ttt-mcp (SrmTech-git/MCPArcade) is an MCP server listed on the M8ven Trust Index. It scores 74 out of 100, grade C. It declares 35 tools. No publisher has claimed this listing.
Exposes tic-tac-toe game tools (new_game, get_state, make_move) for Claude to play against a human via chat.
Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
SrmTech-git
Source: Glama
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.
These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.
cc_new_gameBegin a new Critter Catch adventure. Places you in Millhaven and introduces the quest.
cc_movecc_explorecc_catchcc_releaseRelease a creature from your party. This cannot be undone.
cc_nameGive a creature in your party a new nickname.
cc_new_turncc_retirecc_recallInvite a retired creature back into your party. Only available in Millhaven.
cc_partyView your full party — bond levels, moods, personalities, and any discovered traits.
cc_statusView your current location, party summary, rare observations, and recent event log.
bs_new_gameStart a new Battleship game: Pirates vs the Royal Navy. Both fleets are placed secretly. Each ship carries hidden cargo revealed only when sunk. Pirates fire first.
bs_human_fireFire the pirate cannons at the given coordinates on the Navy's grid. Call this when the human gives their shot. Returns hit/miss/sunk — and if sunk, reveals what that Navy ship was carrying.
bs_claude_fireFire the Navy cannons at the given coordinates on the pirate fleet. Claude chooses the target — reason about it in chat first, then call this. Returns hit/miss/sunk — and if sunk, reveals what the pirate ship was carrying.
bs_get_stateGet the current battle map — both attack grids and fleet status. Free, does not count as a shot.
ms_new_gameStart a new Fluffling minefield crossing. 9×9 field, 10 hidden mines. The first step is always safe — mines are placed after it. Call ms_reveal_cell to send the first scout.
ms_reveal_cellSend a Fluffling scout to a square at (row, col). If it's clear of nearby mines, the surrounding area cascades open automatically. Counts as one step this turn.
ms_flag_cellPlant or remove a warning post (P) on a square to mark a suspected mine. Flufflings won't accidentally wander into posted squares. Counts as one step.
ms_next_turnThe Flufflings catch their breath and check in with the player. Resets the step counter and gives 8 fresh steps. Must be called after reaching the turn limit — chat first, then call this to continue the crossing.
ms_get_stateSurvey the current state of the minefield. Free — does not cost a step.
ot_new_gameBegin the journey to the Well at Eldenmoor. Provide the human player's name — Claude names its own character, and a pet is assigned at random. The trail is generated fresh each run — stops, NPCs, and scenery will differ. Read the full intro to the human before asking what they want to do.
ot_travelHit the trail for 3 days. Always costs food and may affect health — plan supplies before calling. Costs: easy=-6 food, +9hp each; steady=-9 food, 0hp change; hard=-12 food, -21hp each, -12hp pet. Random events add further gains/losses on top. Narrate what happens to the human dramatically.
ot_huntStop to hunt for food. Takes half a day, uses ammo, and the results are unpredictable. Narrate the hunt to the human.
ot_restMake camp and rest for 1–3 days. Recovers health for everyone but costs food and time. Worth it when someone is struggling.
ot_buyBuy supplies at a trading post or fort. Only available at stops where trading is possible. Prices: food=$2/day, medicine=$6/dose, ammo=$1/round, parts=$10, oxen=$20.
ot_sellSell surplus supplies at a trading post or fort. You'll take a loss — traders know you're desperate — but cash in hand beats dead weight in the wagon. Only available where trading is possible. Ammo isn't worth selling. Sell prices: food=$1/day (buy $2), medicine=$4/dose (buy $6), parts=$6 (buy $10),…
ot_cross_riverChoose how to cross the current river. Ford=fast but risky. Caulk=float the wagon, medium risk. Ferry=safe but costs $15. Wait=lose 2 days and food but calmer water. Narrate the crossing dramatically.
ot_use_medicineUse one dose of medicine on a party member. Restores significant health. Use it when someone is struggling or worse.
ot_statusCheck the current state of the journey — party health, supplies, location, and recent events. Free, no cost.
ot_make_wishMake your wish at the Well at Eldenmoor. Only available after reaching the Well. The outcome is uncertain. State your wish clearly. Narrate the ending based on the outcome returned.
ot_clear_gameAbandon the current journey and clear all game state. Use this to start fresh — especially useful if a stale game from a previous session is still loaded. After calling this, use ot_new_game to begin a new journey.
ttt_new_gameStart a fresh Tic-Tac-Toe game. X always moves first. Optionally name the players so roles are explicit in every response.
ttt_get_stateGet the current Tic-Tac-Toe board, status, player names, and legal moves.
ttt_make_movePlace the current player's mark at (row, col). Rows and columns are 0–2; top-left is row 0, col 0. The server alternates turns automatically. Returns updated board, status, and legal moves in one response.
ttt_get_legal_movesReturns all empty squares as (row, col) pairs. Legal moves are already included in every ttt_new_game/ttt_make_move response — only call this standalone if you need them in isolation.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default
Tool annotations
No tools have read-only/destructive annotations
Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.
All four hints declared on every tool
35/35 tools missing one or more hints — cc_new_game (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); cc_move (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); cc_explore (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +32 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
Tool inputs are validated
20/35 tool handlers declare input schemas (57%)
Declare an inputSchema with zod/joi/yup on every tool definition.
License file
No license file
Add a LICENSE file (MIT, Apache-2.0, etc.).
Tests exist
No test files found
Add tests that exercise each declared tool.
Production dependencies are patched
0 critical, 1 high severity in production deps — @modelcontextprotocol/sdk@1.0.0 (high)
Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/srmtech-git/mcparcade)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check