Skip to content

GardenArena GardenScript

by gardenarena.io · remote · no sign-in to list tools · v1.0.0 · published by io.gardenarena

Simulate farms, validate GardenScript and compare policies with Rust. No outbound LLM calls.

Changes · 13

30 tools: 13 change things and 17 only read.

Scanned Oct 21, 2026

4 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http gardenscript https://gardenarena.io/mcp

Findings

Matches of fixed checks, with the text they matched.

2 warn2 info
  • The server marks "farm_compare_run" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "farm_compare_run" says "compare": a word for reading.

    What this check looks for
  • The server marks "strategy_validate" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "strategy_validate" says "validate": a word for reading.

    What this check looks for
  • The description mentions "credential".

    Matched text

    description: "...e GardenArena run_token, not a provider credential."

    What this check looks for
  • The description mentions "credentials".

    Matched text

    description: "...e arguments are ignored, never approval credentials."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

30 tools

Changes things 13Claude Code: ask
  • artifact_verifyVerify a SHA-256 digest against published contracts, scenarios and sealed entries.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Verify a SHA-256 digest against published contracts, scenarios and sealed entries.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • bamboo_training_runConsume one bounded private training run against Dry Patience after user agreement.No findings

    Why it is in this group

    • The name "bamboo_training_run" says "run": a word for a change.
    Description, as the server wrote it
    Consume one bounded private training run against Dry Patience after user agreement. GardenScript 0.5 bamboo only, fixed public scenario and budgets. Shared web/MCP quotas; temporary local storage, no official submission or publication, no LLM call. Keep run_token private.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • coop_workshop_runExecute one bounded Rust chicken-workshop journal after human agreement.No findings

    Why it is in this group

    • The name "coop_workshop_run" says "run": a word for a change.
    Description, as the server wrote it
    Execute one bounded Rust chicken-workshop journal after human agreement. journal_json is the complete closed JSON journal (64 KiB), NOT GardenScript or arbitrary code. Returns reproducible state, event explanations and an export for explicit human import in the 3D game. No persistent game, official write, provider API or automatic publication. Respect retry delays and the agreed call budget.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • entry_createCreate a Reality Trial 001 policy entry.No findings

    Why it is in this group

    • The name "entry_create" says "create": a word for a change.
    Description, as the server wrote it
    Create a Reality Trial 001 policy entry. Returns an explicit entry_id. Returns a private entry_nonce once; keep it for all mutations. An idempotent retry requires that nonce and never returns it again. Identity assurance can only be anonymous or declared. Does not occupy an official seat until the organizer confirms on the web. Write-gated.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • farm_autopilot_runRun a bounded pantry-oriented farmer tour after user agreement: 1–7 simulated days, 0–1000 game credits, at most 64 added ordinary commands.No findings

    Why it is in this group

    • The name "farm_autopilot_run" says "run": a word for a change.
    Description, as the server wrote it
    Run a bounded pantry-oriented farmer tour after user agreement: 1–7 simulated days, 0–1000 game credits, at most 64 added ordinary commands. Deterministic Rust rules, not a live LLM. Gathers food, handles care and irrigation, cuts mature bamboo for supports, composts and cooks available ingredients. No sales, new animals, publication or background daemon. Returns the exact replayable journal and per-action reasons/costs; a human chooses whether to import.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • farm_campaign_runTry the fixed J95 to J105 farm chapter after agreeing a finite call budget.No findings

    Why it is in this group

    • The name "farm_campaign_run" says "run": a word for a change.
    Description, as the server wrote it
    Try the fixed J95 to J105 farm chapter after agreeing a finite call budget. choices_json is a CLOSED object: mission_id stewardship-v1, choices {harvest: pantry/kitchen/market, egg_reserve: 0/2/6, rotate: boolean}. At most ten days, 100 added ordinary commands; shared workshop quotas. Rust decides from current state, retains adverse days and reports costs/refusals/meals. No arbitrary journal, GardenScript, publication, persistent save, LLM call or background search. Return the complete export; human chooses adoption. Local meals do not imply full autonomy.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • farm_compare_runCompare two GardenScript farm.v1 policies from the SAME complete v4 journal after agreeing a finite call budget.1 finding

    Why it is in this group

    • The name "farm_compare_run" says "compare": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "farm_compare_run" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "farm_compare_run" says "compare": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Compare two GardenScript farm.v1 policies from the SAME complete v4 journal after agreeing a finite call budget. Two trials, 1–7 days and identical 0–1000 game-credit ceilings. Rust returns both branches, trace witnesses of the first work divergence and honest elapsed-day/command-cap metrics, never an overall winner. Charges two shared workshop quota units. No game mutation, persistence, publication, LLM calls or unattended search. Return the complete comparison export; only the human can adopt a branch in their browser. No legacy future-veto helper, v5 weather or official ranking.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • farm_next_eventAdvance a farm journal to the next detected important moment, checked daily for at most max_days (1–21).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Advance a farm journal to the next detected important moment, checked daily for at most max_days (1–21). Use the full journal_json and care_json containing ration, access, ventilation, incubator. Consumes one agreed calculation call. Returns the accepted ordinary journal, unchanged Rust result, season guide and evidence-linked stop reason. No automatic care, publication or persistent write; human chooses whether to import.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • farm_policy_runRun a GardenScript 0.6 farm.v1 policy from a COMPLETE v4/v5 journal after user agreement, within a finite call budget.No findings

    Why it is in this group

    • The name "farm_policy_run" says "run": a word for a change.
    Description, as the server wrote it
    Run a GardenScript 0.6 farm.v1 policy from a COMPLETE v4/v5 journal after user agreement, within a finite call budget. Six decisions from each day's current snapshot become ordinary costed commands. No future weather archive access or cancellation of bad days: shortages pause AFTER commitment. Returns export, exact source, rule/sensor witnesses, accepted/rejected commands and costs. Not an official competition or the legacy precognitive safety helper. No LLM calls, publication, persistent game or daemon; human explicitly imports the result.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • farm_workshop_runExecute one bounded whole-farm Rust journal after human agreement, within the agreed call budget.No findings

    Why it is in this group

    • The name "farm_workshop_run" says "run": a word for a change.
    Description, as the server wrote it
    Execute one bounded whole-farm Rust journal after human agreement, within the agreed call budget. journal_json is complete closed JSON, max 64 KiB, not GardenScript. Returns game state, evidence-linked farmer tasks and an export for explicit human import. No autonomous daemon, publication, LLM call or persistent game.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • strategy_prepare_sealPrepare a review and return its confirmation_url for the human organizer.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Prepare a review and return its confirmation_url for the human organizer. Requires the private entry_nonce. Does not grant authority to seal. The organizer must use their own web session; never operate that page for them.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • strategy_validateCompile GardenScript for an existing entry without running the official scenario.1 finding

    Why it is in this group

    • The name "strategy_validate" says "validate": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "strategy_validate" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "strategy_validate" says "validate": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Compile GardenScript for an existing entry without running the official scenario. Requires its private entry_nonce. Consumes that entry's validation budget.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • submit_garden_strategySubmit externally generated GardenScript to an arena.No findings

    Why it is in this group

    • The name "submit_garden_strategy" says "submit": a word for a change.
    Description, as the server wrote it
    Submit externally generated GardenScript to an arena. The source is validated again by the local Rust compiler. Disabled by default; operator-owned identity comes only from server environment, never from a model token.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
Only reads 17Claude Code: allow
  • bamboo_challenge_getRead the fixed 365-day bamboo training mission, exact Dry Patience reference, scenario hash, budgets and quotas.No findings

    Why it is in this group

    • The name "bamboo_challenge_get" says "get": a word for reading.
    Description, as the server wrote it
    Read the fixed 365-day bamboo training mission, exact Dry Patience reference, scenario hash, budgets and quotas. No run or publication. Read gardenarena://gardenscript/v0.5 for the full language.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • bamboo_training_artifactRead the exact reproducible request and expected result hashes for a private training run.No findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    Description, as the server wrote it
    Read the exact reproducible request and expected result hashes for a private training run. Includes strategy sources: do not publish automatically. Full trace JSON downloadable through the documented POST export. No run or official ledger write.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • bamboo_training_explainRead a private training comparison and evidence-linked moments.1 finding

    Why it is in this group

    • The name "bamboo_training_explain" says "explain": a word for reading.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...e GardenArena run_token, not a provider credential."

      What this check looks for
    Description, as the server wrote it
    Read a private training comparison and evidence-linked moments. Optional day 1-365 returns both actual Rust decision traces, not a rerun. Requires the private GardenArena run_token, not a provider credential.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • coop_workshop_getRead the playable chicken workshop mission: breeds, breeding/incubation, production balance, non-lethal predators, closed JSON commands, exact scenario and quotas.No findings

    Why it is in this group

    • The name "coop_workshop_get" says "get": a word for reading.
    Description, as the server wrote it
    Read the playable chicken workshop mission: breeds, breeding/incubation, production balance, non-lethal predators, closed JSON commands, exact scenario and quotas. No simulation or database write. Distinct from GardenScript/official competitions.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • farm_campaign_getRead chapter 2 stewardship-v1: exact teaching farm J95, three management choices, ten-day routine, success criteria and complete original journal.No findings

    Why it is in this group

    • The name "farm_campaign_get" says "get": a word for reading.
    Description, as the server wrote it
    Read chapter 2 stewardship-v1: exact teaching farm J95, three management choices, ten-day routine, success criteria and complete original journal. No calculation or publication; not the player's private farm. JSON plan, NOT GardenScript.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • farm_compare_getRead the bounded two-policy farm comparison contract and its fixed week-after-v1 teaching mission (exact J96 journal, two sources, seven days, 540 credits).No findings

    Why it is in this group

    • The name "farm_compare_get" says "compare": a word for reading.
    Description, as the server wrote it
    Read the bounded two-policy farm comparison contract and its fixed week-after-v1 teaching mission (exact J96 journal, two sources, seven days, 540 credits). V4 only, same start and days/budget per branch, no global winner or publication. Read the farm policy contract for syntax. No paired trial or persistent write.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • farm_policy_getRead GardenScript 0.6 farm.v1: six decision channels, 29 current-state sensors, exact intention expansion, three application-authored presets and shared limits.No findings

    Why it is in this group

    • The name "farm_policy_get" says "get": a word for reading.
    Description, as the server wrote it
    Read GardenScript 0.6 farm.v1: six decision channels, 29 current-state sensors, exact intention expansion, three application-authored presets and shared limits. No run, persistent write or LLM call. Read before writing a farm policy.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • farm_policy_validateValidate a closed GardenScript 0.6 farm.v1 source, maximum 16 KiB.No findings

    Why it is in this group

    • The name "farm_policy_validate" says "validate": a word for reading.
    Description, as the server wrote it
    Validate a closed GardenScript 0.6 farm.v1 source, maximum 16 KiB. Local Rust only; line diagnostics and exact source/canonical hashes. Shared workshop quota; no run, persistence or publication.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • farm_weather_getRead cached real MET Norway forecasts and a continuous Météo-France station archive for a chosen French commune INSEE code.No findings

    Why it is in this group

    • The name "farm_weather_get" says "get": a word for reading.
    Description, as the server wrote it
    Read cached real MET Norway forecasts and a continuous Météo-France station archive for a chosen French commune INSEE code. Optional start_date and station_id retain an existing game's station/start when refreshing. Returns a frozen snapshot, station distance, dates and licences. Forecasts are not observations and never fill the tank. No game mutation, precise user location, paid API, LLM call or publication. Applying the snapshot requires an explicit closed weather_station command in a v5 game.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • farm_workshop_getRead the playable whole-farm mission, shared resources, closed JSON actions and farmer task contract.No findings

    Why it is in this group

    • The name "farm_workshop_get" says "get": a word for reading.
    Description, as the server wrote it
    Read the playable whole-farm mission, shared resources, closed JSON actions and farmer task contract. Educational simulation, no run or official write.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_bamboo_sceneRead one day (1-365, default UTC day of year) of the published Rust bamboo replay used by the 3D scene.No findings

    Why it is in this group

    • The name "get_bamboo_scene" says "get": a word for reading.
    Description, as the server wrote it
    Read one day (1-365, default UTC day of year) of the published Rust bamboo replay used by the 3D scene. Includes sensors, entrant and SHA-256 provenance. Synthetic exhibition only; not an observation, strategy evaluation or hydraulic forecast. Koi are decorative and unranked. No database access, simulation launch, external network or LLM call.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_garden_arenaRead one arena's ruleset, scenario, capabilities, limits and status by slug.No findings

    Why it is in this group

    • The name "get_garden_arena" says "get": a word for reading.
    Description, as the server wrote it
    Read one arena's ruleset, scenario, capabilities, limits and status by slug. This performs no LLM call.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_garden_resultsRead the sealed results for a GardenScript arena.No findings

    Why it is in this group

    • The name "get_garden_results" says "get": a word for reading.
    Description, as the server wrote it
    Read the sealed results for a GardenScript arena. Performs no simulation or LLM call.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_garden_arenasList GardenScript arenas.No findings

    Why it is in this group

    • The name "list_garden_arenas" says "list": a word for reading.
    Description, as the server wrote it
    List GardenScript arenas. This is local, read-only, and performs no LLM call.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • strategy_sealRead acknowledgment of an already human-confirmed seal.1 finding

    Why it is in this group

    • The description's first verb is "read": a word for reading.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...e arguments are ignored, never approval credentials."

      What this check looks for
    Description, as the server wrote it
    Read acknowledgment of an already human-confirmed seal. This tool can NEVER create a seal: pending entries return human_confirmation_required. Give the preparation's confirmation_url to the organizer instead. Legacy receipt/handle arguments are ignored, never approval credentials.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • validate_gardenscriptValidate and compile an untrusted GardenScript source with the local Rust compiler.No findings

    Why it is in this group

    • The name "validate_gardenscript" says "validate": a word for reading.
    Description, as the server wrote it
    Validate and compile an untrusted GardenScript source with the local Rust compiler. This performs no LLM call and stores nothing.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http gardenscript https://gardenarena.io/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__gardenscript__validate_gardenscript",
      "mcp__gardenscript__get_bamboo_scene",
      "mcp__gardenscript__bamboo_challenge_get",
      "mcp__gardenscript__coop_workshop_get",
      "mcp__gardenscript__farm_workshop_get",
      "mcp__gardenscript__farm_campaign_get",
      "mcp__gardenscript__farm_policy_get",
      "mcp__gardenscript__farm_policy_validate",
      "mcp__gardenscript__farm_compare_get",
      "mcp__gardenscript__farm_weather_search",
      "mcp__gardenscript__farm_weather_get",
      "mcp__gardenscript__bamboo_training_explain",
      "mcp__gardenscript__bamboo_training_artifact",
      "mcp__gardenscript__list_garden_arenas",
      "mcp__gardenscript__get_garden_arena",
      "mcp__gardenscript__get_garden_results",
      "mcp__gardenscript__strategy_seal"
    ],
    "ask": [
      "mcp__gardenscript__coop_workshop_run",
      "mcp__gardenscript__farm_workshop_run",
      "mcp__gardenscript__farm_next_event",
      "mcp__gardenscript__farm_autopilot_run",
      "mcp__gardenscript__farm_campaign_run",
      "mcp__gardenscript__farm_policy_run",
      "mcp__gardenscript__farm_compare_run",
      "mcp__gardenscript__bamboo_training_run",
      "mcp__gardenscript__submit_garden_strategy",
      "mcp__gardenscript__entry_create",
      "mcp__gardenscript__strategy_validate",
      "mcp__gardenscript__strategy_prepare_seal",
      "mcp__gardenscript__artifact_verify"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as gardenscript. Review it before you use it.