Web and MCP change memory with native diff UI; later calls return only what changed.
Inferred from the transports this listing declares (streamable-http). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read from a real MCP initialize → tools/list handshake against the declared endpoint. No tool was ever invoked — tools/list is the read-only introspection call the protocol defines for this. It reflects what the server advertised at that moment; a hosted endpoint is not pinned to any version and can change without notice.
https://cibcxqrqiqvzpardbdrw.supabase.co/functions/v1/changepacket-mcp3 tools · 363mscheck_url_changesUse for repeated research on one public webpage when the agent only needs what changed since its last call. First call stores a baseline; later calls return added/removed text lines. Avoid for authenticated/private pages, binary files, or one-time page reading.Use for repeated research on one public webpage when the agent only needs what changed since its last call. First call stores a baseline; later calls return added/removed text lines. Avoid for authenticated/private pages, binary files, or one-time page reading.
| Parameter | Type | Description |
|---|---|---|
| url* | string | Public HTTP(S) webpage URL. Private-network and unsafe targets are rejected. |
check_mcp_surface_changesUse when an agent depends on a remote public HTTPS MCP server and needs to know whether its tool catalog changed. First call stores the tools/list baseline; later calls return only added, removed, or modified tools plus compact risk hints. Avoid for private/authenticated MCP endpoints or as a subst…Use when an agent depends on a remote public HTTPS MCP server and needs to know whether its tool catalog changed. First call stores the tools/list baseline; later calls return only added, removed, or modified tools plus compact risk hints. Avoid for private/authenticated MCP endpoints or as a subst…
| Parameter | Type | Description |
|---|---|---|
| endpoint_url* | string | Public HTTPS MCP endpoint that supports tools/list. |
buy_changepacket_callsUse only when free usage is exhausted or persistent production use is needed. Returns a Stripe checkout URL for 2,000 prepaid ChangePacket calls for $9; it does not itself charge or expose payment credentials.Use only when free usage is exhausted or persistent production use is needed. Returns a Stripe checkout URL for 2,000 prepaid ChangePacket calls for $9; it does not itself charge or expose payment credentials.
No input schema was published for this tool.
3 of 3 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
Web and MCP change memory with native diff UI; later calls return only what changed.
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
This entry publishes no npm package, so Forge has no dependency tree for it. That is a gap in coverage — not a statement that it has no dependencies.