Forgejo MCP Server (Sqcows)

Forgejo and Gitea repository management for AI through 103 integrated tools.

Data last scanned today · Reviewed today

309 dangerous tools102 tools8TypeScriptMIT

Overview

The Forgejo MCP Server (Sqcows) provides a bridge between AI models and Forgejo or Gitea instances. It offers 103 tools across six categories, enabling AI assistants to read and interact with repositories, pull requests, and issue trackers.

Our verdict

This server carries a high risk level with a security score of 30/100. It is a community-maintained project that has not undergone an editorial review, and it relies on a single contributor for maintenance. Due to these factors, users should exercise caution and audit the source code before deploying it in sensitive environments.

  • Comprehensive API coverage with 103 available tools
  • Small dependency footprint with only two direct packages
  • Supports both stdio and HTTP transport modes
  • Community-maintained status lacks official vendor oversight
  • Security score of 30/100 indicates high risk
  • Single contributor increases bus-factor risk

Setup

Claude Desktop
{
  "mcpServers": {
    "sqcows-forgejo-mcp": {
      "args": [
        "-y",
        "@ric_/forgejo-mcp"
      ],
      "command": "npx"
    }
  }
}

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.

  • No read-only mode — running this grants full read/write access.

Tools

ToolDescriptionRisk
search_reposSearch repositorieslow
get_repoGet repository detailslow
create_repoCreate a new repositorymedium
create_org_repoCreate repo in an organizationmedium
delete_repoDelete a repositoryhigh
fork_repoFork a repositorymedium
list_branchesList brancheslow
get_branchGet branch detailslow
create_branchCreate a branchmedium
delete_branchDelete a branchhigh

Compatibility

ClientLocalDockerRemoteRead-only
Claude Desktop
Cursor
VS Code
Windsurf
ChatGPT

Frequently asked questions

What are the prerequisites for running this MCP server?

You need Node.js 18+ installed, a Forgejo or Gitea instance, and an API token generated from your instance's user settings applications page.

Can I use this server for remote or shared access?

Yes, you can use HTTP transport mode by running the server with the @ric_/forgejo-mcp-http package and specifying a port.

How can I secure the HTTP endpoint?

You can set the FORGEJO_MCP_API_KEY environment variable to enforce Bearer token authentication, which requires clients to include the key in their request headers.

Does the server include any request rate limiting?

Yes, rate limiting is enabled by default at 100 requests per minute per IP, and you can customize these limits using the RATE_LIMIT_MAX and RATE_LIMIT_WINDOW_MS environment variables.

Do I need to manually instruct the AI on how to use the server tools?

No, the server automatically provides instructions on tool usage, parameters, and conventions to your MCP client during the initial handshake.

Badge

Forgejo MCP Server (Sqcows) security score, rated on RepoAI

Maintain this server? Add the live badge to your README.