This is an early release preview. You may encounter bugs.
Forge logo
Unclaimed

Tool deployment security

Forge

Forge is the open-source runtime for Anthropic's Agent Skills standard — built for the agent that runs next to a service, in your environmen

C 57/100 GitHub score ? This grade is derived from GitHub signals, not user votes. Open for the full breakdown.
Discussion

01 / Summary

About Forge.

Forge is an agent runtime built around Anthropic's Agent Skills format. You describe an agent as a SKILL.md file (markdown with YAML frontmatter), and Forge parses it, discovers the tools and dependencies it needs, compiles it into an agent specification, applies a security policy, and runs an LLM agent loop with tool calling, memory, and scheduled tasks. It ships as a single static binary and container.

The runtime targets agents that run next to a service on infrastructure you already operate: a local machine, Docker, Kubernetes distributions, on-premises and air-gapped sites, CI pipelines, or an Agent-to-Agent (A2A) endpoint with a spec-conformant agent card. Model providers include Anthropic, OpenAI, Gemini, Ollama, and local GGUF models, with automatic failover between providers.

Security controls are part of the open-source runtime: outbound-only connections with no public listeners, per-skill egress allowlists enforced at build time and runtime, encrypted secrets, denied-tool contracts, Ed25519 artifact signing, content guardrails with PII detection, and structured audit logs with correlation IDs. Authentication plugs into OIDC, AWS SigV4, GCP IAP, and Azure AD, and OpenTelemetry tracing links spans to audit events.

Agents reach users through Slack and Telegram connectors, connect to remote HTTP MCP servers such as Linear, Notion, and Atlassian, and can be managed in a web dashboard with a skill builder. An interactive builder can also open Claude Code with Forge's MCP tools. The core, skills, and plugin modules can be imported as Go libraries.

  • Skill-defined agents: agents written as SKILL.md files with YAML frontmatter and optional scripts
  • Egress control: domain allowlists applied at build time and runtime, including a subprocess proxy
  • Multi-provider models: Anthropic, OpenAI, Gemini, Ollama, and local GGUF models with automatic failover
  • Channel connectors: outbound-only Slack and Telegram adapters
  • Cron scheduling: recurring tasks with delivery to a channel
  • Memory: persistent sessions plus long-term vector search
  • MCP client: connects to HTTP MCP servers with namespaced tools and audit entries
  • Audit and tracing: NDJSON audit logs with correlation IDs and OpenTelemetry distributed tracing
  • Build signing: Ed25519 signing and verification of agent artifacts
  • Pluggable authentication: OIDC, AWS SigV4, GCP IAP, and Azure AD providers
  • Deployment targets: Docker, Kubernetes, on-premises, air-gapped, CI, and A2A endpoints
  • Web dashboard: browser-based agent management and a skill builder

02 / Discussion CREDIBILITY-GATED

Discussion

Reading is open to everyone. Posting and voting need a verified identity or a GitHub grade of B or higher.

  • No discussions yet.

04 / Build

Build with Forge.

Browse the catalog for frameworks, tools, and harnesses, each scored on real GitHub credibility.

Get Forge →

Browse the catalog