prefab-mcp

MCPcommunity
v0.1.1io.prefabappUnknownUpdated 1mo agonpmGitHub

List, create and deploy your Prefab project templates from any MCP agent.

Works in
ClaudeCursorCopilotGemini

Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →
1mo agoLast update
Package
Authorio.prefabapp
LicenseUnknown
Version0.1.1
Sourcenpm+mcp-registry
Trust Status
B
60/100Good
✓Listed in Forge index+10/10
—Publisher identity verified+0/20
→ Publisher: run `forge publish` from the package repo to claim ownership
—Ed25519 publish signature+0/5
→ Included automatically when the publisher runs `forge publish`
—Domain verification+0/5
→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }
—npm Trusted Publishing (Sigstore)+0/5
→ Publish from GitHub Actions with --provenance so the attestation binds this package to this repo
—npm maintainer match+0/5
→ Earned once your identity is verified above and that login is an npm maintainer of this package
✓CVE scan · clean+30/30
✓Static analysis · clean+20/20
Paste into Claude Code, Cursor, or any AI assistant to fix all gaps
StatusCommunity-indexed
PublisherUnverified
SignatureUnsigned
Domain—
Provenance—
Dependencies✓ 60 resolved+ · none vulnerable
Tool surface22 tools · 3 privileged
Security scan✓ Cleanv0.1.1 · 22d agoHow well does this scan work?
EvalsNone
IndexedAug 26, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

22 tools · 3 privileged
Statically extracted from the published packagev0.1.1 · 22d ago

Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.

list_templatesEvery template in the user's Prefab library: what it is called, what it creates, and the

Every template in the user's Prefab library: what it is called, what it creates, and the

No input schema was published for this tool.

describe_templateThe full structure of one template: every folder and file it creates, the placeholders it

The full structure of one template: every folder and file it creates, the placeholders it

No input schema was published for this tool.

preview_deployWhat deploying a template into a folder would create, with the given values filled in.

What deploying a template into a folder would create, with the given values filled in.

No input schema was published for this tool.

list_watched_foldersFolders Prefab is watching, and the rules that run on files landing in them. Explains why a

Folders Prefab is watching, and the rules that run on files landing in them. Explains why a

No input schema was published for this tool.

list_globalsLibrary-wide placeholders, actions and saved value presets - the things defined once and

Library-wide placeholders, actions and saved value presets - the things defined once and

No input schema was published for this tool.

deploy_templateCreate a template's folders and files inside a destination folder, filling in the values

Create a template's folders and files inside a destination folder, filling in the values

No input schema was published for this tool.

create_templateAdd a new template to the library. Describe the folders and files as a tree; a node with

Add a new template to the library. Describe the folders and files as a tree; a node with

No input schema was published for this tool.

update_templateChange an existing template: its name, description, icon, structure or placeholders.

Change an existing template: its name, description, icon, structure or placeholders.

No input schema was published for this tool.

delete_templateprivilegedRemove a template from the library. Starter templates cannot be deleted.

Remove a template from the library. Starter templates cannot be deleted.

No input schema was published for this tool.

duplicate_templateCopy a template. The usual way to build on a starter template, which cannot be edited in place.

Copy a template. The usual way to build on a starter template, which cannot be edited in place.

No input schema was published for this tool.

import_folderTurn a project folder that already exists into a template. "contents" keeps the files and

Turn a project folder that already exists into a template. "contents" keeps the files and

No input schema was published for this tool.

export_templatesWrite one or more templates to a .prefab file that can be opened on another Mac. Templates

Write one or more templates to a .prefab file that can be opened on another Mac. Templates

No input schema was published for this tool.

import_archiveAdd the templates in a .prefab file to this library.

Add the templates in a .prefab file to this library.

No input schema was published for this tool.

set_global_placeholderA placeholder available to every template that writes {{key}} without defining it itself.

A placeholder available to every template that writes {{key}} without defining it itself.

No input schema was published for this tool.

delete_global_placeholderprivilegedTemplates that reference the key will deploy it literally again unless they define it.

Templates that reference the key will deploy it literally again unless they define it.

No input schema was published for this tool.

set_value_presetA named set of answers - "Acme", "Northern Stage" - that fills a deploy prompt in one go.

A named set of answers - "Acme", "Northern Stage" - that fills a deploy prompt in one go.

No input schema was published for this tool.

delete_value_presetprivilegedNo description published

This tool published no description. Forge does not invent one.

pause_watched_folderA paused folder keeps its rules but stops acting on files that arrive.

A paused folder keeps its rules but stops acting on files that arrive.

No input schema was published for this tool.

stop_watching_folderForget the folder and its rules. The folder and its files are left alone.

Forget the folder and its rules. The folder and its files are left alone.

No input schema was published for this tool.

apply_rules_to_folderRun a watched folder's rules over the files sitting in it now. With dryRun, reports what

Run a watched folder's rules over the files sitting in it now. With dryRun, reports what

No input schema was published for this tool.

undo_watched_folder_runPut back what a watched folder last changed. Files converted without keeping the original,

Put back what a watched folder last changed. Files converted without keeping the original,

No input schema was published for this tool.

request_folder_accessPrefab is sandboxed and can only work in folders the user has pointed it at. This puts the

Prefab is sandboxed and can only work in folders the user has pointed it at. This puts the

No input schema was published for this tool.

21 of 22 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

List, create and deploy your Prefab project templates from any MCP agent.

Keywords
mcp
Alternatives
Comparing tool surfaces…

Dependency tree

What one Forge scan resolved from npm metadata on 2026-09-20 — observed resolution, not a publisher declaration.

60 packages resolved · 2 direct · none carrying advisories Resolution stops at depth 4 and 60 packages.

The crawl stopped at the depth-4 limit. Anything below that level was never resolved.

The crawl stopped at the 60-package limit. The rest of the tree was never resolved.

36 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)

Declared but not resolved

53 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.

+41 more not listed. The counts by reason above cover all of them.

Not followed: peerDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.