Forge (startupdotdev) MCP Server

forge-mcp-server npm v1.0.0

Published by startupdotdev — no publish provenance and no vendor-owned scope, so the publisher could not be verified. The repository link below is self-declared.

View on npm ↗ Repository ↗ Raw report (JSON) ↗

Trust grade

100/100

Last scanned 2026-07-22

Trust

A · 100/100

How safe the published surface and source look. Deterministic; every point is auditable.

Capability

Minimal

Blast radius if it went rogue — what the server’s tools could reach. Independent of trust.

Coverage

Source

How much the scan could actually inspect. Shallow coverage is stated, never hidden.

A Why this grade

Started at 100 and nothing was deducted: the deterministic scan raised no scored threat in the published surface it inspected. Capability observations and advisory notes are recorded but never lower the score.

Findings 0

✓ No findings. The scan raised nothing on this surface — see Coverage for how deep it could look.

What this scan could not see

No tools were enumerated, so prompt-injection, capability and toxic-flow analysis had no tool surface to inspect. To grade a package’s real runtime tools, scan the running server: --command "npx -y <package>".

Versions

Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.

Version	Score	Findings	Engine	Scanned
`v1.0.0` latest	A 100/100	0	1.5.0	2026-07-22

Embed this score

Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.

Markdown (GitHub README)

[![MCP Trust Score](https://mcptrustchecker.com/registry/forge-mcp-server/badge.svg)](https://mcptrustchecker.com/registry/forge-mcp-server)

HTML

<a href="https://mcptrustchecker.com/registry/forge-mcp-server"><img src="https://mcptrustchecker.com/registry/forge-mcp-server/badge.svg" alt="MCP Trust Score" height="20"></a>

Prefer shields.io styling? Point it at https://mcptrustchecker.com/registry/forge-mcp-server/badge.json via https://img.shields.io/endpoint?url=…

Verify this score yourself

The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.

npx mcptrustchecker scan forge-mcp-server --online

Use the free API → How scoring works

Other implementations of Forge 8

Independent packages implementing the same tool, scanned with the same engine. Compare all 9 side by side →

Forge (voxell) Source verified npm

@voxell/forge-mcp

Security scan results for the Forge (voxell) MCP server.

Web, Search & Scraping Score 100/100 0 findings Cap. Minimal

Forge (JonasAbde) npm

forge-mcp

Security scan results for the Forge (JonasAbde) MCP server.

Developer Tools Score 100/100 0 findings Cap. Minimal

Forge (npm) npm

mcp-forge

Security scan results for the Forge (npm) MCP server.

Developer Tools Score 100/100 0 findings Cap. Minimal

Forge (raniumsys) npm

@raniumsys/forge-mcp

Security scan results for the Forge (raniumsys) MCP server.

Cloud & DevOps Score 100/100 0 findings Cap. Minimal

Forge (salesforge) npm

@salesforge/forge-mcp

Security scan results for the Forge (salesforge) MCP server.

Business & CRM Score 100/100 0 findings Cap. Minimal

Forge (rightnow) npm

@rightnow/forge-mcp-server

Security scan results for the Forge (rightnow) MCP server.

Data Science & ML Score 100/100 0 findings Cap. Minimal

More in Other

0xgasless npm

0xgasless-mcp

Security scan results for the 0xgasless MCP server.

Other Score 100/100 0 findings Cap. Minimal

24htrack npm

24htrack-mcp

Security scan results for the 24htrack MCP server.

Other Score 100/100 0 findings Cap. Minimal

3d Asset Processing npm

3d-asset-processing-mcp

Security scan results for the 3d Asset Processing MCP server.

Other Score 100/100 8 findings Cap. High

A2amarket npm

@hz-abyssal-heart/a2amarket-mcp-server

Security scan results for the A2amarket MCP server.

Other Score 100/100 0 findings Cap. Minimal

Ableton Copilot npm

@xiaolaa2/ableton-copilot-mcp

Security scan results for the Ableton Copilot MCP server.

Other Score 100/100 0 findings Cap. Minimal

Academy npm

mcp-academy

Security scan results for the Academy MCP server.

Other Score 100/100 0 findings Cap. Minimal