ttt-mcp (SrmTech-git/MCPArcade) is an MCP server listed on the M8ven Trust Index. It scores 74 out of 100, grade C. It declares 35 tools. No publisher has claimed this listing.

C
Caution
74/100

ttt-mcp

Exposes tic-tac-toe game tools (new_game, get_state, make_move) for Claude to play against a human via chat.

Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

SrmTech-git

Source: Glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

Install from

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings
⚠️
Known vulnerabilities in dependencies: 1 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
// tools this server exposes35 tools

These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.

cc_new_game

Begin a new Critter Catch adventure. Places you in Millhaven and introduces the quest.

cc_move
cc_explore
cc_catch
cc_release

Release a creature from your party. This cannot be undone.

cc_name

Give a creature in your party a new nickname.

cc_new_turn
cc_retire
cc_recall

Invite a retired creature back into your party. Only available in Millhaven.

cc_party

View your full party — bond levels, moods, personalities, and any discovered traits.

cc_status

View your current location, party summary, rare observations, and recent event log.

bs_new_game

Start a new Battleship game: Pirates vs the Royal Navy. Both fleets are placed secretly. Each ship carries hidden cargo revealed only when sunk. Pirates fire first.

bs_human_fire

Fire the pirate cannons at the given coordinates on the Navy's grid. Call this when the human gives their shot. Returns hit/miss/sunk — and if sunk, reveals what that Navy ship was carrying.

bs_claude_fire

Fire the Navy cannons at the given coordinates on the pirate fleet. Claude chooses the target — reason about it in chat first, then call this. Returns hit/miss/sunk — and if sunk, reveals what the pirate ship was carrying.

bs_get_state

Get the current battle map — both attack grids and fleet status. Free, does not count as a shot.

ms_new_game

Start a new Fluffling minefield crossing. 9×9 field, 10 hidden mines. The first step is always safe — mines are placed after it. Call ms_reveal_cell to send the first scout.

ms_reveal_cell

Send a Fluffling scout to a square at (row, col). If it's clear of nearby mines, the surrounding area cascades open automatically. Counts as one step this turn.

ms_flag_cell

Plant or remove a warning post (P) on a square to mark a suspected mine. Flufflings won't accidentally wander into posted squares. Counts as one step.

ms_next_turn

The Flufflings catch their breath and check in with the player. Resets the step counter and gives 8 fresh steps. Must be called after reaching the turn limit — chat first, then call this to continue the crossing.

ms_get_state

Survey the current state of the minefield. Free — does not cost a step.

ot_new_game

Begin the journey to the Well at Eldenmoor. Provide the human player's name — Claude names its own character, and a pet is assigned at random. The trail is generated fresh each run — stops, NPCs, and scenery will differ. Read the full intro to the human before asking what they want to do.

ot_travel

Hit the trail for 3 days. Always costs food and may affect health — plan supplies before calling. Costs: easy=-6 food, +9hp each; steady=-9 food, 0hp change; hard=-12 food, -21hp each, -12hp pet. Random events add further gains/losses on top. Narrate what happens to the human dramatically.

ot_hunt

Stop to hunt for food. Takes half a day, uses ammo, and the results are unpredictable. Narrate the hunt to the human.

ot_rest

Make camp and rest for 1–3 days. Recovers health for everyone but costs food and time. Worth it when someone is struggling.

ot_buy

Buy supplies at a trading post or fort. Only available at stops where trading is possible. Prices: food=$2/day, medicine=$6/dose, ammo=$1/round, parts=$10, oxen=$20.

ot_sell

Sell surplus supplies at a trading post or fort. You'll take a loss — traders know you're desperate — but cash in hand beats dead weight in the wagon. Only available where trading is possible. Ammo isn't worth selling. Sell prices: food=$1/day (buy $2), medicine=$4/dose (buy $6), parts=$6 (buy $10),

ot_cross_river

Choose how to cross the current river. Ford=fast but risky. Caulk=float the wagon, medium risk. Ferry=safe but costs $15. Wait=lose 2 days and food but calmer water. Narrate the crossing dramatically.

ot_use_medicine

Use one dose of medicine on a party member. Restores significant health. Use it when someone is struggling or worse.

ot_status

Check the current state of the journey — party health, supplies, location, and recent events. Free, no cost.

ot_make_wish

Make your wish at the Well at Eldenmoor. Only available after reaching the Well. The outcome is uncertain. State your wish clearly. Narrate the ending based on the outcome returned.

ot_clear_game

Abandon the current journey and clear all game state. Use this to start fresh — especially useful if a stale game from a previous session is still loaded. After calling this, use ot_new_game to begin a new journey.

ttt_new_game

Start a fresh Tic-Tac-Toe game. X always moves first. Optionally name the players so roles are explicit in every response.

ttt_get_state

Get the current Tic-Tac-Toe board, status, player names, and legal moves.

ttt_make_move

Place the current player's mark at (row, col). Rows and columns are 0–2; top-left is row 0, col 0. The server alternates turns automatically. Returns updated board, status, and legal moves in one response.

ttt_get_legal_moves

Returns all empty squares as (row, col) pairs. Legal moves are already included in every ttt_new_game/ttt_make_move response — only call this standalone if you need them in isolation.

// known CVEs in dependencies1 high

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

high@modelcontextprotocol/sdk@1.0.0GHSA-w48q-cv73-mx4w

Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// quality suggestions

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

35/35 tools missing one or more hints — cc_new_game (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); cc_move (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); cc_explore (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +32 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Tool inputs are validated

20/35 tool handlers declare input schemas (57%)

Declare an inputSchema with zod/joi/yup on every tool definition.

License file

No license file

Add a LICENSE file (MIT, Apache-2.0, etc.).

Tests exist

No test files found

Add tests that exercise each declared tool.

Production dependencies are patched

0 critical, 1 high severity in production deps — @modelcontextprotocol/sdk@1.0.0 (high)

Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Verified](https://m8ven.ai/badge/mcp/srmtech-git/mcparcade?variant=verified)](https://m8ven.ai/mcp/srmtech-git/mcparcade)
Shows verification status without the grade. Want the grade badge instead? Remove ?variant=verified from the URL.
commit: 733c182b5812dc5a5946936dbadf2e8e4cc085dd
code hash: 99fd50ae59b896d47b398d461d871a40da97bf3b8112f6c8e8a360f14570181d
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client