sh.knowngood/knowngood

MCPcommunitylive
v1.8.0sh.knowngoodUnknownUpdated 5d ago

Search agent-ready sites or fetch one site's report; every capability probe-verified, dated.

Endpoint healthlive
checked 5 days ago · 363ms
100% of the last 6 checks reached this endpoint
Works in
ClaudeCursorCopilotChatGPTGemini

Inferred from the transports this listing declares (streamable-http). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →
5d agoLast update
Package
Authorsh.knowngood
LicenseUnknown
Version1.8.0
Sourcemcp-registry
Trust Status
B
60/100Good
Hosted endpoint only: this assessment covers who publishes it and whether it answers, not the code behind it. No CVE, dependency or source analysis applies, so nothing here is a clean bill for that code.
✓Listed in Forge index+10/10
—Publisher identity verified+0/30
→ Publisher: this listing has no repository on file, so `forge publish` cannot verify ownership automatically. Use "Claim this listing" above — Forge reviews these by hand.
—Domain verification+0/10
→ Not currently available for this listing type — the domain-verification check only runs for npm-backed packages today, so this row cannot be earned here yet regardless of what's hosted at the domain.
✓Prompt-injection scan · clean+30/30
✓Obfuscation / exfil scan · clean+20/20
StatusCommunity-indexed
PublisherUnverified
SignatureUnsigned
Domain—
Provenance—
DependenciesNot audited
Tool surface3 tools · none privileged
Security scan✓ Cleanvlive · 5d agoHow well does this scan work?
EvalsNone
IndexedAug 27, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

3 tools · none privileged
Observed live from the vendor's endpoint5d ago

Read from a real MCP initialize → tools/list handshake against the declared endpoint. No tool was ever invoked — tools/list is the read-only introspection call the protocol defines for this. It reflects what the server advertised at that moment; a hosted endpoint is not pinned to any version and can change without notice.

  • https://knowngood.sh/mcp3 tools · 363ms
check_webmcpCheck a website LIVE for WebMCP tools, and where a browser is available whether any tool actually registers when the page runs. Returns one of: registered, declared_only, declared, not_declared, could_not_ask, or excluded when the site's robots.txt refuses AI input. could_not_ask is a distinct answ…

Check a website LIVE for WebMCP tools, and where a browser is available whether any tool actually registers when the page runs. Returns one of: registered, declared_only, declared, not_declared, could_not_ask, or excluded when the site's robots.txt refuses AI input. could_not_ask is a distinct answ…

ParameterTypeDescription
url*stringThe site to check. A hostname or a full URL; https is assumed.
find_capabilityFind websites where an agent can accomplish a task. Returns probe-verified agent-readiness signals, unverified apparent actions read from page content, the verification tier, how each site was found (it declared agent access, probe discovery, or it was submitted), and a report URL to cite. Returns…

Find websites where an agent can accomplish a task. Returns probe-verified agent-readiness signals, unverified apparent actions read from page content, the verification tier, how each site was found (it declared agent access, probe discovery, or it was submitted), and a report URL to cite. Returns…

ParameterTypeDescription
querystringWhat you are trying to do, in plain language. Optional when at least one filter is set: with no query the tool lists every listed site matching the filters, in…
countrystringISO 3166-1 alpha-2, e.g. GB
entity_typestring—
transactionalbooleanOnly sites where an agent can act, not just read
has_mcpbooleanOnly sites whose MCP server answered tools/list when we tested; results include the tool names
has_mdbooleanOnly sites with verified markdown: negotiation that passed the strict re-grade (the body is markdown and differs from the HTML), or a .md twin. Omit both class…
has_endpointbooleanOnly sites with a verified endpoint surface (working MCP server or API catalog).
has_webmcpbooleanOnly sites whose in-page WebMCP tools were RUNTIME-VERIFIED: the page was executed in a headless browser with a modelContext supplied, and it registered at lea…
limitinteger—
get_site_reportFetch Known Good's dated verification report for one listed website: which capabilities were tested, which passed, when it was probed, what an agent can apparently do there, and how the site was found: whether it declared agent access, came from probe discovery, or was submitted. Answers "is this s…

Fetch Known Good's dated verification report for one listed website: which capabilities were tested, which passed, when it was probed, what an agent can apparently do there, and how the site was found: whether it declared agent access, came from probe discovery, or was submitted. Answers "is this s…

ParameterTypeDescription
host*stringThe site's hostname or URL, e.g. example.com

3 of 3 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

Search agent-ready sites or fetch one site's report; every capability probe-verified, dated.

Keywords
mcp
Alternatives
Comparing tool surfaces…

No dependency coverage

This entry publishes no npm package, so Forge has no dependency tree for it. That is a gap in coverage — not a statement that it has no dependencies.