ModelsAtlas
Explore
Atlas / MCP servers / fundamentallabs / Minecraft

MinecraftBLOCK

mcp/fundamentallabs/minecraft-2
MCP server by fundamentallabs · Audited 2026-10-07
⚑ Report / re-scanSource ↗

MCP server for minecraft

Verdict
BLOCK
Grade
D
Trust score
69 /100
Exposed tools
2 2r · 0w · 0d
Transport
stdio
License
MIT
Stars
76
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

This library is the Client library for a Minecraft Game Skills and MCP Integration.

Fairies MCP Client () also supports direct connection with a single click.

Features

  • Full Minecraft Control: Connect AI agents to Minecraft servers and control bots
  • 30 Verified Skills: Pre-built, tested skills for common Minecraft tasks
  • Flexible Connection: Connect to any Minecraft server with optional per-bot configuration
  • Multi-Bot Support: Manage multiple bots simultaneously
  • MCP Standard: Compatible with any MCP client (Claude Desktop, etc.)

Installation

Direct call via npx (Recommended)

npx --y -- @fundamentallabs/minecraft-mcp

Via npm (Recommended)

npm install -g @fundamentallabs/minecraft-mcp

From Source

git clone https://github.com/FundamentalLabs/minecraft-mcp.git
cd minecraft-mcp/minecraft-client/mcp-server
npm install
npm run build

Usage

Starting the Server

You can start the MCP server with optional default connection settings:

# Start with no defaults (connection specified per bot)
minecraft-mcp

# Start with default connection settings
minecraft-mcp -h play.example.com -p 25565

Command Line Options

Options:
-p, --port   Minecraft server port (default: 25565)
-h, --host   Minecraft server host (default: localhost)
--help            Display help

Integration with Claude Desktop or JSON configurations Locally

Add to your Claude Desktop configuration (~/Library/Application Support/Claude/claude_desktop_config.json on macOS):

For remote installation (recommended)

{
"mcpServers": {
"minecraft": {
"command": "npx",
"args": ["-y", "-- @fundamentallabs/minecraft-mcp"]
}
}
}

If running locally from source:

{
"mcpServers": {
"minecraft": {
"command": "node",
"args": ["/path/to/minecraft-mcp/minecraft-clie
Read from source at commit 6ed5304ab264OBSERVED · 2026-10-07
Advertisement
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code
claude mcp add minecraft-client-skills -- npx -y [email protected]
claude-desktop
{
  "mcpServers": {
    "minecraft-client-skills": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}
03

Exposed tools (2)

2 read · 0 write · 0 destructive.

ToolRiskDescription
joinGamereadSpawn a bot into the Minecraft game
leaveGamereadDisconnect a bot from the game
04

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

LayerWhat it checksResult
L0Provenance & inventoryWARN
L1Static analysis of the codeFAIL
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (5 observation(s))
Network
declared (1 observation(s))
Shell
declared (1 observation(s))
Dependencies
not all pinned
Secrets in source
none-found

Findings (16)

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
mcp-server/src/skills/verified/buildSomething.ts:213
const buildFunction = new Function(
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
MEDIUMInventory / provenance · inv.binary · CWE-1104
mcp-server/fundamentallabs-minecraft-mcp-0.1.0.tgz
fundamentallabs-minecraft-mcp-0.1.0.tgz
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
mcp-server/fundamentallabs-minecraft-mcp-0.2.5.tgz
fundamentallabs-minecraft-mcp-0.2.5.tgz
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
LOWInventory / provenance · inv.binary · CWE-1104
mineflayer-pathfinder/test/schematics/parkour1.schem
parkour1.schem
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
LOWInventory / provenance · inv.hidden_file · CWE-1104
.eslintignore
.eslintignore
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.hidden_file · CWE-1104
mineflayer-pathfinder/.gitpod.yml
.gitpod.yml
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
mcp-server/src/skills/library/asyncwrap.ts:1
import {ISkillServiceParams} from '../../types/skillType.js';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
mcp-server/src/skills/library/attack.ts:4
import {ISkillServiceParams} from '../../types/skillType.js';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
mcp-server/src/skills/library/breakABlock.ts:4
import {ISkillServiceParams} from '../../types/skillType.js';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
mcp-server/src/skills/library/craftAnItem.ts:6
import { ISkillServiceParams } from '../../types/skillType.js';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
mcp-server/src/skills/library/mineBlock.ts:6
import { ISkillServiceParams } from '../../types/skillType.js';
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
mcp-server/package.json
@modelcontextprotocol/sdk, mineflayer, mineflayer-pathfinder, mineflayer-pvp, mineflayer-tool, mineflayer-collectblock, commander, fastest-levenshtein
Why it matters. 12 dependency range(s) float
Fix. pin exact versions or ship a lockfile
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
mineflayer-collectblock/package.json
mineflayer, mineflayer-tool, @types/node, require-self, ts-standard, typescript
Why it matters. 6 dependency range(s) float
Fix. pin exact versions or ship a lockfile
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
mineflayer-pathfinder/package.json
minecraft-data, prismarine-block, prismarine-entity, prismarine-item, prismarine-nbt, prismarine-physics, vec3, minecraft-wrap
Why it matters. 12 dependency range(s) float
Fix. pin exact versions or ship a lockfile
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
mineflayer-pvp/package.json
mineflayer, mineflayer-utils, @types/node, require-self, standard, typescript
Why it matters. 6 dependency range(s) float
Fix. pin exact versions or ship a lockfile
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
package.json
mineflayer, mineflayer-tool, minecraft-data, vec3, fastest-levenshtein, @types/node, typescript
Why it matters. 7 dependency range(s) float
Fix. pin exact versions or ship a lockfile

Gates applied: no_behavioural_pass.

Audited 2026-10-07 · audit v0.4.1 · source sha 6ed5304ab264full audit observations/trust-audit/mcp-server/fundamentallabs__minecraft-2.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-076ed5304ab264BLOCKD69first audit
06

Questions

What is the Minecraft MCP server?

MCP server for minecraft

What tools does Minecraft expose?

2 in total: 2 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is Minecraft safe to connect to an agent?

No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.

What credentials does Minecraft need?

No credential environment variables were found in its source, so it appears to need none.

How does Minecraft run?

It speaks stdio, so it runs as a local process your client starts. It is published on npm as minecraft-client-skills at 1.0.0.

How current is this page?

The grade is for one exact copy of the source (6ed5304ab264), read on 2026-10-07. The repository is watched and re-audited when it changes.

Advertisement