
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
@mairwunnx/minecraft-mcp
Advanced tools
MCP server that lets AI agents read and manage a Minecraft server through WorldAPI
🤖 minecraft-mcp lets an AI agent see and run your Minecraft server. Ask Claude “who’s online and where are they?”, “why is the server lagging?”, or “give everyone bread and set the time to morning”, and it answers with real data from your world.
It runs next to your AI client—Claude Desktop, Claude Code, Cursor, VS Code, or anything else that speaks MCP—and talks to WorldAPI on a Paper, Fabric, or NeoForge server, or in the world you play alone. The token you give it decides what the agent may do.
Install WorldAPI 4.2.0 or newer on your Paper, Fabric, or NeoForge server, and make a token with /worldapi token create agent. Playing alone? Put the WorldAPI mod in your game and skip the address and the token: claude mcp add minecraft -- npx -y @mairwunnx/minecraft-mcp. The Singleplayer page has the rest.
Add minecraft-mcp to your client. In Claude Desktop, open minecraft-mcp.mcpb. In Claude Code:
claude mcp add minecraft -e WORLDAPI_URL=http://localhost:8110/api/v1 -e WORLDAPI_TOKEN=your-token -- npx -y @mairwunnx/minecraft-mcp
Ask “what’s the server status?”. The Installation page covers Cursor, VS Code, and HTTP.
Everything else lives in the wiki.
For players and server owners
For developers
/ask, right in the chat.🫡 Made by Pavel Erokhin (Павел Ерохин), aka mairwunnx.
FAQs
MCP server that lets AI agents read and manage a Minecraft server through WorldAPI
The npm package @mairwunnx/minecraft-mcp receives a total of 1,126 weekly downloads. As such, @mairwunnx/minecraft-mcp popularity was classified as popular.
We found that @mairwunnx/minecraft-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.