%2Fgrabblist/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/com.grabbitapp%2Fgrabblist - HTML page: https://forgeregistry.com/registry/com.grabbitapp%2Fgrabblist - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.