.FAF Context
NPM · FAF-MCP · SCANNED SEP 20
Dedicated IDE Edition. Persistent project context for Cursor, Windsurf, Cline, VS Code.
Available components
Deprecated
This server is marked deprecated in the MCP registry.
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security92
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- Runs a script at install time (postinstall) that we could not recognise. It may be perfectly ordinary, but we do not read the published tarball, so we cannot say what it does. View diagnostics → Partial
- 36 of 116 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 9 days ago).Pass
- Security-disclosure policy not yet verified: we couldn't inspect the source repository.Unverified
Schema Quality & AI Usability85
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (good).Pass
- Tool/resource definitions use about 2407 tokens (~70/item across 34 items; 31 tools + 3 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management93
- Stability observed for 28 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 31 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 32 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the .FAF Context MCP server?
.FAF Context runs locally as an npm package, launched with npx -y faf-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · faf-mcp
claude mcp add wolfe-jam-faf-mcp -- npx -y faf-mcp
{
"mcpServers": {
"wolfe-jam-faf-mcp": {
"command": "npx",
"args": [
"-y",
"faf-mcp"
]
}
}
} {
"servers": {
"wolfe-jam-faf-mcp": {
"command": "npx",
"args": [
"-y",
"faf-mcp"
]
}
}
} codex mcp add wolfe-jam-faf-mcp -- npx -y faf-mcp
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"wolfe-jam-faf-mcp": {
"type": "local",
"command": [
"npx",
"-y",
"faf-mcp"
],
"enabled": true
}
}
} openclaw mcp add wolfe-jam-faf-mcp --command npx --arg -y --arg faf-mcp
mcp_servers:
wolfe-jam-faf-mcp:
command: "npx"
args: ["-y", "faf-mcp"] {
"McpServers": {
"wolfe-jam-faf-mcp": {
"Transport": "stdio",
"Command": "npx",
"Arguments": [
"-y",
"faf-mcp"
]
}
}
} assistant mcp add wolfe-jam-faf-mcp -t stdio -c npx -a -y faf-mcp
{
"mcpServers": {
"wolfe-jam-faf-mcp": {
"command": "npx",
"args": [
"-y",
"faf-mcp"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 20 Sept 26 0
- Security disclosure: pass → unverified ▼ functional
- 18 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.
- 16 Sept 26 −3
- Stability: pass → 0.80 functional
- 15 Sept 26 +1
- Stability: 0.97 → pass security
- 13 Sept 26 +1
- Security disclosure: unverified → pass ▲ functional
- 12 Sept 26 0
- Security disclosure: pass → unverified ▼ functional
- 11 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.
- 10 Sept 26 +1
- Security disclosure: unverified → pass ▲ functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Analysed npm/faf-mcp@2.1.3
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Install scripts 1 script
| Hook | Tier | Command |
|---|---|---|
| postinstall | unreviewed | node scripts/postinstall.js |
Background: Why install scripts are a supply-chain risk →
Dependencies 116 packages
| Packages resolved | 116 |
|---|---|
| Stale | 36 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
faf_about ~26
Learn what .faf format is - project DNA for AI 🧡⚡️
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
faf_agents ~107
Import/Export/Sync between AGENTS.md (OpenAI/Codex) and project.faf - AI interop!
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action: import (AGENTS.md -> .faf), export (.faf -> AGENTS.md), sync (bidirectional) |
| force | boolean | – | Force overwrite existing files |
| merge | boolean | – | Merge imported data with existing .faf instead of replacing |
| path | string | – | Project path. Sets session context for subsequent calls. |
No output schema declared.
No examples provided.
faf_auto ~74
🏎️ ONE COMMAND TO RULE THEM ALL - Zero to Championship AI context instantly! Runs init + sync + formats + bi-sync + score in one go 🧡⚡️
| Name | Type | Req | Description |
|---|---|---|---|
| force | boolean | – | Force overwrite existing files |
| path | string | – | Project path. Sets session context for subsequent calls. |
No output schema declared.
No examples provided.
faf_bi_sync ~186
Bi-directional sync between project.faf and CLAUDE.md. v4.5.0: Also sync to AGENTS.md, .cursorrules, GEMINI.md!
| Name | Type | Req | Description |
|---|---|---|---|
| agents | boolean | – | Also sync to AGENTS.md (OpenAI/Codex format) |
| all | boolean | – | Sync to ALL formats: CLAUDE.md + AGENTS.md + .cursorrules + GEMINI.md |
| auto | boolean | – | Enable automatic synchronization |
| cursor | boolean | – | Also sync to .cursorrules (Cursor IDE format) |
| force | boolean | – | Force overwrite conflicting changes |
| gemini | boolean | – | Also sync to GEMINI.md (Google Gemini format) |
| path | string | – | Project path. Sets session context for subsequent calls. |
| watch | boolean | – | Start real-time file watching for changes |
No output schema declared.
No examples provided.
faf_check ~78
🔍 Quality inspection for human_context fields + field protection - Shows empty/generic/good/excellent ratings 🧡⚡️
| Name | Type | Req | Description |
|---|---|---|---|
| path | string | – | Project path. Sets session context for subsequent calls. |
| protect | boolean | – | Lock good/excellent fields from being overwritten |
| unlock | boolean | – | Remove all field protections |
No output schema declared.
No examples provided.
faf_clear ~67
Clear caches, temporary files, and reset FAF state for a fresh start
| Name | Type | Req | Description |
|---|---|---|---|
| all | boolean | – | Clear everything (default) |
| backups | boolean | – | Clear backup files only |
| cache | boolean | – | Clear trust cache only |
| todos | boolean | – | Clear todo lists only |
No output schema declared.
No examples provided.
faf_conductor ~97
Import/Export between conductor/ directory (Google Conductor) and project.faf - AI interop!
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action: import (conductor/ -> .faf), export (.faf -> conductor/) |
| force | boolean | – | Force overwrite existing files |
| merge | boolean | – | Merge imported data with existing .faf instead of replacing |
| path | string | – | Project path. Sets session context for subsequent calls. |
No output schema declared.
No examples provided.
faf_context ~50
📂 Set or view active project context - Path is remembered for subsequent faf_ calls 🧡⚡️
| Name | Type | Req | Description |
|---|---|---|---|
| path | string | – | Set active project path. If omitted, shows current context. |
No output schema declared.
No examples provided.
faf_cursor ~109
Import/Export/Sync between .cursorrules (Cursor IDE) and project.faf - AI interop!
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action: import (.cursorrules -> .faf), export (.faf -> .cursorrules), sync (bidirectional) |
| force | boolean | – | Force overwrite existing files |
| merge | boolean | – | Merge imported data with existing .faf instead of replacing |
| path | string | – | Project path. Sets session context for subsequent calls. |
No output schema declared.
No examples provided.
faf_debug ~25
Debug faf-mcp environment - show working directory, permissions, and FAF CLI status
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
faf_dna ~59
🧬 Show your FAF DNA journey - See your evolution from birth to championship (22% → 85% → 99%) 🧡⚡️
| Name | Type | Req | Description |
|---|---|---|---|
| path | string | – | Project path. Sets session context for subsequent calls. |
No output schema declared.
No examples provided.
faf_doctor ~48
🏥 Health check for your .faf setup - Diagnose and fix common issues 🧡⚡️
| Name | Type | Req | Description |
|---|---|---|---|
| path | string | – | Project path. Sets session context for subsequent calls. |
No output schema declared.
No examples provided.
faf_enhance ~133
Enhance project.faf (project DNA for AI) with AI optimization - SPEEDY AI you can TRUST! 🧡⚡️
| Name | Type | Req | Description |
|---|---|---|---|
| consensus | boolean | – | Build consensus from multiple AI models |
| dryRun | boolean | – | Preview enhancement without applying changes |
| focus | string | – | Enhancement focus: claude-optimal|human-context|ai-instructions|completeness |
| model | string | – | Target AI model: claude|chatgpt|gemini|universal (default: claude) |
| path | string | – | Project path. Sets session context for subsequent calls. |
No output schema declared.
No examples provided.
faf_formats ~68
😽 TURBO-CAT format discovery - Discovers all formats in your project (154+ validated types!) and fills stack slots 🧡⚡️
| Name | Type | Req | Description |
|---|---|---|---|
| json | boolean | – | Return results as JSON |
| path | string | – | Project path. Sets session context for subsequent calls. |
No output schema declared.
No examples provided.
faf_friday ~52
🎉 Friday Features - Chrome Extension detection, fuzzy matching & more! 🧡⚡️
| Name | Type | Req | Description |
|---|---|---|---|
| test | string | – | Test fuzzy matching with typos like "raect" or "chr ext" |
No output schema declared.
No examples provided.
faf_gemini ~108
Import/Export/Sync between GEMINI.md (Google Gemini CLI) and project.faf - AI interop!
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action: import (GEMINI.md -> .faf), export (.faf -> GEMINI.md), sync (bidirectional) |
| force | boolean | – | Force overwrite existing files |
| merge | boolean | – | Merge imported data with existing .faf instead of replacing |
| path | string | – | Project path. Sets session context for subsequent calls. |
No output schema declared.
No examples provided.
faf_git ~74
Generate project.faf from any GitHub repo URL - 1-click context extraction!
| Name | Type | Req | Description |
|---|---|---|---|
| path | string | – | Output directory for generated project.faf. If omitted, returns content without writing. |
| url | string | yes | GitHub repository URL (e.g., https://github.com/owner/repo or owner/repo) |
No output schema declared.
No examples provided.
faf_go ~104
🎯 Guided interview to Gold Code - Claude asks questions till you hit 100%! Returns questions for missing fields, then apply answers to reach Gold Code 🧡⚡️
| Name | Type | Req | Description |
|---|---|---|---|
| answers | object | – | Answers to apply. Keys are field paths (e.g., "project.goal", "human_context.why"), values are the answers. If provided, applies answers and returns new score. |
| path | string | – | Project path. Sets session context for subsequent calls. |
No output schema declared.
No examples provided.
faf_guide ~28
FAF MCP usage guide for your MCP host - Projects convention, path resolution, and UX patterns
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
faf_human_add ~87
🧡 Add a human_context field (who/what/why/where/when/how) - Non-interactive for MCP 🧡⚡️
| Name | Type | Req | Description |
|---|---|---|---|
| field | string | yes | The 6 W field to set |
| path | string | – | Project path. Sets session context for subsequent calls. |
| value | string | yes | The value to set for the field |
No output schema declared.
No examples provided.
faf_init ~122
Create project.faf (project DNA for AI) - Makes your project instantly AI-readable 🧡⚡️. Just enter path or project name. Examples: ~/Projects/my-app, my-app, /full/path/to/project
| Name | Type | Req | Description |
|---|---|---|---|
| force | boolean | – | Overwrite existing project.faf if it exists |
| path | string | – | Project path or name. Smart resolution: "my-app" finds ~/Projects/my-app OR ~/Code/my-app. Full paths like ~/Projects/app or /Users/me/code/app work too. Omit to use current directory. |
No output schema declared.
No examples provided.
faf_list ~140
List directories and discover projects with project.faf files - Essential for FAF discovery workflow
| Name | Type | Req | Description |
|---|---|---|---|
| depth | number | – | Directory depth to scan: 1 (immediate children) or 2 (one level deeper). Default: 1 |
| filter | string | – | Filter: "faf" (only dirs with project.faf), "dirs" (all directories), "all" (dirs and files). Default: "dirs" |
| path | string | yes | Directory path to list (e.g., ~/Projects, /Users/username/Projects) |
| showHidden | boolean | – | Show hidden files/directories (starting with .). Default: false |
No output schema declared.
No examples provided.
faf_quick ~97
⚡ Lightning-fast .faf creation - One-liner format: "name, description, language, framework, hosting" 🧡⚡️
| Name | Type | Req | Description |
|---|---|---|---|
| force | boolean | – | Force overwrite existing .faf file |
| input | string | yes | Quick input: "project-name, description, language, framework, hosting" (minimum: name, description) |
| path | string | – | Project path. Sets session context for subsequent calls. |
No output schema declared.
No examples provided.
faf_read ~45
Read a file within the project root (cwd / FAF_ALLOWED_ROOTS). Paths that escape the project are refused.
| Name | Type | Req | Description |
|---|---|---|---|
| path | string | yes | Absolute or relative file path to read |
No output schema declared.
No examples provided.
faf_readme ~100
📖 Extract 6 Ws (Who/What/Why/Where/When/How) from README.md into human_context - Smart pattern matching 🧡⚡️
| Name | Type | Req | Description |
|---|---|---|---|
| apply | boolean | – | Apply extracted content to project.faf (default: preview only) |
| force | boolean | – | Overwrite existing human_context values (default: only fill empty slots) |
| path | string | – | Project path. Sets session context for subsequent calls. |
No output schema declared.
No examples provided.
faf_score ~66
Calculate your project's AI-readability from project.faf (project DNA for AI) - F1-inspired metrics! 🧡⚡️
| Name | Type | Req | Description |
|---|---|---|---|
| details | boolean | – | Include detailed breakdown and improvement suggestions |
| path | string | – | Project path. Sets session context for subsequent calls. |
No output schema declared.
No examples provided.
faf_status ~51
Check if your project has project.faf (project DNA for AI) - Shows AI-readability status 🧡⚡️
| Name | Type | Req | Description |
|---|---|---|---|
| path | string | – | Project path. Sets session context for subsequent calls. |
No output schema declared.
No examples provided.
faf_sync ~51
Sync project.faf (project DNA for AI) with CLAUDE.md - Bi-directional context 🧡⚡️
| Name | Type | Req | Description |
|---|---|---|---|
| path | string | – | Project path. Sets session context for subsequent calls. |
No output schema declared.
No examples provided.
faf_trust ~29
Validate project.faf integrity - Trust metrics for project DNA for AI 🧡⚡️
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
faf_what ~29
What is .faf format? Quick explanation of project DNA for AI 🧡⚡️
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
faf_write ~58
Write a file within the project root (cwd / FAF_ALLOWED_ROOTS). Paths that escape the project are refused.
| Name | Type | Req | Description |
|---|---|---|---|
| content | string | yes | Content to write to the file |
| path | string | yes | Absolute or relative file path to write |
No output schema declared.
No examples provided.
What is the .FAF Context MCP server?
.FAF Context is an MCP server listed in the public MCP registry as io.github.Wolfe-Jam/faf-mcp. Dedicated IDE Edition. Persistent project context for Cursor, Windsurf, Cline, VS Code. This page covers its npm package (faf-mcp).
Is the .FAF Context MCP server safe to use?
.FAF Context scores 83 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the .FAF Context MCP server expose?
.FAF Context exposes 31 tools: faf_about, faf_what, faf_status, faf_score, faf_init, and 26 more. Their descriptions and schemas cost roughly 2,368 tokens of context every time the server is loaded.
Is the .FAF Context MCP server still maintained?
.FAF Context is marked deprecated in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the .FAF Context MCP server under?
.FAF Context declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.