MCP.Market

Zod Contract Mock Forge MCP server

by vola-trebla·io.github.vola-trebla/zod-contract-mock-forge-mcp·v0.2.0
No reviews yet

MCP server for deterministic mock generation and API contract scaffolding using Zod schemas

C55/100grade C
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
C55/100

full report

Adoption
New

0 stars44 downloads/wk

Reviews

Write one

Nobody has reviewed Zod Contract Mock Forge yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Zod Contract Mock Forge tools (10)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • detect_schema_drift

    Compare a Zod schema in a TypeScript file against an OpenAPI spec — finds silent divergence.

  • evaluate_schema_evolution

    Detect breaking changes when a Zod schema is tightened — before tests run.

  • generate_boundary_violations

    Generate intentionally invalid payloads based on a Zod schema — for negative testing.

  • generate_exhaustive_union_violations

    Generate violation payloads for every branch of a z.union() or z.discriminatedUnion() schema.

  • generate_mock_variants

    Generate N structurally valid but value-diverse mocks from a Zod schema — for property-based testing.

  • generate_valid_mock

    Generate valid mock data from a Zod schema string.

  • introspect_schema

    Convert a Zod schema string to JSON Schema for LLM understanding.

  • read_schema_from_file

    Read a Zod schema directly from a TypeScript or JavaScript file.

  • scaffold_api_contract_test

    Generate an API contract test or mock boilerplate for Playwright, Jest, Vitest, or MSW.

  • suggest_contract_fix

    Validate a JSON payload against a Zod schema and suggest fixes for each violation.

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

1 high1 medium
  • Code scan4 source files scanned8/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 131 days ago8/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (2)

  • highShell command built from a string (injection risk)exec.shell-concat
    dist/index.js: …FilePath)); const headContent = execSync(`git show HEAD:${relPath}`, { cwd: repoRoot }).toString()…
  • mediumeval / new Function usedexec.eval
    dist/index.js: … .trim(); const fn = new Function('z', `return ${cleanCode}`); con…
Overall 55/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Zod Contract Mock Forge compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
55/100
higher than 10% of 48,273 servers
Tools
10
the typical server has 7
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
44
more than 38% of 11,915 servers with a package

What its tools let an agent do: 5 read · 4 create · 1 run or deploy

Install Zod Contract Mock Forge in Claude Code, Cursor or VS Code

Runs npx -y zod-contract-mock-forge-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add zod-contract-mock-forge-mcp -- npx -y zod-contract-mock-forge-mcp
Add to Cursor

What the publisher says

From the Zod Contract Mock Forge repository's README, as published. We do not edit it. Read it on GitHub

zod-contract-mock-forge-mcp

An MCP server that turns Zod schemas into mocks, violations, and contract tests — so your AI agent can reason about API contracts without manually crafting payloads.

The Problem

Zod schemas are runtime code. An AI agent cannot execute them, introspect their constraints, or generate valid/invalid payloads without this layer. The agent also cannot detect when the schema and the OpenAPI docs silently diverged, or whether a schema change breaks existing test fixtures.

Tools

Mock generation

Violation generation

Schema analysis

Contract testing

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Zod Contract Mock Forge: common questions

Is Zod Contract Mock Forge MCP server safe?
With care: it is graded C, so read the findings first (55/100). Read the Zod Contract Mock Forge safety report
How do I install Zod Contract Mock Forge?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Zod Contract Mock Forge need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Zod Contract Mock Forge maintained?
The last commit was 167 days ago (2026-05-19). The latest release is v0.2.0.
How does Zod Contract Mock Forge compare with other MCP servers?
safety score 55/100 (higher than 10% of 48,273 servers); tools 10 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

More from vola-trebla →