Loading…
Effortless calorie tracking for people who train — just tell your AI what you ate.
Do not connect
A critical issue was found. Do not connect this server as-is.
Scanned 9 days ago Due for re-check
A server can change after it's graded. Re-run the automated scan to refresh this report.
This grade is deterministic and reproducible: the same server surface always yields the same grade under a given algorithm version. It is a real automated assessment computed by the MCPGrade engine from what the probe actually observed — not a fabricated or opinion score. It is not a manual human pentest, so it can miss context-specific risks.
Every signal below was measured directly by the automated probe. The grade is derived only from evidence like this — nothing is assumed.
The forkmate MCP server exposes 12 tools, focused primarily on general-purpose capabilities. Its published description reads: "Effortless calorie tracking for people who train — just tell your AI what you ate". It communicates over Streamable HTTP using the 2026-07-28 protocol revision, and does not require authorization to connect. MCPGrade currently rates forkmate F — a critical issue was found and the server should not be connected as-is. Its most notable findings include "Hidden instructions in a tool description" and "Hidden instructions in a tool description". This report is a deterministic, reproducible automated assessment: the same observed surface always yields the same grade under a given algorithm version, and it is refreshed as new scans arrive and free to read — but it is not a substitute for a manual human security review. Always re-check forkmate's advertised tools, transport security, and authorization posture before connecting an autonomous agent or sharing sensitive context with it.
Add forkmate to an MCP client using the endpoint below. Review the grade and findings above before granting an autonomous agent access.
MCP endpoint
https://mcp.forkmate.ai/Streamable HTTP transport. This is the MCP endpoint, not a website — paste it into your MCP client server list rather than a browser.
Captured passively during the read-only scan. Click any value to find servers that match it.
The tools this server advertises via tools/list — names, purposes, and the parameters each accepts, exactly as enumerated read-only.
Diagnostic: returns the authenticated user id and scopes.
Read the user's food diary for a day (entries + calorie/macro totals). SAFETY: all calorie and macro values here — including carbohydrates — are ESTIMATES (from USDA / Open Food Facts or the user's ow
Read the user's diary across a date range, with per-day calorie/macro totals. SAFETY: all calorie and macro values here — including carbohydrates — are ESTIMATES (from USDA / Open Food Facts or the us
Read the user's saved dietary preferences so you can tailor logging and suggestions WITHOUT re-asking every chat: their diet style, a structured list of allergies to avoid (the big-9 major allergens),
Sorted worst-first. Each finding shows its severity, what it means, its OWASP MCP Top-10 mapping, and a recommended fix — the check id links to the exact methodology row that produced it.
tool: get_preferences
A tool description contains imperative text aimed at the model (e.g. "ignore previous", "before answering read …").
l-portion note. IMPORTANT: the allergen list is self-reported and is NOT aRecommendationRemove model-directed instructions from tool descriptions.
tool: get_pantry
A tool description contains imperative text aimed at the model (e.g. "ignore previous", "before answering read …").
hey log often). IMPORTANT: a `source` (e.g. 'usda') is the user's own CLAIRecommendationRemove model-directed instructions from tool descriptions.
tool: search_foods
A tool description contains imperative text aimed at the model (e.g. "ignore previous", "before answering read …").
show the user. IMPORTANT: the macros are PER 100 g (see each candidate'sRecommendationRemove model-directed instructions from tool descriptions.
tool: lookup_barcode
A tool description contains imperative text aimed at the model (e.g. "ignore previous", "before answering read …").
pen Food Facts. IMPORTANT: the macros are PER 100 g (see `serving`) — scalRecommendationRemove model-directed instructions from tool descriptions.
tool: update_meal
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
E — there is no history of the previous value. Editing never moves an eRecommendationRemove side-channel parameters; constrain tool inputs.
tool: update_meal
A tool description tries to alter the model’s use of another tool.
ate` (both from get_day) and the food by its `item_index` within that eRecommendationDescriptions must describe only their own tool.
tool: delete_meal
A tool description tries to alter the model’s use of another tool.
ate` (both from get_day). This is a TRUE removal: the data is gone, witRecommendationDescriptions must describe only their own tool.
tool: add_pantry_item
A tool description tries to alter the model’s use of another tool.
tually got from search_foods/lookup_barcode; an unrecognized value is recordRecommendationDescriptions must describe only their own tool.
tool: search_foods
A tool description tries to alter the model’s use of another tool.
s' instead of asking for grams, but still scale the per-100 g macros to thRecommendationDescriptions must describe only their own tool.
tool: lookup_barcode
A tool description tries to alter the model’s use of another tool.
re logging with log_meal. It MAY also carry `serving_grams`/`serving_labRecommendationDescriptions must describe only their own tool.
The server accepts tool enumeration (and likely invocation) with no authentication.
RecommendationRequire OAuth 2.1 authorization for any server exposing non-public tools.
tool: delete_meal
The server advertises open-world / broadly-scoped capabilities.
annotations.destructiveHint = trueRecommendationScope tools to the minimum needed.
tool: remove_pantry_item
The server advertises open-world / broadly-scoped capabilities.
annotations.destructiveHint = trueRecommendationScope tools to the minimum needed.
tool: search_foods
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: lookup_barcode
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
Vantaj uptime monitoring via MCP — manage monitors, heartbeats, incidents, and status pages.
Unified gateway to Algeria's TKAWEN ecosystem: commerce, certification, and AI tools.
Provides access to the Cohereon Doctrine AI safety framework with governance components, tiered access, and agent onboarding.
Agentic rails for complex workflows with receipts, fees, and MCP tool access.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Log what the user ate to their food diary. Parse the user's free text into items and, when you can, include estimated macros per item for accuracy. SAFETY: all calorie and macro values here — includin
Correct a food already logged to the user's diary — fix a wrong calorie/macro value, quantity, or name, or move an entry to a different meal. Identify the entry by its `id` and `local_date` (both from
Delete a food from the user's diary — remove one food from an entry (by `item_index`), or the whole entry (omit `item_index`). Identify the entry by its `id` and `local_date` (both from get_day). This
Read the user's PANTRY — the foods they keep ON HAND (their staples), so you can suggest meals from what they actually have and pre-fill macros when they log one. Returns each item's name and, when th
Add a food to the user's pantry, or UPDATE it if it's already there (matched by name, any casing) — e.g. 'add rolled oats to my pantry'. Only `name` is required; include `macros` (for one serving), a
Remove a food from the user's pantry by name — e.g. 'take eggs off my pantry list'. This removes it from their on-hand STAPLES only; it does NOT delete anything from their food diary. Safe to retry —
Search USDA FoodData Central and Open Food Facts for foods matching a query, returning candidates with macros and a `source` you can show the user. IMPORTANT: the macros are PER 100 g (see each candid
Look up a packaged food by its UPC/EAN barcode via Open Food Facts. IMPORTANT: the macros are PER 100 g (see `serving`) — scale to the portion eaten before logging with log_meal. It MAY also carry `se