GardenArena GardenScript
by gardenarena.io · remote · no sign-in to list tools · v1.0.0 · published by io.gardenarena
Simulate farms, validate GardenScript and compare policies with Rust. No outbound LLM calls.
30 tools: 13 change things and 17 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things13Claude Code: ask: see these tools
- Only reads17Claude Code: allow: see these tools
4 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http gardenscript https://gardenarena.io/mcpFindings
Matches of fixed checks, with the text they matched.
- Warnfarm_compare_run
The server marks "farm_compare_run" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "farm_compare_run" says "compare": a word for reading.
The server marks "strategy_validate" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "strategy_validate" says "validate": a word for reading.
The description mentions "credential".
What this check looks forMatched text
description: "...e GardenArena run_token, not a provider credential."
- Infostrategy_seal
The description mentions "credentials".
What this check looks forMatched text
description: "...e arguments are ignored, never approval credentials."
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
30 tools
Changes things 13Claude Code: ask
artifact_verifyVerify a SHA-256 digest against published contracts, scenarios and sealed entries.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Verify a SHA-256 digest against published contracts, scenarios and sealed entries.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
bamboo_training_runConsume one bounded private training run against Dry Patience after user agreement.No findings
Why it is in this group
- The name "bamboo_training_run" says "run": a word for a change.
Description, as the server wrote it Consume one bounded private training run against Dry Patience after user agreement. GardenScript 0.5 bamboo only, fixed public scenario and budgets. Shared web/MCP quotas; temporary local storage, no official submission or publication, no LLM call. Keep run_token private.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
coop_workshop_runExecute one bounded Rust chicken-workshop journal after human agreement.No findings
Why it is in this group
- The name "coop_workshop_run" says "run": a word for a change.
Description, as the server wrote it Execute one bounded Rust chicken-workshop journal after human agreement. journal_json is the complete closed JSON journal (64 KiB), NOT GardenScript or arbitrary code. Returns reproducible state, event explanations and an export for explicit human import in the 3D game. No persistent game, official write, provider API or automatic publication. Respect retry delays and the agreed call budget.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
entry_createCreate a Reality Trial 001 policy entry.No findings
Why it is in this group
- The name "entry_create" says "create": a word for a change.
Description, as the server wrote it Create a Reality Trial 001 policy entry. Returns an explicit entry_id. Returns a private entry_nonce once; keep it for all mutations. An idempotent retry requires that nonce and never returns it again. Identity assurance can only be anonymous or declared. Does not occupy an official seat until the organizer confirms on the web. Write-gated.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
farm_autopilot_runRun a bounded pantry-oriented farmer tour after user agreement: 1–7 simulated days, 0–1000 game credits, at most 64 added ordinary commands.No findings
Why it is in this group
- The name "farm_autopilot_run" says "run": a word for a change.
Description, as the server wrote it Run a bounded pantry-oriented farmer tour after user agreement: 1–7 simulated days, 0–1000 game credits, at most 64 added ordinary commands. Deterministic Rust rules, not a live LLM. Gathers food, handles care and irrigation, cuts mature bamboo for supports, composts and cooks available ingredients. No sales, new animals, publication or background daemon. Returns the exact replayable journal and per-action reasons/costs; a human chooses whether to import.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
farm_campaign_runTry the fixed J95 to J105 farm chapter after agreeing a finite call budget.No findings
Why it is in this group
- The name "farm_campaign_run" says "run": a word for a change.
Description, as the server wrote it Try the fixed J95 to J105 farm chapter after agreeing a finite call budget. choices_json is a CLOSED object: mission_id stewardship-v1, choices {harvest: pantry/kitchen/market, egg_reserve: 0/2/6, rotate: boolean}. At most ten days, 100 added ordinary commands; shared workshop quotas. Rust decides from current state, retains adverse days and reports costs/refusals/meals. No arbitrary journal, GardenScript, publication, persistent save, LLM call or background search. Return the complete export; human chooses adoption. Local meals do not imply full autonomy.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
farm_compare_runCompare two GardenScript farm.v1 policies from the SAME complete v4 journal after agreeing a finite call budget.1 finding
Why it is in this group
- The name "farm_compare_run" says "compare": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "farm_compare_run" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "farm_compare_run" says "compare": a word for reading.
Description, as the server wrote it Compare two GardenScript farm.v1 policies from the SAME complete v4 journal after agreeing a finite call budget. Two trials, 1–7 days and identical 0–1000 game-credit ceilings. Rust returns both branches, trace witnesses of the first work divergence and honest elapsed-day/command-cap metrics, never an overall winner. Charges two shared workshop quota units. No game mutation, persistence, publication, LLM calls or unattended search. Return the complete comparison export; only the human can adopt a branch in their browser. No legacy future-veto helper, v5 weather or official ranking.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
farm_next_eventAdvance a farm journal to the next detected important moment, checked daily for at most max_days (1–21).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Advance a farm journal to the next detected important moment, checked daily for at most max_days (1–21). Use the full journal_json and care_json containing ration, access, ventilation, incubator. Consumes one agreed calculation call. Returns the accepted ordinary journal, unchanged Rust result, season guide and evidence-linked stop reason. No automatic care, publication or persistent write; human chooses whether to import.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
farm_policy_runRun a GardenScript 0.6 farm.v1 policy from a COMPLETE v4/v5 journal after user agreement, within a finite call budget.No findings
Why it is in this group
- The name "farm_policy_run" says "run": a word for a change.
Description, as the server wrote it Run a GardenScript 0.6 farm.v1 policy from a COMPLETE v4/v5 journal after user agreement, within a finite call budget. Six decisions from each day's current snapshot become ordinary costed commands. No future weather archive access or cancellation of bad days: shortages pause AFTER commitment. Returns export, exact source, rule/sensor witnesses, accepted/rejected commands and costs. Not an official competition or the legacy precognitive safety helper. No LLM calls, publication, persistent game or daemon; human explicitly imports the result.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
farm_workshop_runExecute one bounded whole-farm Rust journal after human agreement, within the agreed call budget.No findings
Why it is in this group
- The name "farm_workshop_run" says "run": a word for a change.
Description, as the server wrote it Execute one bounded whole-farm Rust journal after human agreement, within the agreed call budget. journal_json is complete closed JSON, max 64 KiB, not GardenScript. Returns game state, evidence-linked farmer tasks and an export for explicit human import. No autonomous daemon, publication, LLM call or persistent game.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
strategy_prepare_sealPrepare a review and return its confirmation_url for the human organizer.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Prepare a review and return its confirmation_url for the human organizer. Requires the private entry_nonce. Does not grant authority to seal. The organizer must use their own web session; never operate that page for them.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
strategy_validateCompile GardenScript for an existing entry without running the official scenario.1 finding
Why it is in this group
- The name "strategy_validate" says "validate": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "strategy_validate" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "strategy_validate" says "validate": a word for reading.
Description, as the server wrote it Compile GardenScript for an existing entry without running the official scenario. Requires its private entry_nonce. Consumes that entry's validation budget.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
submit_garden_strategySubmit externally generated GardenScript to an arena.No findings
Why it is in this group
- The name "submit_garden_strategy" says "submit": a word for a change.
Description, as the server wrote it Submit externally generated GardenScript to an arena. The source is validated again by the local Rust compiler. Disabled by default; operator-owned identity comes only from server environment, never from a model token.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
Only reads 17Claude Code: allow
bamboo_challenge_getRead the fixed 365-day bamboo training mission, exact Dry Patience reference, scenario hash, budgets and quotas.No findings
Why it is in this group
- The name "bamboo_challenge_get" says "get": a word for reading.
Description, as the server wrote it Read the fixed 365-day bamboo training mission, exact Dry Patience reference, scenario hash, budgets and quotas. No run or publication. Read gardenarena://gardenscript/v0.5 for the full language.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
bamboo_training_artifactRead the exact reproducible request and expected result hashes for a private training run.No findings
Why it is in this group
- The description's first verb is "read": a word for reading.
Description, as the server wrote it Read the exact reproducible request and expected result hashes for a private training run. Includes strategy sources: do not publish automatically. Full trace JSON downloadable through the documented POST export. No run or official ledger write.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
bamboo_training_explainRead a private training comparison and evidence-linked moments.1 finding
Why it is in this group
- The name "bamboo_training_explain" says "explain": a word for reading.
Findings
- Info
The description mentions "credential".
What this check looks forMatched text
description: "...e GardenArena run_token, not a provider credential."
Description, as the server wrote it Read a private training comparison and evidence-linked moments. Optional day 1-365 returns both actual Rust decision traces, not a rerun. Requires the private GardenArena run_token, not a provider credential.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
coop_workshop_getRead the playable chicken workshop mission: breeds, breeding/incubation, production balance, non-lethal predators, closed JSON commands, exact scenario and quotas.No findings
Why it is in this group
- The name "coop_workshop_get" says "get": a word for reading.
Description, as the server wrote it Read the playable chicken workshop mission: breeds, breeding/incubation, production balance, non-lethal predators, closed JSON commands, exact scenario and quotas. No simulation or database write. Distinct from GardenScript/official competitions.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
farm_campaign_getRead chapter 2 stewardship-v1: exact teaching farm J95, three management choices, ten-day routine, success criteria and complete original journal.No findings
Why it is in this group
- The name "farm_campaign_get" says "get": a word for reading.
Description, as the server wrote it Read chapter 2 stewardship-v1: exact teaching farm J95, three management choices, ten-day routine, success criteria and complete original journal. No calculation or publication; not the player's private farm. JSON plan, NOT GardenScript.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
farm_compare_getRead the bounded two-policy farm comparison contract and its fixed week-after-v1 teaching mission (exact J96 journal, two sources, seven days, 540 credits).No findings
Why it is in this group
- The name "farm_compare_get" says "compare": a word for reading.
Description, as the server wrote it Read the bounded two-policy farm comparison contract and its fixed week-after-v1 teaching mission (exact J96 journal, two sources, seven days, 540 credits). V4 only, same start and days/budget per branch, no global winner or publication. Read the farm policy contract for syntax. No paired trial or persistent write.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
farm_policy_getRead GardenScript 0.6 farm.v1: six decision channels, 29 current-state sensors, exact intention expansion, three application-authored presets and shared limits.No findings
Why it is in this group
- The name "farm_policy_get" says "get": a word for reading.
Description, as the server wrote it Read GardenScript 0.6 farm.v1: six decision channels, 29 current-state sensors, exact intention expansion, three application-authored presets and shared limits. No run, persistent write or LLM call. Read before writing a farm policy.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
farm_policy_validateValidate a closed GardenScript 0.6 farm.v1 source, maximum 16 KiB.No findings
Why it is in this group
- The name "farm_policy_validate" says "validate": a word for reading.
Description, as the server wrote it Validate a closed GardenScript 0.6 farm.v1 source, maximum 16 KiB. Local Rust only; line diagnostics and exact source/canonical hashes. Shared workshop quota; no run, persistence or publication.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
farm_weather_getRead cached real MET Norway forecasts and a continuous Météo-France station archive for a chosen French commune INSEE code.No findings
Why it is in this group
- The name "farm_weather_get" says "get": a word for reading.
Description, as the server wrote it Read cached real MET Norway forecasts and a continuous Météo-France station archive for a chosen French commune INSEE code. Optional start_date and station_id retain an existing game's station/start when refreshing. Returns a frozen snapshot, station distance, dates and licences. Forecasts are not observations and never fill the tank. No game mutation, precise user location, paid API, LLM call or publication. Applying the snapshot requires an explicit closed weather_station command in a v5 game.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
farm_weather_searchFind French metropolitan communes by name or postcode for opt-in farm weather.No findings
Why it is in this group
- The name "farm_weather_search" says "search": a word for reading.
Description, as the server wrote it Find French metropolitan communes by name or postcode for opt-in farm weather. Public administrative data, cached and bounded. No IP geolocation, precise address, game mutation or LLM call.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
farm_workshop_getRead the playable whole-farm mission, shared resources, closed JSON actions and farmer task contract.No findings
Why it is in this group
- The name "farm_workshop_get" says "get": a word for reading.
Description, as the server wrote it Read the playable whole-farm mission, shared resources, closed JSON actions and farmer task contract. Educational simulation, no run or official write.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_bamboo_sceneRead one day (1-365, default UTC day of year) of the published Rust bamboo replay used by the 3D scene.No findings
Why it is in this group
- The name "get_bamboo_scene" says "get": a word for reading.
Description, as the server wrote it Read one day (1-365, default UTC day of year) of the published Rust bamboo replay used by the 3D scene. Includes sensors, entrant and SHA-256 provenance. Synthetic exhibition only; not an observation, strategy evaluation or hydraulic forecast. Koi are decorative and unranked. No database access, simulation launch, external network or LLM call.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_garden_arenaRead one arena's ruleset, scenario, capabilities, limits and status by slug.No findings
Why it is in this group
- The name "get_garden_arena" says "get": a word for reading.
Description, as the server wrote it Read one arena's ruleset, scenario, capabilities, limits and status by slug. This performs no LLM call.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_garden_resultsRead the sealed results for a GardenScript arena.No findings
Why it is in this group
- The name "get_garden_results" says "get": a word for reading.
Description, as the server wrote it Read the sealed results for a GardenScript arena. Performs no simulation or LLM call.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_garden_arenasList GardenScript arenas.No findings
Why it is in this group
- The name "list_garden_arenas" says "list": a word for reading.
Description, as the server wrote it List GardenScript arenas. This is local, read-only, and performs no LLM call.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
strategy_sealRead acknowledgment of an already human-confirmed seal.1 finding
Why it is in this group
- The description's first verb is "read": a word for reading.
Findings
- Info
The description mentions "credentials".
What this check looks forMatched text
description: "...e arguments are ignored, never approval credentials."
Description, as the server wrote it Read acknowledgment of an already human-confirmed seal. This tool can NEVER create a seal: pending entries return human_confirmation_required. Give the preparation's confirmation_url to the organizer instead. Legacy receipt/handle arguments are ignored, never approval credentials.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
validate_gardenscriptValidate and compile an untrusted GardenScript source with the local Rust compiler.No findings
Why it is in this group
- The name "validate_gardenscript" says "validate": a word for reading.
Description, as the server wrote it Validate and compile an untrusted GardenScript source with the local Rust compiler. This performs no LLM call and stores nothing.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http gardenscript https://gardenarena.io/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__gardenscript__validate_gardenscript",
"mcp__gardenscript__get_bamboo_scene",
"mcp__gardenscript__bamboo_challenge_get",
"mcp__gardenscript__coop_workshop_get",
"mcp__gardenscript__farm_workshop_get",
"mcp__gardenscript__farm_campaign_get",
"mcp__gardenscript__farm_policy_get",
"mcp__gardenscript__farm_policy_validate",
"mcp__gardenscript__farm_compare_get",
"mcp__gardenscript__farm_weather_search",
"mcp__gardenscript__farm_weather_get",
"mcp__gardenscript__bamboo_training_explain",
"mcp__gardenscript__bamboo_training_artifact",
"mcp__gardenscript__list_garden_arenas",
"mcp__gardenscript__get_garden_arena",
"mcp__gardenscript__get_garden_results",
"mcp__gardenscript__strategy_seal"
],
"ask": [
"mcp__gardenscript__coop_workshop_run",
"mcp__gardenscript__farm_workshop_run",
"mcp__gardenscript__farm_next_event",
"mcp__gardenscript__farm_autopilot_run",
"mcp__gardenscript__farm_campaign_run",
"mcp__gardenscript__farm_policy_run",
"mcp__gardenscript__farm_compare_run",
"mcp__gardenscript__bamboo_training_run",
"mcp__gardenscript__submit_garden_strategy",
"mcp__gardenscript__entry_create",
"mcp__gardenscript__strategy_validate",
"mcp__gardenscript__strategy_prepare_seal",
"mcp__gardenscript__artifact_verify"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as gardenscript. Review it before you use it.