Submarine attack game for MCP Apps
SaferSkills independently audited Submarine Attack Mcp Apps (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
English / Japanese
Migrating from https://github.com/mfukushim/reversi-mcp-ui.
This is a submarine game) by MCP Apps.
The game rules are similar to the grid attack in Nintendo's Wi-Fi Clubhouse Games (though 3x1 attacks are not yet included).
Game Rules mcp/rule-logic/gameRule.ts
<img width="300" alt="image" src="./web_media/img.png" /> <img width="400" alt="image" src="./web_media/img_1.png" /> <img width="300" alt="image" src="./web_media/img_2.png" />
The rules and board control of the submarine game are handled by MCP. The user plays as player 1 and the AI plays as player 2.
Currently, operation has been confirmed with Claude Desktop for Windows. Because it complies with the MCP Apps specifications, it is likely to work with MCP Apps-compatible clients. Operation has also been confirmed with the following MCP clients:
Note: This MCP server outputs HTML data using the ui:// schema, one screen at a time, one move at a time. Depending on the MCP client's design, token consumption may be large. When you first start using it, please check for unexpected token consumption.
#### Public Server
Submarine MCP Apps is built on the MCPAgent mechanism of CloudFlare AI Agent and supports Streamable-http connections.
A demo using Cloudflare workers is available below.
Please configure the following MCP settings on each MCP client.
{
"mcpServers": {
"submarine": {
"command": "npx",
"args": [
"mcp-remote",
"https://submarine-attack-mcp-apps.daisycodes.workers.dev/mcp"
]
}
}
}{
"mcpServers": {
"submarine": {
"type": "streamable-http",
"url": "https://submarine-attack-mcp-apps.daisycodes.workers.dev/mcp"
}
}
}(The public server may be shut down in the future.)
#### Local Server
You can run it as a local server by running wrangler locally.
pnpm run dev # run wrangler local
or
npm run dev # run wrangler localPlease configure the following MCP settings on each MCP client.
{
"mcpServers": {
"submarine": {
"command": "npx",
"args": [
"mcp-remote",
"http://localhost:8787/mcp"
]
}
}
}{
"mcpServers": {
"submarine": {
"type": "streamable-http",
"url": "http://localhost:8787/mcp"
}
}
}<img width="300" alt="image" src="./web_media/img_3.png" /> Depending on the MCP client, the resource loading message may not appear. The AI can play with general knowledge even without loading GameRule, but game progress may be unstable.
#### tool functions
Displays the initial game screen. If the game is in progress, it will force the initial screen.
The AI retrieves the game board. It is not displayed to the user. The retrieved board is only the AI's side of the board. By specifying a token unknown to the AI, information about the user's side of the board can be obtained and used to update the HTML screen.
The AI retrieves the game board and displays it to the user. The AI sees the AI's side of the board, and the user sees the user's side of the board.
Player 1's piece placement. This tool is intended to be called by the board JS.
Player 2's piece placement. This tool is intended to be called by the AI's MCP.
Player 1's attack information. This tool is intended to be called by the board JS.
Player 2's attack information. This tool is intended to be called by the AI's MCP.
#### Resource
Game rules text resource (English/Japanese)
Board html+js (Vue rendering)
Game rules are processed within the MCP server. This means that the AI cannot directly intervene in the execution of the rules. This prevents the AI from cheating according to the rules, which is a common occurrence with AI.
#### MCP handling
This client configuration is mostly compliant with @modelcontextprotocol/ext-apps. It has been extended to work with Cloudflare MCPAgent.
This mostly follows the instructions for running and debugging Cloudflare MCPAgent.
pnpm install # install
pnpm run dev # start dev server
pnpm run inspector # start inspector
pnpm run deploy # deploy to cloudflare workers
https://note.com/marble_walkers/n/na7e577612b27
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.