imho.run game recommendations
by imho.run · remote · no sign-in to list tools · v1.0.0 · published by run.imho
Steam games like any game you name, facts about a game, and finding a game from a description.
8 tools: 6 change things and 2 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things6Claude Code: ask: see these tools
- Only reads2Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http games https://imho.run/mcpTools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
8 tools
Changes things 6Claude Code: ask
game_factsPublic facts about one Steam game: year, developers, genres, top tags, price, Steam Deck status, review numbers, a review-mined summary and links.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Public facts about one Steam game: year, developers, genres, top tags, price, Steam Deck status, review numbers, a review-mined summary and links. For a few single-player games, `coop_via_mod` names a reviewed fan mod for co-op, with caveats. Use it to answer questions about a game the user names; for similar games use games_like or recommend. Games rated for adults only (explicit sexual content) are not covered; filtering is best effort.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: Game facts
games_likeSteam games similar to ONE game, ranked by imho.run's recommender (the list on that game's imho.run page), each with a one-line reason, price, Steam Deck status, year, review numbe…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Steam games similar to ONE game, ranked by imho.run's recommender (the list on that game's imho.run page), each with a one-line reason, price, Steam Deck status, year, review numbers, the imho.run page URL and the Steam URL. Use it for 'games like X', optionally only free, co-op or Steam Deck games. Use `recommend` instead when the user names 2-3 games, wants other filters (no PvP, no microtransactions, release years, niche) or describes what they want in words. Games rated for adults only (explicit sexual content) are not covered; filtering is best effort.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: Games like X
library_recsSteam games for a player, ranked against their own public Steam library (what they play most), the way imho.run's library mode does it; owned games are left out.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Steam games for a player, ranked against their own public Steam library (what they play most), the way imho.run's library mode does it; owned games are left out. Use it when the user gives their Steam profile and wants picks for their taste in general; for 'games like X' use games_like or recommend. Takes a SteamID64 or a steamcommunity.com/profiles/<SteamID64> link (not a custom /id/ name) and works only for public profiles imho.run already has; otherwise it returns one 'unavailable' error with a link the user can open to paste their profile. Each pick names the most-played game it is closest to (`similar_to`). Games rated for adults only (explicit sexual content) are not covered; filtering is best effort.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: Recommendations from a Steam library
new_releasesGames released on Steam in the last 30 days that players rate well (70%+ positive, 50+ positive reviews), or with `upcoming` the upcoming games that have a release date; optionally…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Games released on Steam in the last 30 days that players rate well (70%+ positive, 50+ positive reviews), or with `upcoming` the upcoming games that have a release date; optionally co-op only. The site's New releases list, with price, Steam Deck status, release date and links. Released games carry `release_kind`: `new`, or `ea_exit` for a game that just left Early Access (its 1.0; it was playable before), so call those 'out of Early Access', not new. `ea_exits`: include (default), exclude (brand-new games only) or only. Use it for 'what's new / coming out'; for what is gaining players now use trending. Games rated for adults only (explicit sexual content) are not covered; filtering is best effort.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: New Steam releases
recommendSteam games for someone who likes 1-3 given games, ranked by imho.run's recommender: the list imho.run's own tool shows for those games and filters.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Steam games for someone who likes 1-3 given games, ranked by imho.run's recommender: the list imho.run's own tool shows for those games and filters. Use it instead of games_like when the user names several games, wants filters beyond free / co-op / Steam Deck (no PvP, no microtransactions, no grind, not too hard, no Early Access, release years, more niche or more popular), or says what they want in words: pass that as `preferences` ('cozy base building, no combat'); the result says which Steam tags it was read as. When the user reacts to the picks, call it again with `liked` / `disliked`: liked games join the seeds, disliked ones never come back. Each pick has a one-line reason naming the seed it is closest to (`similar_to`), price, Steam Deck status, year, reviews, the imho.run URL and the Steam URL, plus `tool_url` (these games in imho.run's tool). Not for naming a game from a description (find_game_by_description) or facts about one game (game_facts). Games rated for adults only (explicit sexual content) are not covered; filtering is best effort.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: Recommend Steam games
trendingSteam games trending right now (imho.run/trending): `rising` = established games gaining reviews and players against their own recent baseline, `breakouts` = new games taking off.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Steam games trending right now (imho.run/trending): `rising` = established games gaining reviews and players against their own recent baseline, `breakouts` = new games taking off. Each has reviews this week, growth in %, price, Steam Deck status and links. Use it for 'what's hot / popular right now on Steam'; for new releases use new_releases, for games like a given game use games_like. Games rated for adults only (explicit sexual content) are not covered; filtering is best effort.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: Trending on Steam
Only reads 2Claude Code: allow
find_game_by_descriptionIdentify a game from a description of what the user remembers (plot, look, platform, era).Reads text others writeNo findings
Why it is in this group
- The name "find_game_by_description" says "find": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Identify a game from a description of what the user remembers (plot, look, platform, era). Returns ranked candidates with a reason each, a `confidence`, and `find_game_url`: imho.run's /find-game page with the description filled in (the user presses the button; nothing runs by itself). Pass what the user said about the platform, the release years and the camera as `platform`, `year_min` / `year_max` and `perspective` instead of leaving them only in the text. When `confidence` is not high or no result fits, give the user `find_game_url` so they can add details there. Slow (LLM) and rate-limited: use it only when the user does not know the title; for games similar to a known game use games_like or recommend. Games rated for adults only (explicit sexual content) are not covered; filtering is best effort.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- title: Find a game by description
search_gamesFind Steam games by title (typos, partial names, Russian names and acronyms are fine): appid, year, imho.run page and Steam link for each match.No findings
Why it is in this group
- The name "search_games" says "search": a word for reading.
Description, as the server wrote it Find Steam games by title (typos, partial names, Russian names and acronyms are fine): appid, year, imho.run page and Steam link for each match. Use it to check which game the user means or to get an appid; the other tools also accept names directly. For a game the user can only describe, use find_game_by_description. Games rated for adults only (explicit sexual content) are not covered; filtering is best effort.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: Search Steam games by title
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or outbound.
- Reads private data0
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write1
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out0
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Remote posture
What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.
Looked at Oct 22, 2026, 15:13 UTC, unchanged since Oct 22, 2026. No credentials were sent and no tool was called. What is looked at.
- Reachable
- yes
- HTTP status of an anonymous initialize
- 200
- tools/list served without credentials
- yes
- Tools that change things, listed without credentials
- 6
- Protocol version
- 2025-06-18
- WWW-Authenticate on 401
- not observed
- resource_metadata in WWW-Authenticate
- none
- RFC 9728 protected resource metadata
- none
- Authorization servers
- none
- Legacy HTTP+SSE transport
- no
- Dynamic client registration
- not observed
- Client ID metadata documents
- not observed
- WarnThe whole server
The endpoint served tools/list without credentials, and the list has 6 tools that change things (6 write). Whether a call also works without credentials was not tested: tools are never called.
What this check looks forMatched text
https://imho.run/mcp: tools/list returned 8 tools to an anonymous client, including games_like (write), recommend (write), library_recs (write), game_facts (write), trending (write) and 1 more
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http games https://imho.run/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__games__find_game_by_description",
"mcp__games__search_games"
],
"ask": [
"mcp__games__games_like",
"mcp__games__recommend",
"mcp__games__library_recs",
"mcp__games__game_facts",
"mcp__games__trending",
"mcp__games__new_releases"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as games. Review it before you use it.
Capability tags behind 1 rule
- mcp__games__find_game_by_description untrusted-input