MCP server for a project's context (AGENTS.md), memory, and identity — base or drop-in extension.
Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.
read_agents_mdReturn this project's AGENTS.md — the whole file, or one section by heading. The instructions a client would otherwise have to know to look for and read wholesale.Return this project's AGENTS.md — the whole file, or one section by heading. The instructions a client would otherwise have to know to look for and read wholesale.
No input schema was published for this tool.
author_agents_mdAuthor an AGENTS.md for this project and return the draft — BETTER from repo facts alone (via agents-md-facts: real build/test commands, entry points, toolchain conventions, nothing invented), or BEST when a project.faf exists (facts plus its structured goal/who/why as a second managed block ahead…Author an AGENTS.md for this project and return the draft — BETTER from repo facts alone (via agents-md-facts: real build/test commands, entry points, toolchain conventions, nothing invented), or BEST when a project.faf exists (facts plus its structured goal/who/why as a second managed block ahead…
No input schema was published for this tool.
list_agents_md_sectionsList the headings in this project's AGENTS.md, so a client can pull one section instead of spending context on the whole file.List the headings in this project's AGENTS.md, so a client can pull one section instead of spending context on the whole file.
No input schema was published for this tool.
rememberPersist a fact past the session boundary — written to a .fafm file, not held in memory. Reusing an existing id replaces that fact's text in place (no duplicate); a new id appends. Facts are written verification_status: unverified.Persist a fact past the session boundary — written to a .fafm file, not held in memory. Reusing an existing id replaces that fact's text in place (no duplicate); a new id appends. Facts are written verification_status: unverified.
No input schema was published for this tool.
recallRetrieve a fact stored in a previous session by id. Exact lookup — not fuzzy or substring.Retrieve a fact stored in a previous session by id. Exact lookup — not fuzzy or substring.
No input schema was published for this tool.
forgetRemove a fact by id — to correct or drop something stale. A missing id is reported, not an error.Remove a fact by id — to correct or drop something stale. A missing id is reported, not an error.
No input schema was published for this tool.
whoamiThis server's own identity — name, vendor, version, status, license — from its .fafa card.This server's own identity — name, vendor, version, status, license — from its .fafa card.
No input schema was published for this tool.
list_context_sourcesWhat context does this project publish (AGENTS.md, memory, identity), in what media types, and through which discovery surface. For a client connecting cold.What context does this project publish (AGENTS.md, memory, identity), in what media types, and through which discovery surface. For a client connecting cold.
No input schema was published for this tool.
render_context_cardRender the whole card — identity, AGENTS.md, memory, discovery — as one self-contained HTML page a person can read or screenshot. Also served at GET /card over the HTTP transport.Render the whole card — identity, AGENTS.md, memory, discovery — as one self-contained HTML page a person can read or screenshot. Also served at GET /card over the HTTP transport.
No input schema was published for this tool.
9 of 9 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
MCP server for a project's context (AGENTS.md), memory, and identity — base or drop-in extension.
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
The crawl stopped at the 60-package limit. The rest of the tree was never resolved.
36 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)
56 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.
+44 more not listed. The counts by reason above cover all of them.
Not followed: peerDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.