passalong

MCPattestedlive
v0.17.0Lukman IsiakaMITUpdated 10d agonpmGitHub

Hand tasks, bugs and finished work to AI coding agents, and get back a write-up with evidence.

Endpoint healthlive
checked 1 day ago · 325ms · auth required
100% of the last 1 check reached this endpoint
Works in
ClaudeCursorCopilotChatGPTGemini

Inferred from the transports this listing declares (stdio, streamable-http). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Attested build
A verified provenance attestation binds this artifact to the listed repository. Nobody has claimed the listing yet — this proves where the code was built, not who stands behind it.
759Downloads/wk
10d agoLast update
Package
AuthorLukman Isiaka
LicenseMIT
Version0.17.0
Sourcenpm+mcp-registry
Trust Status
A
85/100Trusted
✓Listed in Forge index+10/10
✓Identity verified · attested build+20/20
—Ed25519 publish signature+0/5
→ Included automatically when the publisher runs `forge publish`
—Domain verification+0/5
→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }
✓npm Trusted Publishing (Sigstore)+5/5
—npm maintainer match+0/5
→ Publisher: add the verified GitHub login to the npm package's maintainers (npm owner add <login>)
✓CVE scan · clean+30/30
✓Static analysis · clean+20/20
Paste into Claude Code, Cursor, or any AI assistant to fix all gaps
StatusIdentity verified
PublisherUnverified
SignatureUnsigned
Domain—
Provenance✓ Sigstore-verified · 5d45748
Dependencies✓ 60 resolved+ · none vulnerable
Tool surface38 tools · 3 privileged
Security scan✓ Cleanv0.17.0 · 1d agoHow well does this scan work?
EvalsNone
IndexedOct 11, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

38 tools · 3 privileged
Statically extracted from the published packagev0.17.0 · 1d ago

Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.

assignReassign a guide or task the user wrote, or one assigned to them, to someone else in its team, when the user asks:

Reassign a guide or task the user wrote, or one assigned to them, to someone else in its team, when the user asks:

No input schema was published for this tool.

list_foldersFind project folders of documents, assets and guides. Pass query to find the folders whose name, description, or any document's name or text mention those words; each then names its matching documents. Pass guide to find the folders a guide is in. Requires sync sign-in.

Find project folders of documents, assets and guides. Pass query to find the folders whose name, description, or any document's name or text mention those words; each then names its matching documents. Pass guide to find the folders a guide is in. Requires sync sign-in.

No input schema was published for this tool.

create_folderCreate a folder or nested subfolder after checking list_folders. Pass parent to nest it; omit team for a private root, and pass a team slug only when sharing was requested. A subfolder inherits its parent's space.

Create a folder or nested subfolder after checking list_folders. Pass parent to nest it; omit team for a private root, and pass a team slug only when sharing was requested. A subfolder inherits its parent's space.

No input schema was published for this tool.

update_folderRename, describe, recolor or move a folder. Pass parent as an empty string to move it to the top level. A folder cannot move inside itself or a descendant, or into another team/private space.

Rename, describe, recolor or move a folder. Pass parent as an empty string to move it to the top level. A folder cannot move inside itself or a descendant, or into another team/private space.

No input schema was published for this tool.

get_folderList a folder's documents, assets and linked guides.

List a folder's documents, assets and linked guides.

No input schema was published for this tool.

get_folder_documentRead the full Markdown and version before editing it.

Read the full Markdown and version before editing it.

No input schema was published for this tool.

get_folder_assetRead an image or small text file from a folder into this agent's context. Other file types stay private downloads.

Read an image or small text file from a folder into this agent's context. Other file types stay private downloads.

No input schema was published for this tool.

add_folder_assetAdd a screenshot, reference file or other asset from this machine to a folder. Use a real file path you can read; the bytes are uploaded directly, not copied into a guide. Images, PDF, ZIP and text are accepted up to 10 MB.

Add a screenshot, reference file or other asset from this machine to a folder. Use a real file path you can read; the bytes are uploaded directly, not copied into a guide. Images, PDF, ZIP and text are accepted up to 10 MB.

No input schema was published for this tool.

create_folder_documentAdd Markdown such as a brief or script to a folder.

Add Markdown such as a brief or script to a folder.

No input schema was published for this tool.

save_folder_documentSave a new revision. Send the version returned when you read it; a newer edit is refused.

Save a new revision. Send the version returned when you read it; a newer edit is refused.

No input schema was published for this tool.

rename_folder_documentprivilegedRename a folder document. Its id, text and history stay; no version is needed, because a rename cannot overwrite anyone's text.

Rename a folder document. Its id, text and history stay; no version is needed, because a rename cannot overwrite anyone's text.

No input schema was published for this tool.

get_folder_document_historyRead a folder document's earlier versions. Without version, lists them newest first; with version, returns that version's text. To bring one back, save it with save_folder_document over the current version.

Read a folder document's earlier versions. Without version, lists them newest first; with version, returns that version's text. To bring one back, save it with save_folder_document over the current version.

No input schema was published for this tool.

link_folder_guidePut a task, bug or handoff guide in the folder, beside the documents and assets it uses: one just published or one that already existed.

Put a task, bug or handoff guide in the folder, beside the documents and assets it uses: one just published or one that already existed.

No input schema was published for this tool.

unlink_folder_guideTake a guide out of a folder. Only the link goes: the guide itself is unchanged, and link_folder_guide puts it back.

Take a guide out of a folder. Only the link goes: the guide itself is unchanged, and link_folder_guide puts it back.

No input schema was published for this tool.

delete_folder_documentprivilegedDelete one document from a folder, with its earlier versions. It cannot be brought back, so do it only when the person asked for that document to go; to change what it says, use save_folder_document instead.

Delete one document from a folder, with its earlier versions. It cannot be brought back, so do it only when the person asked for that document to go; to change what it says, use save_folder_document instead.

No input schema was published for this tool.

delete_folder_assetprivilegedDelete one file from a folder. It cannot be brought back, so do it only when the person asked for that file to go.

Delete one file from a folder. It cannot be brought back, so do it only when the person asked for that file to go.

No input schema was published for this tool.

search_guidesSearch transfer guides by words in the title, tags, stack, or body: the user's own

Search transfer guides by words in the title, tags, stack, or body: the user's own

No input schema was published for this tool.

inboxGuides handed to this user (or to their teams) that they have not pulled yet. Call it

Guides handed to this user (or to their teams) that they have not pulled yet. Call it

No input schema was published for this tool.

boardThe state of this user's transfers as queues: waiting on you (handed to you, not

The state of this user's transfers as queues: waiting on you (handed to you, not

No input schema was published for this tool.

logThis user's own acts on guides, newest first: what they published, what they took

This user's own acts on guides, newest first: what they published, what they took

No input schema was published for this tool.

activityWhat has happened to this user's guides and handoffs: who pulled one, who archived one,

What has happened to this user's guides and handoffs: who pulled one, who archived one,

No input schema was published for this tool.

clear_activityClear the user's unread feed, after they have been shown what is in it. Read it with

Clear the user's unread feed, after they have been shown what is in it. Read it with

No input schema was published for this tool.

plan_tasksWrite tasks for agents: one step for a single task, or a larger goal broken into steps

Write tasks for agents: one step for a single task, or a larger goal broken into steps

No input schema was published for this tool.

takeSay you are doing it, and get it. With `id`, that guide — any kind: a task, a bug, a

Say you are doing it, and get it. With `id`, that guide — any kind: a task, a bug, a

No input schema was published for this tool.

progressSay you are still on what you hold, with a one-line note the hub shows. 30 minutes

Say you are still on what you hold, with a one-line note the hub shows. 30 minutes

No input schema was published for this tool.

hand_inDone here, with proof, sorted against the line it answers. Send `checks`: one entry per

Done here, with proof, sorted against the line it answers. Send `checks`: one entry per

No input schema was published for this tool.

askYou need the person's answer before you can go on. Ask one clear question, with the

You need the person's answer before you can go on. Ask one clear question, with the

No input schema was published for this tool.

passNot yours to do, or you are stuck: give it back with the reason. It is open again for

Not yours to do, or you are stuck: give it back with the reason. It is open again for

No input schema was published for this tool.

get_guideREAD a transfer guide by passalong id or share link and return its markdown. A guide over

READ a transfer guide by passalong id or share link and return its markdown. A guide over

No input schema was published for this tool.

attach_screenshotUpload an image as evidence — a path in `file`, or the bytes in `data` when you have

Upload an image as evidence — a path in `file`, or the bytes in `data` when you have

No input schema was published for this tool.

attach_fileUpload a file that is not a picture — a log, a PDF, a CSV, a zip, up to 10MB — and get

Upload a file that is not a picture — a log, a PDF, a CSV, a zip, up to 10MB — and get

No input schema was published for this tool.

replyA person's tool, for someone driving their work from an assistant: write to whoever

A person's tool, for someone driving their work from an assistant: write to whoever

No input schema was published for this tool.

publish_guidePublish a guide from markdown (frontmatter + sections). Check what you hold first (take

Publish a guide from markdown (frontmatter + sections). Check what you hold first (take

No input schema was published for this tool.

file_bugsFile one or more bugs you found but are not fixing, as a set. Opens a report and

File one or more bugs you found but are not fixing, as a set. Opens a report and

No input schema was published for this tool.

guide_templateThe empty guide skeleton with guidance comments for each section. By default a task

The empty guide skeleton with guidance comments for each section. By default a task

No input schema was published for this tool.

accountsThe Passalong accounts signed in on this machine, which one this session is using, and

The Passalong accounts signed in on this machine, which one this session is using, and

No input schema was published for this tool.

use_accountSay which signed-in account this session acts as. Call it only with a name the PERSON

Say which signed-in account this session acts as. Call it only with a name the PERSON

No input schema was published for this tool.

set_guide_statusArchive a guide (`consumed`) or put it back on the board (`published`). Archiving is the

Archive a guide (`consumed`) or put it back on the board (`published`). Archiving is the

No input schema was published for this tool.

38 of 38 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

Hand tasks, bugs and finished work to AI coding agents, and get back a write-up with evidence.

Keywords
mcpclaude-codeagenthandoffknowledge-transferclimarkdownmcp-servercoding-agentstask-managementcodex
Alternatives
Comparing tool surfaces…

Dependency tree

What one Forge scan resolved from npm metadata on 2026-10-11 — observed resolution, not a publisher declaration.

60 packages resolved · 2 direct · none carrying advisories Resolution stops at depth 4 and 60 packages.

The crawl stopped at the depth-4 limit. Anything below that level was never resolved.

The crawl stopped at the 60-package limit. The rest of the tree was never resolved.

36 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)

Declared but not resolved

55 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.

+43 more not listed. The counts by reason above cover all of them.

Not followed: peerDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.

Topics

Related in documents & pdfs