squiggles

MCPcommunity

v1.0.2io.github.carldawsUnknownUpdated 1d agonpm GitHub

Let your coding agent see the squiggles — LSP diagnostics, navigation, refactoring, and extras

Works in

ClaudeCursorCopilotGemini

Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →

5GitHub stars

1Forks

1d agoLast update

Package

Authorio.github.carldaws

LicenseUnknown

Version1.0.2

Sourcenpm+mcp-registry

GitHubcarldaws/squiggles

SBOMCycloneDX 1.6 ↓

Trust Status

B

60/100Good

✓Listed in Forge index+10/10

—Publisher identity verified+0/20

→ Publisher: run `forge publish` from the package repo to claim ownership

—Ed25519 publish signature+0/5

→ Included automatically when the publisher runs `forge publish`

—Domain verification+0/5

→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }

—npm Trusted Publishing (Sigstore)+0/5

→ Publish from GitHub Actions with --provenance so the attestation binds this package to this repo

—npm maintainer match+0/5

→ Earned once your identity is verified above and that login is an npm maintainer of this package

✓CVE scan · clean+30/30

✓Static analysis · clean+20/20

Paste into Claude Code, Cursor, or any AI assistant to fix all gaps

StatusCommunity-indexed

PublisherUnverified

SignatureUnsigned

Domain—

Provenance—

Dependencies✓ 60 resolved+ · none vulnerable

Tool surface40 tools · 2 privileged

Security scan✓ Cleanv1.0.2 · todayHow well does this scan work?

EvalsNone

IndexedSep 20, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

40 tools · 2 privileged

Statically extracted from the published packagev1.0.2 · 17h ago

Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.

Filter toolsPrivileged only

goto_definitionGo to the definition of a symbol at the given position. Returns the file and location where the symbol is defined.

Go to the definition of a symbol at the given position. Returns the file and location where the symbol is defined.

No input schema was published for this tool.

goto_type_definitionGo to the type definition of a symbol. Returns where the type of the symbol at the given position is defined.

Go to the type definition of a symbol. Returns where the type of the symbol at the given position is defined.

No input schema was published for this tool.

goto_implementationGo to implementations of an interface or abstract method. Returns concrete implementation locations.

Go to implementations of an interface or abstract method. Returns concrete implementation locations.

No input schema was published for this tool.

goto_declarationGo to the declaration of a symbol (relevant in C/C++ for header declarations).

Go to the declaration of a symbol (relevant in C/C++ for header declarations).

No input schema was published for this tool.

find_referencesFind all references to a symbol across the project. Returns every location where the symbol is used.

Find all references to a symbol across the project. Returns every location where the symbol is used.

No input schema was published for this tool.

hoverGet hover information (type signature, documentation) for a symbol at the given position.

Get hover information (type signature, documentation) for a symbol at the given position.

No input schema was published for this tool.

signature_helpGet parameter information for a function call at the given position.

Get parameter information for a function call at the given position.

No input schema was published for this tool.

document_symbolsGet all symbols (functions, classes, variables, etc.) defined in a file as a hierarchical tree.

Get all symbols (functions, classes, variables, etc.) defined in a file as a hierarchical tree.

No input schema was published for this tool.

workspace_symbolsSearch for symbols across the entire project by name. Supports fuzzy matching.

Search for symbols across the entire project by name. Supports fuzzy matching.

No input schema was published for this tool.

code_actionsGet available code actions (quick fixes, refactorings) at the given position. Diagnostics overlapping the range are passed to the server so quick fixes are included.

Get available code actions (quick fixes, refactorings) at the given position. Diagnostics overlapping the range are passed to the server so quick fixes are included.

No input schema was published for this tool.

formatFormat a file using the language server's formatter and write the result to disk.

Format a file using the language server's formatter and write the result to disk.

No input schema was published for this tool.

rename_prepareprivilegedCheck if a symbol at the given position can be renamed, and get its current name.

Check if a symbol at the given position can be renamed, and get its current name.

No input schema was published for this tool.

renameprivilegedRename a symbol across all affected files. Returns the workspace edit, or applies it to disk when apply is true.

Rename a symbol across all affected files. Returns the workspace edit, or applies it to disk when apply is true.

No input schema was published for this tool.

call_hierarchy_incomingFind all functions/methods that call the function at the given position.

Find all functions/methods that call the function at the given position.

No input schema was published for this tool.

call_hierarchy_outgoingFind all functions/methods that are called by the function at the given position.

Find all functions/methods that are called by the function at the given position.

No input schema was published for this tool.

type_hierarchyGet the type hierarchy (supertypes and subtypes) for the type at the given position.

Get the type hierarchy (supertypes and subtypes) for the type at the given position.

No input schema was published for this tool.

open_fileOpen a file in the LSP server. This triggers diagnostics and makes the file available for subsequent no-arg diagnostics calls.

Open a file in the LSP server. This triggers diagnostics and makes the file available for subsequent no-arg diagnostics calls.

No input schema was published for this tool.

diagnosticsGet current diagnostics (errors, warnings) for a file. If no file is specified, returns diagnostics for all currently open files with issues. Waits for fresh results after recent edits.

Get current diagnostics (errors, warnings) for a file. If no file is specified, returns diagnostics for all currently open files with issues. Waits for fresh results after recent edits.

No input schema was published for this tool.

clangd_switch_source_headerSwitch between a C/C++ source file and its corresponding header

Switch between a C/C++ source file and its corresponding header

No input schema was published for this tool.

clangd_symbol_infoGet the USR and symbol details for the symbol at the given position

Get the USR and symbol details for the symbol at the given position

No input schema was published for this tool.

clangd_astShow the Clang AST for a range in a C/C++ file

Show the Clang AST for a range in a C/C++ file

No input schema was published for this tool.

go_list_known_packagesList packages that are importable from the given Go file

List packages that are importable from the given Go file

No input schema was published for this tool.

go_list_importsList the imports of a Go file and the package it belongs to

List the imports of a Go file and the package it belongs to

No input schema was published for this tool.

go_add_importAdd an import path to a Go file. Applies the change to disk.

Add an import path to a Go file. Applies the change to disk.

No input schema was published for this tool.

go_mod_tidyRun go mod tidy for the module containing the given go.mod file

Run go mod tidy for the module containing the given go.mod file

No input schema was published for this tool.

go_vulncheckRun govulncheck to find known vulnerabilities in dependencies. May take a while on first run.

Run govulncheck to find known vulnerabilities in dependencies. May take a while on first run.

No input schema was published for this tool.

go_modulesList Go modules found under a directory

List Go modules found under a directory

No input schema was published for this tool.

ruby_discover_testsDiscover test cases (Minitest, RSpec) in a Ruby file

Discover test cases (Minitest, RSpec) in a Ruby file

No input schema was published for this tool.

ruby_go_to_relevant_fileNavigate between implementation and test file

Navigate between implementation and test file

No input schema was published for this tool.

ruby_show_syntax_treeShow the Prism AST for a Ruby file

Show the Prism AST for a Ruby file

No input schema was published for this tool.

ruby_dependenciesList project gem dependencies

List project gem dependencies

No input schema was published for this tool.

rust_expand_macroExpand the macro invocation at the given position and show the generated code

Expand the macro invocation at the given position and show the generated code

No input schema was published for this tool.

rust_parent_moduleNavigate to the parent module of the given position

Navigate to the parent module of the given position

No input schema was published for this tool.

rust_open_cargo_tomlFind the Cargo.toml of the crate containing the given file

Find the Cargo.toml of the crate containing the given file

No input schema was published for this tool.

rust_external_docsGet documentation URLs (docs.rs, local rustdoc) for the symbol at the given position

Get documentation URLs (docs.rs, local rustdoc) for the symbol at the given position

No input schema was published for this tool.

rust_related_testsFind tests that cover the code at the given position

Find tests that cover the code at the given position

No input schema was published for this tool.

rust_view_syntax_treeShow the syntax tree for a Rust file

Show the syntax tree for a Rust file

No input schema was published for this tool.

rust_runnablesList runnable targets (tests, binaries, doctests) at the given position

List runnable targets (tests, binaries, doctests) at the given position

No input schema was published for this tool.

rust_reload_workspaceReload workspace metadata from Cargo, e.g. after editing Cargo.toml

Reload workspace metadata from Cargo, e.g. after editing Cargo.toml

No input schema was published for this tool.

rust_dependenciesList all crates in the workspace dependency graph

List all crates in the workspace dependency graph

No input schema was published for this tool.

40 of 40 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

Let your coding agent see the squiggles — LSP diagnostics, navigation, refactoring, and extras

Keywords

mcp

Alternatives

Comparing tool surfaces…

Tools exposed

40 tools · 2 privileged · observed 2026-09-20 by static extraction. A tool surface is what one scan read on one day, not a live capability list.

Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.

Dependency tree

What one Forge scan resolved from npm metadata on 2026-09-20 — observed resolution, not a publisher declaration.

60 packages resolved · 4 direct · none carrying advisories Resolution stops at depth 4 and 60 packages.

yaml2.9.1
picomatch4.0.7
@modelcontextprotocol/sdk1.30.017 dependencies
- ajv8.20.0+3 not drawn1 dependency
  - fast-deep-equal3.1.3
- zod4.6.5
- cors2.8.6+2 not drawn
- hono4.13.8
- jose6.2.12
- express5.2.1+27 not drawn1 dependency
  - content-type1.0.5
- raw-body3.0.2+4 not drawn
- ajv-formats3.0.11 dependency
  - ajv8.20.0shown above+3 not drawn
- cross-spawn7.0.6+3 not drawn
- eventsource3.0.71 dependency
  - eventsource-parser3.1.1
- content-type1.0.5shown above
- pkce-challenge5.0.1
- @hono/node-server2.1.1
- json-schema-typed8.0.2
- eventsource-parser3.1.1shown above
- express-rate-limit8.7.0+2 not drawn
- zod-to-json-schema3.25.2
vscode-languageserver-protocol3.18.32 dependencies
- vscode-jsonrpc9.0.2
- vscode-languageserver-types3.18.3

The crawl stopped at the 60-package limit. The rest of the tree was never resolved.

36 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)

Declared but not resolved

57 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.

package cap reached: 57

shebang-command ^2.0.0 — required by cross-spawn@7.0.6package cap reached
ip-address ^10.2.0 — required by express-rate-limit@8.7.0package cap reached
side-channel ^1.1.1 — required by qs@6.16.0package cap reached
es-define-property ^1.0.1 — required by qs@6.16.0package cap reached
wrappy 1 — required by once@1.4.0package cap reached
debug ^4.4.3 — required by send@1.2.1package cap reached
encodeurl ^2.0.0 — required by send@1.2.1package cap reached
escape-html ^1.0.3 — required by send@1.2.1package cap reached
etag ^1.8.1 — required by send@1.2.1package cap reached
fresh ^2.0.0 — required by send@1.2.1package cap reached
http-errors ^2.0.1 — required by send@1.2.1package cap reached
mime-types ^3.0.2 — required by send@1.2.1package cap reached

+45 more not listed. The counts by reason above cover all of them.

Not followed: peerDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.