
Company News
AWS Security Hub Adds Socket for Supply Chain Security
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.
@scorezilla/mcp
Advanced tools
Official MCP server for Scorezilla — add a leaderboard to your game from your AI coding assistant.
Official Model Context Protocol (MCP) server for Scorezilla — the easiest way to add a leaderboard to your game. Connect this server to your AI coding assistant (Claude Code, Cursor, Continue.dev, …) and ship a working leaderboard without leaving your editor.
Six tools total — five read-only, one that creates resources (bootstrap_leaderboard).
Status — v0.1.0 (initial release). Published on the
@latestdist-tag. The API surface (six tools, auth, env vars, CLI flags) is stable within0.1.x;0.2.xand beyond may include breaking changes per pre-1.0 semver convention.
Sign in at dashboard.scorezilla.dev, open MCP tokens, click Create token. Copy the mcp_live_* value once — it's not shown again.
Claude Code — edit ~/.claude/settings.json:
{
"mcpServers": {
"scorezilla": {
"command": "npx",
"args": ["-y", "@scorezilla/mcp"],
"env": {
"SCOREZILLA_TOKEN": "mcp_live_…"
}
}
}
}
🔒 Keep
~/.claude/settings.jsonprivate. The token is stored in plaintext in that file. Make sure it's not committed to git (it's usually in your.gitignore), not synced to a public dotfiles repo, and not backed up to a shared location. On macOS/Linux:chmod 600 ~/.claude/settings.jsonso only your user can read it. If a token leaks, revoke it at dashboard.scorezilla.dev/account/tokens.
Cursor — open Settings → Features → MCP → Add new MCP server, then use the same command + args + env shape.
Anything else MCP-compatible — point your client at npx -y @scorezilla/mcp with SCOREZILLA_TOKEN set in the environment.
In Claude Code or Cursor: "Add a Scorezilla leaderboard to this game."
| Tool | What it does |
|---|---|
list_games | Lists your games. Use this first to orient. |
list_boards | Lists leaderboards under a game. |
get_keys | Returns the public key (safe to embed) and the secret-key prefix. The full secret never leaves the dashboard. |
get_board_top_n | Returns the top entries on a board. The "is my integration working?" tool. |
get_sdk_snippet | Returns ready-to-paste TypeScript SDK init code targeting a specific board. |
bootstrap_leaderboard | Creates a new game + first board in one call, returns the SDK snippet. The 90-second-demo path. |
scorezilla-mcp [--read-only] [--base-url=<url>] [--version] [--help]
--read-only — refuse to register bootstrap_leaderboard. Use this on shared/CI configs to guarantee the AI can't create resources.--base-url=<url> — override the API origin. Defaults to https://api.scorezilla.dev. Useful for self-hosted or staging environments.SCOREZILLA_TOKEN — required. Bearer token issued at dashboard.scorezilla.dev/account/tokens.SCOREZILLA_BASE_URL — same as --base-url, but via env. CLI flag wins if both are set.SCOREZILLA_BETA_TOKEN — pre-public closed-beta only. When set, sent as the X-MCP-Beta header on every API call to unlock the MCP namespace before the public switch is flipped. You'll only need this if a Scorezilla team member gave you a beta token; ignore otherwise.env blocks, password managers, or secret stores.https://api.scorezilla.devMIT.
FAQs
Official MCP server for Scorezilla — add a leaderboard to your game from your AI coding assistant.
The npm package @scorezilla/mcp receives a total of 26 weekly downloads. As such, @scorezilla/mcp popularity was classified as not popular.
We found that @scorezilla/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.