Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Craftwire

NPM · CRAFTWIRE

See and drive Minecraft: Fabric client, Paper server, bots, plugin tests, profiling.

Available components

+3 this week 74 Trust /100

Last scanned (19 hours ago)

Scores higher than 48% of npm servers

Category Testing and QA

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security98
  • No malware found by supply-chain analysis.Pass
  • No known CVEs affecting this package version or its production dependencies.Pass
  • No install/post-install scripts declared.Pass
  • 30 of 93 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency45
Schema Quality & AI Usability69
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (fair).Partial
  • Context-footprint check failed: tool/resource definitions use about 5271 tokens (~117/item across 45 items; 35 tools + 10 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management67
  • Stability observed for 20 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage69
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 7% of tool parameters carry a description.Partial
Tool Safety75
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • 0 of 5 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "chat" implies "send" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
  • An AI judge read all 37 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 3 Nov 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 60 to 63. That category is still filling its 30-day observation window: 18 days of observed history at the previous scan, 19 at this one. The score rises as the window fills, whether or not the server changes.

  • 1 Nov 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 53 to 57. That category is still filling its 30-day observation window: 16 days of observed history at the previous scan, 17 at this one. The score rises as the window fills, whether or not the server changes.

  • 31 Oct 26 +5
    • Source repository: unverified → pass ▲ security
    • Security disclosure: unverified → fail ▼ functional
  • 30 Oct 26 −4
    • Provenance: pass → unverified ▼ security
    • Security disclosure: fail → unverified ▼ functional
  • 28 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 40 to 43. That category is still filling its 30-day observation window: 12 days of observed history at the previous scan, 13 at this one. The score rises as the window fills, whether or not the server changes.

  • 26 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 33 to 37. That category is still filling its 30-day observation window: 10 days of observed history at the previous scan, 11 at this one. The score rises as the window fills, whether or not the server changes.

  • 23 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.

  • 22 Oct 26 +3
    • Stability: unverified → 0.23 ▲ functional
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 4 Nov 2026 · Analysed npm/craftwire@0.10.0

Provenance No attestation

The registry publishes no build provenance for this version, so there is nothing to verify.

Result No attestation
Ecosystem npm

Background: How many MCP packages publish verified provenance →

Dependencies 93 packages
Packages resolved 93
Stale 30
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 35 exposed · ~4,305 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
bot_action ~310

Drive a bot like a real client (plugins see the same events). command returns success + messages; move_to pathfinds and returns reached + reason; gui_click {slot,click}; inventory:true acts on the bot's own inventory. Arguments per action: craftwire://docs/tools.

NameTypeReqDescription
actionstringyes–
allboolean––
blockobject––
botstringyes–
clickstring––
collectMsinteger––
commandstring––
countinteger––
entitystring––
facestring––
handstring––
instancestring––
inventoryboolean––
itemstring––
limitinteger––
maxFallinteger––
onboolean––
openDoorsboolean––
operationIdstring––
partialboolean––
pathboolean––
pitchnumber––
settleMsinteger––
sincenumber––
slotinteger––
sprintboolean––
textstring––
timeoutMsinteger––
tolerancenumber––
typestring––
xnumber––
ynumber––
yawnumber––
znumber––

No output schema declared.

No examples provided.

bot_remove ~50

Remove a bot (name) or every bot (all:true).

NameTypeReqDescription
allboolean––
instancestring––
namestring––
operationIdstring––

No output schema declared.

No examples provided.

bot_spawn ~97

Spawn fake players (bots) on a Paper server; plugins treat them as real players. names, or count x namePrefix; location defaults to spawn. Bots skip whitelist and bans; their data is deleted when they leave.

NameTypeReqDescription
countinteger––
instancestring––
locationobject––
namePrefixstring––
namesarray––
operationIdstring––

No output schema declared.

No examples provided.

build ~225

Build from a script file of part(name, () => {...}) blocks (fill, hollow, walls, sphere, cylinder, roof, layers, mix, rotate, mirror...): build {project, file}. After editing the file call it again: only changed blocks are written. A new project needs origin. preview 'iso4': four corner views in one image. Guide: craftwire://docs/building.

NameTypeReqDescription
codestring–Script text, instead of file.
dryRunboolean–Count and preview without writing.
filestring–Script path, relative to the hub's working directory.
instancestring––
mirrorstring––
operationIdstring––
originobject––
partstring–Run only this part of the file.
previewstring––
previewSizeinteger––
projectstringyes–
rotation–––
seedinteger––
timeoutMsinteger––
worldstring––

No output schema declared.

No examples provided.

build_manage ~132

Manage build projects: list; undo {project, steps} (last runs); remove {project, part} (what was under returns); clear {project} (world as before the project); move {project, origin?, rotation?, mirror?}; commit {project} (keep blocks, drop undo history).

NameTypeReqDescription
actionstringyes–
instancestring––
mirrorstring––
operationIdstring––
originobject––
partstring––
projectstring––
rotation–––
stepsinteger––

No output schema declared.

No examples provided.

camera ~223

Move the render camera, not the player: set, look_at {target}, frame_area {area}, frame_entity {entity}, freecam_on/off, reset; path {keyframes}/orbit {center,radius} play over time. Details: craftwire://docs/video.

NameTypeReqDescription
actionstringyes–
areaobject––
centerobject––
degreesnumber––
distanceScalenumber––
durationMsnumber––
easestring––
entitystring––
heightnumber––
instancestring––
interpolationstring––
keyframesarray––
lookAtobject––
operationIdstring––
pitchnumber––
radiusnumber––
startAnglenumber––
targetobject––
xnumber––
ynumber––
yawnumber––
znumber––

No output schema declared.

No examples provided.

chat ~78

send {text}; command {text}; read recent chat and actionbar lines (contains?, since?).

NameTypeReqDescription
actionstringyes–
containsstring––
instancestring––
limitinteger––
operationIdstring––
sincenumber––
textstring––

No output schema declared.

No examples provided.

client_eval ~89

Run JavaScript on a client's render thread: mc, player, level, screen(), print, Java.type. The first call downloads GraalJS (~60 MB). Keep scripts short: the game does not render meanwhile.

NameTypeReqDescription
codestringyes–
instancestring––
operationIdstring––
resetboolean––
timeoutMsinteger––

No output schema declared.

No examples provided.

client_process ~167

Start, stop or status of a hidden client run by the hub (offline mode): joins server (default: the server_process one) or opens a singleplayer world; returns its instance. First start downloads ~150 MB.

NameTypeReqDescription
actionstringyes–
javastring––
modsarray–Absolute paths of extra mod jars.
serverstring–host:port. Default: the server started by server_process.
soundsboolean––
tailinteger––
timeoutMsinteger––
usernamestring––
versionstring––
visibleboolean––
windowSizeobject––
worldobject–Open a singleplayer world instead of joining a server.

No output schema declared.

No examples provided.

client_settings ~86

Read or set guiScale, fov, renderDistance, hideHud, windowSize; no arguments only reads.

NameTypeReqDescription
fovinteger––
guiScaleinteger––
hideHudboolean––
instancestring––
operationIdstring––
renderDistanceinteger––
windowSizeobject––

No output schema declared.

No examples provided.

events ~132

Bukkit events the server fired (cancelled = final outcome): summary {since?}, query {type?,player?,since?,cancelledOnly?}, listeners {type} (who listens, priority, ignoreCancelled), watch {types} (record busy events too).

NameTypeReqDescription
actionstringyes–
cancelledOnlyboolean––
instancestring––
limitinteger––
operationIdstring––
playerstring––
sincenumber––
typestring–Event class, simple or full name.
typesarray––

No output schema declared.

No examples provided.

exceptions ~83

Exceptions the server and clients logged, grouped into bugs, newest first: type, message, count, origin, plugin; Folia thread hints. id: one bug's full stack; since filters.

NameTypeReqDescription
idstring–A bug id: returns its full stack.
instancestring––
limitinteger––
sincenumber––

No output schema declared.

No examples provided.

get_request_status ~48

Status of a request sent with an operationId: unknown, running, done (with result) or failed (with error). Kept 5 minutes.

NameTypeReqDescription
operationIdstringyes–

No output schema declared.

No examples provided.

gui_action ~99

Act on the open screen: hover/click/right_click/shift_click {slot}, drag {slot,toSlot}, click_widget {widget}, type {text}, close. Returns the new gui_read.

NameTypeReqDescription
actionstringyes–
instancestring––
operationIdstring––
slotinteger––
textstring––
toSlotinteger––
widgetstring––

No output schema declared.

No examples provided.

gui_read ~54

Describe the open screen: title, slots (item, count, name, lore), hovered tooltip, widgets. {open:false} when none is open.

NameTypeReqDescription
instancestring––
operationIdstring––

No output schema declared.

No examples provided.

hud_read ~55

Read the HUD as text: bossbars, actionbar, title, sidebar (lines as drawn), tab list (header, footer, players), belowName.

NameTypeReqDescription
instancestring––
operationIdstring––

No output schema declared.

No examples provided.

input ~122

Gameplay input with no screen open: keys (forward, back, left, right, jump, sneak, sprint, attack, use, pick, drop, inventory, swap_hands, chat, command, ...) with mode press|hold|release; look adds yaw/pitch; hotbar 1-9.

NameTypeReqDescription
durationMsinteger––
hotbarinteger––
instancestring––
keysarray––
lookobject––
modestring––
operationIdstring––

No output schema declared.

No examples provided.

list_instances ~32

List connected Minecraft clients and servers (id, name, versions, tools added by plugins or mods). Call this first.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

logs ~70

Recent log lines of a server (default) or client, oldest first, stack traces folded in. Filter: level, contains, since.

NameTypeReqDescription
containsstring––
instancestring––
levelstring––
limitinteger––
sincenumber––

No output schema declared.

No examples provided.

player_state ~47

Local player: position, rotation, health, game mode, dimension, hotbar slot, inventory, crosshair target.

NameTypeReqDescription
instancestring––
operationIdstring––

No output schema declared.

No examples provided.

plugin_deploy ~173

Build a plugin project (Gradle or Maven) or take a jar, install it, restart the server and report loaded + problems (its WARN/ERROR lines). BUILD_FAILED lists errors as file:line.

NameTypeReqDescription
buildCommandstring–Command run in projectDir instead of the detected build.
buildTimeoutMsinteger––
jarstring––
jarGlobstring–Which built jar, e.g. build/libs/*-all.jar.
javaHomestring––
projectDirstring––
restartboolean––
serverDirstring–Server folder; optional with one known server.
takeOverboolean–Stop a server started outside Craftwire (ask the user first).
timeoutMsinteger––

No output schema declared.

No examples provided.

plugin_manage ~64

list plugins; info {name}; enable/disable {name} for quick checks (not on Folia: use plugin_deploy).

NameTypeReqDescription
actionstringyes–
instancestring––
namestring––
operationIdstring––

No output schema declared.

No examples provided.

profile ~96

Sample a server tick or client frame for durationMs and show who uses the time: owners (plugin or mod), entryPoints (listener, task), hotMethods; server tick stats or client fps. Run it while the slow thing happens, then trace.

NameTypeReqDescription
durationMsinteger––
instancestring––
intervalMsinteger––
operationIdstring––
topinteger––

No output schema declared.

No examples provided.

record ~241

Record a video with sound through the user's ffmpeg. start {savePath, preset max|high|balanced|light, durationMs?, camera? (a camera tool path/orbit motion), wait?}; stop; status. layer gui|tooltip|gui+tooltip: transparent .mov/.webm. Details: craftwire://docs/video.

NameTypeReqDescription
actionstringyes–
audioboolean––
audioBitrateinteger––
cameraobject––
chatboolean––
codecstring––
crfinteger––
durationMsinteger––
fpsinteger––
guiScaleinteger––
hudboolean––
instancestring––
layerstring––
maxSecondsinteger––
operationIdstring––
presetstring––
resolutionstring––
savePathstring––
speedstring––
splitboolean––
waitboolean––
waitForTerrainboolean––

No output schema declared.

No examples provided.

scenario_run ~75

Run test scenarios (scenario inline, or files *.cwtest.json): setup, steps (tool calls, bot actions, commands, waits) with expect checks, cleanup. Stops at the first failure and reports the context. Format: craftwire://docs/scenarios.

NameTypeReqDescription
filesarray––
scenarioobject––

No output schema declared.

No examples provided.

screenshot ~152

Capture the game frame. hud/chat:false hide them; maxSize: long edge; savePath writes full size (.png/.jpg); camera: this shot only. layer gui|tooltip|gui+tooltip: transparent PNG of the open menu (craftwire://docs/gui-capture).

NameTypeReqDescription
cameraobject––
chatboolean––
formatstring––
guiScaleinteger––
hudboolean––
instancestring––
layerstring––
maxSizeinteger––
operationIdstring––
savePathstring––
splitboolean––
trimboolean––

No output schema declared.

No examples provided.

server_command ~80

Run a console command (or asPlayer) and return its feedback, including plugin messages within collectMs. Use the minecraft: prefix when a plugin overrides a vanilla command.

NameTypeReqDescription
asPlayerstring––
collectMsinteger––
commandstringyes–
instancestring––
operationIdstring––

No output schema declared.

No examples provided.

server_eval ~145

Run JavaScript on the server with the Bukkit/Paper API: server, player(name), plugin(name), loc(x,y,z), Java.type, print. Returns the last value and printed output; globals persist until reset. Folia: pass at or asPlayer to touch blocks, entities or players. Not for building: use build.

NameTypeReqDescription
asPlayerstring–Folia: run on this player's thread.
atobject–Folia: run on the region of this position.
codestringyes–
instancestring––
operationIdstring––
resetboolean––
timeoutMsinteger––

No output schema declared.

No examples provided.

server_info ~48

Server health: TPS, MSPT, memory, versions, players, worlds, plugins; on Folia per-region TPS.

NameTypeReqDescription
instancestring––
operationIdstring––

No output schema declared.

No examples provided.

server_process ~141

Start, stop, restart or status of a local Paper server run by the hub. JVM flags and jar come from start.bat/start.sh unless given. Never accept the EULA for the user. A server started elsewhere needs takeOver:true (ask first).

NameTypeReqDescription
actionstringyes–
jarstring––
javastring––
jvmArgsarray––
serverDirstring–Server folder; optional with one known server.
tailinteger––
takeOverboolean–Stop a server started outside Craftwire (ask the user first).
timeoutMsinteger––

No output schema declared.

No examples provided.

trace ~102

Time every call of methods for durationMs without changing code: method = Class::method, Class or @Annotation (';' for several). Returns counts, avg/max ms, slowest calls with stacks, callers.

NameTypeReqDescription
durationMsinteger––
instancestring––
limitinteger––
methodstringyes–
minMsnumber––
operationIdstring––
stackDepthinteger––

No output schema declared.

No examples provided.

wait_for ~197

Wait until something happens (after the call). Events: chat_match, hud_match, screen_open, screen_closed, log_match, player_join {pattern}. Server, every tick: block, player_near, inventory, event, message, expr {js}. Returns what held and its value. Details: craftwire://docs/tools.

NameTypeReqDescription
atMostinteger––
conditionstringyes–
countinteger––
instancestring––
isstring––
isNotstring––
itemstring––
jsstring––
patternstring––
playerstring––
radiusnumber––
timeoutMsinteger––
typestring––
worldstring––
xnumber––
ynumber––
znumber––

No output schema declared.

No examples provided.

world_edit ~194

Change blocks: set_blocks [{x,y,z,block}] (max 10000), fill {min,max,block,replace?}, snapshot/restore {id}, save_schematic/paste_schematic {name,at}. Over 32768 blocks a snapshot is taken first. For more than a few hundred blocks use build.

NameTypeReqDescription
actionstringyes–
atobject––
blockstring––
blocksarray––
idstring––
includeEntitiesboolean––
instancestring––
maxobject––
minobject––
mirrorstring––
namestring––
operationIdstring––
physicsboolean––
replacestring––
rotationstring––
worldstring–Default: the main world.

No output schema declared.

No examples provided.

world_query ~169

Read the world: block {x,y,z}; region {min,max}: palette + runs (max 32768), encoding 'indices', or 'layers' (a letter per block, max 65536, for build's layers()); entities {min,max,type?}; players; find_block {block,min,max}.

NameTypeReqDescription
actionstringyes–
blockstring––
encodingstring––
instancestring––
limitinteger––
maxobject––
minobject––
operationIdstring––
typestring––
worldstring–Default: the main world.
xinteger––
yinteger––
zinteger––

No output schema declared.

No examples provided.

world_render ~229

Draw a region of a Paper world, no client needed: top (map), slice {y} (floor plan), side {facing}, iso {corner}/iso4 (3D, size px). Up to 512x512 blocks; scale px/block; grid N labels coordinates; savePath writes the PNG.

NameTypeReqDescription
cornerstring––
facingstring–side: the direction you look.
generateboolean––
gridinteger––
instancestring––
operationIdstring––
playersboolean––
savePathstring––
scaleinteger––
sizeinteger––
viewstring––
worldstring–Default: the main world.
x1integeryes–
x2integeryes–
yinteger–slice: the height.
y1integer––
y2integer––
z1integeryes–
z2integeryes–

No output schema declared.

No examples provided.

Install

How do I install the Craftwire MCP server?

Craftwire runs locally as an npm package, launched with npx -y craftwire. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · craftwire

# add to Claude Code
claude mcp add uxplima-craftwire -- npx -y craftwire
Common questions

What is the Craftwire MCP server?

Craftwire is an MCP server listed in the public MCP registry as io.github.UXPLIMA/craftwire. See and drive Minecraft: Fabric client, Paper server, bots, plugin tests, profiling. This page covers its npm package (craftwire).

Is the Craftwire MCP server safe to use?

Craftwire scores 74 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 4 November 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Craftwire MCP server expose?

Craftwire exposes 35 tools: list_instances, get_request_status, wait_for, player_state, hud_read, and 30 more. Their descriptions and schemas cost roughly 4,305 tokens of context every time the server is loaded.

Is the Craftwire MCP server still maintained?

Craftwire is still listed as active in the MCP registry. We last reached this channel on 4 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the Craftwire MCP server under?

Craftwire declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.