ChessSAFE
MCP server for playing chess against AI
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
This MCP let's you play chess against any LLM.
Installation
To use this chess server, add the following configuration to your MCP config:
{
"mcpServers": {
"chess": {
"command": "uvx",
"args": [
"mcp-chess"
]
}
}
}Usage
Play a game:
Find a position in a PGN for game analysis:
Available Tools
The server provides the following tools:
get_board_visualization(): Provides the current state of the chessboard as an image. The board orientation automatically flips based on the user's assigned color.get_turn(): Indicates whose turn it is ('white' or 'black').get_valid_moves(): Lists all legal moves for the current player in UCI notation (e.g., 'e2e4', 'g1f3'). Returns an empty list if the game is over.make_move(move_san: str): Makes a move on the board using Standard Algebraic Notation (SAN) (e.g., 'e4', 'Nf3', 'Bxe5'). Returns the move in SAN and UCI, the new board FEN, and game status.new_game(user_plays_white: bool = True): Starts a new game, resetting the board. By default, the user plays white. Sets the user's color for board orientation. Returns a confirmation message.find_position_in_pgn(pgn_string: str, condition: str): Finds the first board position in a PGN string matching a condition (e.g., "bishop on a3") and returns an image of that board state. The condition format is "piecetype on squarename". Valid piece types are "pawn", "knight", "bishop", "rook", "queen", "king".
9634f52fe98eOBSERVED · 2026-10-10Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add mcp-chess -- uvx mcp-chess
{
"mcpServers": {
"mcp-chess": {
"command": "uvx",
"args": [
"mcp-chess"
]
}
}
}Exposed tools (6)
5 read · 1 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
find_position_in_pgn | read | |
get_board_visualization | read | Provides the current state of the chessboard as an image. |
get_turn | read | Indicates whose turn it is ( |
get_valid_moves | read | Lists all legal moves for the current player in UCI notation. |
make_move | write | |
new_game | read |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (0)
No findings outside the package's declared scope.
Gates applied: no_behavioural_pass.
9634f52fe98efull audit observations/trust-audit/mcp-server/jiayao__chess-1.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-10 | 9634f52fe98e | SAFE | B | 89 | first audit |
Questions
What is the Chess MCP server?
MCP server for playing chess against AI
What tools does Chess expose?
6 in total: 5 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Chess safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does Chess need?
No credential environment variables were found in its source, so it appears to need none.
How current is this page?
The grade is for one exact copy of the source (9634f52fe98e), read on 2026-10-10. The repository is watched and re-audited when it changes.