pathmark

MCPattested
v0.1.17io.github.hacksurvivorMITUpdated 14d agonpmGitHub

Local-first intent and provenance for Codex, Claude Code, Cursor, Gemini CLI, and MCP agents.

Works in
ClaudeCursorCopilotGemini

Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Attested build
A verified provenance attestation binds this artifact to the listed repository. Nobody has claimed the listing yet — this proves where the code was built, not who stands behind it.
702Downloads/wk
3GitHub stars
14d agoLast update
Package
Authorio.github.hacksurvivor
LicenseMIT
Version0.1.17
Sourcenpm+mcp-registry
Trust Status
A
85/100Trusted
✓Listed in Forge index+10/10
✓Identity verified · attested build+20/20
—Ed25519 publish signature+0/5
→ Included automatically when the publisher runs `forge publish`
—Domain verification+0/5
→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }
✓npm Trusted Publishing (Sigstore)+5/5
—npm maintainer match+0/5
→ Publisher: add the verified GitHub login to the npm package's maintainers (npm owner add <login>)
✓CVE scan · clean+30/30
✓Static analysis · clean+20/20
Paste into Claude Code, Cursor, or any AI assistant to fix all gaps
StatusIdentity verified
PublisherUnverified
SignatureUnsigned
Domain—
Provenance✓ Sigstore-verified · a4da337
Dependencies✓ 60 resolved+ · none vulnerable
Tool surface25 tools · 1 privileged
Security scan✓ Cleanv0.1.14 · 1mo agoHow well does this scan work?
EvalsNone
IndexedAug 26, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

25 tools · 1 privileged
Statically extracted from the published packagev0.1.14 · 1mo ago

Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.

get_configShow the local Pathmark Memory store location and enabled optional features.

Show the local Pathmark Memory store location and enabled optional features.

No input schema was published for this tool.

rememberSave raw searchable evidence. Durable intent should use the approval-gated conclusion workflow.

Save raw searchable evidence. Durable intent should use the approval-gated conclusion workflow.

No input schema was published for this tool.

create_conclusionPropose a durable higher-signal conclusion. Approval is required by default before it can be recalled.

Propose a durable higher-signal conclusion. Approval is required by default before it can be recalled.

No input schema was published for this tool.

search_memorySearch saved local memories and conclusions.

Search saved local memories and conclusions.

No input schema was published for this tool.

get_contextReturn compact local memory context for a task or question.

Return compact local memory context for a task or question.

No input schema was published for this tool.

recall_memoryTransparent recall for any MCP-capable harness. Use this at task start or before answering to show exactly which memories were used.

Transparent recall for any MCP-capable harness. Use this at task start or before answering to show exactly which memories were used.

No input schema was published for this tool.

session_traceShow a bounded chronological audit trail for one captured session: prompts, exact injected memory IDs, redacted tool inputs/results, and answers.

Show a bounded chronological audit trail for one captured session: prompts, exact injected memory IDs, redacted tool inputs/results, and answers.

No input schema was published for this tool.

rate_recallAttach explicit relevance labels to one exact Pathmark recall so audit_memory can report measured precision.

Attach explicit relevance labels to one exact Pathmark recall so audit_memory can report measured precision.

No input schema was published for this tool.

list_conclusionsList saved durable conclusions.

List saved durable conclusions.

No input schema was published for this tool.

list_pending_conclusionsList bounded approval-gated conclusion proposals. Pending records are never returned by normal memory search.

List bounded approval-gated conclusion proposals. Pending records are never returned by normal memory search.

No input schema was published for this tool.

approve_conclusionApprove one pending conclusion, optionally correcting its text or tags. The transition is atomic and auditable.

Approve one pending conclusion, optionally correcting its text or tags. The transition is atomic and auditable.

No input schema was published for this tool.

reject_conclusionReject one pending conclusion while retaining it in the canonical audit trail and excluding it from recall.

Reject one pending conclusion while retaining it in the canonical audit trail and excluding it from recall.

No input schema was published for this tool.

get_memory_snapshotGenerate a bounded USER/PROJECT/AGENT snapshot from approved canonical conclusions only.

Generate a bounded USER/PROJECT/AGENT snapshot from approved canonical conclusions only.

No input schema was published for this tool.

delete_memoryprivilegedSoft-delete a saved memory or conclusion by id.

Soft-delete a saved memory or conclusion by id.

No input schema was published for this tool.

update_memoryCorrect an existing memory while preserving its prior versions in local history.

Correct an existing memory while preserving its prior versions in local history.

No input schema was published for this tool.

supersede_memoryReplace an outdated memory with a linked current record while preserving history.

Replace an outdated memory with a linked current record while preserving history.

No input schema was published for this tool.

purge_memoryPreview or permanently remove matching records from the canonical store. A backup is created before an applied purge.

Preview or permanently remove matching records from the canonical store. A backup is created before an applied purge.

No input schema was published for this tool.

consolidate_memoryPrepare a bounded unsynthesized evidence batch and, when server synthesis is configured, preview or stage evidence-backed conclusion proposals. Proposals are never auto-approved.

Prepare a bounded unsynthesized evidence batch and, when server synthesis is configured, preview or stage evidence-backed conclusion proposals. Proposals are never auto-approved.

No input schema was published for this tool.

audit_memoryMeasure capture-to-recall behavior, unused records, recall age, duplicate rate, stale raw hits, and available precision evidence without changing memory.

Measure capture-to-recall behavior, unused records, recall age, duplicate rate, stale raw hits, and available precision evidence without changing memory.

No input schema was published for this tool.

doctor_memoryReport duplicate, deleted, expired, conclusion, invalid-record, and index health counts without changing data.

Report duplicate, deleted, expired, conclusion, invalid-record, and index health counts without changing data.

No input schema was published for this tool.

compact_memoryPreview or apply exact deduplication, expired-record removal, retention, and deleted-record purging. Applied runs create a backup.

Preview or apply exact deduplication, expired-record removal, retention, and deleted-record purging. Applied runs create a backup.

No input schema was published for this tool.

backup_memoryCreate a point-in-time copy of the canonical local JSONL store.

Create a point-in-time copy of the canonical local JSONL store.

No input schema was published for this tool.

export_memoryExport a scoped, mergeable JSONL bundle for another Pathmark installation or trusted sync transport.

Export a scoped, mergeable JSONL bundle for another Pathmark installation or trusted sync transport.

No input schema was published for this tool.

ask_memoryAsk approved conclusions first, then scoped or explicitly requested raw evidence. Returns an answer, exact provenance, and a recallId for feedback.

Ask approved conclusions first, then scoped or explicitly requested raw evidence. Returns an answer, exact provenance, and a recallId for feedback.

No input schema was published for this tool.

chatChat with Pathmark using approved conclusions first and only scoped or explicitly requested raw fallback. Returns an answer, provenance, and recallId.

Chat with Pathmark using approved conclusions first and only scoped or explicitly requested raw fallback. Returns an answer, provenance, and recallId.

No input schema was published for this tool.

25 of 25 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

Local-first intent and provenance for Codex, Claude Code, Cursor, Gemini CLI, and MCP agents.

Keywords
mcp
Alternatives
Comparing tool surfaces…

Dependency tree

What one Forge scan resolved from npm metadata on 2026-08-31 — observed resolution, not a publisher declaration.

60 packages resolved · 2 direct · none carrying advisories Resolution stops at depth 4 and 60 packages.

The crawl stopped at the depth-4 limit. Anything below that level was never resolved.

The crawl stopped at the 60-package limit. The rest of the tree was never resolved.

36 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)

Declared but not resolved

54 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.

+42 more not listed. The counts by reason above cover all of them.

Not followed: peerDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.