# io.github.Medhovarsh/forkmind (npm · forkmind)

Branchable LLM history DAG + encrypted context capsules agents can save, restore, and crypto-shred.

- Trust score: 64/100 (medium)
- Change this week: +22
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `forkmind`: 64/100 (this document), [markdown](https://verifymcp.io/servers/medhovarsh-forkmind/forkmind.md), [page](https://verifymcp.io/servers/medhovarsh-forkmind/forkmind)

## Channel facts

- Registry: `npm`
- Package: `forkmind`
- Version: `0.9.0`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 87/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (138 of 140), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (138 of 140), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 15 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 66/100
  - AI-judged instruction clarity (good).
  - Tool/resource definitions use about 881 tokens (~58/item across 15 items; 15 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 70/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 9% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add medhovarsh-forkmind -- npx -y forkmind
```

### Codex

```bash
codex mcp add medhovarsh-forkmind -- npx -y forkmind
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "medhovarsh-forkmind": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "forkmind"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add medhovarsh-forkmind --command npx --arg -y --arg forkmind
```

### Hermes

```yaml
mcp_servers:
  medhovarsh-forkmind:
    command: "npx"
    args: ["-y", "forkmind"]
```

### Other

```json
{
  "mcpServers": {
    "medhovarsh-forkmind": {
      "command": "npx",
      "args": [
        "-y",
        "forkmind"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 64, +41)

- [security regression] Provenance: unverified → fail
- [security improvement] Install scripts: unverified → pass
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Malware scan: unverified → pass
- [security] Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.
- [functional regression] Security disclosure: fail → unverified
- [functional regression] Capabilities: pass → unverified
- [functional improvement] License: unverified → pass
- [functional improvement] Stability: unverified → 0.23
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] Schema quality: unverified → good
- [functional] Licence: MIT

### 2026-08-01 (score 23, +5)

- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [functional improvement] MCP protocol: unverified → pass

### 2026-07-31 (score 18, −24)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-27 (score 42)

First indexed and scored.

## MCP tools (15)

### `forkmind_recent` (~40 tokens)

Recent ForkMind nodes

List the most recent captured LLM turns (newest first), compact. Use to recall what was just tried.

Input parameters:

- `limit` (integer)

### `forkmind_get_node` (~31 tokens)

Get a ForkMind node

Fetch one node by id with full request + response payloads.

Input parameters:

- `id` (string, required)

### `forkmind_lineage` (~47 tokens)

Node lineage (root → node)

Return the full conversation path from the root to the given node — the exact context that produced it. Use to understand how a state was reached.

Input parameters:

- `id` (string, required)

### `forkmind_children` (~45 tokens)

Child branches of a node

List the alternative continuations (branches) that fork from a node. Use to compare what different prompts/params produced from the same point.

Input parameters:

- `id` (string, required)

### `forkmind_search` (~50 tokens)

Search ForkMind history

Case-insensitive substring search across all captured requests/responses. Use to find prior attempts mentioning a term, error, or tool.

Input parameters:

- `limit` (integer)
- `query` (string, required)

### `forkmind_stats` (~24 tokens)

ForkMind tree stats

Summary of the conversation tree: totals, roots, leaves, providers.

### `forkmind_context_save` (~131 tokens)

Save a context capsule

Offload conversation context into an immutable, encrypted DAG on disk. Pass the items to archive plus a short digest YOU write (the retrieval key you keep in your window; omit for private capsules). After the id comes back, verify with forkmind_context_digest, THEN drop the material from your working context — never before.

Input parameters:

- `digest` (string)
- `fromNodeId` (string): Archive the captured conversation lineage ending at this turn-DAG node instead of passing items
- `items` (array)
- `sourceNodeIds` (array)
- `title` (string)

### `forkmind_context_list` (~40 tokens)

List context capsules

Compact list of saved capsules (title, digest, size, age). Optional substring filter over title + digest.

Input parameters:

- `q` (string)

### `forkmind_context_digest` (~67 tokens)

Capsule digest + segment map

Cheap probe: full digest and DAG structure for one capsule, no decryption of content. Use before restoring to decide whether you need the whole capsule or one segment. Also serves as the durability check after a save, before you compact your window.

Input parameters:

- `id` (string, required)

### `forkmind_context_restore` (~73 tokens)

Restore capsule content

Decrypt and return capsule content (integrity-verified first). Pass segmentIds for a partial restore — pull back only what you need.

Input parameters:

- `asMessages` (boolean): Return a provider-ready messages[] array instead of raw items
- `id` (string, required)
- `segmentIds` (array)

### `forkmind_context_forget` (~67 tokens)

Forget a capsule (crypto-shred)

IRREVERSIBLY destroy a capsule: its encryption key is shredded and the id tombstoned. You must echo the capsule id in `confirm`. Only call when the user explicitly asks to forget.

Input parameters:

- `confirm` (string, required)
- `id` (string, required)

### `forkmind_context_stats` (~41 tokens)

Capsule stats

Aggregate stats across all capsules: count, bytes, estimated tokens freed from the window, how many have a digest, forgotten count, and replica health.

### `forkmind_context_export` (~95 tokens)

Export a capsule (portable bundle)

Export a capsule as a passphrase-encrypted, self-contained bundle that can move to another project or machine — it carries its own key material and does not depend on this project's local master key. The passphrase is never stored in the bundle; the caller must keep it to import later. Returns the bundle JSON — write it to a file.

Input parameters:

- `id` (string, required)
- `passphrase` (string, required)

### `forkmind_context_import` (~80 tokens)

Import a capsule bundle

Import a bundle produced by forkmind_context_export. Every segment is independently re-verified (id, hash, parent graph, acyclicity) before anything is written — the bundle is never trusted blindly. Re-wraps the capsule under this project's local master key.

Input parameters:

- `bundle` (object, required)
- `passphrase` (string, required)

### `forkmind_context_replicas` (~50 tokens)

Capsule replica health (RAID)

Status of redundant capsule storage: each replica target with reachability and coverage. Optionally sync (push all capsules + propagate tombstones) before reporting.

Input parameters:

- `sync` (boolean)

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/medhovarsh-forkmind/forkmind#diagnostics

## Score history

- 2026-08-03: 64
- 2026-08-02: 64
- 2026-08-01: 23
- 2026-07-31: 18
- 2026-07-30: 42
- 2026-07-28: 42
- 2026-07-27: 42

## Links

- npm package: https://www.npmjs.com/package/forkmind
- Socket report: https://socket.dev/npm/package/forkmind
- Repository: https://github.com/Medhovarsh/forkmind
- Website: https://medhovarsh.github.io/forkmind/
- Changelog RSS feed: https://verifymcp.io/servers/medhovarsh-forkmind/forkmind/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/medhovarsh-forkmind/forkmind/changelog.json
- HTML version of this page: https://verifymcp.io/servers/medhovarsh-forkmind/forkmind