MCP.Market

SpecForge MCP server

by leaderiop·io.github.leaderiop/specforge·v0.1.0-rc1·30 stars

Turn your team's rules into checks your AI agent can't skip. Deterministic, no AI inside.

A88/100grade A
What users say
No reviews yet
Be the first
Safety scan
A88/100

full report

Adoption
Growing

30 stars

Reviews

Write one

Nobody has reviewed SpecForge yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

SpecForge tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.10 · 2026-10-25 · same rubric, same numbers if you re-run it

no findings
  • –Code scanpackage could not be scannedn/a
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 0 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 88/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How SpecForge compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
88/100
higher than 80% of 4,460 AI and agents servers
GitHub stars
30
more than 90% of 2,711 AI and agents servers

Install SpecForge in Claude Code, Cursor or VS Code

The registry entry has no remote endpoint or installable package.

What the publisher says

From the SpecForge repository's README, as published. We do not edit it. Read it on GitHub

Try it in 5 minutes · How it works · See it catch something · Docs

See it in 60 seconds, no agent needed. Install, create a project, drop one letter, check:

curl -fsSL https://raw.githubusercontent.com/leaderiop/SpecForge/main/install.sh | sh
mkdir sf-demo && cd sf-demo
specforge init --extensions @specforge/software          # spec/hello.spec, which checks clean
sed -i.bak 's/\[user_logged_in\]/[user_loged_in]/' spec/hello.spec   # drop one letter
specforge check
[E003] Error: unresolved reference 'user_loged_in' in entity 'authenticate_user'
 20 │   produces [user_loged_in]
    │ Help: did you mean 'user_logged_in'?

[W007] Warning: event 'user_logged_in' is not produced by any behavior

1 error, 1 warning, 0 infos

A reviewer reads. A check resolves.

The problem

You ask an AI agent to add refunds to your payment service. It writes clean code, the tests pass, the pull request looks fine. Two weeks later, finance finds a refund larger than the payment it refunded.

The rule was written down, in the spec: a Markdown file in docs/, next to the PRD. The agent read it three sessions ago, or never found it. Nothing failed, so nobody noticed.

This isn't a problem with the model. It's a problem with where your rules live. Today, the knowledge that matters sits in places that nothing enforces:

  • Specs in Markdown (PRDs, docs/*.md, spec-kit files) are prose. An agent can misread a rule or skip it, silently, and nothing checks that the spec is complete or that its parts agree.
  • Docs and wikis drift away from the code, and nothing breaks when they do.
  • Traceability (which requirement has a test, which rule is enforced where) is a spreadsheet someone updates by hand, until they stop.
  • Every session starts from zero. The agent re-reads dozens of files to rediscover what you meant, and still guesses.

The more work you give to AI, the worse this gets. It writes faster than anyone can review.

The idea: hard skills, not soft skills

There are two ways to teach an AI how your team works.

A soft skill is advice placed in the AI's context: a Markdown spec, a PRD, a skill file. It helps, but it's prose. The AI may follow it, or not.

A hard skill is a rule that a program enforces. The AI can't skip it, because the check fails.

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

SpecForge: common questions

Is SpecForge MCP server safe?
Yes, by our scan: it is graded A (88/100). Read the SpecForge safety report
Does SpecForge need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is SpecForge maintained?
The last commit was 10 days ago (2026-10-25). The latest release is v0.1.0-rc1.
What can I use instead of SpecForge?
Servers from other publishers that do the same job: Roast My Design System MCP server, Kiln MCP server and Roast My Design System MCP server.
How does SpecForge compare with other AI and agents MCP servers?
safety score 88/100 (higher than 80% of 4,460 AI and agents servers); github stars 30 (more than 90% of 2,711 AI and agents servers). Full comparison.

Alternatives to SpecForge

Same job from other publishers: the closest match first, then the best rated.

  • Roast My Design System
    Audit your Design System and serve your Agent the rules that keep AI-written UI on-system.
    A
  • Kiln
    Spawn an object into existence: describe it, and your agent designs it, checks it, and 3D prints it.
    B
  • Roast My Design System
    Audit your Design System and serve your Agent the rules that keep AI-written UI on-system.
    A
  • Vibe Check
    Metacognitive AI agent oversight: adaptive CPI interrupts for alignment, reflection and safety
    B
  • Skillsmith
    Share agent skills across your team, scan them for risk, and track what's actually used.
    B