rust.wiki
REMOTE · RUST.WIKI
Live data for the game Rust: skin prices and history, items, item store, loot tables, servers.
Available components
Last scanned (22 hours ago)
Scores higher than 81% of remote servers
Reachable. Last reached 4 Nov 2026.
Category Entertainment and Games
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security83
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC is configured correctly; the domain's records validate against the full chain to the root. View diagnostics → Pass
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability76
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 12288 tokens (~215/item across 57 items; 57 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management33
- Stability observed for 10 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 57 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 58 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 4 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 30 to 33. That category is still filling its 30-day observation window: 9 days of observed history at the previous scan, 10 at this one. The score rises as the window fills, whether or not the server changes.
- 2 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.
- 31 Oct 26 +1
- New tool “get_skin_marketplace_history” functional
- 29 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 10 to 13. That category is still filling its 30-day observation window: 3 days of observed history at the previous scan, 4 at this one. The score rises as the window fills, whether or not the server changes.
- 27 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.
- 26 Oct 26 +2
- The server rewrote its instructions, which are the text every model session reads security
- Tool “get_inventory” rewrote its description, which is the text the model reads security
- Tool “list_inventory_snapshots” rewrote its description, which is the text the model reads security
- Schema quality: 8550 → 11992 ▼ functional
- Stability: unverified → 0.03 ▲ functional
- The server now declares the “prompts” capability functional
- First check of Schema quality: 100 functional
- New prompt “find_server” functional
- New prompt “item_store” functional
- New prompt “price_check” functional
- New prompt “raid_cost” functional
- New prompt “value_inventory” functional
- New tool “calculate_craft_cost” functional
- New tool “calculate_raid_cost” functional
- New tool “calculate_recycle_yield” functional
- New tool “calculate_upkeep” functional
- New tool “compare_market” functional
- New tool “genetics_best_layout” functional
- New tool “genetics_predict” functional
- New tool “get_inventory_valuation” functional
- New tool “get_inventory_value_history” functional
- New tool “get_market_index” functional
- New tool “get_player_stats” functional
- New tool “get_server_player_history” functional
- New tool “get_server_stats” functional
- New tool “get_skin_orderbook” functional
- New tool “get_twitch_drops” functional
- New tool “resolve_steam_profile” functional
- New tool “search_guides” functional
- 25 Oct 26 73
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 4 Nov 2026 · Probed https://rust.wiki/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=rust.wiki | CN=WE1,O=Google Trust Services,C=US | 27 Oct 2026 | 25 Jan 2027 | ECDSA 256 | ECDSA-SHA256 | b1b87f1e2bee4a6e0e5392c058f04572 |
| SANs: rust.wiki, *.rust.wiki | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC secure
Validation of rust.wiki. — Secure
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| wiki. | present | 46628 | 13 | Verified |
| rust.wiki. | present | 2371 | 13 | Verified |
| rust.wiki. | Verified address RRset verified with the apex keys |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=31536000; includeSubDomains; preload |
| content-security-policy | frame-ancestors 'none'; object-src 'none'; base-uri 'self' |
| x-content-type-options | nosniff |
| x-frame-options | DENY |
| referrer-policy | strict-origin-when-cross-origin |
| permissions-policy | geolocation=(), camera=(), microphone=() |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://rust.wiki/mcp | Verified | 200 | |
| http (plaintext) | http://rust.wiki/mcp | HTTPS enforced | 301 | https://rust.wiki/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
search_commands Console and server commands ~178
Console and server commands. One page of Rust console/server commands, alphabetical. Each carries `command`, `syntax`, `description`, `category` (Rust's own ConVar namespace, e.g. `server`, `gather`), `command_type` (`command` or `variable`), `default_value` (variables only) and `permission_required` (null when any player can run it). Cached for 30 minutes.
| Name | Type | Req | Description |
|---|---|---|---|
| admin_only | boolean | – | `true` = only commands that need admin/moderator permission. |
| page | integer | – | 1-based page number. |
| per_page | integer | – | Results per page (max 200). |
| search | string | – | Case-insensitive substring match on the command name, its description OR its category (so `workbench` finds every workbench ConVar). |
No output schema declared.
No examples provided.
search_guides Search the RustProfit blog's Rust guides ~140
Search the RustProfit blog's Rust guides. Published guides from blog.rustprofit.com (monuments, recyclers, farming, base building, raiding, gear, NPCs, wipes, update explainers), best match first: every word must appear somewhere in the guide, and title matches rank above summary and tag matches, which rank above body-text matches. Link the `url` when citing one. Rust how-to guides from blog.rustprofit.com; cite and link the url.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Most results to return. |
| q | string | yes | Words to find in guide titles, summaries, tags and text. |
No output schema declared.
No examples provided.
search_items Item name / shortname typeahead ~156
Item name / shortname typeahead. Up to 25 live items matching `q`, best match first: a case-insensitive substring match on the display name OR the shortname, plus trigram similarity on the display name so typos still resolve (`asault` finds the Assault Rifle) - the same ILIKE + similarity search the site's item pickers use. Each result is `{shortname, display_name, category, icon_url}`; use the shortname with `/items/{shortname}`. For filtered, paginated results use `/items?search=` instead. Cached for 5 minutes per query.
| Name | Type | Req | Description |
|---|---|---|---|
| q | string | yes | Part of an item's display name or shortname (2+ characters). |
No output schema declared.
No examples provided.
search_servers Browse, filter and search the server list ~719
Browse, filter and search the server list. One page of servers with the same filters, ordering and five-minute cache as the servers.rustprofit.com list and its hub pages (/country/de, /vanilla, /solo, /gather/2x ...). Each result is the full public server record: identity and connect details (`ip`, `game_port`, `query_port`, `connect` as a `steam://` URI), `map`, `world_seed`, `world_size`, `country`/`country_name`, live `current_players`/`max_players`/`queued_players`, the `kind` (official/modded/vanilla) and `is_*` flags, `password_protected`, `vac_enabled`, `gather_rate` with its `gather_bucket`, `group_limit` with its `group` label, `tags`, owner-supplied `description` (first 500 characters), `banner_url`, `website_url`, `discord_url`, `first_seen_at`/`last_seen_at`/`last_polled_at`, the aggregates `votes`, `rating` (1-5 average, null when unrated) and `last_wipe_at`, and the server's page `url` plus embeddable `widget_url`/`badge_url`. Ties in every sort are broken by `id` so pages never overlap.
| Name | Type | Req | Description |
|---|---|---|---|
| biome | string | – | Only servers whose generated map preview is mostly this biome (its percentage is the highest of the five). |
| country | string | – | ISO 3166-1 alpha-2 country the server is hosted in (GeoIP of its address); `/servers/countries` lists the values in use. |
| gather | string | – | Gather-rate bucket parsed from the server name: `2x` (2-2.99), `3x` (3-4.99), `5x` (5-9.99) or `10x` (10 and above). Servers with no `Nx` in their name never match. |
| group | string | – | Team-size cap: `solo` (1), `duo` (2) or `trio` (3). Only servers whose cap is known match. |
| kind | string | – | `vanilla` = not modded; `modded` = reports a modded flag over A2S; `official` = a Facepunch-run public server (by name convention). |
| min_players | integer | – | Only servers with at least this many players online right now. |
| min_rating | number | – | Only servers whose average community rating (1-5) is at least this. |
| monument | string | – | Only servers whose current map (when a preview has been generated) contains this monument type, exactly as `/servers/monument-types` lists it. |
| online | boolean | – | `true` (default) = only servers that were online at their last poll; `false` = only servers currently marked offline. |
| page | integer | – | 1-based page number. |
| per_page | integer | – | Results per page (max 200). |
| search | string | – | Case-insensitive substring match on the server name. |
| sort | string | – | `players` = most players online first (default); `votes` = most community votes; `rating` = highest average rating; `wiped` = most recently wiped; `name` = alphabetical. |
No output schema declared.
No examples provided.
search_skins Skin name typeahead ~103
Skin name typeahead. Up to 10 skins whose name matches `q`, best match first (the same ILIKE + trigram search the site's search boxes use). Each result is `{itemdefid, name, icon_url}`; use the `itemdefid` with the other skin endpoints. For filtered, paginated results use GET /skins with `search=` instead.
| Name | Type | Req | Description |
|---|---|---|---|
| q | string | yes | Part of a skin name (2+ characters). |
No output schema declared.
No examples provided.
search_workshop Browse or search Workshop submissions ~286
Browse or search Workshop submissions. One page of submissions. Each carries `workshopid` (the Steam published-file id), `title`, `author_steamid64`, `preview_image_url`, `submitted_at` (UTC ISO-8601, may be null), `accepted` and `accepted_itemdefid` (the in-game item definition id when Facepunch accepted it - use it with `/skins/{itemdefid}`), `target_item_tag`, `subscriptions` and `vote_score` (Steam's 0-1 score; both null when Steam has not reported them). Same filters, ordering and cache as the /workshop page.
| Name | Type | Req | Description |
|---|---|---|---|
| accepted | string | – | `yes` = only submissions Facepunch accepted into the game; `no` = only ones it has not. |
| page | integer | – | 1-based page number. |
| per_page | integer | – | Results per page (max 200). |
| search | string | – | Case-insensitive substring match on the submission title. |
| sort | string | – | `newest` = most recently submitted first; `popular` = most subscribers first. |
| target | string | – | Only submissions for this target item, exactly as the Workshop tags it (e.g. `AK47`, `Garage Door`); `/workshop/targets` lists every value. |
No output schema declared.
No examples provided.
search_world_entities World entities: animals, NPCs, resource nodes ~148
World entities: animals, NPCs, resource nodes. One page of world entities (anything not tied to one monument), alphabetical. Each carries `slug`, `display_name`, `is_npc`, `npc_hp` (null for resources) and `icon_url`. Cached for one hour.
| Name | Type | Req | Description |
|---|---|---|---|
| kind | string | – | `npc` = anything with hit points (animals, scientists, bosses, vehicles); `resource` = nodes, trees, barrels and other harvestables. |
| page | integer | – | 1-based page number. |
| per_page | integer | – | Results per page (max 200). |
| search | string | – | Case-insensitive substring match on the display name. |
No output schema declared.
No examples provided.
How do I install the rust.wiki MCP server?
rust.wiki is a hosted endpoint at https://rust.wiki/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · rust.wiki
claude mcp add --transport http wiki-rust-rust-wiki 'https://rust.wiki/mcp'
What is the rust.wiki MCP server?
rust.wiki is an MCP server listed in the public MCP registry as wiki.rust/rust-wiki. Live data for the game Rust: skin prices and history, items, item store, loot tables, servers. This page covers its hosted endpoint (https://rust.wiki/mcp).
Is the rust.wiki MCP server safe to use?
rust.wiki scores 80 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the rust.wiki MCP server expose?
rust.wiki exposes 57 tools: search_items, browse_items, get_item, get_item_skins, search_skins, and 52 more. Their descriptions and schemas cost roughly 12,034 tokens of context every time the server is loaded.
Does the rust.wiki MCP server require authentication?
No. We connected to rust.wiki without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the rust.wiki MCP server still maintained?
rust.wiki is still listed as active in the MCP registry. We last reached this channel on 4 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.