ForgeCraft MCP server
io.github.jghiringhelli/forgecraft·v1.0.0·3 starsProduction engineering standards for AI coding assistants. Setup once, remove when done.
3 stars92 downloads/wk
Reviews
Write oneNobody has reviewed ForgeCraft yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
ForgeCraft tools (2)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
forgecraftSetup-time tool for engineering standards. Diagnoses project state. Remove this MCP server after setup is complete to save tokens.
forgecraft_actionsFull ForgeCraft action suite. Use action='setup_project' to onboard, 'check_cascade' to verify GS steps, 'generate_session_prompt' for a bound prompt, 'audit' for compliance score. Remove after setup to save tokens.
Public scan report
scanner v0.1.10 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan393 source files scanned8/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 13 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Findings (2)
- highShell command built from a string (injection risk)
exec.shell-concatdist/tools/close-cycle-versioning.js: … .trim(); raw = execSync(`git log --oneline ${lastTag}..HEAD`, { cwd: … - mediumeval / new Function used
exec.evaltemplates/universal/verification.yaml: …enated SQL, shell exec with user input, eval() patterns (4) Hardcoded conf…
How ForgeCraft compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 66/100
- higher than 23% of 48,255 servers
- Tools
- 2
- the typical server has 7
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 3
- more than 80% of 28,688 servers
- Downloads a week
- 92
- more than 61% of 12,191 servers with a package
What its tools let an agent do: 2 read
Install ForgeCraft in Claude Code, Cursor or VS Code
Runs npx -y forgecraft-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add forgecraft -- npx -y forgecraft-mcp
What the publisher says
From the ForgeCraft repository's README, as published. We do not edit it. Read it on GitHub
# ⚠️ Deprecated (September 2026), and that is the good news
ForgeCraft's job was to set a project up to Generative Specification and encode its quality properties.
That job now belongs to the model itself. Point a capable coding assistant at the **GS white paper and field
guide** and ask it to set the project up as GS: it will author the sentinel navigation tree and wire the
gates for you, tuned to your codebase, with no separate tool. That is the discipline's own thesis coming
true, the adoption friction folded into the executor.
- Setup is now a prompt: give your assistant the white paper / field guide (DOI
https://doi.org/10.5281/zenodo.21726017, and pragmaworks.dev) and ask it to configure the project as GS.
- The gates are standard CI hooks (tsc, eslint, jscpd, coverage, dependency-cruiser, commit-msg) the model
wires from the spec. The hard-won gate set that catches the pathology catalog is preserved in this repo's
src/analyzers/ for reference, and a curated gate template will live at pragmaworks.dev.
- What still adds value are the composable GS MCP servers that do what a model cannot cheaply do itself:
Chronicle (cross-session memory) and Chronos (git-history graph). ForgeCraft is not one of them.
This package receives no further updates. The last release stays installable for reference.
ForgeCraft The quality contract your AI coding assistant works within.
You hired an AI engineer. It's brilliant. It also installed the same 14 VS Code extensions twice today, spun up 6 Docker containers it will never clean up, and your disk went from 12 GB free to 0 KB in one session.
A full disk doesn't fail gracefully. It kills VS Code, the terminal, Docker, and the database simultaneously.
ForgeCraft is the quality contract your AI coding assistant works within — so it builds fast and doesn't burn down the house.
npx forgecraft-mcp setup .Supports: Claude (CLAUDE.md) · Cursor (.cursor/rules/) · GitHub Copilot (.github/copilot-instructions.md) · Windsurf (.windsurfrules) · Cline (.clinerules) · Aider (CONVENTIONS.md)
A quality framework for AI-assisted software development
Every session, every project, every AI assistant — measured against the same 7-property Generative Specification model. Not vibes. Not a linter score. A score out of 14 that tells you exactly where the gap is and why.
$ npx forgecraft-mcp verify .
| Property | Score | Evidence |
|-----------------|-------|-------------------------------------------------|
| Self-Describing | ✅ 2/2 | CLAUDE.md — 352 non-empty lines |
| Bounded | ✅ 2/2 | No direct DB calls in route files |
| Verifiable | ✅ 2/2 | 64 test files — 87% coverage |
| Defended | ✅ 2/2 | Pre-commit hook + lint config present |
| Auditable | ✅ 2/2 | 11 ADRs in docs/adrs/ + Status.md |
| Composable | ✅ 2/2 | Service layer + repository layer detected |
| Executable | ✅ 2/2 | Tests passed + CI pipeline configured |
Total: 14/14 ✅ PASS · Threshold 11/14Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
ForgeCraft: common questions
- Is ForgeCraft MCP server safe?
- With care: it is graded C, so read the findings first (66/100). Read the ForgeCraft safety report
- How do I install ForgeCraft?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does ForgeCraft need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is ForgeCraft maintained?
- The last commit was 51 days ago (2026-09-14). The latest release is v1.0.0.
- What can I use instead of ForgeCraft?
- Servers from other publishers that do the same job: Inspo MCP server.
- How does ForgeCraft compare with other MCP servers?
- safety score 66/100 (higher than 23% of 48,255 servers); tools 2 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to ForgeCraft
Same job from other publishers: the closest match first, then the best rated.
- InspoReal production websites for coding agents: palettes, fonts, fold autopsies and reference JSX.not reviewedEstablishedA