Skip to content

Edgegap

by edgegap.dev · remote · local (npm) · no sign-in to list tools · v0.7.1 · published by dev.edgegap

Deploy and operate multiplayer game servers on Edgegap's global edge network.

Deletes · 4Changes · 11

31 tools: 4 can delete or cancel things, 11 change things and 16 only read.

Scanned Oct 21, 2026

5 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http edgegap https://mcp.edgegap.dev/mcp --header 'Authorization: <your-authorization>'

Findings

Matches of fixed checks, with the text they matched.

3 warn2 info
  • The server marks "edgegap_generate_dockerfile" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"idempotentHint":true,"openWorldHint":false}; The name "edgegap_generate_dockerfile" says "generate": a word for a change.

    What this check looks for
  • The server marks "edgegap_get_registry_credentials" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "edgegap_get_registry_credentials" says "get": a word for reading.

    What this check looks for
  • The server marks "edgegap_build_matchmaker_config" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "generate": a word for a change.

    What this check looks for
  • The title mentions "credentials".

    Matched text

    title: "Get Edgegap container registry push credentials"

    What this check looks for
  • The description mentions "credentials".

    Matched text

    description: "...registry yet. Edgegap only hands these credentials to the quick-start token the Unity/Unre..."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

31 tools

Deletes or cancels 4Claude Code: deny
  • edgegap_delete_registry_tagDelete one tag, and the image it points to, from this organization's Edgegap container registry, to clean up old builds.No findings

    Why it is in this group

    • The name "edgegap_delete_registry_tag" says "delete": a word for removing or ending something.
    • The description says "Cannot be undone".
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Delete one tag, and the image it points to, from this organization's Edgegap container registry, to clean up old builds. Takes exactly one image name and one exact tag; wildcards, lists and "latest" are refused, and there is no bulk delete. A version that still uses the tag can no longer start deployments, so check edgegap_list_app_versions first. Cannot be undone.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
  • edgegap_delete_relay_sessionClose one relay session.No findings

    Why it is in this group

    • The name "edgegap_delete_relay_session" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Close one relay session. Connected players lose their relay connection. Delete every session you created for testing before ending your task. Takes exactly one session_id; empty IDs, wildcards and lists are refused.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
  • edgegap_revoke_relay_userRevoke one player's access to a relay session, by that player's authorization token (from edgegap_get_relay_session or edgegap_authorize_relay_user).No findings

    Why it is in this group

    • The name "edgegap_revoke_relay_user" says "revoke": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Revoke one player's access to a relay session, by that player's authorization token (from edgegap_get_relay_session or edgegap_authorize_relay_user). The player loses the relay connection; the session and the other players stay.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
  • edgegap_stop_deploymentGracefully stop one deployment by request_id, sending SIGTERM to the container.No findings

    Why it is in this group

    • The name "edgegap_stop_deployment" says "stop": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Gracefully stop one deployment by request_id, sending SIGTERM to the container. Stop every deployment you started for testing before ending your task. This tool stops exactly one deployment, named by its exact request_id: empty IDs, wildcards and lists are refused, and bulk stop is deliberately not exposed.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
Changes things 11Claude Code: ask
  • edgegap_authorize_relay_userAuthorize one more player (by public IP) on an existing relay session, for a player joining after the session was created.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Authorize one more player (by public IP) on an existing relay session, for a player joining after the session was created. Returns that player's authorization token.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • edgegap_build_matchmaker_configGenerate a ready-to-upload Edgegap matchmaker JSON configuration with one profile: team count and size, optional latency rule, and optional expansions that relax the rules the long…1 finding

    Why it is in this group

    • The description's first verb is "generate": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "edgegap_build_matchmaker_config" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "generate": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Generate a ready-to-upload Edgegap matchmaker JSON configuration with one profile: team count and size, optional latency rule, and optional expansions that relax the rules the longer a player waits. Checks the referenced application version exists and has ports. Edgegap has no API for creating a matchmaker, so this tool does NOT create one: save the returned config to a file (e.g. matchmaker-config.json) and have the developer upload it on the Matchmaker page of the dashboard. The matchmaker starts an authoritative dedicated server for each match, which is the recommended setup for multiplayer games.

    Annotations the server declares

    • readOnlyHint: true
    • idempotentHint: true
    • openWorldHint: true
  • edgegap_contextReport which Edgegap API this server talks to, its version, whether it is the local or hosted server, and the guardrails in force: read-only mode, application allowlist, max_durati…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Report which Edgegap API this server talks to, its version, whether it is the local or hosted server, and the guardrails in force: read-only mode, application allowlist, max_duration ceiling, the agent deployment cap, the tag forced onto every deployment, and which tools support dry_run. Call it first when unsure what this session is allowed to do, or before anything billable. Makes no API call and never shows the token.

    Annotations the server declares

    • readOnlyHint: true
    • idempotentHint: true
    • openWorldHint: false
  • edgegap_create_appCreate a new application to hold game server versions.No findings

    Why it is in this group

    • The name "edgegap_create_app" says "create": a word for a change.
    Description, as the server wrote it
    Create a new application to hold game server versions. Only call this after edgegap_list_apps confirms no suitable application exists. Creating an application does not deploy anything — follow with edgegap_create_app_version.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • edgegap_create_app_versionRegister a container image as a deployable version of an application.No findings

    Why it is in this group

    • The name "edgegap_create_app_version" says "create": a word for a change.
    Description, as the server wrote it
    Register a container image as a deployable version of an application. The image must already be pushed to a registry that Edgegap can pull from (see edgegap_get_registry_credentials and edgegap_list_registry_tags). Resource units: 1024 cpu units = 1 vCPU; memory_mb must be at least 256 and at most double the cpu units. Set verify_image true on the first version so a bad image fails here rather than at deploy time. Refused, with nothing sent, for the "latest" or an empty docker tag (use a build ID so deployments are reproducible) and for a docker_image that also holds a registry host or tag. Env vars named like secrets (TOKEN, SECRET, PASSWORD, API_KEY…) are hidden in the dashboard.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • edgegap_create_relay_sessionA relay is NOT a game server and is not the recommended default — for a multiplayer match, deploy an authoritative dedicated server with edgegap_deploy instead.No findings

    Why it is in this group

    • The name "edgegap_create_relay_session" says "create": a word for a change.
    Description, as the server wrote it
    A relay is NOT a game server and is not the recommended default — for a multiplayer match, deploy an authoritative dedicated server with edgegap_deploy instead. A relay only forwards traffic between players while one player's game acts as host and owns the game state: the host can cheat and has a latency advantage, the host's PC and connection cap the match, and the match ends if the host quits. Only use this when the developer has chosen peer-to-peer/host-client, or the netcode is already a listen server and a dedicated server is not an option; if that has not been established, ask first. Never pick it only because it needs no server image. Creates an Edgegap relay session for every player's public IP, host first, waits until it is ready, and returns the relay address plus per-player authorization tokens for the relay transport. Relay sessions are billed while open: delete test sessions with edgegap_delete_relay_session when finished.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • edgegap_deployStart one authoritative dedicated game server from an application version, placed near the players you specify.No findings

    Why it is in this group

    • The name "edgegap_deploy" says "deploy": a word for a change.
    Description, as the server wrote it
    Start one authoritative dedicated game server from an application version, placed near the players you specify. This is the recommended way to host a multiplayer match: the server owns the game state, so no player hosts it. Returns immediately with a request_id; the server is still starting and has no connection details yet. Follow this call with edgegap_wait_for_deployment to get the address players connect to. Always stop deployments you started for testing. Every deployment is tagged "edgegap-mcp" in addition to any tags you pass, so edgegap_list_deployments with only_agent_deployments: true finds them all. Runs until stopped or until the version's max_duration, which the result reports. Refused, with nothing sent, if the API token appears in an env var or tag, if the version uses the "latest" docker tag, or when too many agent deployments are already running (EDGEGAP_MAX_AGENT_DEPLOYMENTS, default 5): stop finished ones first. Env vars named like secrets are hidden in the dashboard.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • edgegap_generate_dockerfileWrite a Dockerfile for this project's headless game server build, ready for Edgegap: linux/amd64 base, the build folder copied in, the binary made executable, the right headless fl…1 finding

    Why it is in this group

    • The name "edgegap_generate_dockerfile" says "generate": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "edgegap_generate_dockerfile" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"idempotentHint":true,"openWorldHint":false}; The name "edgegap_generate_dockerfile" says "generate": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Write a Dockerfile for this project's headless game server build, ready for Edgegap: linux/amd64 base, the build folder copied in, the binary made executable, the right headless flags (Unity -batchmode -nographics, Godot --headless), a non-root user where the engine needs it (Unreal refuses root), CRLF fixes for start scripts, and EXPOSE lines matching the ports. Call this when the project has no Dockerfile, before building anything. Look at the build output first so you can pass the real build folder, binary name and port; anything you omit is assumed and listed under assumptions, which you must confirm with the developer or the project files. Write the result to Dockerfile, then build. The output is checked against edgegap_validate_server_config before it is returned. Makes no API calls.

    Annotations the server declares

    • readOnlyHint: true
    • idempotentHint: true
    • openWorldHint: false
  • edgegap_get_registry_credentialsGet the push login for this organization's private Edgegap container registry (registry.edgegap.com) and the exact docker login, build and push commands for your image.3 findings

    Why it is in this group

    • The name "edgegap_get_registry_credentials" says "get": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Info

      The title mentions "credentials".

      Matched text

      title: "Get Edgegap container registry push credentials"

      What this check looks for
    • Info

      The description mentions "credentials".

      Matched text

      description: "...registry yet. Edgegap only hands these credentials to the quick-start token the Unity/Unre..."

      What this check looks for
    • Warn

      The server marks "edgegap_get_registry_credentials" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "edgegap_get_registry_credentials" says "get": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Get the push login for this organization's private Edgegap container registry (registry.edgegap.com) and the exact docker login, build and push commands for your image. Use this when the server image is not in a registry yet. Edgegap only hands these credentials to the quick-start token the Unity/Unreal plugins use; with a regular API token this tool cannot fetch them and instead returns the steps to copy them from the dashboard's Container Registry page — ask the developer for them then, do not retry. When it does return a token, it is registry-scoped (push/pull images in this project), not the org API token: pass it to docker login via --password-stdin, never as a command-line argument, and do not write it into files. Call edgegap_validate_server_config before building.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • edgegap_update_appSet whether an application accepts new deployments.No findings

    Why it is in this group

    • The name "edgegap_update_app" says "update": a word for a change.
    Description, as the server wrote it
    Set whether an application accepts new deployments. Turning it off stops new deployments of every version under it; running deployments keep running. Use it to pause an application without deleting anything.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • edgegap_update_app_versionChange settings on an existing version instead of creating a new one: point it at a new image tag, turn it on or off, change max_duration, set the registry login, turn on image cac…No findings

    Why it is in this group

    • The name "edgegap_update_app_version" says "update": a word for a change.
    Description, as the server wrote it
    Change settings on an existing version instead of creating a new one: point it at a new image tag, turn it on or off, change max_duration, set the registry login, turn on image caching (force_cache: Edgegap pre-loads the image so deployments start faster), or set the shutdown grace period. Only the fields you pass change. Deployments already running keep their old settings; new deployments get the new ones. Same refusals as edgegap_create_app_version: "latest" or empty tags, a docker_image holding a host or tag, and the API token in the registry login. Resources, ports and env vars cannot be changed here; create a new version for those.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
Only reads 16Claude Code: allow
  • edgegap_get_app_versionRead one version in full: image, resources, ports, max_duration, whether image caching (force_cache) and verify_image are on, restart policy, and the names of its env vars (values …No findings

    Why it is in this group

    • The name "edgegap_get_app_version" says "get": a word for reading.
    Description, as the server wrote it
    Read one version in full: image, resources, ports, max_duration, whether image caching (force_cache) and verify_image are on, restart policy, and the names of its env vars (values are never shown). Use it before edgegap_update_app_version or edgegap_deploy to check what a version will do.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • edgegap_get_deploymentRead the current status of one deployment, including connection address and ports once it is ready.No findings

    Why it is in this group

    • The name "edgegap_get_deployment" says "get": a word for reading.
    Description, as the server wrote it
    Read the current status of one deployment, including connection address and ports once it is ready. For a deployment you just created, prefer edgegap_wait_for_deployment — it polls for you instead of making you call this in a loop.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • edgegap_get_deployment_logsRetrieve stdout/stderr and crash output for a deployment.No findings

    Why it is in this group

    • The name "edgegap_get_deployment_logs" says "get": a word for reading.
    Description, as the server wrote it
    Retrieve stdout/stderr and crash output for a deployment. Call this whenever a deployment errors or a server exits unexpectedly — the crash exit code usually identifies the problem faster than redeploying does. Logs for stopped deployments are only retained if Endpoint Storage was configured on the version beforehand.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • edgegap_get_deployment_metricsSummarise a deployment's resource use over time: CPU, CPU throttling, memory and network, each as latest, average and peak, with the API's own labels.No findings

    Why it is in this group

    • The name "edgegap_get_deployment_metrics" says "get": a word for reading.
    Description, as the server wrote it
    Summarise a deployment's resource use over time: CPU, CPU throttling, memory and network, each as latest, average and peak, with the API's own labels. Use it to size a version (cpu_units, memory_mb) from a real match, or to check whether a crash was memory or CPU starvation before redeploying. Defaults to the whole life of the deployment.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • edgegap_get_relay_sessionRead one relay session: whether it is ready, the relay address and ports, and each authorized player with their authorization token.No findings

    Why it is in this group

    • The name "edgegap_get_relay_session" says "get": a word for reading.
    Description, as the server wrote it
    Read one relay session: whether it is ready, the relay address and ports, and each authorized player with their authorization token. edgegap_create_relay_session already waits for readiness; use this to re-read a session or one created with wait_until_ready false.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • edgegap_get_skillLoad one Edgegap agent skill: its SKILL.md (the workflow to follow) by default, or one of its reference documents or templates with file.No findings

    Why it is in this group

    • The name "edgegap_get_skill" says "get": a word for reading.
    Description, as the server wrote it
    Load one Edgegap agent skill: its SKILL.md (the workflow to follow) by default, or one of its reference documents or templates with file. Load the matching skill before acting on a game project — edgegap-ngo for Unity with Netcode for GameObjects, edgegap-fishnet for Unity with FishNet, edgegap-purrnet for Unity with PurrNet, edgegap-fusion for Unity with Photon Fusion 2, edgegap-unity for other Unity projects, edgegap-unreal for Unreal Engine (edgegap-eos-voice for voice chat), edgegap-fusion-simplefps for the Photon Simple FPS sample, edgegap-godot for Godot 4 with a Godot server, edgegap-colyseus for a Colyseus server, edgegap-nakama for a Nakama backend, edgegap-playfab for PlayFab Matchmaking, edgegap-manus for a browser game built with Manus, edgegap otherwise — and fetch the references and templates it points to as you reach them. No API call.

    Annotations the server declares

    • readOnlyHint: true
    • idempotentHint: true
    • openWorldHint: false
  • edgegap_list_app_versionsList the versions under an application, with their container image, resources, ports (including whether TLS Upgrade is on, which browser/WebGL clients need for wss://) and whether …No findings

    Why it is in this group

    • The name "edgegap_list_app_versions" says "list": a word for reading.
    Description, as the server wrote it
    List the versions under an application, with their container image, resources, ports (including whether TLS Upgrade is on, which browser/WebGL clients need for wss://) and whether a registry login is set for pulling the image. Use this to find the version name to deploy, to check a version is ready before deploying, or to copy settings from a working version when creating a new one.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • edgegap_list_appsList the applications in the Edgegap organization.No findings

    Why it is in this group

    • The name "edgegap_list_apps" says "list": a word for reading.
    Description, as the server wrote it
    List the applications in the Edgegap organization. Start here before creating or deploying anything, so you reuse an existing application instead of making a duplicate. An "application" groups versions of one game server.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • edgegap_list_deploymentsList active deployments, optionally filtered and sorted.No findings

    Why it is in this group

    • The name "edgegap_list_deployments" says "list": a word for reading.
    Description, as the server wrote it
    List active deployments, optionally filtered and sorted. Use this to find deployments left running from earlier sessions before starting new ones — orphaned servers cost money. Filter by status, application, version, tags, request_id, created_at, fleet_name or host_name, e.g. [{field:"application",operator:"eq",value:"my-game"},{field:"status",operator:"eq",value:"ready"}]. Operators: eq and neq on every field except created_at (eq, gte, lte); in and nin with an array value on request_id, tags, application, version, fleet_name, host_name; ilike with % wildcards on fleet_name and host_name. At most one filter per field. Sort by created_at or available_session_sockets. To find every deployment an agent started through this server, pass only_agent_deployments: true (the same as filtering tags in ["edgegap-mcp", "mcp"]).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • edgegap_list_locationsList the cities Edgegap can deploy to.No findings

    Why it is in this group

    • The name "edgegap_list_locations" says "list": a word for reading.
    Description, as the server wrote it
    List the cities Edgegap can deploy to. Pass application and version to see only the locations with capacity for that version right now. Use it to pick geo_coordinates for edgegap_deploy when you have no player IPs, or to tell a developer where their players can be served from. For the ping beacons game clients use to measure latency, see edgegap_list_ping_beacons.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • edgegap_list_ping_beaconsList Edgegap's ping beacons: one host per region that a game client can ping (UDP or TCP) to measure its latency before matchmaking.No findings

    Why it is in this group

    • The name "edgegap_list_ping_beacons" says "list": a word for reading.
    Description, as the server wrote it
    List Edgegap's ping beacons: one host per region that a game client can ping (UDP or TCP) to measure its latency before matchmaking. The matchmaker's latency rules use these measurements. Read-only; the game client does the pinging, not this tool.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • edgegap_list_registry_tagsList the tags pushed for one image in this organization's Edgegap container registry, with push time and size.No findings

    Why it is in this group

    • The name "edgegap_list_registry_tags" says "list": a word for reading.
    Description, as the server wrote it
    List the tags pushed for one image in this organization's Edgegap container registry, with push time and size. Call it after docker push to confirm the tag landed before edgegap_create_app_version, which otherwise fails later with an image-pull error.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • edgegap_list_relay_sessionsList this organization's active relay sessions: id, status, readiness and player count.No findings

    Why it is in this group

    • The name "edgegap_list_relay_sessions" says "list": a word for reading.
    Description, as the server wrote it
    List this organization's active relay sessions: id, status, readiness and player count. Relay sessions bill while open, so use this to find ones left over from earlier sessions and delete them with edgegap_delete_relay_session. Authorization tokens are not listed; read one session with edgegap_get_relay_session.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • edgegap_list_skillsList the Edgegap agent skills: tested, step-by-step workflows for getting a multiplayer game online on Edgegap, with templates (Dockerfiles, matchmaker configs, Unity C# and Unreal…No findings

    Why it is in this group

    • The name "edgegap_list_skills" says "list": a word for reading.
    Description, as the server wrote it
    List the Edgegap agent skills: tested, step-by-step workflows for getting a multiplayer game online on Edgegap, with templates (Dockerfiles, matchmaker configs, Unity C# and Unreal C++ drop-ins) and known pitfalls. Before working on a game project, load the matching skill with edgegap_get_skill: edgegap-ngo for Unity with Netcode for GameObjects, edgegap-fishnet for Unity with FishNet, edgegap-purrnet for Unity with PurrNet, edgegap-fusion for Unity with Photon Fusion 2, edgegap-unity for other Unity projects, edgegap-unreal for Unreal Engine (edgegap-eos-voice to add voice chat to it), edgegap-fusion-simplefps for the Photon Simple FPS sample, edgegap-godot for Godot 4 with a Godot server, edgegap-colyseus for a Colyseus server, edgegap-nakama for a game with a Nakama backend, edgegap-playfab for a game that keeps PlayFab Matchmaking, edgegap-manus for a browser game built with Manus, edgegap for any other engine or platform questions; it routes to the rest. No API call.

    Annotations the server declares

    • readOnlyHint: true
    • idempotentHint: true
    • openWorldHint: false
  • edgegap_validate_server_configCheck a game server Dockerfile and the ports/resources you intend to register against what Edgegap requires, BEFORE building and pushing.No findings

    Why it is in this group

    • The name "edgegap_validate_server_config" says "validate": a word for reading.
    Description, as the server wrote it
    Check a game server Dockerfile and the ports/resources you intend to register against what Edgegap requires, BEFORE building and pushing. Catches the failures that otherwise only show up after a build, push, version and deploy: ARM or Windows images (Edgegap runs linux/amd64), Unreal running as root, missing Unity -batchmode -nographics, a server bound to localhost, EXPOSE ports that do not match the version ports, a protocol that does not match the netcode transport, the "latest" tag, and bad CPU/memory ratios. Pass the Dockerfile text (read it from disk first). If there is no Dockerfile yet, call edgegap_generate_dockerfile instead. Makes no API calls.

    Annotations the server declares

    • readOnlyHint: true
    • idempotentHint: true
    • openWorldHint: false
  • edgegap_wait_for_deploymentPoll a deployment until it is ready, errors, or the timeout expires, then return the connection details.No findings

    Why it is in this group

    • The name "edgegap_wait_for_deployment" says "wait": a word for reading.
    Description, as the server wrote it
    Poll a deployment until it is ready, errors, or the timeout expires, then return the connection details. This is the tool to call right after edgegap_deploy. Do not build your own polling loop — this handles backoff and reports the container error detail if the server fails to start.

    Annotations the server declares

    • readOnlyHint: true
    • idempotentHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.7.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http edgegap https://mcp.edgegap.dev/mcp --header 'Authorization: <your-authorization>'

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__edgegap__edgegap_list_apps",
      "mcp__edgegap__edgegap_list_app_versions",
      "mcp__edgegap__edgegap_get_app_version",
      "mcp__edgegap__edgegap_list_locations",
      "mcp__edgegap__edgegap_list_ping_beacons",
      "mcp__edgegap__edgegap_get_deployment",
      "mcp__edgegap__edgegap_wait_for_deployment",
      "mcp__edgegap__edgegap_list_deployments",
      "mcp__edgegap__edgegap_get_deployment_logs",
      "mcp__edgegap__edgegap_get_deployment_metrics",
      "mcp__edgegap__edgegap_validate_server_config",
      "mcp__edgegap__edgegap_list_registry_tags",
      "mcp__edgegap__edgegap_get_relay_session",
      "mcp__edgegap__edgegap_list_relay_sessions",
      "mcp__edgegap__edgegap_list_skills",
      "mcp__edgegap__edgegap_get_skill"
    ],
    "ask": [
      "mcp__edgegap__edgegap_context",
      "mcp__edgegap__edgegap_create_app",
      "mcp__edgegap__edgegap_update_app",
      "mcp__edgegap__edgegap_create_app_version",
      "mcp__edgegap__edgegap_update_app_version",
      "mcp__edgegap__edgegap_deploy",
      "mcp__edgegap__edgegap_generate_dockerfile",
      "mcp__edgegap__edgegap_get_registry_credentials",
      "mcp__edgegap__edgegap_create_relay_session",
      "mcp__edgegap__edgegap_authorize_relay_user",
      "mcp__edgegap__edgegap_build_matchmaker_config"
    ],
    "deny": [
      "mcp__edgegap__edgegap_stop_deployment",
      "mcp__edgegap__edgegap_delete_registry_tag",
      "mcp__edgegap__edgegap_revoke_relay_user",
      "mcp__edgegap__edgegap_delete_relay_session"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as edgegap. Review it before you use it.