
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
toolforte-mcp
Advanced tools
MCP server for AI assistants: exact IBAN, VAT, cron, regex and working-day answers, HTML and URL to hosted PDF or screenshot, agent memory between sessions. Runs npx toolforte-mcp as a stdio bridge to the ToolForte remote server.
An MCP server that gives an AI assistant exact answers and real files: IBAN and VAT checks, working days, cron and regex, HTML or a URL to a hosted PDF or screenshot, a JavaScript-rendered page as Markdown, and memory that survives between sessions.
The server runs at https://toolforte.com/api/mcp. This package is the one-line way to reach it from a client that speaks stdio, and it is also the shortest possible setup for any client:
npx -y toolforte-mcp
Open Settings, Developer, Edit config, and add:
{
"mcpServers": {
"toolforte": {
"command": "npx",
"args": ["-y", "toolforte-mcp"]
}
}
}
Restart Claude. Ask: "Validate the IBAN NL91 ABNA 0417 1643 00 with ToolForte." Claude calls validate_iban and answers from the result instead of from memory.
On a paid Claude plan you can skip this package: Settings, Connectors, Add custom connector, and paste the server URL. Guide: https://toolforte.com/mcp/claude
These clients connect to the URL directly, no bridge needed:
| Client | Setup |
|---|---|
| Claude Code | claude mcp add --transport http toolforte https://toolforte.com/api/mcp |
| Cursor | {"mcpServers":{"toolforte":{"url":"https://toolforte.com/api/mcp"}}} in mcp.json, or the install button on https://toolforte.com/mcp/cursor |
| VS Code | {"servers":{"toolforte":{"type":"http","url":"https://toolforte.com/api/mcp"}}} in .vscode/mcp.json |
| Windsurf | {"mcpServers":{"toolforte":{"serverUrl":"https://toolforte.com/api/mcp"}}} |
| Gemini CLI | gemini mcp add --transport http toolforte https://toolforte.com/api/mcp |
| ChatGPT | Developer mode connector with the same URL |
A step by step page per client, with the config to paste and the questions people ask: https://toolforte.com/mcp
Not for the utilities. Without a key you get every deterministic tool plus a few renders a day per session. A free key from https://toolforte.com/account makes memory private to you, gives access to the workflows on your account, and moves renders onto a monthly credit balance. Pass it as an environment variable:
{
"mcpServers": {
"toolforte": {
"command": "npx",
"args": ["-y", "toolforte-mcp"],
"env": { "TOOLFORTE_API_KEY": "tf_your_key_here" }
}
}
}
By default the assistant sees a small core plus three meta tools, so its context stays small: search_tools finds any tool by a word from the job, describe_tool returns its full schema, and run_tool runs it by name. Set TOOLFORTE_TOOLS=all to list everything up front. Four groups, with the names the assistant sees.
Deterministic utilities, free: validate_iban, validate_email, calculate_vat, check_vat_number_format, dutch_public_holidays, working_days_between, parse_cron, test_regex, format_json, text_diff, csv_to_json, base64, url_encode, generate_uuids, count_words, generate_slug, markdown_to_html, convert_color, password_strength, and Dutch test data generators (generate_test_bsn, generate_test_iban, generate_brp_test_data, generate_upa_files). Each one is arithmetic or parsing, so the answer is computed rather than guessed.
Render tools: html_to_pdf, url_to_pdf, url_screenshot, qr_code_png, pdf_merge return a hosted file valid for 24 hours. read_page returns the readable content of a JavaScript-rendered page as Markdown.
Memory tools, free: memory_set, memory_get, memory_list, memory_delete. A private key-value store scoped to your API key, so work spanning several days continues instead of starting over.
Workflow tools: workflow_list and workflow_run list and run the multi-step workflows saved on your account, by id, in one call.
The full list with what each tool costs: https://toolforte.com/mcp
The utilities and memory are free. Renders have a daily free allowance without a key and draw on a monthly credit balance with one. A free account carries 1,000 credits a month; a paid plan raises that and any plan can be extended with a pack that never expires. Pricing: https://toolforte.com/pricing
Tool inputs are processed on ToolForte servers and not kept, except by the memory tools, whose purpose is to keep what you store, and rendered files, which are hosted for 24 hours behind a signed link. The browser tools on toolforte.com never send anything; the MCP server necessarily does. Details: https://toolforte.com/help/where-your-data-goes
| Variable | Meaning |
|---|---|
TOOLFORTE_API_KEY | Sent as Authorization: Bearer on every request. Optional. |
TOOLFORTE_MCP_URL | Override the server URL. Defaults to https://toolforte.com/api/mcp. |
TOOLFORTE_TOOLS | Which tools the client lists. Unset: a core set plus search_tools, describe_tool and run_tool, which find, explain and run every other tool. all: every tool up front. A comma list such as pdf,dutch,validate_iban: jobs from https://toolforte.com/everything and tool names. Every tool stays callable by name whatever is listed. |
npx toolforte-mcp --help prints the same.
io.github.Toinedotcom/toolforte in the official MCP RegistryMIT
FAQs
MCP server for AI assistants: exact IBAN, VAT, cron, regex and working-day answers, HTML and URL to hosted PDF or screenshot, agent memory between sessions. Runs npx toolforte-mcp as a stdio bridge to the ToolForte remote server.
The npm package toolforte-mcp receives a total of 142 weekly downloads. As such, toolforte-mcp popularity was classified as not popular.
We found that toolforte-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.