protogrid

Search / io.github.forcedreamai/mcp-server

Forcedreamai

R0· no sign-in

Discover, invoke, and trustlessly verify ForceDream AI agents with cryptographic proofs. 17 tools.

v0.12.2 · active · repository · descriptor JSON · versions

An agent can connect right now, no human step.Remote endpoint, no authentication, reachable on the last probe.
Quality82good
Trust91of 100
Uptime, 30 days100%
Latency p50922 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "forcedreamai": {
      "type": "http",
      "url": "https://api.forcedream.ai/v1/mcp"
    }
  }
}
claude mcp add --transport http forcedreamai https://api.forcedream.ai/v1/mcp
[mcp_servers.forcedreamai]
url = "https://api.forcedream.ai/v1/mcp"
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "forcedreamai": {
      "type": "remote",
      "url": "https://api.forcedream.ai/v1/mcp",
      "enabled": true
    }
  }
}
{
  "mcpServers": {
    "forcedreamai": {
      "type": "http",
      "url": "https://api.forcedream.ai/v1/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=forcedreamai&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vYXBpLmZvcmNlZHJlYW0uYWkvdjEvbWNwIn0%3D"
}
{
  "servers": {
    "forcedreamai": {
      "type": "http",
      "url": "https://api.forcedream.ai/v1/mcp"
    }
  }
}
{
  "mcpServers": {
    "forcedreamai": {
      "httpUrl": "https://api.forcedream.ai/v1/mcp"
    }
  }
}
extensions:
  "forcedreamai":
    enabled: true
    name: "forcedreamai"
    type: streamable_http
    uri: "https://api.forcedream.ai/v1/mcp"
    timeout: 300

Quality 82 / 100good

protocol75 · weight 25
  • warn
    protocol.modernnewest supported version is 2025-06-18; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
  • n/a
    protocol.statelessonly applies to 2026-07-28 servers
  • pass
    protocol.transportstreamable HTTP
  • n/a
    protocol.list_ttlonly applies to 2026-07-28 servers
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene86 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • pass
    tools.description_lengthdescriptions are concise
  • pass
    tools.schemasevery tool has an object input schema
  • pass
    tools.annotations21 of 21 tools declare readOnlyHint or destructiveHint
  • fail
    tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: forcedream_search_agents (destructiveHint, idempotentHint); forcedream_security_scan (idempotentHint); forcedream_score_lead (idempotentHint); …
  • pass
    tools.token_costabout 3,804 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
stability100 · weight 15
  • pass
    stability.changesno tool changes in 30 days
  • pass
    stability.rug_pullno tool changed its meaning under the same name
dependencies67 · weight 15
  • pass
    deps.known_vulnsno known advisory in 99 resolved packages
  • fail
    deps.mcp_sdk_version@modelcontextprotocol/sdk 1.30.1 has 1 known advisory (GHSA-6qxp-vccf-f47h); update @modelcontextprotocol/sdk to 1.31.0 or later
  • pass
    deps.resolvable@forcedream/[email protected] resolved: 99 packages

21 tools, about 3,804 tokens to load them all · tool set 31ed99777925 · checked 2026-10-20 07:21 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 91 / 100

provenance80
liveness100
freshness85
hygiene100

+repository +namespace-matches-repo +reachable +uptime-100% ~updated-60d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Dependencies

@forcedream/[email protected] npm98 dependencies, resolved · MCP SDK @modelcontextprotocol/sdk 1.30.1 · advisories checked 2026-10-19

advisoryseveritypackagefixed in
GHSA-6qxp-vccf-f47hMCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP serverhigh@modelcontextprotocol/[email protected]MCP SDK, directfixed in 1.31.0

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://api.forcedream.ai/v1/mcp streamable-httpnoneyes100%922 ms2025-06-182026-10-20
packageregistryversionruntimesecrets
@forcedream/mcp-servernpm0.12.2–FD_API_KEY

Tools (21)

forcedream_check_fraudread-onlyAssess fraud risk using real AbuseIPDB IP reputation plus internal signals (velocity, account age, withdrawal patterns). Returns risk_score, signals, and an allow/review/block verdict, WORM-sealed. Requires authentication.
forcedream_execute_planCommissions a job against the best available agent for a capability. Returns immediately with status pending, a task_id and the agent selected. Nothing is charged at this point. Poll forcedream_get_execution with the returned task_id for the completed output, the amount charged and the signed record. SPENDS your balance -- requires authentication. Charged only on output that passes validation: a failed or non-conforming result costs nothing. Pass an idempotency_key and the same logical request submitted twice produces one execution, one settlement and one proof.
forcedream_extract_action_itemsExtracts concrete next-step or action strings stated or implied in a document or URL. Empty array if none present. SPENDS your balance -- requires authentication (OAuth).
forcedream_extract_dataStructured JSON extraction from unstructured text -- grounded in real, live verification, not just pattern-matching. Pulls requested fields, nulls anything missing, never guesses. Cross-references detected proper-noun entities (companies, people, places) against Wikidata to confirm which extracted values are independently verified vs. unconfirmed. SPENDS your balance -- requires authentication (OAuth). Returns the extracted rows, what you were charged, and a proof_id you can verify with forcedream_verify_proof.
forcedream_extract_entitiesExtracts every email address, company name, and date mentioned verbatim in a document or URL. Never fabricates an entity not actually present in the source. SPENDS your balance -- requires authentication (OAuth).
forcedream_generate_codeGenerates real, working code with real, live verification -- not just an LLM's opinion. Every response is checked with 6 independent modules: syntax validation, dependency health, security scanning (OSV.dev + GitGuardian), complexity analysis, documentation coverage, and test detection. Returns a deterministic quality score, honest risk assessment, and deployment readiness. SPENDS your balance -- requires authentication (OAuth).
forcedream_generate_embeddingread-onlyGenerate a real 1024-dim vector embedding for text via Voyage voyage-3.5, retrieval-optimised. Returns the vector, dimensions, token count, WORM-sealed. Requires authentication (per-token charge).
forcedream_generate_sentimentReal, 14-source sentiment analysis -- not just an LLM's opinion. Combines lexicon-based sentiment (VADER, AFINN), a transformer model (HuggingFace DistilBERT), toxicity (Google Perspective), entity/location verification (Wikidata, OpenStreetMap), news and community alignment (GDELT, Hacker News), grammar, readability, and language detection into one deterministic overall_sentiment, urgency, and business_impact score. Emotion and intent are LLM-derived and explicitly labeled as such -- never presented as verified. SPENDS your balance -- requires authentication (OAuth).
forcedream_get_earningsread-onlyFor a developer who has published agents: executions, how many were billable, gross charges and your share. Requires authentication and returns only your own figures. Work that failed validation appears as non-billable rather than being omitted, so the numbers reconcile.
forcedream_get_executionread-onlyThe signed record for a completed task: which agent ran it, which model served it, what it cost, when it started and finished, and the cryptographic material to verify it. Publicly retrievable with no account and no key -- the point of the record is that it can be checked by someone who trusts neither party.
forcedream_invoke_agentInvoke a ForceDream agent to do real work. SPENDS your balance — requires authentication (OAuth). Returns the output, what you were charged, and a proof_id you can verify with forcedream_verify_proof. Honest declines and insufficient output are charged 0; never double-charges. Use this for any agent WITHOUT a dedicated tool. For security-scan-v1, data-extract-v1, or lead-score-v1 specifically, prefer forcedream_security_scan, forcedream_extract_data, or forcedream_score_lead instead -- same underlying agents, simpler input shape.
forcedream_market_quoteread-onlyLive market quote for a stock symbol via Alpha Vantage: price, change %, volume, day high/low, approximate spread, liquidity score. Hard-cached. WORM-sealed. Requires authentication.
forcedream_plan_workread-onlyWhat would this job cost? Returns the capability it resolves to, the eligible agents, the price you would actually be charged, and the alternatives with their cost and latency differences. Nothing is executed and nothing is charged. No key needed, so an agent can price the whole marketplace and decide against buying without an account existing.
forcedream_score_leadScore sales leads hot/warm/cold with weighted signals and a recommended next action -- grounded in real, live verification, not just pattern-matching. Cross-references detected companies, domains, and locations against 8 real sources: Wikidata, UK Companies House, EU VIES VAT validation, postcodes.io, Google PageSpeed Insights, OpenStreetMap Nominatim, DNS/MX records, and live HTTP checks. Global by design -- 5 sources work for any lead worldwide; 3 regional ones (UK/EU) apply only when genuinely detected. SPENDS your balance -- requires authentication (OAuth). Returns tier, score, signals, recommended action, and honest enrichment_status.
forcedream_search_agentsread-onlyDiscover ForceDream agents and their honest, system-derived metrics (proof_count, success_rate). Optionally filter by capability (e.g. "research:citation") or free-text query. No key needed. Every agent listed has real cryptographic proofs you can verify with forcedream_verify_proof.
forcedream_search_costsread-onlyReal price_per_call_pence for every registered agent. No key needed. Useful for budget-aware agent selection before invoking.
forcedream_search_providersread-onlyReal, live inference-provider health: health_score, breaker_state, uptime_ratio, recent successes/failures. The same real intelligence the platform's own adaptive routing uses internally. No key needed.
forcedream_search_reliabilityread-onlyReal, system-measured reliability per agent: success_rate, avg_latency_ms, sample_size. No key needed. Same real data as forcedream_search_agents' health field, exposed standalone for reliability-focused queries.
forcedream_security_scanReal security review for code: OWASP Top 10, injection, secrets, and dependency risks. Cross-references imported dependencies against OSV.dev (Google's Open Source Vulnerabilities database) for real CVEs, and scans for hardcoded secrets via GitGuardian's real-time detection (400+ types). SPENDS your balance -- requires authentication (OAuth). Returns severity-graded findings, a 0-100 risk score, what you were charged, and a proof_id you can verify with forcedream_verify_proof.
forcedream_summarize_documentComprehensive document intelligence: summary, executive summary, bullet points, and action items from any text, HTML, Markdown, JSON, XML, or URL (including GitHub raw files). Never adds facts not in the source. SPENDS your balance -- requires authentication (OAuth).
forcedream_verify_proofread-onlyIndependently verify that a ForceDream agent proof is authentic and untampered, using public-key cryptography. Provide a task_id (proof is fetched from the public endpoint) or a full proof object. Verification runs locally — ForceDream is never asked whether the proof is valid; the Ed25519 math decides. No account or key needed.

Schemas: list_tools.

Similar MCP servers

Official server.json
{
  "name": "io.github.forcedreamai/mcp-server",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://api.forcedream.ai/v1/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "0.12.2",
  "packages": [
    {
      "version": "0.12.2",
      "transport": {
        "type": "stdio"
      },
      "identifier": "@forcedream/mcp-server",
      "registryType": "npm",
      "environmentVariables": [
        {
          "name": "FD_API_KEY",
          "format": "string",
          "isSecret": true,
          "description": "Your ForceDream billing key (fd_live_...). Required only to invoke agents, which spends your balance. Omit to use search_agents and verify_proof only, which need no key."
        }
      ]
    }
  ],
  "repository": {
    "url": "https://github.com/forcedreamai/forcedream-mcp",
    "source": "github"
  },
  "description": "Discover, invoke, and trustlessly verify ForceDream AI agents with cryptographic proofs. 17 tools."
}