# `com.vicecitymission/gta6` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/com.vicecitymission/gta6
- JSON: https://anlyon.dev/api/v1/servers/com.vicecitymission/gta6
- Version: 1.0.0 (active)
- Publisher: com.vicecitymission (domain proven to the MCP Registry)
- Runs: remote (streamable-http)
- Sign-in to list tools: none
- Metadata from the official MCP Registry, synced 2026-11-02T15:17:39.494Z

Title and description, as the publisher wrote them:

```untrusted-server-text
Vice City Mission: GTA 6
Free, unofficial GTA 6 server: release info, news, music, map pins, real-world landmarks, checklist
```

Scanned 2026-11-02T15:18:10.077Z over streamable-http.

**11 tools: 1 change things and 10 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 0 | deny |
| Can't be undone | irreversible | 0 | ask |
| Changes things | write | 1 | ask |
| Only reads | read | 10 | allow |

## Exfil surface

No private-data -> untrusted-input -> outbound path in this server alone: no tool is tagged untrusted-input or outbound.

| Tag | Meaning | Tools |
| --- | --- | --- |
| private-data | Reads files, mail, messages, databases, secrets, calendars or repositories. | `mcp__gta6__list_categories` |
| untrusted-input | Brings in text someone else can write: web pages, inbound email, messages, issues and comments. | none |
| outbound | Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL. | none |

## Findings

No check matched anything in these tool definitions.


## Changes things (1)

Creates or changes something that can be changed back. Claude Code: ask.

### `checklist_remaining`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

Description, as the server wrote it:

```untrusted-server-text
Given the ids a player has completed (from the tracker's 'Copy progress for AI' button), return what is still left, with missable items first, and the completion percentage.
```

## Only reads (10)

Looks things up and changes nothing. Claude Code: allow.

### `find_nearby`

- The name "find_nearby" says "find": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Find pins close to another pin or to a map position, nearest first. Positions are in-game meters (x east, y north, matching map.gtadb.org); distances are in meters.
```

### `get_checklist`

- The name "get_checklist" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
The completion checklist from the Vice City Mission tracker: story missions, side missions, activities, collectibles and trophies. Item ids match the tracker's saved progress.
```

### `get_game_info`

- The name "get_game_info" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Confirmed facts about GTA VI: quick facts (price, platforms, editions), the playable and supporting characters, and the regions of Leonida with their real-world inspirations. Each item is marked official, reported or community estimate.
```

### `get_launch_info`

- The name "get_launch_info" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Release date of GTA VI, days remaining, and how much community data the Vice City Mission map and tracker have so far. Call this first if unsure whether data exists yet.
```

### `get_location`

- The name "get_location" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Full details for one map pin by its id.
```

### `get_music`

- The name "get_music" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Confirmed GTA VI music: radio stations (genre, on-air hosts, reported voice actors, previewed songs), Grand Theft Auto VI: The Album singles, Justice's original score, and songs from each trailer. Each song includes streaming search links (Spotify, Apple Music, Tidal, YouTube Music). Full tracklists arrive at launch.
```

### `get_news`

- The name "get_news" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Major GTA VI announcements, newest first, each with a date, status (official/reported/community) and source links.
```

### `list_categories`

- The name "list_categories" says "list": a word for reading.
- Tag private-data: The description's first sentence says "secret": it reads secrets.

Description, as the server wrote it:

```untrusted-server-text
The kinds of locations on the map (missions, collectibles, weapons, vehicles, shops, activities, secrets) with how many pins each has.
```

### `search_landmarks`

- The name "search_landmarks" says "search": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Search ~1,900 GTA VI locations matched to the real Miami/Florida places they're based on (community data from map.gtadb.org, CC BY 4.0). Search by in-game area or by real place, e.g. 'Ocean Drive', 'Bal Harbour', 'Vice Beach', 'airport'. Optionally limit to a radius around an in-game position (meters).
```

### `search_locations`

- The name "search_locations" says "search": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Search community-submitted GTA VI map pins by text and/or category. Returns name, category, details, position in in-game meters (x east, y north), vote count, verified flag and a link to the pin on the map.
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `gta6`:

```json
{
  "permissions": {
    "allow": [
      "mcp__gta6__get_launch_info",
      "mcp__gta6__get_game_info",
      "mcp__gta6__get_music",
      "mcp__gta6__get_news",
      "mcp__gta6__search_landmarks",
      "mcp__gta6__list_categories",
      "mcp__gta6__search_locations",
      "mcp__gta6__get_location",
      "mcp__gta6__find_nearby",
      "mcp__gta6__get_checklist"
    ],
    "ask": [
      "mcp__gta6__checklist_remaining"
    ],
    "deny": []
  }
}
```

Capability tags behind the rules (a read tagged outbound is asked about):

- `mcp__gta6__list_categories`: private-data
