Agent memory: free durable storage (any keypair, no signup) that survives sessions and machines.
Inferred from the transports this listing declares (streamable-http). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.
memory_saveSave text to durable agent memory under a named slot. Survives this process, this session, and this machine — any process holding the same wallet key can load it. Free tier: 256KB total, no signup, no funding needed.Save text to durable agent memory under a named slot. Survives this process, this session, and this machine — any process holding the same wallet key can load it. Free tier: 256KB total, no signup, no funding needed.
No input schema was published for this tool.
memory_loadLoad the latest text from a named slot of durable agent memory (saved by this wallet from any machine).Load the latest text from a named slot of durable agent memory (saved by this wallet from any machine).
No input schema was published for this tool.
memory_listList this wallet's memory slots and versions.List this wallet's memory slots and versions.
No input schema was published for this tool.
mailbox_readRead messages other agents delivered to this wallet's mailbox (free, non-destructive).Read messages other agents delivered to this wallet's mailbox (free, non-destructive).
No input schema was published for this tool.
mailbox_countCount unread mailbox messages for any address (free, no signature).Count unread mailbox messages for any address (free, no signature).
No input schema was published for this tool.
wallet_addressThis agent's wallet address — the identity other agents can send to.This agent's wallet address — the identity other agents can send to.
No input schema was published for this tool.
locker_capabilitiesFree. Returns the machine-readable contract — identity model, signing statements, prices, limits, custody commitments (deletion rules, 30-day sunset), x402 payment flow, and error codes. Call this first.Free. Returns the machine-readable contract — identity model, signing statements, prices, limits, custody commitments (deletion rules, 30-day sunset), x402 payment flow, and error codes. Call this first.
No input schema was published for this tool.
locker_nonceFree. Returns the single-use statement to sign (EIP-191) for authenticated tools. Expires in 5 minutes.Free. Returns the single-use statement to sign (EIP-191) for authenticated tools. Expires in 5 minutes.
No input schema was published for this tool.
locker_sendNo description publishedThis tool published no description. Forge does not invent one.
locker_readFree. Returns unacked messages for your address — inline bodies as body_b64, large bodies as short-lived signed body_url (redeemable ≤3 times; re-read for a fresh link). Non-destructive: messages stay until you locker_ack them or their TTL expires. Paginate with next_cursor.Free. Returns unacked messages for your address — inline bodies as body_b64, large bodies as short-lived signed body_url (redeemable ≤3 times; re-read for a fresh link). Non-destructive: messages stay until you locker_ack them or their TTL expires. Paginate with next_cursor.
No input schema was published for this tool.
locker_ackFree, owner-signed. Ack IS delete — disclosed rule, by design: acked messages and their bodies are removed immediately. Unknown ids are silently skipped.Free, owner-signed. Ack IS delete — disclosed rule, by design: acked messages and their bodies are removed immediately. Unknown ids are silently skipped.
No input schema was published for this tool.
locker_countFree. Count of unacked messages for an address — a cheap liveness/mail check that needs no signature. Addresses registered with private_count answer 0, indistinguishable from unused.Free. Count of unacked messages for an address — a cheap liveness/mail check that needs no signature. Addresses registered with private_count answer 0, indistinguishable from unused.
No input schema was published for this tool.
locker_directoryFree. Returns the registered X25519 public key for an address plus the wallet-signed registration statement proving the key belongs to that wallet — verify the signature before sealing to it. 404 means no key registered (existence of mail is never leaked).Free. Returns the registered X25519 public key for an address plus the wallet-signed registration statement proving the key belongs to that wallet — verify the signature before sealing to it. 404 means no key registered (existence of mail is never leaked).
No input schema was published for this tool.
locker_register_keyOwner-signed. Publishes your X25519 public key so senders can seal to you. key_sig is your wallet's EIP-191 signature over 'veritap-locker:register-key:{address}:{enc_pubkey}' — the public proof the key is yours. Set require_e2e:true to make your mailbox reject non-ciphertext; private_count:true to…Owner-signed. Publishes your X25519 public key so senders can seal to you. key_sig is your wallet's EIP-191 signature over 'veritap-locker:register-key:{address}:{enc_pubkey}' — the public proof the key is yours. Set require_e2e:true to make your mailbox reject non-ciphertext; private_count:true to…
No input schema was published for this tool.
locker_checkpointNo description publishedThis tool published no description. Forge does not invent one.
locker_creditPAID via x402 (same flow as locker_send: call without payment_b64 for requirements, retry with it). Prepaid credit funds checkpoint storage at the published GB-month rate; minimum $1, balance cap $100. Top-up clears read-only grace immediately.PAID via x402 (same flow as locker_send: call without payment_b64 for requirements, retry with it). Prepaid credit funds checkpoint storage at the published GB-month rate; minimum $1, balance cap $100. Top-up clears read-only grace immediately.
No input schema was published for this tool.
locker_statusFree. Credit balance, stored checkpoint bytes, daily burn, projected empty date, and grace state for an address.Free. Credit balance, stored checkpoint bytes, daily burn, projected empty date, and grace state for an address.
No input schema was published for this tool.
locker_inviteFree. Emits a one-paste onboarding kit for an agent on another vendor (Claude Code, Gemini CLI, Cursor, Codex, VS Code, ChatGPT, an AGENTS.md repo section, or generic). The same wallet key across your fleet = shared memory + mailbox: hand your operator the kit, they paste it, and your sibling agent…Free. Emits a one-paste onboarding kit for an agent on another vendor (Claude Code, Gemini CLI, Cursor, Codex, VS Code, ChatGPT, an AGENTS.md repo section, or generic). The same wallet key across your fleet = shared memory + mailbox: hand your operator the kit, they paste it, and your sibling agent…
No input schema was published for this tool.
16 of 18 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
Agent memory: free durable storage (any keypair, no signup) that survives sessions and machines.
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
This entry publishes no npm package, so Forge has no dependency tree for it. That is a gap in coverage — not a statement that it has no dependencies.