Velven
by velvenai · remote · no sign-in to list tools · v1.0.1 · published by GitHub user velvenai
Publish browser games, worlds, tools and wonders built with AI to Velven's hosting, and manage them.
5 tools: 1 can delete or cancel things, 1 do something that can't be undone and 3 only read.
Scanned Oct 21, 2026
- Deletes or cancels1Claude Code: deny: see these tools
- Can't be undone1Claude Code: ask: see these tools
- Changes things0Claude Code: ask
- Only reads3Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http velven https://mcp.velven.ai/mcpTools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
5 tools
Deletes or cancels 1Claude Code: deny
rollbackMake an earlier version of a hosted space live again.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Make an earlier version of a hosted space live again. Only a version that was live before (rollback: true in versions) can be picked; it goes live at once. Needs sign-in.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
Can't be undone 1Claude Code: ask
publishPublish a browser game or any other page made to play or use on Velven's hosting, from one HTML page or a small set of files (3 MB in all).No findings
Why it is in this group
- The name "publish" says "publish": a word for a change that another call does not undo.
Description, as the server wrote it Publish a browser game or any other page made to play or use on Velven's hosting, from one HTML page or a small set of files (3 MB in all). Signed in: a private preview by default, or with prod: true the next live version, live on its Velven page within seconds. Not signed in: an unlisted page, live the same way, returned with a claim token that keeps it. A new space needs title and devices from the person. To update a space pass space (signed in) or claim (not signed in).
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
Only reads 3Claude Code: allow
my_spacesList the spaces of the signed-in Velven account: slug, title, status, whether Velven hosts it, and its page.No findings
Why it is in this group
- The description's first verb is "list": a word for reading.
Description, as the server wrote it List the spaces of the signed-in Velven account: slug, title, status, whether Velven hosts it, and its page. Needs sign-in; called without it, the app asks the person to sign in to Velven.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
search_docsSearch Velven's documentation: publishing and hosting, velven.json, the CLI, the SDK (sign-in, leaderboards, saves, achievements, rooms), claiming a page, the agent API and limits.No findings
Why it is in this group
- The name "search_docs" says "search": a word for reading.
Description, as the server wrote it Search Velven's documentation: publishing and hosting, velven.json, the CLI, the SDK (sign-in, leaderboards, saves, achievements, rooms), claiming a page, the agent API and limits. Returns the best matching sections with links.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
versionsList a hosted space's versions, newest first: number, status (uploading, preview, publishing, live, refused, unjudged, replaced), size, and whether rollback can pick it.No findings
Why it is in this group
- The description's first verb is "list": a word for reading.
Description, as the server wrote it List a hosted space's versions, newest first: number, status (uploading, preview, publishing, live, refused, unjudged, replaced), size, and whether rollback can pick it. Refused versions carry the reason. Needs sign-in.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.0.1. Values in angle brackets are yours to fill in.
claude mcp add --transport http velven https://mcp.velven.ai/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__velven__my_spaces",
"mcp__velven__versions",
"mcp__velven__search_docs"
],
"ask": [
"mcp__velven__publish"
],
"deny": [
"mcp__velven__rollback"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as velven. Review it before you use it.
