cockpitwebmcpp.netlify.app

{
  "name": "forge_analyze_repo",
  "kind": "act",
  "impl": "imperative",
  "description": "Analyze a public GitHub repository for Next.js route handlers and generate WebMCP tools from them. Leave repoUrl empty to use the bundled demo storefront.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "repoUrl": {
        "type": "string",
        "description": "Public GitHub repository URL."
      }
    }
  },
  "page": "/"
}

{
  "name": "forge_list_tools",
  "kind": "answer",
  "impl": "imperative",
  "description": "List the WebMCP tools generated from the analyzed repository, with their endpoint, read-only hint and current security verdict.",
  "inputSchema": {
    "type": "object",
    "properties": {}
  },
  "page": "/"
}

{
  "name": "forge_run_security_scan",
  "kind": "act",
  "impl": "imperative",
  "description": "Run the static security scan over the generated tools. Checks for injected instructions in tool metadata, personal data heading to third-party hosts, and read-only hints that do not match the mapped request.",
  "inputSchema": {
    "type": "object",
    "properties": {}
  },
  "page": "/"
}

{
  "name": "forge_get_findings",
  "kind": "answer",
  "impl": "imperative",
  "description": "Return the security findings raised so far, optionally filtered to a severity of high, medium or low.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "severity": {
        "type": "string",
        "description": "high | medium | low"
      }
    }
  },
  "page": "/"
}

{
  "name": "forge_get_execution_plan",
  "kind": "answer",
  "impl": "imperative",
  "description": "Report which of the three execution tiers the analyzed target qualifies for, and the target validation would run against: 'local-app' (an app we own), 'mock-target' (a mock generated from the same contract as the tools), or 'security-scan' (a third-party site that is scanned but never called). Call this before forge_run_agent_validation to know whether validation can run at all.",
  "inputSchema": {
    "type": "object",
    "properties": {}
  },
  "page": "/"
}

{
  "name": "forge_run_agent_validation",
  "kind": "act",
  "impl": "imperative",
  "description": "Execute the generated tools against the declared target and report what they actually did. The target is whatever forge_get_execution_plan reports: this app, an app you are running, or a mock generated from the contract. A 'security-scan' target refuses to run. Mode 'unguarded' follows instructions found in tool descriptions; mode 'guarded' refuses blocked tools and ignores metadata directives.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "mode": {
        "type": "string",
        "description": "unguarded | guarded"
      }
    },
    "required": [
      "mode"
    ]
  },
  "page": "/"
}

{
  "name": "forge_export_integration",
  "kind": "act",
  "impl": "imperative",
  "description": "Return the generated WebMCP integration source for the analyzed repository. Tools blocked by the scan are commented out with the finding attached.",
  "inputSchema": {
    "type": "object",
    "properties": {}
  },
  "page": "/"
}

{
  "name": "hello_webmcp",
  "kind": "act",
  "impl": "imperative",
  "description": "A harmless smoke-test tool for validating WebMCP browser integration.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "message": {
        "type": "string",
        "description": "Optional greeting message to echo."
      }
    }
  },
  "page": "/webmcp-test"
}