GVNR (gvnr.io): stops AI agents overspending and running dangerous commands before they act.
Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.
gvnr_request_permissionAsk GVNR whether an action is allowed BEFORE you run it. Call this before any shell command, file deletion, git push, deploy or publish, and before reading or writing credentials. Returns allow, deny, or ask_human. On deny, do not run the action. On ask_human, stop and get approval from the person…Ask GVNR whether an action is allowed BEFORE you run it. Call this before any shell command, file deletion, git push, deploy or publish, and before reading or writing credentials. Returns allow, deny, or ask_human. On deny, do not run the action. On ask_human, stop and get approval from the person…
No input schema was published for this tool.
gvnr_statusShow every governed agent with its status, spend and spend rate, plus the limits in force and what has been spent today, this week and this month.Show every governed agent with its status, spend and spend rate, plus the limits in force and what has been spent today, this week and this month.
No input schema was published for this tool.
gvnr_recent_decisionsList the most recent allow, deny and ask decisions from the receipt file, newest last.List the most recent allow, deny and ask decisions from the receipt file, newest last.
No input schema was published for this tool.
gvnr_verify_receiptsCheck the hash chain over every recorded decision. Reports whether it is intact, or the line where a record was edited or removed.Check the hash chain over every recorded decision. Reports whether it is intact, or the line where a record was edited or removed.
No input schema was published for this tool.
gvnr_stop_agentStop a governed agent immediately. Only a human can resume it, from the GVNR dashboard. Use gvnr_status for agent ids.Stop a governed agent immediately. Only a human can resume it, from the GVNR dashboard. Use gvnr_status for agent ids.
No input schema was published for this tool.
gvnrNo description publishedThis tool published no description. Forge does not invent one.
5 of 6 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
GVNR (gvnr.io): stops AI agents overspending and running dangerous commands before they act.
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.