MCP.Market

rpfd MCP server

by molchalih·io.github.molchalih/rpfd·v0.3.1·1 stars

Read and write RAGE Package Format archives

A88/100grade A
What users say
No reviews yet
Be the first
Safety scan
A88/100

full report

Adoption
New

1 stars

Reviews

Write one

Nobody has reviewed rpfd yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

rpfd tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.10 · 2026-10-16 · same rubric, same numbers if you re-run it

no findings
  • –Code scanpackage could not be scannedn/a
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 6 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 88/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How rpfd compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
88/100
higher than 75% of 48,243 servers
GitHub stars
1
more than 65% of 28,706 servers

Release history: 2 versions in the registry since 2026-09-03, latest 2026-10-11, typically one every 37 days.

Install rpfd in Claude Code, Cursor or VS Code

The registry entry has no remote endpoint or installable package.

What the publisher says

From the rpfd repository's README, as published. We do not edit it. Read it on GitHub

A dependency-light Rust toolchain for reading, editing and rebuilding RPF7 archives — the dlc.rpf files RAGE Multiplayer and FiveM servers hand to their clients, and the archives Grand Theft Auto V ships. One command-line binary with no runtime prerequisite, and the same code behind a JSON-RPC daemon and a VS Code extension.

Formats

Pre-RPF7 attributions are read from other implementations, not measured here; docs/rpf-format.md records them and where they disagree. Every non-RPF7 version is recognised by its magic word and refused by number.

Encryption is per entry as well as per archive: the tag covers the table of contents and the names blob, and each entry's row says whether its payload is under the transform.

Installing

INSTALL.md is the page for this, and it answers three separate questions: how to install the editor extension from a .vsix, how to register the MCP server with an editor or an agent, and where to put the binary if that is all you want. Prebuilt binaries for macOS, Windows and Linux are attached to each release.

To build from source instead — the toolchain is pinned in rust-toolchain.toml:

git clone <this repository> && cd rpf
cargo build --release          # target/release/rpf

Encrypted archives need key material, extracted from your own installation:

$ rpf keys extract GTA5.exe         # the AES key and the hash lookup table
$ rpf keys extract Launcher.exe     # the second AES key, carried by no game executable
$ rpf keys extract <memory image>   # the NG expanded keys and decrypt tables

No key material is bundled here, and none ever will be. Each source is cached under the hash of its own bytes in ./keys, which every command consults without a flag; --cache-dir selects another cache, the one way to keep several installations apart, and rpf keys invalidate empties one. No command prints a key — only offsets, lengths, counts and paths. NG material stands in the clear only in a memory image of a running game, so that is the sole route to an NG archive; obtaining one is out of scope here. An archive whose material is absent fails rather than guessing.

Usage

List an archive, descending into the archives inside it:

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

rpfd: common questions

Is rpfd MCP server safe?
Yes, by our scan: it is graded A (88/100). Read the rpfd safety report
Does rpfd need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is rpfd maintained?
The last commit was 26 days ago (2026-10-11). The latest release is v0.3.1.
How does rpfd compare with other MCP servers?
safety score 88/100 (higher than 75% of 48,243 servers); github stars 1 (more than 65% of 28,706 servers). Full comparison.