# mojulo

Mojulo — a 3D compiler for coding agents: an MCP server that runs wherever your agent runs, on your machine or in the throwaway Linux box it gives itself (the Claude app or web, ChatGPT work mode with Codex, Grok chat, Meta Muse), where you build worlds,

- **Type:** MCP server
- **Trust:** 60/100 (B), scored on the package rubric
- **Verification:** community-indexed — nobody has claimed this listing
- **Version:** 3.0.0
- **Author:** Franz Ombico
- **License:** Apache-2.0
- **npm:** mojulo
- **Source:** https://github.com/zombico/mojulo
- **Compatible clients:** claude-code, cursor, copilot, gemini (basis: transport)

## Trust

60/100 (B), scored on the package rubric
- Publisher verified: no
- Install scripts: nothing suspicious found
- Prompt-injection scan: not run
- Obfuscation scan: not run
- Evidence age: 22 days

## Security scan

- **Status:** warnings
- **Scanned:** 2026-09-13T10:13:15.753Z
- **Version scanned:** 2.0.2
- **CVEs:** none found by OSV at scan time

## Tools

Tool surface: no readable artifact — tool surface unknown.

## Install

**Verdict: review** — Installable, but 1 thing to check first: No publisher has proved control of this listing; it is indexed, not vouched for.
**Cautions** (coverage gaps and advisories — never blocking)
- No publisher has proved control of this listing; it is indexed, not vouched for.
**Config** (claude-code):
```json
"{\n  \"mcpServers\": {\n    \"mojulo\": {\n      \"command\": \"npx\",\n      \"args\": [\n        \"-y\",\n        \"mojulo\"\n      ]\n    }\n  }\n}"
```

## Blast radius

Contained to critical — no readable artifact — tool surface unknown. Known so far: runs on your machine; 60 transitive dependencies.
- Floor 10, ceiling 78 (tier: unknown)
- `unknown` means the floor and ceiling land in different bands — not measured enough to name one. It does not mean low.
- This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score.

## Machine-readable views of this entry

- Signed JSON: https://forgeregistry.com/api/v1/packages/mojulo
- Install plan: https://forgeregistry.com/api/v1/packages/mojulo/install-plan
- Alternatives: https://forgeregistry.com/api/v1/alternatives/mojulo
- HTML page: https://forgeregistry.com/registry/mojulo
- MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan`

## About this document

Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.