notes
8 registry entries were observed exposing a tool named notes — none of them flagged as a privileged capability.
Every row is point-in-time scan output, dated below. Forge has an observed tool surface for 12,342 of 40,590 scannable entries (30%) — an entry that has not been scanned cannot appear here, so absence from this list is not evidence that an entry does not expose this tool.
- v0.2.6↓ 63/wk★ 1
Scans MCP tool definitions for hidden instructions and confused-deputy sinks
ClaudeCursorCopilotGeminimcp - ★ 6k
🐬DeepChat - A smart assistant that connects powerful AI to your personal world
agentagent-skillsaiai-assistantai-sdkchatgpt - v1.0.4★ 1
Agent intake desk for property renovation. Read only, CORS open, fail closed, receipts recompute.
ClaudeCursorCopilotChatGPTGeminimcp - v2.3.1★ 1
Neutral, verification-gated MCP directory of Japan construction contractors (KIRA-audited).
ClaudeCursorCopilotChatGPTGeminimcp - v0.4.20★ 1
Check an A2A agent before you delegate, or an MCP server's measured conduct. Free, no key.
ClaudeCursorCopilotChatGPTGeminimcp - v1.3.0★ 1
Read agents' Bitcoin-anchored conduct history (NENRIN) and cite and recompute ledger records.
ClaudeCursorCopilotChatGPTGeminimcp - v1.0.3
RISE CRM MCP server — 36 tools across CRM, projects, tickets, finance, sales, HR, and reports.
ClaudeCursorCopilotGeminimcp - v0.3.4
Agent Workflow Engine — multi-step MCP workflows with per-step directives and validation.
mcp