steamwebapi

by sellrock-de · remote · no sign-in to list tools · v0.1.1 · published by GitHub user sellrock-de

Live Steam Market API docs, schemas, products, games, markets and endpoint search.

Changes · 1

Compare Registry entry

11 tools: 1 change things and 10 only read.

Scanned Oct 21, 2026

Deletes or cancels0Claude Code: deny
Can't be undone0Claude Code: ask
Changes things1Claude Code: ask: see these tools
Only reads10Claude Code: allow: see these tools

3 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http steamwebapi https://mcp.steamwebapi.com/mcp

Findings

Matches of fixed checks, with the text they matched.

2 warn1 info

Warncall_readonly_endpoint
The input schema at properties.parameters.additionalProperties.anyOf[1].items.$ref contains a 51-character base64 string.
Matched text
inputSchema.properties.parameters.additionalProperties.anyOf[1].items.$ref: "#/properties/parameters/additionalProperties/anyOf/0"
What this check looks for
Warncall_readonly_endpoint
The server marks "call_readonly_endpoint" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The name "call_readonly_endpoint" says "call": a word for a change.
What this check looks for
Infoget_integration_skill
The description mentions "credentials".
Matched text
description: "...API SKILL.md for integration workflows, credentials, prices, item variants and CS2 release..."
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

11 tools

Changes things 1Creates or changes something that can be changed back.Claude Code: ask

call_readonly_endpointExecutes a documented steamwebapi GET endpoint with the caller API key from the MCP Authorization or X-Api-Key header.2 findings
Why it is in this group
- The name "call_readonly_endpoint" says "call": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The input schema at properties.parameters.additionalProperties.anyOf[1].items.$ref contains a 51-character base64 string.
  Matched text
  inputSchema.properties.parameters.additionalProperties.anyOf[1].items.$ref: "#/properties/parameters/additionalProperties/anyOf/0"
  What this check looks for
- Warn
  The server marks "call_readonly_endpoint" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The name "call_readonly_endpoint" says "call": a word for a change.
  What this check looks for
Description, as the server wrote it
Executes a documented steamwebapi GET endpoint with the caller API key from the MCP Authorization or X-Api-Key header. Refuses POST/PUT/PATCH/DELETE plus Proxy, Steam Guard and Tradeoffer endpoints.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true

Only reads 10Looks things up and changes nothing.Claude Code: allow

get_conceptReturns a detailed explanation for a Steam / steamwebapi concept (identifiers, CS2 mechanics, pricing fields, inventory flags).No findings
Why it is in this group
- The name "get_concept" says "get": a word for reading.
Description, as the server wrote it
Returns a detailed explanation for a Steam / steamwebapi concept (identifiers, CS2 mechanics, pricing fields, inventory flags). Built from curated domain knowledge specific to this platform.
get_endpointReturns the full OpenAPI operation object for a given path: parameters, request body, all response schemas, examples, and tags.No findings
Why it is in this group
- The name "get_endpoint" says "get": a word for reading.
Description, as the server wrote it
Returns the full OpenAPI operation object for a given path: parameters, request body, all response schemas, examples, and tags. Use after search_endpoints to drill into a specific endpoint.
get_integration_skillRead the reusable SteamWebAPI SKILL.md for integration workflows, credentials, prices, item variants and CS2 release discovery.1 finding
Why it is in this group
- The name "get_integration_skill" says "get": a word for reading.
Findings
- Info
  The description mentions "credentials".
  Matched text
  description: "...API SKILL.md for integration workflows, credentials, prices, item variants and CS2 release..."
  What this check looks for
Description, as the server wrote it
Read the reusable SteamWebAPI SKILL.md for integration workflows, credentials, prices, item variants and CS2 release discovery. Useful when the client does not expose MCP resources or initialization instructions.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_pricingReturns public steamwebapi pricing plans, per-endpoint rate limits, API-key location, quota guidance and a recommended plan for the requested use case.No findings
Why it is in this group
- The name "get_pricing" says "get": a word for reading.
Description, as the server wrote it
Returns public steamwebapi pricing plans, per-endpoint rate limits, API-key location, quota guidance and a recommended plan for the requested use case. Does not perform checkout or account actions.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
list_conceptsLists every curated concept exposed by get_concept, optionally filtered by category.No findings
Why it is in this group
- The name "list_concepts" says "list": a word for reading.
Description, as the server wrote it
Lists every curated concept exposed by get_concept, optionally filtered by category. Use to discover what domain explanations are available.
list_endpointsLists all steamwebapi.com endpoints (path + method + summary), optionally filtered by tag.No findings
Why it is in this group
- The name "list_endpoints" says "list": a word for reading.
Description, as the server wrote it
Lists all steamwebapi.com endpoints (path + method + summary), optionally filtered by tag. Useful for quickly enumerating what is available.
list_gamesLists every game supported by steamwebapi.com with its slug, name, Steam appId, and the value to pass as `game=` in API queries.No findings
Why it is in this group
- The name "list_games" says "list": a word for reading.
Description, as the server wrote it
Lists every game supported by steamwebapi.com with its slug, name, Steam appId, and the value to pass as `game=` in API queries.
list_marketsLists every third-party marketplace covered by the steamwebapi.com market price endpoints, with their domain and the games they cover.No findings
Why it is in this group
- The name "list_markets" says "list": a word for reading.
Description, as the server wrote it
Lists every third-party marketplace covered by the steamwebapi.com market price endpoints, with their domain and the games they cover.
list_productsLists steamwebapi.com product packages (Price API, Inventory API, Float API, ...) with the endpoints each one bundles.No findings
Why it is in this group
- The name "list_products" says "list": a word for reading.
Description, as the server wrote it
Lists steamwebapi.com product packages (Price API, Inventory API, Float API, ...) with the endpoints each one bundles. Use get_pricing for paid plans, request quotas and upgrade guidance.
search_endpointsFuzzy text search across all steamwebapi.com OpenAPI endpoints and Steam domain concepts (assetid, doppler phase, market_hash_name, etc.).No findings
Why it is in this group
- The name "search_endpoints" says "search": a word for reading.
Description, as the server wrote it
Fuzzy text search across all steamwebapi.com OpenAPI endpoints and Steam domain concepts (assetid, doppler phase, market_hash_name, etc.). Returns ranked hits with path, method, tag and summary.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.1.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http steamwebapi https://mcp.steamwebapi.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__steamwebapi__get_integration_skill",
      "mcp__steamwebapi__search_endpoints",
      "mcp__steamwebapi__get_endpoint",
      "mcp__steamwebapi__list_endpoints",
      "mcp__steamwebapi__list_games",
      "mcp__steamwebapi__list_markets",
      "mcp__steamwebapi__list_products",
      "mcp__steamwebapi__get_concept",
      "mcp__steamwebapi__list_concepts",
      "mcp__steamwebapi__get_pricing"
    ],
    "ask": [
      "mcp__steamwebapi__call_readonly_endpoint"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as steamwebapi. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.sellrock-de/steamwebapi/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

1 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry. Synced Oct 21, 2026, 18:49 UTC.

For agents: Markdown · JSON · report this listing