TopicForge MCP server
Read-only MCP server for ROS2 and DDS: topics, participants, QoS mismatches, bags.
A85/100grade A
Adoption
Growing
3 stars
Reviews
Write oneNobody has reviewed TopicForge yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
TopicForge tools (11)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
analyze_bagdetect_qos_mismatchesget_topic_infohealth_checklist_participantslist_topicsparticipant_eventspeek_bag_samplespeek_dds_samplessample_messagestopic_metrics
Public scan report
scanner v0.1.9 · 2026-09-20 · same rubric, same numbers if you re-run it
1 medium
- Code scan45 source files scanned20/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 15 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Findings (1)
- mediumsubprocess with shell=True
exec.shell-truetopicforge-0.5.2/src/topicforge/adapters/ros2_live/adapter.py: … .cmd/.bat shims work # without shell=True. resolved = shutil.which(cmd[0]…
Overall 85/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
Install directly
claude mcp add topicforge -- uvx topicforge
TopicForge: common questions
- Is TopicForge MCP server safe?
- Yes, by our scan: it is graded A (85/100). Read the TopicForge safety report
- How do I install TopicForge?
- It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
- Does TopicForge need an API key?
- No secret keys are declared. It reads 4 settings from the environment.
- Is TopicForge maintained?
- The last commit was 15 days ago (2026-09-05). The latest release is v0.5.2.