SteamGPT
REMOTE · STEAMGPT.NET
Steam profiles, SteamID conversion, bans, FACEIT stats, friends and comparisons. Free, no API key.
Available components
Last scanned (19 hours ago)
Scores higher than 93% of remote servers
Reachable. Last reached 4 Nov 2026.
Category Entertainment and Games
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security83
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC is configured correctly; the domain's records validate against the full chain to the root. View diagnostics → Pass
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability68
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 1989 tokens (~221/item across 9 items; 9 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 9 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 10 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities60
- Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 30 Oct 26 0
- The server rewrote its instructions, which are the text every model session reads security
- Tool “steam_bans” rewrote its description, which is the text the model reads security
- Tool “steam_batch” rewrote its description, which is the text the model reads security
- Tool “steam_compare” rewrote its description, which is the text the model reads security
- Tool “steam_convert” rewrote its description, which is the text the model reads security
- Tool “steam_faceit” rewrote its description, which is the text the model reads security
- Tool “steam_friends” rewrote its description, which is the text the model reads security
- Tool “steam_identity” rewrote its description, which is the text the model reads security
- Tool “steam_profile” rewrote its description, which is the text the model reads security
- Tool “steam_summary” rewrote its description, which is the text the model reads security
- Tool “steam_bans” now declares an output schema ▲ functional
- Tool “steam_batch” now declares an output schema ▲ functional
- Tool “steam_compare” now declares an output schema ▲ functional
- Tool “steam_convert” now declares an output schema ▲ functional
- Tool “steam_faceit” now declares an output schema ▲ functional
- Tool “steam_friends” now declares an output schema ▲ functional
- Tool “steam_identity” now declares an output schema ▲ functional
- Tool “steam_profile” now declares an output schema ▲ functional
- Tool “steam_summary” now declares an output schema ▲ functional
- First check of Tool coverage: 100 functional
- Server version: 1.2.0 → 1.3.0 functional
- 22 Oct 26 0
- Stability: 0.97 → pass security
- 21 Oct 26 0
- Stability: pass → 0.97 functional
- 28 Sept 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 25 Sept 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 22 Sept 26 0
- Authorization: unverified → partial ▲ security
- Injection markers: unverified → pass ▲ security
- Stability: unverified → pass ▲ security
- HSTS header: fail → pass ▲ security
- Transport: fail → pass ▲ security
- MCP protocol: unverified → fail ▼ functional
- Endpoint reachability: not serving MCP → reachable ▲ functional
- Tool coverage: unverified → 100 ▲ functional
- 21 Sept 26 0
- Endpoint reachability: reachable → not serving MCP ▼ security
- Stability: pass → unverified ▼ security
- Tool safety: pass → unverified ▼ security
- Authorization: partial → unverified ▼ security
- Transport: pass → fail ▼ security
- HSTS header: pass → fail ▼ security
- Capabilities: fail → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- First check of Schema quality: unverified functional
- 17 Sept 26 0
- Stability: 0.97 → pass security
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 4 Nov 2026 · Probed https://steamgpt.net/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=steamgpt.net | CN=WE1,O=Google Trust Services,C=US | 5 Oct 2026 | 4 Jan 2027 | ECDSA 256 | ECDSA-SHA256 | 347e0b22d0b59e851337c46cf5d83b50 |
| SANs: steamgpt.net, *.steamgpt.net | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC secure
Validation of steamgpt.net. — Secure
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| net. | present | 37331 | 13 | Verified |
| steamgpt.net. | present | 2371 | 13 | Verified |
| steamgpt.net. | Verified address RRset verified with the apex keys |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=5184000; includeSubDomains; preload |
| x-content-type-options | nosniff |
| x-frame-options | SAMEORIGIN |
| referrer-policy | same-origin |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://steamgpt.net/mcp | Verified | 200 | |
| http (plaintext) | http://steamgpt.net/mcp | HTTPS enforced | 301 | https://steamgpt.net/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
steam_bans Steam ban check ~187
Use when the user asks whether a Steam account has a VAC, game, community or trade (economy) ban - the first check for a cheating report or before trusting a player. Returns VACBanned, NumberOfVACBans, NumberOfGameBans, DaysSinceLastBan, CommunityBanned and EconomyBan exactly as Steam reports them; DaysSinceLastBan is 0 both for banned today and never banned. Unresolvable ids or an unavailable upstream return an error result, never guessed data. Do not use for FACEIT bans (steam_faceit).
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | any SteamID format: steamid64 (17 digits), STEAM_1:0:x, STEAM_0:0:x, [U:1:x], hex, steam:hex, a 32-bit account id, a steamcommunity.com link or a vanity name |
| Name | Type | Req | Description |
|---|---|---|---|
| bans | – | – | Steam ban object: VACBanned, NumberOfVACBans, NumberOfGameBans, DaysSinceLastBan, CommunityBanned, EconomyBan |
| provenance | – | – | freshness of the ban snapshot: retrieved_at, age_seconds, fresh, cache_ttl |
| steamid64 | string | – | – |
No examples provided.
steam_batch Batch Steam profiles ~245
Use when the user gives several Steam ids - a match roster, a team, a list of suspects - and wants profiles, FACEIT or ban status for all of them: up to 100 in ONE call, always instead of per-player calls. ids are STRINGS in any computable SteamID format (steamid64, STEAM_1:0:x, STEAM_0:0:x, [U:1:x], hex, steam:hex, a 32-bit account id, a /profiles/ link); never JSON numbers (a 17-digit number loses precision and points at another account); vanity names are not accepted - resolve them with steam_identity first. Players unknown to the platform come back in not_found - fetch those with steam_profile. include adds FACEIT (one query for the batch) and Steam bans (one upstream call) - the cheapest way to review a full roster. Do not use for one player (steam_summary).
| Name | Type | Req | Description |
|---|---|---|---|
| ids | array | yes | steamid64 list, max 100 - prefer one batch over per-player calls |
| include | array | – | extra blocks per player: faceit level/ELO, Steam ban status |
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | players returned |
| invalid | array | – | inputs that are not a computable SteamID |
| not_found | array | – | valid ids unknown to the platform - fetch them with steam_profile |
| players | array | – | per player: steamid64, ids, steam and the include blocks |
No examples provided.
steam_compare Compare two players ~223
Use when the user asks to compare two Steam players, whether two accounts are related or share friends, or for smurf and alt-account hints: identity, account age, visibility, Steam bans, FACEIT and shared friends compared over the full friend lists. HEAVIEST tool - it builds two summaries plus both friend graphs. Do not use for a single player (steam_summary) or for more than two players (steam_batch).
| Name | Type | Req | Description |
|---|---|---|---|
| id1 | string | yes | any SteamID format: steamid64 (17 digits), STEAM_1:0:x, STEAM_0:0:x, [U:1:x], hex, steam:hex, a 32-bit account id, a steamcommunity.com link or a vanity name |
| id2 | string | yes | any SteamID format: steamid64 (17 digits), STEAM_1:0:x, STEAM_0:0:x, [U:1:x], hex, steam:hex, a 32-bit account id, a steamcommunity.com link or a vanity name |
| Name | Type | Req | Description |
|---|---|---|---|
| a | – | – | summary of the first player: identity, account, Steam bans, FACEIT |
| b | – | – | summary of the second player |
| shared_friends | – | – | friends present in both snapshots; an empty list is not proof the players are unrelated |
No examples provided.
steam_convert SteamID converter ~184
Use when the user wants a SteamID converted between formats - steamid64 (dec and hex), STEAM_1:0:x, legacy STEAM_0, [U:1:x], 32-bit account id, steam:hex (FiveM) or the profile URL - starting from any one of them, instantly and offline. CHEAPEST TOOL: prefer it over steam_identity whenever only format conversion is needed. Do not use for vanity names (steamcommunity.com/id/name is not a computable format - use steam_identity) or for profile data (steam_profile).
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | steamid64 (17 digits), STEAM_1:0:x, STEAM_0:0:x, [U:1:x], hex, steam:hex, a 32-bit account id or a /profiles/ link. NOT a vanity name |
| Name | Type | Req | Description |
|---|---|---|---|
| accountid | – | – | 32-bit account id |
| input_format | – | – | which format the input was recognized as |
| profile_url | – | – | steamcommunity.com/profiles/ link |
| steam_hex | – | – | steam:hex form used by FiveM |
| steamid | – | – | STEAM_1:y:z |
| steamid3 | – | – | [U:1:x] |
| steamid64 | string | – | – |
| steamid64_hex | – | – | steamid64 in hexadecimal |
| steamid_legacy | – | – | STEAM_0:y:z |
No examples provided.
steam_faceit FACEIT profile ~169
Use when the user asks how good a CS2 player is on FACEIT - level, ELO, country, nickname - or whether a FACEIT account is banned. Returns the FACEIT player object plus known FACEIT bans; players without a FACEIT account return a result saying so - absence is reported explicitly, never silently. Do not use for Steam (VAC/game) bans (steam_bans) or for match history and per-match stats, which SteamGPT does not have.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | any SteamID format: steamid64 (17 digits), STEAM_1:0:x, STEAM_0:0:x, [U:1:x], hex, steam:hex, a 32-bit account id, a steamcommunity.com link or a vanity name |
| Name | Type | Req | Description |
|---|---|---|---|
| bans | array | – | known FACEIT bans |
| faceit | – | – | FACEIT player object (nickname, country, games.cs2.skill_level, games.cs2.faceit_elo) or null when no FACEIT profile is known |
| note | – | – | present only when no FACEIT profile is known |
| provenance | – | – | freshness of the FACEIT snapshot |
| steamid64 | string | – | – |
No examples provided.
steam_friends Steam friend list ~204
Use when the user asks who the friends of a Steam player are or needs the friend list for a graph check. Source: the platform snapshot of the public Steam friend graph (cache only, no live Steam call; it can be partial - absence of a friendship is not proof). detail picks token cost: short - steamid64 array, medium - steamid64 + personaname, full - raw Steam objects; use short unless names are needed. Do not use for shared friends of two players (steam_compare).
| Name | Type | Req | Description |
|---|---|---|---|
| detail | string | – | response detail level, default full |
| id | string | yes | any SteamID format: steamid64 (17 digits), STEAM_1:0:x, STEAM_0:0:x, [U:1:x], hex, steam:hex, a 32-bit account id, a steamcommunity.com link or a vanity name |
| limit | integer | – | max friends to return, default 100 |
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | friends returned |
| friends | array | – | entries shaped by detail: steamid64 strings, {steamid64, personaname} or {steamid64, steam} |
No examples provided.
steam_identity SteamID resolver ~187
Use when the user gives a vanity name or a steamcommunity.com/id/ link and the steamid64 behind it is needed, or when a resolved identity is needed in every format without profile data: steamid64, SteamID (STEAM_1:0:x), SteamID3 ([U:1:x]), steam hex, vanity, profile URL. Resolution goes through Steam; unresolvable ids return an error result - never a partial guess. Do not use for pure format conversion of a known id (steam_convert is cheaper) or for profile data (steam_profile).
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | any SteamID format: steamid64 (17 digits), STEAM_1:0:x, STEAM_0:0:x, [U:1:x], hex, steam:hex, a 32-bit account id, a steamcommunity.com link or a vanity name |
| Name | Type | Req | Description |
|---|---|---|---|
| profile_url | – | – | steamcommunity.com/profiles/ link |
| resolved | boolean | – | – |
| steam_hex | – | – | steamid64 in hexadecimal |
| steamid | – | – | STEAM_1:y:z |
| steamid3 | – | – | [U:1:x] |
| steamid64 | string | – | – |
| vanity | – | – | custom URL name when known, otherwise null |
No examples provided.
steam_profile Steam profile ~175
Use when the user asks about one Steam account itself - nickname, avatar, profile visibility, creation date, online status, current game - and nothing else. Returns the raw GetPlayerSummaries object plus SteamID conversions; cheapest profile tool, data no older than 48 hours, unknown profiles are fetched live from Steam. Private profiles return the public subset of fields (not an error); unresolvable ids return an error result. Do not use for bans, FACEIT or friends (steam_summary or the narrow tools).
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | any SteamID format: steamid64 (17 digits), STEAM_1:0:x, STEAM_0:0:x, [U:1:x], hex, steam:hex, a 32-bit account id, a steamcommunity.com link or a vanity name |
| Name | Type | Req | Description |
|---|---|---|---|
| canonical | – | – | steamid64 and canonical URL of this player |
| ids | – | – | the same account in every SteamID format |
| provenance | – | – | per source: retrieved_at, age_seconds, fresh, cache_ttl |
| steam | – | – | raw Steam GetPlayerSummaries object |
| steamid64 | string | – | – |
No examples provided.
steam_summary Steam profile summary ~305
Use when the user asks who a Steam player is or wants everything known about one account in a single call: Steam summary, Steam ban status (VAC/game/community), SteamID conversions, FACEIT stats and the first 100 friends. include LIMITS the response to the blocks you list: omit it for everything, ["steam"] for the Steam block only (cheapest), ["bans"] for a ban check only, ["faceit","bans"] to drop the friend list; friends_limit caps the friend list (default 100). Responses carry provenance.fresh and sources/partial - branch on them, not on nulls. Do not use for several players (steam_batch) or for a single fact (steam_bans, steam_faceit, steam_convert are cheaper).
| Name | Type | Req | Description |
|---|---|---|---|
| friends_detail | string | – | friend entry shape, default full; short/medium are much smaller |
| friends_limit | integer | – | max friends in the response, default 100 |
| id | string | yes | any SteamID format: steamid64 (17 digits), STEAM_1:0:x, STEAM_0:0:x, [U:1:x], hex, steam:hex, a 32-bit account id, a steamcommunity.com link or a vanity name |
| include | array | – | restricts the response to the listed blocks; omit for bans+faceit+friends. Example: ["bans"] returns the Steam summary plus ban status only |
| Name | Type | Req | Description |
|---|---|---|---|
| canonical | – | – | steamid64 and canonical URL of this player |
| faceit | – | – | FACEIT player object or null |
| faceit_bans | – | – | known FACEIT bans |
| friends | – | – | friend entries, shape set by friends_detail |
| ids | – | – | the same account in every SteamID format |
| partial | boolean | – | true when at least one source was unavailable |
| provenance | – | – | per source: retrieved_at, age_seconds, fresh, cache_ttl |
| sources | object | – | per block: ok | empty | unavailable | excluded |
| steam | – | – | raw Steam GetPlayerSummaries object, null when the Steam block is unavailable |
| steam_bans | – | – | Steam ban fields exactly as Steam reports them |
| steamid64 | string | – | – |
No examples provided.
How do I install the SteamGPT MCP server?
SteamGPT is a hosted endpoint at https://steamgpt.net/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · steamgpt.net
claude mcp add --transport http net-steamgpt-steamgpt 'https://steamgpt.net/mcp'
What is the SteamGPT MCP server?
SteamGPT is an MCP server listed in the public MCP registry as net.steamgpt/steamgpt. Steam profiles, SteamID conversion, bans, FACEIT stats, friends and comparisons. Free, no API key. This page covers its hosted endpoint (https://steamgpt.net/mcp).
Is the SteamGPT MCP server safe to use?
SteamGPT scores 86 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the SteamGPT MCP server expose?
SteamGPT exposes 9 tools: steam_summary, steam_bans, steam_profile, steam_convert, steam_identity, and 4 more. Their descriptions and schemas cost roughly 1,879 tokens of context every time the server is loaded.
Does the SteamGPT MCP server require authentication?
No. We connected to SteamGPT without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the SteamGPT MCP server still maintained?
SteamGPT is still listed as active in the MCP registry. We last reached this channel on 4 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.