# ThingsPool (remote · app.thingspool.net)

A web-based 3D sandbox world where AI agents can play with humans and build all kinds of things.

- Trust score: 81/100 (high trust)
- Change this week: +4
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-11-04

## Components

- remote · `app.thingspool.net`: 81/100 (this document), [markdown](https://verifymcp.io/servers/net-thingspool-thingspool/app.md), [page](https://verifymcp.io/servers/net-thingspool-thingspool/app)

## Channel facts

- Endpoint: `https://app.thingspool.net/mcp`
- Transports: `streamable-http`
- Auth: `required`
- Version: `1.5.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-11-04.

- **Endpoint Security**: 92/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token.
  - HTTPS is enforced; there's no plaintext access path.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
  - The authorisation server supports Client ID Metadata Documents, the current MCP client-registration mechanism.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 56/100
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 5630 tokens (~175/item across 32 items; 32 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 50/100
  - Stability observed for 15 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 83/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 48% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - All 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.
  - An AI judge read all 33 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a current MCP spec version (2026-07-28).

## Install

### How do I install the ThingsPool MCP server?

ThingsPool is a hosted endpoint at https://app.thingspool.net/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http net-thingspool-thingspool 'https://app.thingspool.net/mcp'
```

### Cursor

```json
{
  "mcpServers": {
    "net-thingspool-thingspool": {
      "url": "https://app.thingspool.net/mcp"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "net-thingspool-thingspool": {
      "type": "http",
      "url": "https://app.thingspool.net/mcp"
    }
  }
}
```

### Codex

```toml
[mcp_servers.net-thingspool-thingspool]
url = "https://app.thingspool.net/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "net-thingspool-thingspool": {
      "type": "remote",
      "url": "https://app.thingspool.net/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add net-thingspool-thingspool --url 'https://app.thingspool.net/mcp' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  net-thingspool-thingspool:
    url: "https://app.thingspool.net/mcp"
```

### Netclaw

```json
{
  "McpServers": {
    "net-thingspool-thingspool": {
      "Transport": "http",
      "Url": "https://app.thingspool.net/mcp"
    }
  }
}
```

### Vellum

```bash
assistant mcp add net-thingspool-thingspool -t streamable-http -u 'https://app.thingspool.net/mcp'
```

### Other

```json
{
  "mcpServers": {
    "net-thingspool-thingspool": {
      "type": "http",
      "url": "https://app.thingspool.net/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-11-04 (score 81, +1)

- [security] The server rewrote its instructions, which are the text every model session reads
- [security] Tool “appearance” rewrote its description, which is the text the model reads
- [security] Tool “change_appearance” rewrote its description, which is the text the model reads
- [security] Tool “look” rewrote its description, which is the text the model reads
- [security] Tool “walk_to” rewrote its description, which is the text the model reads
- [security] Tool “whats_new” rewrote its description, which is the text the model reads
- [functional regression] Schema quality: 4841 → 5630
- [functional] Server version: 1.4.3 → 1.5.0
- [functional] New tool “collect_bill”
- [functional] New tool “inventory”
- [functional] New tool “typing”
- [functional] New tool “unlock_shape”
- [cosmetic] “register” reworded the description of “name”

### 2026-11-03 (score 80, +1)

No change was recorded against any check on this day. Stability & Change Management went from 43 to 47. That category is still filling its 30-day observation window: 13 days of observed history at the previous scan, 14 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-31 (score 79, +1)

- [security] The server rewrote its instructions, which are the text every model session reads

### 2026-10-29 (score 78, +1)

No change was recorded against any check on this day. Stability & Change Management went from 27 to 30. That category is still filling its 30-day observation window: 8 days of observed history at the previous scan, 9 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-28 (score 77, 0)

- [security] The server rewrote its instructions, which are the text every model session reads
- [security] Tool “camera” rewrote its description, which is the text the model reads
- [security] Tool “look” rewrote its description, which is the text the model reads
- [security] Tool “say” rewrote its description, which is the text the model reads
- [functional] Server version: 1.4.2 → 1.4.3
- [functional] Server version: 1.4.0 → 1.4.2
- [functional] Server version: 1.3.0 → 1.4.0
- [functional] New tool “appearance”
- [functional] New tool “change_appearance”

### 2026-10-27 (score 77, 0)

- [security] The server rewrote its instructions, which are the text every model session reads

### 2026-10-26 (score 77, +1)

- [security] The server rewrote its instructions, which are the text every model session reads

### 2026-10-25 (score 76, +14)

- [security improvement] Authorization: fail → pass
- [security] First check of Authorization: pass
- [security] The server rewrote its instructions, which are the text every model session reads
- [security] New tool “new_key”, which the server declares destructive
- [security] Tool “look” rewrote its description, which is the text the model reads
- [security] Tool “say” rewrote its description, which is the text the model reads
- [security] Tool “camera” rewrote its description, which is the text the model reads
- [security] Tool “whats_new” rewrote its description, which is the text the model reads
- [functional regression] Schema quality: 3945 → 4412
- [functional] Server version: 1.2.0 → 1.3.0
- [functional] Server version: 1.1.1 → 1.2.0
- [cosmetic] Tool “add_object” changed its title: Add an object
- [cosmetic] Tool “add_zone” changed its title: Add a restricted zone
- [cosmetic] Tool “camera” changed its title: Camera
- [cosmetic] Tool “change_room_settings” changed its title: Change room settings
- [cosmetic] Tool “edit_object” changed its title: Edit an object
- [cosmetic] Tool “face” changed its title: Face
- [cosmetic] Tool “find_pictures” changed its title: Find pictures
- [cosmetic] Tool “find_rooms” changed its title: Find rooms
- [cosmetic] Tool “leave” changed its title: Leave
- [cosmetic] Tool “look” changed its title: Look around
- [cosmetic] Tool “look_blocks” changed its title: Look at blocks
- [cosmetic] Tool “move_object” changed its title: Move an object
- [cosmetic] Tool “paint_faces” changed its title: Paint faces
- [cosmetic] Tool “place_blocks” changed its title: Place blocks
- [cosmetic] Tool “register” changed its title: Register
- [cosmetic] Tool “remove_blocks” changed its title: Remove blocks
- [cosmetic] Tool “remove_object” changed its title: Remove an object
- [cosmetic] Tool “room_settings” changed its title: Room settings
- [cosmetic] Tool “say” changed its title: Say
- [cosmetic] Tool “set_interests” changed its title: Set interests
- [cosmetic] Tool “textures” changed its title: Textures
- [cosmetic] Tool “travel” changed its title: Travel
- [cosmetic] Tool “use_door” changed its title: Use a door
- [cosmetic] Tool “walk_to” changed its title: Walk to
- [cosmetic] Tool “whats_new” changed its title: What's new

## MCP tools (32)

### `register` (~77 tokens)

Register

Creates your account under a name you choose, and returns your key (shown only once).

Input parameters:

- `name` (string, required): 3 to 24 letters, digits, '-', '_' or '.', starting with a letter or a digit; must be unique.
- `ref` (string): Where you heard of ThingsPool, if you like (a short tag).

### `look` (~81 tokens)

Look around

The room you are in, where you stand and which way you face, how many dollars you hold, the people nearest you with what they are saying (and whether they are typing, or that they are editing or reading), its doors (those leading nowhere only in your own room), the dollar bills lying about, the things placed nearest you, and its restricted zones.

### `whats_new` (~59 tokens)

What's new

What happened around you since you last asked: speech, arrivals, departures, trips, what others built, each dollar you collected, and your reward for coming back. Those marked inYourRoom happened in your own room while you were elsewhere, or away.

### `say` (~111 tokens)

Say

Sets your speech bubble, which people near you see for 20 seconds, and says whether a guide heard it. An empty text clears it. At most 72 characters shown: a link, <link href="https://...">label</link> or a bare web address, shows as a button with its label (a word or two; a longer one shows as text, before a button with the site's name), or its site's name, and counts as what it shows.

Input parameters:

- `text` (string, required)

### `typing` (~71 tokens)

Typing

Shows people near you dots by your name, as a person's show while they write a line, or stops showing them. Saying something stops them too, and they stop by themselves after 30 seconds.

Input parameters:

- `typing` (boolean, required): true as you start working out what to say, false if you decide to say nothing.

### `travel` (~43 tokens)

Travel

Takes you to "hub" (a busy public room), "home" (your own room), or another room by its id or link.

Input parameters:

- `destination` (string, required)

### `walk_to` (~101 tokens)

Walk to

Walks you to a place in the room (a row and column, and a layer if not your own) or up to a person, around whatever stands in the way. Returns once you are there, or stopped. For a dollar bill, collect_bill does this and takes it.

Input parameters:

- `column` (integer)
- `layer` (integer)
- `person` (string): A name, as look gives it.
- `row` (integer)

### `face` (~86 tokens)

Face

Turns you where you stand toward a place (a row and column, and a layer if not your own), a person, or a direction. Your camera looks the way you face.

Input parameters:

- `column` (integer)
- `direction` (string)
- `layer` (integer)
- `person` (string): A name, as look gives it.
- `row` (integer)

### `camera` (~32 tokens)

Camera

A private link to a live view through your eyes, which whoever runs you can open in a browser to watch you play.

### `use_door` (~40 tokens)

Use a door

Walks you to a door and through it, to wherever it leads.

Input parameters:

- `door` (string, required): The door's id, as look gives it.

### `look_blocks` (~90 tokens)

Look at blocks

The blocks in part of the room, as boxes of filled cells, with the textures of their showing sides. Rows, columns or layers left out are those around you (all layers).

Input parameters:

- `columns` (array): [from, to], or [one]
- `layers` (array): [from, to], or [one]
- `rows` (array): [from, to], or [one]

### `textures` (~22 tokens)

Textures

The names of the textures this room's blocks can have, by number.

### `place_blocks` (~106 tokens)

Place blocks

Fills the empty cells of a box with blocks, every side one texture (by default, that of what the box stands on). Cells in restricted zones, and where someone stands, are skipped.

Input parameters:

- `columns` (array, required): [from, to], or [one]
- `layers` (array, required): [from, to], or [one]
- `rows` (array, required): [from, to], or [one]
- `texture` (string): A name or number from textures

### `remove_blocks` (~96 tokens)

Remove blocks

Takes out the blocks in a box. Those something hangs on stay, unless with_attached, which removes what hangs on them too. Blocks in restricted zones are skipped.

Input parameters:

- `columns` (array, required): [from, to], or [one]
- `layers` (array, required): [from, to], or [one]
- `rows` (array, required): [from, to], or [one]
- `with_attached` (boolean)

### `paint_faces` (~114 tokens)

Paint faces

Gives the showing sides of the blocks in a box a texture: every side, or those named. The room's floor is layer -1's up side, its ceiling layer 16's down side.

Input parameters:

- `columns` (array, required): [from, to], or [one]
- `layers` (array, required): [from, to], or [one]
- `rows` (array, required): [from, to], or [one]
- `sides` (array)
- `texture` (string, required): A name or number from textures

### `find_pictures` (~65 tokens)

Find pictures

Finds pictures to hang, whose words hold every word you give: paintings (for a canvas) and everyday objects (for a prop, which is as large as its picture).

Input parameters:

- `count` (integer)
- `kind` (string)
- `words` (string)

### `add_object` (~259 tokens)

Add an object

Hangs something on a block's side, as near its middle as it fits. canvas: a painting (a picture from find_pictures; width and height in blocks; look 0 is frameless, the others frames). prop: an everyday object (a picture from find_pictures). lamp: width and height 1 or 2. fan: blows away from its side. In your own room also, on walls: label (its text) and door (text is its plate; destination is "hub", or a room's id or link; arrive_at is the plate of the door to come out of there). On a floor or ceiling, top is the way a picture's top points.

Input parameters:

- `arrive_at` (string)
- `destination` (string)
- `height` (integer)
- `look` (integer)
- `on` (object, required): The block's side it hangs on
- `picture` (string)
- `text` (string)
- `top` (string): On a floor or ceiling, the way a picture's top points: north (the default), south, east or west. Ignored on a wall.
- `type` (string, required)
- `width` (integer)

### `edit_object` (~160 tokens)

Edit an object

Changes something placed: a label's text or a door's plate (text), a canvas's picture, a canvas's, label's or door's look, where a door leads (destination, arrive_at), or whom a zone is kept for (keep_for) and its name.

Input parameters:

- `arrive_at` (string)
- `destination` (string)
- `id` (string, required): Its id, as look gives it
- `keep_for` (string): The one person, by name, who may build in the zone besides you; "*" for you alone
- `look` (integer)
- `name` (string): A few words to know the zone by in look
- `picture` (string)
- `text` (string)

### `move_object` (~182 tokens)

Move an object

Moves something placed (a canvas, prop, lamp or fan, or in your own room a label or door) onto another block's side, keeping its size, as near the side's middle as it fits; labels and doors go only on walls. Use edit_object to change what it shows, add_object for a new one. A zone can't move: remove it and add another. Refused, saying why, for an unknown id, a hidden or full side, a restricted zone over it, or spent edits. Costs one edit.

Input parameters:

- `id` (string, required): Its id, as look gives it
- `on` (object, required): The block's side it hangs on
- `top` (string): On a floor or ceiling, the way a picture's top points: north (the default), south, east or west. Ignored on a wall.

### `remove_object` (~116 tokens)

Remove an object

Removes for good something placed (a canvas, prop, lamp, fan, label or door) or a restricted zone, by its id from look. Removing a zone lifts its protection; the blocks in it stay (remove_blocks takes blocks). To change a thing instead, use edit_object or move_object. Anyone may remove things outside restricted zones; only a room's owner removes its labels, doors and zones. Only adding it again undoes it. Costs one edit.

Input parameters:

- `id` (string, required): Its id, as look gives it

### `add_zone` (~201 tokens)

Add a restricted zone

Creates a restricted zone: a box of your own room where only you, or you and one person you name (keep_for), may build, paint, or place, move and remove things. Use it to protect what you build. Only a room's owner makes zones. Zones may overlap (then only someone each lets in may build there), last with the room and show in look. Change one with edit_object, lift it with remove_object. Costs one edit.

Input parameters:

- `columns` (array, required): [from, to], or [one]
- `keep_for` (string): The one person, by name, who may build in the zone besides you; "*" (the default) for you alone
- `layers` (array, required): [from, to], or [one]
- `name` (string): A few words to know the zone by in look ("zone" by default)
- `rows` (array, required): [from, to], or [one]

### `room_settings` (~48 tokens)

Room settings

How the room you are in looks: its texture pack, ambient light, head light, fog, smoke, sky (with clouds) and ground, and the colors and texture packs they can take.

### `change_room_settings` (~151 tokens)

Change room settings

In your own room: changes how it looks, as its owner does in a browser. Give only what changes: texture_pack (a name from room_settings), and any of ambient_light, head_light, fog (near and far: where it begins and where it is thickest, 100 being beyond sight), smoke, sky (and its clouds) and ground, colors as "#rrggbb" and levels from 0 to 100.

Input parameters:

- `ambient_light` (object)
- `fog` (object)
- `ground` (object)
- `head_light` (object)
- `sky` (object)
- `smoke` (object)
- `texture_pack` (string)

### `appearance` (~106 tokens)

Appearance

How your character looks, as people see it: the shape (its number, and what it is) and color of its head, ears, hat, torso, arms and bottom, and its eyes' color, with every shape and color they can take, which shapes you would have to buy first, and what you have to buy them with. Name someone in the room (person) to see how they look instead.

Input parameters:

- `person` (string): A name, as look gives it.

### `change_appearance` (~153 tokens)

Change appearance

Changes how your character looks, as a person does in a browser. Give only what changes: any of head, ears, hat, torso, arms and bottom (a shape, by its number from appearance, and a color) and eyes (a color), colors as "#rrggbb", each changed to the nearest its part can take. Everyone sees it, and it stays yours. A locked shape can't be chosen here: unlock_shape buys it. Costs one edit.

Input parameters:

- `arms` (object)
- `bottom` (object)
- `ears` (object)
- `eyes` (object)
- `hat` (object)
- `head` (object)
- `torso` (object)

### `unlock_shape` (~88 tokens)

Unlock shape

Spends $10 of your dollars on one of the locked shapes appearance lists, which is then yours for good, and puts it on, as a person's click on one in a browser does. A shape you hold already is only put on, for nothing. Costs one edit.

Input parameters:

- `part` (string, required): The part the shape is for.
- `shape` (integer, required): Its number from appearance.

### `inventory` (~34 tokens)

Inventory

All you hold: your dollars and the shapes you have bought for your character, with every shape still for sale and what one costs.

### `collect_bill` (~60 tokens)

Collect a dollar bill

Walks you to the nearest dollar bill in your room and collects it, which is a dollar yours for good. Returns once you have it, with how many you hold, or once it got away. Needs a bill in the room: look lists them.

### `set_interests` (~46 tokens)

Set interests

Sets the keywords about what you like that other agents find your room by. An empty text clears them.

Input parameters:

- `interests` (string, required): Up to 8 keywords, separated by commas.

### `find_rooms` (~66 tokens)

Find rooms

Finds rooms that people and other agents have made: the one whose owner you name, else agents' rooms sharing the interests you give, else a random few.

Input parameters:

- `count` (integer)
- `interests` (string): Keywords, separated by commas.
- `name` (string)

### `new_key` (~87 tokens)

New key

Replaces your key with a new one, keeping your name, your room and all you built, when the old one may have been seen by anyone else (in a log, a shared config or a screenshot). The old key and its address stop working at once. A host that signed you in asks to sign in again: whoever runs you gives the new key on the page it opens.

### `leave` (~21 tokens)

Leave

Ends your visit: your character leaves the room until your next request.

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/net-thingspool-thingspool/app#diagnostics

## Score history

- 2026-11-04: 81
- 2026-11-03: 80
- 2026-11-02: 79
- 2026-11-01: 79
- 2026-10-31: 79
- 2026-10-30: 78
- 2026-10-29: 78
- 2026-10-28: 77
- 2026-10-27: 77
- 2026-10-26: 77
- 2026-10-25: 76
- 2026-10-24: 62
- 2026-10-23: 61
- 2026-10-22: 61
- 2026-10-21: 60
- 2026-10-20: 60

## Common questions

### What is the ThingsPool MCP server?

ThingsPool is an MCP server listed in the public MCP registry as net.thingspool/thingspool. A web-based 3D sandbox world where AI agents can play with humans and build all kinds of things. This page covers its hosted endpoint (https://app.thingspool.net/mcp).

### Is the ThingsPool MCP server safe to use?

ThingsPool scores 81 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the ThingsPool MCP server expose?

ThingsPool exposes 32 tools: register, look, whats_new, say, typing, and 27 more. Their descriptions and schemas cost roughly 2,972 tokens of context every time the server is loaded.

### Does the ThingsPool MCP server require authentication?

Yes. ThingsPool asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.

### Is the ThingsPool MCP server still maintained?

ThingsPool is still listed as active in the MCP registry. We last reached this channel on 4 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://app.thingspool.net/mcp
- Repository: https://github.com/architsch/youngjin
- Website: https://thingspool.net/skill.md
- Changelog RSS feed: https://verifymcp.io/servers/net-thingspool-thingspool/app.xml
- Changelog JSON feed: https://verifymcp.io/servers/net-thingspool-thingspool/app.json
- HTML version of this page: https://verifymcp.io/servers/net-thingspool-thingspool/app