Claude steers live music by writing Strudel code played in a browser page
Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.
get_codeReads the Strudel code currently playing in the Moontide page, i.e. the last code the page confirmed,Reads the Strudel code currently playing in the Moontide page, i.e. the last code the page confirmed,
No input schema was published for this tool.
get_strudel_referenceNo description publishedThis tool published no description. Forge does not invent one.
set_codeReplaces the music in the Moontide page with new Strudel code; the new pattern takes over within a fraction of a second, mid-cycle, without stopping the music.Replaces the music in the Moontide page with new Strudel code; the new pattern takes over within a fraction of a second, mid-cycle, without stopping the music.
No input schema was published for this tool.
edit_codeprivilegedNo description publishedThis tool published no description. Forge does not invent one.
list_historyLists the versions of the music that played, newest first, one per row: "#id — time (UTC) — origin — \"label\" — first line of code". Ids never change. Rows without "#" mark where a Claude session started. The newest version row is usually what plays now; "the previous version" is the next version…Lists the versions of the music that played, newest first, one per row: "#id — time (UTC) — origin — \"label\" — first line of code". Ids never change. Rows without "#" mark where a Claude session started. The newest version row is usually what plays now; "the previous version" is the next version…
No input schema was published for this tool.
favorite_versionKeeps a version as a named favorite, by its id from list_history (the version playing now is the one shown as v{id} in the page top bar). Favorites are never dropped from the history. Favoriting the same id again renames it. List favorites with list_history and favorites: true.Keeps a version as a named favorite, by its id from list_history (the version playing now is the one shown as v{id} in the page top bar). Favorites are never dropped from the history. Favoriting the same id again renames it. List favorites with list_history and favorites: true.
No input schema was published for this tool.
restore_versionNo description publishedThis tool published no description. Forge does not invent one.
stopStops all sound in the Moontide page right away, even when the current code is broken. The code stays in the editor; get_code still returns it, and the next set_code starts playing again. Before Moontide is started it says so and starts nothing.Stops all sound in the Moontide page right away, even when the current code is broken. The code stays in the editor; get_code still returns it, and the next set_code starts playing again. Before Moontide is started it says so and starts nothing.
No input schema was published for this tool.
get_midi_instrumentsNo description publishedThis tool published no description. Forge does not invent one.
search_midi_soundsNo description publishedThis tool published no description. Forge does not invent one.
save_midi_modelNo description publishedThis tool published no description. Forge does not invent one.
save_midi_catalogNo description publishedThis tool published no description. Forge does not invent one.
set_page_requestsNo description publishedThis tool published no description. Forge does not invent one.
startNo description publishedThis tool published no description. Forge does not invent one.
5 of 14 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
Claude steers live music by writing Strudel code played in a browser page
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
The crawl stopped at the 60-package limit. The rest of the tree was never resolved.
36 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)
56 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.
+44 more not listed. The counts by reason above cover all of them.
Not followed: peerDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.