MCP server that lets AI agents drive a real PTY/TTY
Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.
terminal_batchprivilegedSend a sequence of inputs in one call and get the screen back once at the end — for driving aSend a sequence of inputs in one call and get the screen back once at the end — for driving a
No input schema was published for this tool.
terminal_clickprivilegedDeliver a left mouse-button click at a cell in the terminal. Only works when the programDeliver a left mouse-button click at a cell in the terminal. Only works when the program
No input schema was published for this tool.
terminal_createprivilegedSpawn a new terminal session and return its sessionId. You must call this before any per-sessionSpawn a new terminal session and return its sessionId. You must call this before any per-session
No input schema was published for this tool.
terminal_destroyprivilegedKill a session and forget the sessionId entirely. The shell process is terminated and theKill a session and forget the sessionId entirely. The shell process is terminated and the
No input schema was published for this tool.
terminal-useprivilegedNo description publishedThis tool published no description. Forge does not invent one.
terminal_listprivilegedList every active session and every tombstoned (recently-killed but reserved) sessionId.List every active session and every tombstoned (recently-killed but reserved) sessionId.
No input schema was published for this tool.
terminal_pressprivilegedPress a single named key or key combination. Examples of supported `key` values:Press a single named key or key combination. Examples of supported `key` values:
No input schema was published for this tool.
terminal_readprivilegedRead a window of the terminal buffer. The buffer is the full xterm-emulated stateRead a window of the terminal buffer. The buffer is the full xterm-emulated state
No input schema was published for this tool.
terminal_resetprivilegedWipe the terminal buffer and scrollback. By default the shell process keeps runningWipe the terminal buffer and scrollback. By default the shell process keeps running
No input schema was published for this tool.
terminal_resizeprivilegedChange the terminal size. Both `cols` and `rows` are optional; omitting one preserves the current value.Change the terminal size. Both `cols` and `rows` are optional; omitting one preserves the current value.
No input schema was published for this tool.
terminal_screenshotprivilegedRender a screen-sized window of the terminal to a PNG. Height is always the currentRender a screen-sized window of the terminal to a PNG. Height is always the current
No input schema was published for this tool.
terminal_scrollprivilegedTurn the mouse wheel over a cell of a full-screen program: scroll a pager, a file list, a log pane.Turn the mouse wheel over a cell of a full-screen program: scroll a pager, a file list, a log pane.
No input schema was published for this tool.
terminal_typeprivilegedType literal characters into the terminal as if a human were pressing keys.Type literal characters into the terminal as if a human were pressing keys.
No input schema was published for this tool.
terminal_waitprivilegedBlock until the terminal reaches a state, instead of guessing with sleeps or polling `terminal_read`.Block until the terminal reaches a state, instead of guessing with sleeps or polling `terminal_read`.
No input schema was published for this tool.
13 of 14 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
MCP server that lets AI agents drive a real PTY/TTY
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
Not followed: optionalDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.