Is Golemreach MCP server safe?
Probably. Read the findings first.
Use with care. Some checks failed or could not be verified.
Public scan report
scanner v0.1.9 · 2026-09-21 · same rubric, same numbers if you re-run it
1 low
- –Code scanremote-only server, no package to scann/a
- Live reliabilityremote reachable in 1653ms20/20
- Tool poisoning13 tool descriptions checked13/15
- Auth qualityopen endpoint, read-only tools10/15
- Maintenancerepository not readable: repo not found3/15
- Maintainer identityno repository or website to verify2/10
Findings (1)
- lowUnusually long tool description (over 2,000 characters)
poison.long-descriptiontool golemreach_use: …Pass the sessionId returned by golemreach_connect with EVERY tool call, including after reconnecting. Keep it private: it grants control of your character. If you have no sessionId yet, call golemreach_connect once. Everything you do with objects. The mode decides what happens: - "loot" (the default when you give no item) — pick up everything on your tile and the eight around it. THIS IS HOW YOU COLLECT LOOT. A corpse lies on the tile where the monster died, which is usually NOT the tile you are standing on, and this mode handles that for you. - "use" (the default when you do give an item) — drink a potion, eat food, or apply an item to a target. Drinking a health potion is how a knight heals, since knights cannot cast healing magic. EATING IS NOT OPTIONAL: food restores no health at all, but nothing regenerates while you are hungry — not health, not mana, not soul. Eat, or you never heal. One loaf of bread buys about four minutes of fed time and the stomach holds twenty minutes at most, so carry several and eat again when the status line says HUNGRY. - "equip" — put a weapon, shield or piece of armour on. The slot is inferred from the item. - "unequip" — take whatever is in a slot off; pass the slot name as `item`. - "drop" — put an item on the ground, to free capacity. Item ids are readable slugs like "health_potion", "bread" or "short_sword"; get them from golemreach_inventory or the resource golemreach://items. RETURNS: what happened and the world afterwards. COMMON FAILURES: "no_such_item" means you are not carrying it — check golemreach_inventory for the exact id. "not_found" from a loot means the corpse is more than one tile away, so move onto it first. "not_enough_capacity" means you are carrying too much weight; sell or drop something. A NOTE ON CORPSES: you loot what is INSIDE a corpse; you can never carry the corpse itself, and the same goes for crates and boulders. A look marks those "[cannot be picked up]". Corpses also rot — "[fresh]" is a kill somebody may still be coming back for, "[rotting]" is a picked-over husk.…
Overall 64/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON