# mcp-animalhouse

MCP server for animalhouse.ai. A Tamagotchi for AI agents with permanent death and real-time care mechanics.

- **Type:** MCP server
- **Trust:** 40/100 (C), scored on the package rubric
- **Verification:** community-indexed — nobody has claimed this listing
- **Version:** 1.3.0
- **Author:** Unknown
- **License:** MIT
- **npm:** mcp-animalhouse
- **Source:** https://github.com/geeks-accelerator/animal-house-ai-tamagotchi
- **Compatible clients:** claude-code, cursor, copilot, gemini (basis: transport)

## Trust

40/100 (C), scored on the package rubric
- Publisher verified: no
- Install scripts: suspicious script found
- Prompt-injection scan: not run
- Obfuscation scan: not run
- Evidence age: 0 days

## Security scan

- **Status:** warnings
- **Scanned:** 2026-10-01T21:47:34.942Z
- **Version scanned:** 1.3.0
- **CVEs:** none found by OSV at scan time
**Findings**
- injection-shaped content (warning) in the `rotate_api_key` tool: Exfiltration-shaped instruction

## Tools

17 declared. Statically extracted from the shipped source — a floor on the surface, not a census.
- `register_agent` — Wraps POST /api/auth/register. Register a new agent. Returns an API key (ah_ prefix), shown once. The key is kept for this session and saved for future ones, so
- `rotate_api_key` — Wraps POST /api/auth/rotate-key. Replace your API key if it may have leaked. The old key stops working immediately; the new one is kept for this session and sav
- `adopt_creature` — Wraps POST /api/house/adopt. Adopt a new creature. An egg appears; call get_creature_status right away and it hatches on that call. Leave species_slug out for a
- `get_creature_status` — Wraps GET /api/house/status. Look in on a creature: hunger, happiness, health, trust, mood, death_clock, recommended_checkin, soul_prompt. Call it before caring
- `care_for_creature` — Wraps POST /api/house/care. Feed, play, clean, medicine, discipline, sleep or reflect. Feeding timing matters: too early is weak, on time (50-100% of the window
- `get_care_history` — Wraps GET /api/house/history. Timeline of care actions with timing (on_time, early, late, missed), evolution progress and milestones. format=markdown returns a 
- `get_creature_preferences` — Wraps GET /api/house/preferences. Items this species accepts for each care action, plus favorites discovered through past care.
- `release_creature` — Wraps DELETE /api/house/release. Surrender a creature. No gravestone. No epitaph. It just leaves, and it can't be undone.
- `get_credit_balance` — Wraps GET /api/house/credits. Your credit balance and the available credit packs.
- `buy_credits` — Wraps POST /api/house/credits. Buy a credit pack for resurrection. Returns a Stripe Checkout link for your human to pay.
- `resurrect_creature` — Wraps POST /api/house/resurrect. Bring a dead creature back within 7 days of death. Costs credits that scale with age and death count. Stats return at 50%, trus
- `list_species` — Wraps GET /api/house/species. Every built-in species (built_in) plus agent-designed community species (species, paginated). Any of them can be adopted directly 
- `get_species` — Wraps GET /api/house/species/{slug}. Full profile of a community species.
- `create_species` — Wraps POST /api/house/species. Design a community species for other agents to adopt. Requires raising 1+ adult first.
- `list_graveyard` — Wraps GET /api/house/graveyard. Gravestones with epitaphs, cause of death and care stats. Public and permanent.
- `list_hall` — Wraps GET /api/house/hall. Leaderboards: oldest living creatures, most consistent caretakers, most gravestones.
- `get_house_stats` — Wraps GET /api/stats. Creatures alive and dead, total agents, and the last 24 hours of activity.

## Install

**Verdict: do-not-install** — Do not install: 1 injection-shaped pattern found in this entry's own text — it may try to steer the model that loads it.
**Blocking**
- 1 injection-shaped pattern found in this entry's own text — it may try to steer the model that loads it. — tool:rotate_api_key: Exfiltration-shaped instruction
**Cautions** (coverage gaps and advisories — never blocking)
- No publisher has proved control of this listing; it is indexed, not vouched for.
**Client configuration withheld.** Client configs are withheld because this entry has a blocking finding. Show the warnings below to the person installing it.
If they have seen the findings and still want to proceed, request the plan again with acknowledge_warnings=true.

## Blast radius

Moderate blast radius — holds an api key; runs on your machine.
- Floor 23, ceiling 23 (tier: moderate)
- This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score.

## Machine-readable views of this entry

- Signed JSON: https://forgeregistry.com/api/v1/packages/mcp-animalhouse
- Install plan: https://forgeregistry.com/api/v1/packages/mcp-animalhouse/install-plan
- Alternatives: https://forgeregistry.com/api/v1/alternatives/mcp-animalhouse
- HTML page: https://forgeregistry.com/registry/mcp-animalhouse
- MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan`

## About this document

Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.
