A
Arcade MCP Server
arcade-mcp-server
Model Context Protocol (MCP) server framework for Arcade.dev
No known CVEs
No license
Maintenance unknown
No commit data
Works with most clients
Transport: stdio
0 tools
Grade F
Arcade MCP Server is an MCP server that model Context Protocol (MCP) server framework for Arcade.dev. Its tool list has not been published yet over stdio, requires no API key, and scores 30/100 on MCPpedia's security, maintenance and efficiency rubric.
Step 1
Install in your client
Config is the same across clients - only the file and path differ.
CD
Supported in Claude Desktopstdio · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"arcade-mcp-server": {
"command": "uvx",
"args": [
"arcade-mcp-server"
]
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/arcade-mcp-server)
Read me
What Arcade Mcp Server does
Model Context Protocol (MCP) server framework for Arcade.dev
Test This Server
Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.
uvx 'arcade-mcp-server' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Scored, not listed
Why this score
Five weighted categories - click any category to see the underlying evidence.
Score breakdown
30/100across 5 weighted dimensions
0255075100
19
10
−70
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.dev1 fixed
CVE-2025-66454medium · fixedCVSS 6.5
arcade-mcp-server Has Default Hardcoded Worker Secret That Allows Full Unauthorized Access to All HTTP MCP Worker Endpoints
### Summary The arcade-mcp HTTP server uses a hardcoded default worker secret ("dev") that is never validated or overridden during normal server startup. As a result, any unauthenticated attacker who knows this default key can forge valid JWTs and fully bypass the FastAPI authentication layer. This grants remote access to all worker endpoints—including tool enumeration and tool invocation—without credentials. Anyone following the official quick-start guide is vulnerable unless they manually ov
Help improve this page
This server is missing a description. Tools and install config are also missing. If you've used it, help the community.
Add informationCommunity
Reviews
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is Arcade Mcp Server safe to use?
- Arcade Mcp Server has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment.
- How do I install Arcade Mcp Server?
- Install Arcade Mcp Server via pip: `pip install arcade-mcp-server`. Then configure it in your MCP client.
- What AI clients work with Arcade Mcp Server?
- Arcade Mcp Server is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Related
Similar servers
Others in developer-tools / ai-ml
XcodeBuildMCP97XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.
6.5k 2
X
XcodeBuildMCP97XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.
6.5k 1
Supabase MCP Server96Manage Supabase projects — databases, auth, storage, and edge functions
2.9k 4
Modelcontextprotocol96The official MCP server implementation for the Perplexity API Platform
2.6k 4
MCP Security Weekly
Get CVE alerts and security updates for Arcade Mcp Server and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.