Forkcaster MCP server
online · 100% uptimexyz.forkcaster/mcp·v1.0.0·2 starsResolve Farcaster casts to deep-link URLs for any supported Farcaster client app. No auth.
2 stars
Reviews
Write oneNobody has reviewed Forkcaster yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Forkcaster tools (1)
write = sends, deletes, buys or postsget_cast_linkFreeResolve a Farcaster cast — identified by username/fid + short hash, or by its full 40-hex hash — and return the URL that opens it in a target Farcaster client app (or all supported apps). Also returns the author's signed-contract status; URLs are returned regardless of signed state. Link-only clients are gated: they answer client_ineligible when the resolved cast carries no external link.
Public scan report
scanner v0.1.10 · 2026-10-25 · same rubric, same numbers if you re-run it
- –Code scanremote-only server, no package to scann/a
- Live reliabilityremote reachable in 667ms20/20
- Tool poisoning1 tool descriptions checked15/15
- Auth qualityopen endpoint, read-only tools10/15
- Maintenancelast push 0 days ago15/15
- Maintainer identityendpoint served from the registry-verified namespace domain8/10
How Forkcaster compares
Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 91/100
- higher than 90% of 915 Security servers
- Tools
- 1
- the typical Security server has 6
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- Uptime
- 100%
- of our recent checks; the typical remote Security server answers 100%
- Response time
- 187 ms
- faster than 63% of 547 Security servers
- GitHub stars
- 2
- more than 75% of 587 Security servers
What its tools let an agent do: 1 read
Install Forkcaster in Claude Code, Cursor or VS Code
claude mcp add --transport http mcp https://forkcaster.xyz/mcp
What the publisher says
From the Forkcaster repository's README, as published. We do not edit it. Read it on GitHub
forkcaster — agent brief
Audience: coding agents. Prefer facts over prose. Update this file when architecture or commands change.
Intent
Micro-site that mirrors Farcaster cast URLs for sharing without the Farcaster app.
- Pattern: /{username}/{castHash} where castHash matches 0x[0-9a-fA-F]+ — short or full form
- Examples: /zoo/0x895ecc74 and /decent-artlu/0xbb54368f → SSR cast card + links
- Data: raced across providers (worker/cast-source.ts, rpc-racer pattern) — see "Cast source race" below. shim (https://shim.artlu.xyz/wc/{username}/{hash}, owner-run Snapchain reader with a keep-warm cron) is the completeness anchor and the sole ban-signal dependency (/signed/{fid}); farcaster.tv is fast but quote-blind; raw nodes haatz/snap.farcaster.xyz:3381 are complete but need shim /f/{username} for the fid and a full hash. All upstream calls are capped at 5s.
- Missing cast: an authoritative miss from a complete provider (shim, haatz, snap) → 404 page; no provider resolved → link-only page (200). All upstream calls are capped at 5s (AbortSignal.timeout) — shim's cold sharded lookups can otherwise hang 15s+; timeout ⇒ unreachable. Strict statuses are the JSON variant's job (see below)
- Banned accounts: embeds render for everyone — but some clients hide unsigned authors. Since Oct 15, 2026 (Network School takeover), accounts must accept the "social smart contract" (Network Code); acceptance is an on-chain access NFT. Shim exposes it: GET https://shim.artlu.xyz/signed/{fid} → {"signed":true|false}. Unsigned authors: registry clients flagged requiresSigned (e.g. farcaster) are suppressed from the action row; the check fails open — unknown state suppresses nothing
- farcaster.tv as a cast data source is quote-blind (it drops {castId} embeds) and unofficial — it races as the partial tier only (700ms HTML box, client-side quote fill-in). react-farcaster-embed's own default endpoint is farcaster.tv — always pass castData so it never fetches. The live stats row (replies/recasts/likes) is still fetched client-side from farcaster.tv — it sends access-control-allow-origin: * and answers for unsigned authors too; any failure just leaves the row absent
Stack
Commands
bun install
bun run dev # wrangler dev (local worker + assets)
bun run build # vite build → dist/
bun run typecheck # bun check (tsc-compatible; reads tsconfig*.json)
bun run deploy # build + wrangler deploy
bun run lint # biome lint .
bun test # worker tests (cast route + client registry)
bun run cf-typegen # wrangler types → worker-configuration.d.tsLayout
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Forkcaster: common questions
- Is Forkcaster MCP server safe?
- Yes, by our scan: it is graded A (91/100). Read the Forkcaster safety report
- How do I install Forkcaster?
- It runs remotely at forkcaster.xyz. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does Forkcaster need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Forkcaster maintained?
- The last commit was 10 days ago (2026-10-24). The latest release is v1.0.0.
- Is Forkcaster up?
- 100% of our last 28 checks got an answer. We check remote servers about four times a day.
- What can I use instead of Forkcaster?
- Servers from other publishers that do the same job: Wireshark MCP server, Rede MCP server and Raziel MCP server.
- How does Forkcaster compare with other Security MCP servers?
- safety score 91/100 (higher than 90% of 915 Security servers); tools 1 (the typical Security server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Forkcaster
Same job from other publishers: the closest match first, then the best rated.
- WiresharkProfessional network analysis with tshark. Security audits, deep-dives, and threat detection.not reviewedEstablishedA
- RedeMCP server for Rede — Itaú-owned BR acquirer: authorize/capture/refund, zero-auth, card tokensnot reviewedEstablishedB
- RazielMCP server teaching AI agents to implement TideCloak: auth, E2EE, IGA, security analysisnot reviewedGrowingA
- Dechonet30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.not reviewedGrowingA
- MyMedi-AIDME billing and medical coding: code lookup, DMEPOS fee schedules, Medicare prior-auth checksnot reviewedGrowingA