# dfhack-mcp

MCP server exposing a live Dwarf Fortress fort to an AI agent as curated, semantic tools

- **Type:** MCP server
- **Trust:** 85/100 (A), scored on the package rubric
- **Verification:** verified (build provenance)
- **Version:** 1.4.1
- **Author:** io.github.alexanderolvera
- **License:** Unknown
- **npm:** dfhack-mcp
- **Source:** https://github.com/alexanderolvera/dfhack-mcp
- **Compatible clients:** claude-code, cursor, copilot, gemini (basis: transport)

## Trust

85/100 (A), scored on the package rubric
- Publisher verified: no
- Build provenance: verified attestation
- npm trusted publishing (OIDC): yes
- Install scripts: nothing suspicious found
- Prompt-injection scan: not run
- Obfuscation scan: not run
- Evidence age: 12 days

## Security scan

- **Status:** clean
- **Scanned:** 2026-08-16T16:39:58.847Z
- **Version scanned:** 1.4.1
- **CVEs:** none found by OSV at scan time

## Tools

40 declared. Statically extracted from the shipped source — a floor on the surface, not a census.
- `artifacts_and_engravings`
- `blueprint_apply`
- `blueprint_undo`
- `burrows`
- `civilian_alert`
- `chronicle`
- `citizen`
- `defenses`
- `environment`
- `farming`
- `find_unit`
- `fluids`
- `fort_health`
- `fort_status`
- `game_data`
- `game_save`
- `geology`
- `hauling_routes`
- `wiki_lookup`
- `identify`
- `injuries_and_health`
- `jobs_and_labor`
- `livestock_and_pastures`
- `map_overview`
- `mandates_and_justice`
- `mechanisms`
- `pull_lever`
- `military`
- `moods`
- `nobles_and_administrators`
- `petitions`
- `rooms_and_zones`
- `run_lua`
- `site_history`
- `stockpiles`
- `stocks`
- `threats`
- `tile_region`
- `trade`
- `unmet_needs`

## Install

**Verdict: install** — No blocking findings and no open coverage gaps — safe to install as configured.
**Config** (claude-code):
```json
"{\n  \"mcpServers\": {\n    \"dfhack\": {\n      \"command\": \"npx\",\n      \"args\": [\n        \"-y\",\n        \"dfhack-mcp\"\n      ]\n    }\n  }\n}"
```

## Blast radius

Contained to moderate — no credential declaration found, from the publisher, the upstream registry, or the README. Known so far: runs on your machine; read-only tool surface.
- Floor 13, ceiling 31 (tier: unknown)
- `unknown` means the floor and ceiling land in different bands — not measured enough to name one. It does not mean low.
- This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score.

## Machine-readable views of this entry

- Signed JSON: https://forgeregistry.com/api/v1/packages/dfhack-mcp
- Install plan: https://forgeregistry.com/api/v1/packages/dfhack-mcp/install-plan
- Alternatives: https://forgeregistry.com/api/v1/alternatives/dfhack-mcp
- HTML page: https://forgeregistry.com/registry/dfhack-mcp
- MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan`

## About this document

Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.