Gbx Mcp Beta — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Gbx Mcp Beta (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Unified Model Context Protocol (MCP) server providing comprehensive access to Gameball's developer documentation and API integration.
This server combines two subsystems and a status tool:
gameball-status - Shows server health, subsystem status, configuration, and cache infoTotal: 79 tools in one server
git clone <repository-url> gameball-integrations
cd gameball-integrations
npm install
npm run buildCreate a .mcp.json file at the root of your project. Claude Code automatically detects this file and loads the MCP server for that workspace.
Docs only (no API keys needed):
{
"mcpServers": {
"gameball": {
"command": "node",
"args": ["/path/to/gameball-integrations/dist/index.js"]
}
}
}Docs + Integration (requires API keys):
{
"mcpServers": {
"gameball": {
"command": "node",
"args": ["/path/to/gameball-integrations/dist/index.js"],
"env": {
"GAMEBALL_API_KEY": "your-api-key",
"GAMEBALL_SECRET_KEY": "your-secret-key"
}
}
}
}Tip: If the MCP repo is a sibling directory, use a relative path: "args": ["../gameball-integrations/dist/index.js"]To make the tools available across all projects, add the config to ~/.claude/settings.json under the same mcpServers structure shown above.
# Docs only
claude mcp add gameball node /path/to/gameball-integrations/dist/index.js
# With API keys
claude mcp add gameball node /path/to/gameball-integrations/dist/index.js \
-e GAMEBALL_API_KEY=your-api-key \
-e GAMEBALL_SECRET_KEY=your-secret-key| Variable | Required | Description | Default |
|---|---|---|---|
GAMEBALL_API_KEY | For integration tools | Your Gameball API key | "" |
GAMEBALL_SECRET_KEY | For sensitive operations | Your Gameball secret key | undefined |
GAMEBALL_BASE_URL | No | API base URL | https://api.gameball.co |
GITHUB_TOKEN | No | GitHub token for higher rate limits | undefined |
All documentation tools work without API keys:
| Tool | Description |
|---|---|
docs-lookup-topic | START HERE - Comprehensive lookup returning tutorials, docs, and API endpoints for a topic |
docs-get-doc | Get full content of a specific documentation page |
docs-get-api-endpoint | Get detailed API endpoint specification with parameters and schemas |
docs-generate-code-example | Generate code examples in JavaScript, Python, C#, Go, PHP, or Java |
docs-search-docs | Full-text search across all documentation |
docs-list-sections | Browse documentation structure and available topics |
docs-get-tutorial | Get step-by-step tutorial content |
All integration tools require GAMEBALL_API_KEY. Tools marked with 🔒 also require GAMEBALL_SECRET_KEY.
#### Authentication (1 tool)
generate-session-token - Generate JWT session token#### Customers (21 tools)
create-customer, get-customer, update-customer, delete-customerget-customer-balance, adjust-customer-balance 🔒get-customer-referrals, send-customer-notificationget-customer-tags, add-customer-tag, remove-customer-tag#### Transactions (13 tools)
cashback-transaction, redeem-points, redeem-points-otphold-points, cancel-hold, refund-transactionquery-transactions, reverse-transaction#### Orders (4 tools)
track-order, refund-order, query-orders, cancel-order#### Coupons (7 tools)
validate-coupon, burn-coupon, lock-coupon, unlock-couponrevoke-burn-coupon, revoke-validation, list-customer-coupons#### Batch Operations (9 tools)
batch-adjust-balance, batch-send-events, batch-cashbackbatch-redeem, batch-refund, batch-hold, batch-cancel-hold#### Configuration (10 tools)
get-action-config, get-challenge-config, get-level-configget-tier-config, query-tiers, query-levels#### Other Domains
| Tool | Description |
|---|---|
gameball-status | Shows subsystem health, API key configuration, cache location, and sync status |
.mdx files and docs.json, builds MiniSearch indexopenapi.json independently (gzip-cached)Progress is reported to stderr during loading:
Checking for updates...
Loading...
Ready — 79 toolsopenapi.json (not the full docs repo)All GitHub fetches have a 10-second timeout. If GitHub is unavailable:
gameball-status tool always registers and shows the error stateFirst run: ~2-3 seconds (fetches from GitHub) Subsequent runs: ~200-500ms (validates cache with 1 API call)
gameball-integrations/
├── src/
│ ├── index.ts # Entry point (stdio transport)
│ ├── server.ts # Server creation (parallel init, graceful failure)
│ ├── status-tool.ts # gameball-status tool
│ ├── docs/ # Documentation subsystem (7 tools)
│ │ ├── index.ts # Init + tool registration
│ │ ├── fetcher.ts # GitHub fetching + SHA-based cache
│ │ ├── doc-indexer.ts # MiniSearch indexing + chunking
│ │ ├── mdx-parser.ts # MDX → plain text
│ │ ├── codegen.ts # Multi-language code generation
│ │ ├── types.ts # Doc-specific types
│ │ └── tools/ # 7 documentation tools
│ ├── integration/ # API integration subsystem (71 tools)
│ │ ├── index.ts # Client creation + tool registration
│ │ ├── openapi-fetcher.ts # Independent openapi.json fetch + gzip cache
│ │ ├── http-client.ts # GameballClient (auth, error formatting)
│ │ └── generator.ts # Auto-generates 71 tools from OpenAPI
│ └── shared/ # Common utilities
│ ├── github-cache.ts # GitHub fetch, SHA check, cache dir, timeout
│ ├── types.ts # Shared type definitions (ApiEndpoint, etc.)
│ └── openapi-parser.ts # OpenAPI JSON → ApiEndpoint map~/.cache/gameball-integrations/
├── manifest.json # Docs cache manifest (commitSha, file list)
├── [__-delimited .mdx files] # Cached documentation pages
├── openapi-manifest.json # OpenAPI cache manifest (commitSha, timestamp)
└── openapi.json.gz # Gzip-compressed OpenAPI specUse docs-lookup-topic to learn about "customer referrals"
Use docs-get-doc to read "tutorials-new/referral-setup"
Use docs-generate-code-example for JavaScript customer creationUse create-customer to register a new customer
Use cashback-transaction to reward points
Use query-transactions to check transaction historyUse gameball-status to see subsystem status, config, and cache info# Install dependencies
npm install
# Run in development mode (with auto-reload)
npm run dev
# Build for production
npm run build
# Run built version
npm startMIT
For issues or questions:
~/.cache/gameball-integrations/~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.