Mcp Forge — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Forge (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
New here? Start with the Getting Started Guide.
Scaffold, test, and publish Model Context Protocol (MCP) servers in seconds.
Building MCP servers involves too much boilerplate. Every new server needs the same JSON-RPC handling, tool definitions, resource handlers, Dockerfile, tests, and packaging config. You end up copying from old projects, fixing import paths, and wasting time on plumbing instead of building.
MCP Forge fixes this. One command generates a complete, ready-to-develop MCP server project. Another command tests it. Another validates compliance. Another publishes it.
pip install mcp-server-forgemcp-forge new my-server --tools weather,calculatorThat's it. You now have a complete, runnable MCP server:
my-server/
├── Dockerfile
├── README.md
├── pyproject.toml
├── .gitignore
├── src/
│ └── my_server/
│ ├── __init__.py
│ ├── server.py
│ ├── tools.py
│ └── resources.py
└── tests/
└── test_my_server.pycd my-server
pip install -e .
mcp-forge test --cmd 'python -m my_server.server'┌──────────────────────────────────────────────────┐
│ MCP Forge Test Results │
├──────────────┬────────┬──────────────────────────┤
│ Test │ Status │ Details │
├──────────────┼────────┼──────────────────────────┤
│ server_start │ PASS │ Server started │
│ initialize │ PASS │ initialize response valid │
│ tools/list │ PASS │ Found 2 tools │
│ tools/call │ PASS │ Called 'weather' OK │
│ ping │ PASS │ Ping OK │
│ unknown │ PASS │ Correctly returned error │
│ server_stop │ PASS │ Server stopped cleanly │
├──────────────┴────────┴──────────────────────────┤
│ 7/7 passed All tests passed! │
└──────────────────────────────────────────────────┘mcp-forge validate ./my-servermcp-forge publish ./my-server
mcp-forge publish ./my-server --repository testpypi --dry-runThe new command generates a complete MCP server with:
server.py with JSON-RPC request routingtools.pyresources.pypyproject.toml configured with hatchlingDockerfile for containerized deploymentREADME.md with usage instructions.gitignoremcp-forge new my-server \
--tools weather,calculator,search \
--resources "file://data,http://api" \
--description "My awesome MCP server" \
--author "Your Name" \
--output-dir ./projectsMCP Forge uses Jinja2 templates internally. Each generated file comes from a template in the templates/ directory:
| Template | Generates |
|---|---|
server.py.j2 | Main server with JSON-RPC routing |
tools.py.j2 | Tool definitions and handlers |
resources.py.j2 | Resource definitions and handlers |
project_pyproject.toml.j2 | Package configuration |
project_readme.md.j2 | Project README |
dockerfile.j2 | Docker container config |
init.py.j2 | Package init file |
The built-in test harness starts your MCP server as a subprocess and sends JSON-RPC requests over stdio, validating:
The validate command checks your project for:
src/, pyproject.toml, server.py, tools.py)The publish command wraps build and twine for a smooth publishing experience:
# Build and publish to PyPI
mcp-forge publish .
# Dry run (build only)
mcp-forge publish . --dry-run
# Publish to TestPyPI
mcp-forge publish . --repository testpypiMake sure you have build and twine installed:
pip install mcp-server-forge[publish]The scaffolding uses Jinja2 templates internally. To customize the generated code, fork the repo and modify the templates in src/mcp_forge/templates/. The Jinja2 context includes:
project_name - the project name as givenpkg_name - Python package name (snake_case)title - human readable titledescription - project descriptionauthor - author nametools - list of tool namesresources - list of resource URI patternsgit clone https://github.com/manasvardhan/mcp-forge.git
cd mcp-forge
pip install -e ".[dev]"
pytestMIT License. See LICENSE for details.
Built with 🔨 by Manas Vardhan
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.