Nightbreak Forge
io.nightbreak/forgenightbreak.iostreamable-httpv1.0.0Scanned
Read-only knowledge of Nightbreak Minecraft plugins: wiki, source, config schemas and validation.
10 tools: 10 only read.
- Reads private data · 4
- Reads text others write · 0
- Can send data out · 0
- No findings
Anlyon alternative
Run the operations that matter as governed actions.
Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.
Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.
Import an OpenAPI spec →Tools
Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.
10 tools
Only reads 10Show 10 read-only tools
fetch_plugin_source_fileFetch a file from a mirrored plugin source repo.Reads private dataNo findings
Why it is in this group
- The name "fetch_plugin_source_file" says "fetch": a word for reading.
What it can reach
- private-dataThe name "fetch_plugin_source_file" says "fetch" and "file": it reads files.
- private-dataThe description's first sentence says "fetch" and "file": it reads files.
- private-dataThe input names a repo (input.repo), and the tool reads: it reads repositories.
Description, as the server wrote it Fetch a file from a mirrored plugin source repo. Optional line slicing for large files.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
fetch_wiki_pageFetch and extract readable content from a specific Nightbreak wiki page such as "EliteMobs/lua_getting_started".No findings
Why it is in this group
- The name "fetch_wiki_page" says "fetch": a word for reading.
Description, as the server wrote it Fetch and extract readable content from a specific Nightbreak wiki page such as "EliteMobs/lua_getting_started". Page names change as the wiki grows: take them from search_wiki results. A missing page returns `suggestions` with the closest existing pages.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_authoring_notesWhere each config type's files go and the plugin rules Forge's own assistant follows: per-type notes, the newer plugins' knowledge, boss movement and combat AI, and the Lua hook qu…Reads private dataNo findings
Why it is in this group
- The name "get_authoring_notes" says "get": a word for reading.
What it can reach
- private-dataThe name "get_authoring_notes" says "get" and "note": it reads notes.
- private-dataThe description's first sentence says "file": it reads files.
Description, as the server wrote it Where each config type's files go and the plugin rules Forge's own assistant follows: per-type notes, the newer plugins' knowledge, boss movement and combat AI, and the Lua hook quick reference. Read it once before writing files.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_config_schemaOne config type's fields as Forge edits and validates them: key, value type, default, whether it is required, description and allowed values.No findings
Why it is in this group
- The name "get_config_schema" says "get": a word for reading.
Description, as the server wrote it One config type's fields as Forge edits and validates them: key, value type, default, whether it is required, description and allowed values. Long option lists are shortened; pass field to get one field with all its options.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_local_lua_referenceRead the current Nightbreak Forge local Lua validator/editor reference.No findings
Why it is in this group
- The name "get_local_lua_reference" says "get": a word for reading.
Description, as the server wrote it Read the current Nightbreak Forge local Lua validator/editor reference. Use this to see which hooks, fields, methods, exact values, and handle helpers the editor currently knows about. **Pass `script_type` matching the file you are working on:** `"lua-power"` (default, EliteMobs boss powers — includes context handles, `em`, and exact values), `"fmm-script"` (FMM props), or `"npc-script"` (EliteMobs NPC scripts in `npc_scripts/`), or `"mind-behavior"` (EliteMobs Mind AI programs in `behaviors/`, selected by a boss's `behavior` field), `"fmm-pet-behavior"` (FreeMinecraftModels pet behavior modules in `pet_behaviors/`, id `fmm:pet/<file name>`; loaded from FMM 2.13.0), or `"em-enchantment-script"` / `"fmm-enchantment-script"` (the Lua effect of an EliteMobs or FreeMinecraftModels enchantment in `enchantments/`). Each returns that script type's own hooks and `context.*` namespaces — the boss reference does NOT contain NPC, FMM, Mind or enchantment APIs, so query the matching type.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_config_typesThe config file types Forge knows for the released plugins, with each type's plugin, label, server path, format and wiki page.Reads private dataNo findings
Why it is in this group
- The name "list_config_types" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "file": it reads files.
Description, as the server wrote it The config file types Forge knows for the released plugins, with each type's plugin, label, server path, format and wiki page. Pass a type to get_config_schema or as the path when validating.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
search_plugin_sourceSearch the EliteMobs, MagmaCore, BetterStructures, FreeMinecraftModels, CannonRTP and ResurrectionChest source code for a query.Reads private dataNo findings
Why it is in this group
- The name "search_plugin_source" says "search": a word for reading.
What it can reach
- private-dataThe input names a repo (input.repos), and the tool reads: it reads repositories.
Description, as the server wrote it Search the EliteMobs, MagmaCore, BetterStructures, FreeMinecraftModels, CannonRTP and ResurrectionChest source code for a query. By default searches every mirrored repo by file content (grep). MagmaCore contains shared core functionality (Lua engine, base entity tables, scripting helpers) used by every plugin — always check it for hooks, helpers, or context methods that feel like they should be common across plugins. FreeMinecraftModels (freeminecraftmodels) has its own LuaItemTable / LuaPropTable and prop-specific hooks. Use this BEFORE answering plugin-specific questions or generating Lua/YAML files.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
search_wikiSearch the Nightbreak wiki for relevant pages and snippets.No findings
Why it is in this group
- The name "search_wiki" says "search": a word for reading.
Description, as the server wrote it Search the Nightbreak wiki for relevant pages and snippets. Matching is by word and case-insensitive, ranked by title, page name and body. Each result has a `page` value to pass to fetch_wiki_page. Use for high-level docs, examples, and tutorials — not for symbol verification (use search_plugin_source for that).
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
validate_config_filesValidate plugin config files (YAML and Lua) with Forge's validator: required fields, allowed values, plugin rules, Lua analysis, and references between the files you send (a boss's…No findings
Why it is in this group
- The name "validate_config_files" says "validate": a word for reading.
Description, as the server wrote it Validate plugin config files (YAML and Lua) with Forge's validator: required fields, allowed values, plugin rules, Lua analysis, and references between the files you send (a boss's powers, a dungeon's bosses). Send each file with its server path, such as "plugins/EliteMobs/custombosses/frost_king.yml", so Forge can tell its type. A reference to a file you did not send is reported as not found in the workspace, which here means this call's files. Up to 50 files per call. Nothing is stored.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
validate_lua_power_draftValidate a draft Lua script against the local Nightbreak Forge Lua validator.No findings
Why it is in this group
- The name "validate_lua_power_draft" says "validate": a word for reading.
Description, as the server wrote it Validate a draft Lua script against the local Nightbreak Forge Lua validator. Use this before finalizing generated Lua files to catch unknown helpers, invalid fields, or malformed file structure. **IMPORTANT: pass `script_type` matching the file you are generating.** Use `"lua-power"` (default) for EliteMobs custom-boss Lua powers (files in `powers/`), `"fmm-script"` for FreeMinecraftModels prop scripts (files in `scripts/`), `"npc-script"` for EliteMobs NPC scripts (files in `npc_scripts/`), `"mind-behavior"` for Mind programs and modules (files in `behaviors/`), `"fmm-pet-behavior"` (FreeMinecraftModels pet behavior modules in `pet_behaviors/`, id `fmm:pet/<file name>`; loaded from FMM 2.13.0), or `"em-enchantment-script"` / `"fmm-enchantment-script"` for EliteMobs or FreeMinecraftModels enchantment scripts (files in `enchantments/`). They have different valid hook names and context namespaces — passing the wrong type produces false-positive errors (e.g. `on_right_click` is valid for `fmm-script`, `on_npc_interact` for `npc-script`, but both are rejected for `lua-power`).
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
No private-data, untrusted-input, outbound path in this server alone: no tool is tagged untrusted-input or outbound.
- Reads private data4
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write0
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out0
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Findings
Matches of fixed checks, with the text they matched.
No check matched anything in these tool definitions. That is not a safety guarantee.
History
Changes to its tool definitions and to its remote endpoint, newest first.
No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http forge https://forge.nightbreak.io/mcpclaude mcp add --transport http forge https://forge.nightbreak.io/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__forge__search_plugin_source",
"mcp__forge__fetch_plugin_source_file",
"mcp__forge__get_local_lua_reference",
"mcp__forge__validate_lua_power_draft",
"mcp__forge__search_wiki",
"mcp__forge__fetch_wiki_page",
"mcp__forge__get_authoring_notes",
"mcp__forge__list_config_types",
"mcp__forge__get_config_schema",
"mcp__forge__validate_config_files"
],
"ask": [],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as forge. Review it before you use it.
Capability tags behind 4 rules
- mcp__forge__search_plugin_source private-data
- mcp__forge__fetch_plugin_source_file private-data
- mcp__forge__get_authoring_notes private-data
- mcp__forge__list_config_types private-data
Pin
Keep the decision: fail CI when the tools change, follow every change, or show a badge.
Pin in CI
Fail a build when the tools you reviewed are not the tools the server serves today.
curl -s "https://anlyon.dev/api/v1/servers/io.nightbreak/forge/verify?hash=06f7b52b80213b11dc89903b75939f35f56aee059a7b4312181917aad4e05875" | jq -e '.changed == false'Pinned hash 06f7b52b8021, from Oct 29, 2026, 22:19 UTC.
Watch
Get told when its tools change: a new tool, a new description, a new class.
https://anlyon.dev/servers/io.nightbreak/forge/changes.xmlAn Atom feed. Works in any feed reader or Slack's RSS app.
Badge
[](https://anlyon.dev/servers/io.nightbreak/forge)Source: MCP Registry. Synced Oct 29, 2026, 23:17 UTC.