MCP.Market

ForgeCraft MCP server

by jghiringhelli·io.github.jghiringhelli/forgecraft·v1.0.0·3 stars

Production engineering standards for AI coding assistants. Setup once, remove when done.

C66/100grade C
What users say
No reviews yet
Be the first
Safety scan
C66/100

full report

Adoption
Growing

3 stars92 downloads/wk

Reviews

Write one

Nobody has reviewed ForgeCraft yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

ForgeCraft tools (2)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • forgecraft

    Setup-time tool for engineering standards. Diagnoses project state. Remove this MCP server after setup is complete to save tokens.

  • forgecraft_actions

    Full ForgeCraft action suite. Use action='setup_project' to onboard, 'check_cascade' to verify GS steps, 'generate_session_prompt' for a bound prompt, 'audit' for compliance score. Remove after setup to save tokens.

Public scan report

scanner v0.1.10 · 2026-09-27 · same rubric, same numbers if you re-run it

1 high1 medium
  • Code scan393 source files scanned8/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 13 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (2)

  • highShell command built from a string (injection risk)exec.shell-concat
    dist/tools/close-cycle-versioning.js: … .trim(); raw = execSync(`git log --oneline ${lastTag}..HEAD`, { cwd: …
  • mediumeval / new Function usedexec.eval
    templates/universal/verification.yaml: …enated SQL, shell exec with user input, eval() patterns (4) Hardcoded conf…
Overall 66/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How ForgeCraft compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
66/100
higher than 23% of 48,255 servers
Tools
2
the typical server has 7
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
3
more than 80% of 28,688 servers
Downloads a week
92
more than 61% of 12,191 servers with a package

What its tools let an agent do: 2 read

Install ForgeCraft in Claude Code, Cursor or VS Code

Runs npx -y forgecraft-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add forgecraft -- npx -y forgecraft-mcp
Add to Cursor

What the publisher says

From the ForgeCraft repository's README, as published. We do not edit it. Read it on GitHub

# ⚠️ Deprecated (September 2026), and that is the good news

ForgeCraft's job was to set a project up to Generative Specification and encode its quality properties.

That job now belongs to the model itself. Point a capable coding assistant at the **GS white paper and field

guide** and ask it to set the project up as GS: it will author the sentinel navigation tree and wire the

gates for you, tuned to your codebase, with no separate tool. That is the discipline's own thesis coming

true, the adoption friction folded into the executor.

- Setup is now a prompt: give your assistant the white paper / field guide (DOI

https://doi.org/10.5281/zenodo.21726017, and pragmaworks.dev) and ask it to configure the project as GS.

- The gates are standard CI hooks (tsc, eslint, jscpd, coverage, dependency-cruiser, commit-msg) the model

wires from the spec. The hard-won gate set that catches the pathology catalog is preserved in this repo's

src/analyzers/ for reference, and a curated gate template will live at pragmaworks.dev.

- What still adds value are the composable GS MCP servers that do what a model cannot cheaply do itself:

Chronicle (cross-session memory) and Chronos (git-history graph). ForgeCraft is not one of them.

This package receives no further updates. The last release stays installable for reference.

ForgeCraft The quality contract your AI coding assistant works within.

You hired an AI engineer. It's brilliant. It also installed the same 14 VS Code extensions twice today, spun up 6 Docker containers it will never clean up, and your disk went from 12 GB free to 0 KB in one session.

A full disk doesn't fail gracefully. It kills VS Code, the terminal, Docker, and the database simultaneously.

ForgeCraft is the quality contract your AI coding assistant works within — so it builds fast and doesn't burn down the house.

npx forgecraft-mcp setup .

Supports: Claude (CLAUDE.md) · Cursor (.cursor/rules/) · GitHub Copilot (.github/copilot-instructions.md) · Windsurf (.windsurfrules) · Cline (.clinerules) · Aider (CONVENTIONS.md)

A quality framework for AI-assisted software development

Every session, every project, every AI assistant — measured against the same 7-property Generative Specification model. Not vibes. Not a linter score. A score out of 14 that tells you exactly where the gap is and why.

$ npx forgecraft-mcp verify .

| Property        | Score | Evidence                                        |
|-----------------|-------|-------------------------------------------------|
| Self-Describing | ✅ 2/2 | CLAUDE.md — 352 non-empty lines                |
| Bounded         | ✅ 2/2 | No direct DB calls in route files              |
| Verifiable      | ✅ 2/2 | 64 test files — 87% coverage                   |
| Defended        | ✅ 2/2 | Pre-commit hook + lint config present           |
| Auditable       | ✅ 2/2 | 11 ADRs in docs/adrs/ + Status.md              |
| Composable      | ✅ 2/2 | Service layer + repository layer detected       |
| Executable      | ✅ 2/2 | Tests passed + CI pipeline configured           |

Total: 14/14 ✅ PASS · Threshold 11/14

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

ForgeCraft: common questions

Is ForgeCraft MCP server safe?
With care: it is graded C, so read the findings first (66/100). Read the ForgeCraft safety report
How do I install ForgeCraft?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does ForgeCraft need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is ForgeCraft maintained?
The last commit was 51 days ago (2026-09-14). The latest release is v1.0.0.
What can I use instead of ForgeCraft?
Servers from other publishers that do the same job: Inspo MCP server.
How does ForgeCraft compare with other MCP servers?
safety score 66/100 (higher than 23% of 48,255 servers); tools 2 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to ForgeCraft

Same job from other publishers: the closest match first, then the best rated.

  • Inspo
    Real production websites for coding agents: palettes, fonts, fold autopsies and reference JSX.
    A