Is Sts2 Modding Mcp safe to use?

Sts2 Modding Mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install Sts2 Modding Mcp?

Sts2 Modding Mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with Sts2 Modding Mcp?

Sts2 Modding Mcp is compatible with Claude Desktop, Cursor, Claude Code, and most MCP clients that support stdio transport. It uses stdio and sse and http transport.

Is Sts2 Modding Mcp actively maintained?

Sts2 Modding Mcp is actively maintained — last commit was 14 days ago. It has 7 GitHub stars.

Sts2 Modding Mcp

MCP server for Slay the Spire 2 modding — 153 tools for game data querying, mod code generation, building, and deployment

ActiveNot tested

Developer Tools DevOps Entertainment

★ 7GitHub

36DNo CVEsactive

Quick Install

{
  "mcpServers": {
    "sts2-modding": {
      "args": [
        "/path/to/sts2-modding-mcp/run.py"
      ],
      "command": "/path/to/sts2-modding-mcp/venv/bin/python"
    }
  }
}

Setup guide

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/sts2-modding-mcp)](https://mcppedia.org/s/sts2-modding-mcp)

Should you use this server?

A Model Context Protocol server for Slay the Spire 2 modding. Connects to any MCP-compatible AI assistant (Claude Code, Claude Desktop, Cursor, Windsurf, etc.) and provides 151 tools for reverse-engineering the game, generating mod code, building/deploying, live-inspecting the running Godot engine, and autonomously playtesting mods.

✓

Is it safe?

No package registry to scan.

No authentication — any process on your machine can connect.

License not specified.

✓

Is it maintained?

Last commit 14 days ago. 7 stars.

Will it work with my client?

Transport: stdio, sse, http. Works with Claude Desktop, Cursor, Claude Code, and most MCP clients.

README

STS2 Modding MCP

A Model Context Protocol server for Slay the Spire 2 modding. Connects to any MCP-compatible AI assistant (Claude Code, Claude Desktop, Cursor, Windsurf, etc.) and provides 151 tools for reverse-engineering the game, generating mod code, building/deploying, live-inspecting the running Godot engine, and autonomously playtesting mods.

Reverse engineering — decompiles C# assemblies with Roslyn syntax trees, indexes 3,048+ entities and 144 hooks, extracts 15,000+ Godot assets
Code generation — production-ready C# for 30+ entity types, Harmony patches, Godot UI, VFX, network messages, and complete mod projects
Code intelligence — hook recommendations from natural language, patch suggestions, call graphs, API compatibility checks
Build and deploy — builds mods, packages Godot PCK files, deploys to the game, validates assets and localization, watches for changes
Live scene inspection — browses the running Godot scene tree, reads/writes node properties, toggles visibility, animates with Tweens
Automated playtesting — starts seeded runs, plays cards, navigates every screen, runs at 20x speed, captures screenshots, sets breakpoints
29 built-in guides — hooks, Harmony, localization, multiplayer, Godot UI, IL transpilers, combat, save files, and more

Your mileage will vary depending on which LLM you use. This project is a fun experiment — please ping me if you have issues, want to suggest a feature, or find a bug.

Prerequisites

Python 3.11+ — check with python --version
.NET SDK 9.0 — for building mods, the Roslyn code analyzer, and decompilation
.NET 8.0 Runtime — required by ilspycmd (see note below)
ilspycmd — dotnet tool install -g ilspycmd (for C# decompilation)
GDRE Tools — for Godot asset extraction (optional, setup wizard can download it)
Slay the Spire 2 — the game itself

.NET version note: ilspycmd targets .NET 8.0. If you only have .NET 9.0+ installed, decompilation will fail with a runtime error. The fix is to also install the .NET 8.0 runtime alongside your .NET 9.0 SDK. Both can coexist without issues.

Quick Start

git clone https://github.com/elliotttate/sts2-modding-mcp.git
cd sts2-modding-mcp
python -m venv venv

# Activate the virtual environment:
source venv/bin/activate         # macOS / Linux
# source venv/Scripts/activate   # Windows (Git Bash)
# venv\Scripts\activate.bat      # Windows cmd
# venv\Scripts\Activate.ps1      # Windows PowerShell

pip install .
python -m sts2mcp.setup          # auto-finds game, installs tools, decompiles

The setup wizard automatically finds your Steam install, installs ilspycmd if needed, decompiles the game source, optionally downloads GDRE Tools for asset extraction, and builds the Roslyn code analyzer. In CI or non-interactive shells, use python -m sts2mcp.setup -y to auto-accept all prompts.

Connect to an AI Assistant

The MCP server connects to any AI tool that supports the Model Context Protocol. Point the config at the venv's Python so dependencies are always available.

Replace /path/to/sts2-modding-mcp with the actual path where you cloned the repo.

Claude Code (CLI):

# macOS / Linux:
claude mcp add sts2-modding /path/to/sts2-modding-mcp/venv/bin/python -- /path/to/sts2-modding-mcp/run.py

# Windows:
claude mcp add sts2-modding C:\path\to\sts2-modding-mcp\venv\Scripts\python.exe -- C:\path\to\sts2-modding-mcp\run.py

Claude Desktop — edit your config file (%APPDATA%\Claude\claude_desktop_config.json on Windows, `~/Library/Application S

... View full README on GitHub

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

Score Breakdown

MCPpedia Score

Click each category to see evidence

36D

Last scored 8h ago

How we score →

Security

2/30

No known vulnerabilities.

○

Known CVEs — No package registry to scan

○

Tool safety — No tools to analyze

○

Tool poisoning — No tools to analyze

○

Injection vectors — No tools to analyze

○

Tool stability — First scan — baseline recorded

○

Dependency health — No package to analyze

✗

License — No license specified

○

Authentication — No authentication required

○

Repository — active repo

CVEs checked daily via OSV.dev. Score algorithm is open source.

Reviews

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Sts2 Modding Mcp safe to use?: Sts2 Modding Mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install Sts2 Modding Mcp?: Sts2 Modding Mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with Sts2 Modding Mcp?: Sts2 Modding Mcp is compatible with Claude Desktop, Cursor, Claude Code, and most MCP clients that support stdio transport. It uses stdio and sse and http transport.
Is Sts2 Modding Mcp actively maintained?: Sts2 Modding Mcp is actively maintained — last commit was 14 days ago. It has 7 GitHub stars.

Similar servers

View all →

XcodeBuildMCP

Official

No CVEs97A

A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.

2 toolsremote5.2k46.6k/wk1d ago

Toolsdk Mcp Registry

No CVEs95A

MCPSDK.dev(ToolSDK.ai)'s Awesome MCP Servers and Packages Registry and Database with Structured JSON configurations. Supports OAuth2.1, DCR...

1 toolsremote17016.8k/wk1d ago

Gemini Cli

No CVEs95A

An open-source AI agent that brings the power of Gemini directly into your terminal.

8 toolsremote101.3k814.6k/wk12h ago

XcodeBuildMCP

No CVEs95A

XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.

1 toolsremote5.2k20.6k/wk15d ago

MCP Security Weekly

Get CVE alerts and security updates for Sts2 Modding Mcp and similar servers.

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

STS2 Modding MCP

Reverse engineering — decompiles C# assemblies with Roslyn syntax trees, indexes 3,048+ entities and 144 hooks, extracts 15,000+ Godot assets
Code generation — production-ready C# for 30+ entity types, Harmony patches, Godot UI, VFX, network messages, and complete mod projects
Code intelligence — hook recommendations from natural language, patch suggestions, call graphs, API compatibility checks
Build and deploy — builds mods, packages Godot PCK files, deploys to the game, validates assets and localization, watches for changes
Live scene inspection — browses the running Godot scene tree, reads/writes node properties, toggles visibility, animates with Tweens
Automated playtesting — starts seeded runs, plays cards, navigates every screen, runs at 20x speed, captures screenshots, sets breakpoints
29 built-in guides — hooks, Harmony, localization, multiplayer, Godot UI, IL transpilers, combat, save files, and more

Your mileage will vary depending on which LLM you use. This project is a fun experiment — please ping me if you have issues, want to suggest a feature, or find a bug.

Prerequisites

Python 3.11+ — check with python --version
.NET SDK 9.0 — for building mods, the Roslyn code analyzer, and decompilation
.NET 8.0 Runtime — required by ilspycmd (see note below)
ilspycmd — dotnet tool install -g ilspycmd (for C# decompilation)
GDRE Tools — for Godot asset extraction (optional, setup wizard can download it)
Slay the Spire 2 — the game itself

.NET version note: ilspycmd targets .NET 8.0. If you only have .NET 9.0+ installed, decompilation will fail with a runtime error. The fix is to also install the .NET 8.0 runtime alongside your .NET 9.0 SDK. Both can coexist without issues.

Quick Start

git clone https://github.com/elliotttate/sts2-modding-mcp.git
cd sts2-modding-mcp
python -m venv venv

# Activate the virtual environment:
source venv/bin/activate         # macOS / Linux
# source venv/Scripts/activate   # Windows (Git Bash)
# venv\Scripts\activate.bat      # Windows cmd
# venv\Scripts\Activate.ps1      # Windows PowerShell

pip install .
python -m sts2mcp.setup          # auto-finds game, installs tools, decompiles

Connect to an AI Assistant

The MCP server connects to any AI tool that supports the Model Context Protocol. Point the config at the venv's Python so dependencies are always available.

Replace /path/to/sts2-modding-mcp with the actual path where you cloned the repo.

Claude Code (CLI):

# macOS / Linux:
claude mcp add sts2-modding /path/to/sts2-modding-mcp/venv/bin/python -- /path/to/sts2-modding-mcp/run.py

# Windows:
claude mcp add sts2-modding C:\path\to\sts2-modding-mcp\venv\Scripts\python.exe -- C:\path\to\sts2-modding-mcp\run.py

Claude Desktop — edit your config file (%APPDATA%\Claude\claude_desktop_config.json on Windows, `~/Library/Application S

... View full README on GitHub