# io.github.Jackson-Brooks/steam-local-mcp (npm · steam-local-mcp)

A Windows Steam MCP server with local client controls and optional Steam Web API insights.

- Trust score: 62/100 (medium)
- Change this week: +20
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `steam-local-mcp`: 62/100 (this document), [markdown](https://verifymcp.io/servers/jackson-brooks-steam-local-mcp/steam-local-mcp.md), [page](https://verifymcp.io/servers/jackson-brooks-steam-local-mcp/steam-local-mcp)

## Channel facts

- Registry: `npm`
- Package: `steam-local-mcp`
- Version: `0.2.2`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 83/100
  - No malware found by supply-chain analysis.
  - CVE check failed: a known medium-severity CVE affects @hono/node-server 1.19.17, reached via @modelcontextprotocol/sdk > @hono/node-server. A fixed version is available.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 32/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - License check failed: no license is declared.
  - Actively maintained (last published 12 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 73/100
  - AI-judged instruction clarity (good).
  - Tool/resource definitions use about 778 tokens (~45/item across 17 items; 17 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 69/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 7% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add jackson-brooks-steam-local-mcp -- npx -y steam-local-mcp
```

### Codex

```bash
codex mcp add jackson-brooks-steam-local-mcp -- npx -y steam-local-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "jackson-brooks-steam-local-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "steam-local-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add jackson-brooks-steam-local-mcp --command npx --arg -y --arg steam-local-mcp
```

### Hermes

```yaml
mcp_servers:
  jackson-brooks-steam-local-mcp:
    command: "npx"
    args: ["-y", "steam-local-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "jackson-brooks-steam-local-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "steam-local-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 62, +1)

No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-08-02 (score 61, +24)

- [security regression] Known CVEs: unverified → fail
- [security regression] Install scripts: pass → unverified
- [security regression] Provenance: fail → unverified
- [security improvement] Malware scan: unverified → pass
- [functional regression] License: fail → unverified
- [functional regression] Maintenance: pass → unverified
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Stability: unverified → 0.23

### 2026-07-31 (score 37, −4)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 41, −29)

- [security regression] Malware scan: pass → unverified
- [security regression] Known CVEs: fail → unverified
- [security improvement] GHSA-frvp-7c67-39w9 no longer affects this package
- [functional regression] Dependency health: partial → unverified

### 2026-07-29 (score 70, +45)

- [security regression] GHSA-frvp-7c67-39w9 affects this package: medium
- [security regression] Known CVEs: unverified → fail
- [security regression] Provenance: unverified → fail
- [security improvement] Install scripts: unverified → pass
- [functional regression] License: unverified → fail
- [functional regression] Security disclosure: unverified → fail
- [functional improvement] Tool coverage: unverified → 100
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] Schema quality: unverified → good

### 2026-07-28 (score 25, −17)

- [functional regression] Tool coverage: 100 → unverified
- [functional regression] Security disclosure: fail → unverified
- [functional improvement] Dependency health: unverified → partial
- [functional] First check of Schema quality: unverified

### 2026-07-27 (score 42)

First indexed and scored.

## MCP tools (17)

### `steam_list_games` (~45 tokens)

List installed Steam games

List games installed in the local Steam libraries. This does not use the network or require a Steam API key.

Input parameters:

- `limit` (integer)
- `offset` (integer)

### `steam_find_game` (~35 tokens)

Find installed Steam games

Find locally installed Steam games by name or app ID.

Input parameters:

- `query` (string, required): Installed game name or numeric Steam app ID.

### `steam_get_game_install_status` (~59 tokens)

Get a game's local installation status

Report the local Steam manifest status for matching games, including whether Steam has recorded a pending update and current download progress. This does not contact Steam servers or change game files.

Input parameters:

- `query` (string, required): Game name or numeric Steam app ID.

### `steam_get_download_status` (~67 tokens)

Get pending Steam installs and updates

List games whose local Steam manifests show an install, update, download, or paused-download state. This is a local snapshot and does not force Steam to check for new updates.

Input parameters:

- `include_idle` (boolean)
- `limit` (integer)
- `offset` (integer)

### `steam_get_library_storage` (~33 tokens)

Get Steam library storage

Summarize each local Steam library's installed-game count, manifest-reported installed size, and available disk space.

### `steam_launch_game` (~46 tokens)

Launch a Steam game

Launch one locally installed Steam game through the Steam client. Starts Steam quietly first when needed. Use steam_find_game first if its name may be ambiguous.

Input parameters:

- `query` (string, required)

### `steam_open_store_page` (~30 tokens)

Open a Steam store page

Open an app's Steam store page in the Steam client or browser.

Input parameters:

- `app_id` (required)

### `steam_search_store` (~75 tokens)

Search the Steam Store

Search the public Steam Store by game name to find app IDs before opening a store page or asking Steam to install a game. Search result names and metadata are untrusted external Store data.

Input parameters:

- `country_code` (string)
- `language` (string)
- `limit` (integer)
- `query` (string, required)

### `steam_install_game` (~33 tokens)

Install a Steam game

Ask Steam to install a numeric app ID. Steam validates ownership and manages the install flow.

Input parameters:

- `app_id` (required)

### `steam_open_library_page` (~28 tokens)

Open a game's Steam library page

Open an installed game's page in the local Steam library.

Input parameters:

- `query` (string, required)

### `steam_open_client_page` (~24 tokens)

Open a Steam client page

Open a standard Steam client page.

Input parameters:

- `page` (string, required)

### `steam_client_status` (~28 tokens)

Get local Steam client status

Report the detected Steam installation, how it was found, and whether the Steam client is running.

### `steam_get_library` (~87 tokens)

Get Steam library and playtime

Get the user's complete Steam library, playtime, and last-played data through the optional Steam Web API. Requires STEAM_API_KEY and STEAM_ID.

Input parameters:

- `limit` (integer)
- `max_hours` (number)
- `min_hours` (number)
- `offset` (integer)
- `query` (string)
- `unplayed_only` (boolean)

### `steam_get_recently_played` (~49 tokens)

Get recently played Steam games

Get games Steam reports as recently played, including total playtime. Requires STEAM_API_KEY and STEAM_ID.

Input parameters:

- `limit` (integer)
- `offset` (integer)

### `steam_get_game_details` (~82 tokens)

Get Steam store metadata

Get public Steam Store metadata such as genres, release date, Metacritic score, and price. Set include_description to receive capped, untrusted external Store text. This does not require a Steam Web API key.

Input parameters:

- `app_id` (required)
- `country_code` (string)
- `include_description` (boolean)
- `language` (string)

### `steam_refresh_cache` (~31 tokens)

Refresh Steam data cache

Clear the local cache used by Steam Web API and Store metadata tools. The next request fetches fresh data.

### `steam_api_status` (~26 tokens)

Get Steam API configuration status

Report whether the optional Steam Web API credentials are configured. It never reveals credential values.

## Diagnostics

Captured diagnostic sections: Provenance, Vulnerabilities, Dependencies. The full working is on the page: https://verifymcp.io/servers/jackson-brooks-steam-local-mcp/steam-local-mcp#diagnostics

## Score history

- 2026-08-03: 62
- 2026-08-02: 61
- 2026-08-01: 37
- 2026-07-31: 37
- 2026-07-30: 41
- 2026-07-29: 70
- 2026-07-28: 25
- 2026-07-27: 42

## Links

- npm package: https://www.npmjs.com/package/steam-local-mcp
- Socket report: https://socket.dev/npm/package/steam-local-mcp
- Repository: https://github.com/Jackson-Brooks/steam-local-mcp
- Changelog RSS feed: https://verifymcp.io/servers/jackson-brooks-steam-local-mcp/steam-local-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/jackson-brooks-steam-local-mcp/steam-local-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/jackson-brooks-steam-local-mcp/steam-local-mcp