github TypeScript re-analysis due

TMHSDigital/steam-mcp

github

MCP server for Steam & Steamworks APIs - 25 tools (18 read + 7 write) for store data, player stats, reviews, pricing, achievements, workshop, leaderboards, inventory, and lobbies.

maintainer
TMHSDigital
license
NOASSERTION
first seen
2026-08-20
last seen
2026-08-21
releases · 30d
1
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 29 tools
transport stdio counts 29 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • steam_clearAchievement
  • steam_createLobby
  • steam_getAchievementStats
  • steam_getAppDetails
  • steam_getAppReviewSummary
  • steam_getLeaderboardEntries
  • steam_getLeaderboardsForGame
  • steam_getNewsForApp
  • steam_getOwnedGames
  • steam_getPlayerAchievements
  • steam_getPlayerCount
  • steam_getPlayerSummary
  • steam_getPriceOverview
  • steam_getRegionalPricing
  • steam_getReviews
  • steam_getSchemaForGame
  • steam_getWorkshopItem
  • steam_grantInventoryItem
  • steam_partnerLogin
  • steam_queryWorkshop
  • steam_resolveVanityURL
  • steam_searchApps
  • steam_setAchievement
  • steam_updateWorkshopItem
  • steam_uploadLeaderboardScore
  • steam_uploadStoreImage
  • steam_uploadTrailer
  • steam_uploadWorkshopItem
  • steam_validateStoreAsset
skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 2ba32e1 · analyzer v33 · 2w ago

skills & prompt files 2

code evidence vv0.7.0 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 41

filesystem 3

  • fs TMHSDigital-steam-mcp-2ba32e1/src/partner/tools.ts :1 import { existsSync, readFileSync, statSync } from "node:fs";
  • fs TMHSDigital-steam-mcp-2ba32e1/src/storeAssets/validate.ts :1 import { readFileSync } from "node:fs";
  • fs (weak) TMHSDigital-steam-mcp-2ba32e1/src/tools/__tests__/validateStoreAsset.test.ts :1 import { mkdtempSync, writeFileSync, rmSync } from "node:fs";

network 2

  • net TMHSDigital-steam-mcp-2ba32e1/src/partner/tools.ts :150 const response = await fetch(url, {
  • net TMHSDigital-steam-mcp-2ba32e1/src/utils/steam-api.ts :98 const response = await fetch(url, {

secrets 2

  • secrets (weak) TMHSDigital-steam-mcp-2ba32e1/src/utils/__tests__/steam-api.test.ts :52 const originalKey = process.env.STEAM_API_KEY;
  • secrets TMHSDigital-steam-mcp-2ba32e1/src/utils/steam-api.ts :16 const key = process.env.STEAM_API_KEY;

tool registrations 29

  • steam_partnerLogin TMHSDigital-steam-mcp-2ba32e1/src/partner/tools.ts :37
  • steam_uploadStoreImage TMHSDigital-steam-mcp-2ba32e1/src/partner/tools.ts :78
  • steam_uploadTrailer TMHSDigital-steam-mcp-2ba32e1/src/partner/tools.ts :188
  • steam_clearAchievement TMHSDigital-steam-mcp-2ba32e1/src/tools/clearAchievement.ts :29
  • steam_createLobby TMHSDigital-steam-mcp-2ba32e1/src/tools/createLobby.ts :23
  • steam_getAchievementStats TMHSDigital-steam-mcp-2ba32e1/src/tools/getAchievementStats.ts :14
  • steam_getAppDetails TMHSDigital-steam-mcp-2ba32e1/src/tools/getAppDetails.ts :23
  • steam_getAppReviewSummary TMHSDigital-steam-mcp-2ba32e1/src/tools/getAppReviewSummary.ts :14
  • steam_getLeaderboardEntries TMHSDigital-steam-mcp-2ba32e1/src/tools/getLeaderboardEntries.ts :50
  • steam_getLeaderboardsForGame TMHSDigital-steam-mcp-2ba32e1/src/tools/getLeaderboardsForGame.ts :19
  • steam_getNewsForApp TMHSDigital-steam-mcp-2ba32e1/src/tools/getNewsForApp.ts :27
  • steam_getOwnedGames TMHSDigital-steam-mcp-2ba32e1/src/tools/getOwnedGames.ts :26
  • steam_getPlayerAchievements TMHSDigital-steam-mcp-2ba32e1/src/tools/getPlayerAchievements.ts :24
  • steam_getPlayerCount TMHSDigital-steam-mcp-2ba32e1/src/tools/getPlayerCount.ts :14
  • steam_getPlayerSummary TMHSDigital-steam-mcp-2ba32e1/src/tools/getPlayerSummary.ts :18
  • steam_getPriceOverview TMHSDigital-steam-mcp-2ba32e1/src/tools/getPriceOverview.ts :19
  • steam_getRegionalPricing TMHSDigital-steam-mcp-2ba32e1/src/tools/getRegionalPricing.ts :24
  • steam_getReviews TMHSDigital-steam-mcp-2ba32e1/src/tools/getReviews.ts :41
  • steam_getSchemaForGame TMHSDigital-steam-mcp-2ba32e1/src/tools/getSchemaForGame.ts :19
  • steam_getWorkshopItem TMHSDigital-steam-mcp-2ba32e1/src/tools/getWorkshopItem.ts :13
  • steam_grantInventoryItem TMHSDigital-steam-mcp-2ba32e1/src/tools/grantInventoryItem.ts :40
  • steam_queryWorkshop TMHSDigital-steam-mcp-2ba32e1/src/tools/queryWorkshop.ts :45
  • steam_resolveVanityURL TMHSDigital-steam-mcp-2ba32e1/src/tools/resolveVanityURL.ts :29
  • steam_searchApps TMHSDigital-steam-mcp-2ba32e1/src/tools/searchApps.ts :19
  • steam_setAchievement TMHSDigital-steam-mcp-2ba32e1/src/tools/setAchievement.ts :29
  • steam_updateWorkshopItem TMHSDigital-steam-mcp-2ba32e1/src/tools/updateWorkshopItem.ts :39
  • steam_uploadLeaderboardScore TMHSDigital-steam-mcp-2ba32e1/src/tools/uploadLeaderboardScore.ts :38
  • steam_uploadWorkshopItem TMHSDigital-steam-mcp-2ba32e1/src/tools/uploadWorkshopItem.ts :34
  • steam_validateStoreAsset TMHSDigital-steam-mcp-2ba32e1/src/tools/validateStoreAsset.ts :17

install hooks 1

  • prepublishOnly TMHSDigital-steam-mcp-2ba32e1/package.json :21 npm run build

declared dependencies 6

  • @modelcontextprotocol/sdk@^1.12.1
  • zod@^3.24.4
  • @types/node@^22.15.3
  • tsx@^4.19.4
  • typescript@^5.8.3
  • vitest@^4.1.2