
Security News
/Research
Fake Corepack Site Distributes Infostealer and Proxyware to Developers
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.
@forgespace/branding-mcp
Advanced tools
MCP server for AI-powered brand identity generation — color palettes, typography systems, design tokens, and brand guidelines with multi-format export
AI-powered brand identity generation via MCP — part of the Forge Space open developer workspace.
Generate complete design systems — colors, typography, spacing, shadows, borders, motion tokens, gradients, multi-variant logos, favicons, and OG images with multi-format export. 58 MCP tools, zero API dependencies, algorithmic-first generation.
npm install
npm run build
npx -y @forgespace/branding-mcp@latest
npm install -g @forgespace/branding-mcp
forgespace-branding-mcp
{
"mcpServers": {
"forgespace-branding": {
"command": "npx",
"args": ["-y", "@forgespace/branding-mcp@latest"]
}
}
}
Set ANTHROPIC_API_KEY when you want AI-assisted refinement. The server also
works in algorithmic-only mode without external APIs.
Core and vertical tools are available (58 total). The table below highlights the core set plus key vertical generators, including healthcare.
| Tool | Description |
|---|---|
generate_brand_identity | Complete brand from name, industry, and style |
generate_color_palette | Color palette with harmony and WCAG data |
generate_typography_system | Font pairing + modular type scale |
export_design_tokens | Export brand to JSON/CSS/Tailwind/Figma/React/Sass |
create_brand_guidelines | Generate HTML brand book |
validate_brand_consistency | Check WCAG compliance and completeness |
refine_brand_element | Iterate on specific brand elements |
generate_brand_assets | Generate favicons and OG images from brand |
generate_design_system | Complete design system in one call (identity + export) |
generate_brand_fintech | Fintech-specific strategy with compliance and security |
generate_brand_healthcare | Healthcare strategy with care models and safety signals |
| Resource | URI | Description |
|---|---|---|
| Brand Templates | brand://templates | Pre-configured industry templates |
| Brand Knowledge | brand://knowledge | Color theory and typography rules |
npm run dev # Watch mode
npm run validate # Lint + format + test
npm run test # Run tests
npm run test:coverage # Coverage report
npm run build # Build TypeScript
@forgespace/branding-mcpserver.json and mcpName are included for
registry submissionv* runs npm publish with provenance,
then publishes the same version to the MCP Registry via GitHub OIDC.github/workflows/mcp-registry-status.yml refreshes
one issue with npm and MCP Registry drift, visibility, and next actionssrc/
├── index.ts # MCP server entry
├── lib/
│ ├── branding-core/ # Core library (reusable)
│ │ ├── generators/ # Color, typography, spacing, logo, gradients, favicons, OG
│ │ ├── exporters/ # Multi-format token export
│ │ ├── validators/ # WCAG, consistency checks
│ │ └── documents/ # Brand book generation
│ ├── config.ts # Environment config
│ ├── logger.ts # Pino logging
│ └── types.ts # TypeScript interfaces
├── tools/ # 58 MCP tool registrations
└── resources/ # Templates + knowledge base
Part of the Forge Space ecosystem:
brandId parameter/branding/*MIT
FAQs
MCP server for AI-powered brand identity generation — color palettes, typography systems, design tokens, and brand guidelines with multi-format export
The npm package @forgespace/branding-mcp receives a total of 40 weekly downloads. As such, @forgespace/branding-mcp popularity was classified as not popular.
We found that @forgespace/branding-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.

Research
/Security News
A large-scale campaign abused GitHub Actions in compromised repositories to exploit CVE-2026-41940 in cPanel and WHM and steal server credentials.

Security News
Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.