Server data from the Official MCP Registry
Local-first MCP server for creating, validating, testing, and packaging Minecraft Java datapacks.
Local-first MCP server for creating, validating, testing, and packaging Minecraft Java datapacks.
Packwright MCP is a well-designed local-first Minecraft datapack development server with strong security fundamentals. Authentication is not required (appropriate for local-only operation), filesystem access is carefully scoped to a configured workspace with path traversal protection, and dangerous operations require explicit confirmation with SHA-256 preconditions. Code quality is high with proper error handling and input validation. Minor findings include broad exception handling and a single informational note about external process trust, but these do not meaningfully impact security given the server's local-only design and explicit setup requirements. Supply chain analysis found 5 known vulnerabilities in dependencies (1 critical, 1 high severity). Package verification found 1 issue.
4 files analyzed · 9 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Set these up before or after installing:
Environment variable: PACKWRIGHT_WORKSPACE
Environment variable: PACKWRIGHT_JAVA
Environment variable: PACKWRIGHT_CACHE_DIR
Environment variable: PACKWRIGHT_READ_ONLY
Environment variable: PACKWRIGHT_OFFLINE
Environment variable: PACKWRIGHT_SPYGLASS_COMMAND
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-rithwikbabu-packwright-mcp": {
"env": {
"PACKWRIGHT_JAVA": "your-packwright-java-here",
"PACKWRIGHT_OFFLINE": "your-packwright-offline-here",
"PACKWRIGHT_CACHE_DIR": "your-packwright-cache-dir-here",
"PACKWRIGHT_READ_ONLY": "your-packwright-read-only-here",
"PACKWRIGHT_WORKSPACE": "your-packwright-workspace-here",
"PACKWRIGHT_SPYGLASS_COMMAND": "your-packwright-spyglass-command-here"
},
"args": [
"-y",
"@rithwikbabu/packwright-mcp"
],
"command": "npx"
}
}
}From the project's GitHub README.
Packwright MCP is a local-first Model Context Protocol server for safely creating, inspecting, validating, testing, and packaging Minecraft Java Edition datapacks. It gives an MCP client structured tools instead of unrestricted filesystem or shell access.
NOT AN OFFICIAL MINECRAFT PRODUCT. NOT APPROVED BY OR ASSOCIATED WITH MOJANG OR MICROSOFT.
Packwright does not contain or redistribute Minecraft code, assets, server jars, generated vanilla data, or decompiled sources.
Packwright 0.1.x supports Minecraft Java Edition 26.2 only, datapack format 107.1. Node.js 20 or newer is required. Java 25 is needed only for setup-version and authoritative vanilla GameTest runs; normal authoring and structural validation do not require Java.
The server uses the stable MCP TypeScript SDK v2, targets the MCP 2026-07-28 specification, and relies on SDK protocol negotiation for compatible clients.
The server is local and stdio-only. It does not install packs into a live world, expose an HTTP endpoint, support Bedrock behavior packs, or create resource packs.
See MCP tools, resources, and prompts for the complete interface.
Choose an existing directory that will contain the datapack projects Packwright may access. It must be an absolute path.
Generic MCP client configuration:
{
"mcpServers": {
"packwright": {
"command": "npx",
"args": [
"-y",
"@rithwikbabu/packwright-mcp@0.1.2",
"serve",
"--workspace",
"/absolute/path/to/datapacks"
]
}
}
}
The workspace can instead be passed through the environment:
{
"mcpServers": {
"packwright": {
"command": "npx",
"args": ["-y", "@rithwikbabu/packwright-mcp@0.1.2"],
"env": {
"PACKWRIGHT_WORKSPACE": "/absolute/path/to/datapacks"
}
}
}
}
Using an exact package version is recommended for predictable automation. The server writes protocol messages only to stdout and sends logs to stderr.
The installed packwright-mcp binary defaults to serve when no subcommand is supplied:
packwright-mcp serve --workspace /absolute/path/to/datapacks
packwright-mcp doctor --workspace /absolute/path/to/datapacks
packwright-mcp setup-version 26.2 --accept-minecraft-eula --workspace /absolute/path/to/datapacks
packwright-mcp validate <pack> --workspace /absolute/path/to/datapacks
packwright-mcp test <pack> --workspace /absolute/path/to/datapacks
packwright-mcp build <pack> --workspace /absolute/path/to/datapacks
Use --json with doctor, setup-version, validate, test, or build for machine-readable output. Run packwright-mcp <command> --help for command-specific options. See the CLI reference and Configuration for all flags, precedence, environment variables, and exit behavior.
setup-version is an explicit operator action. It records acceptance of the Minecraft EULA, obtains the official 26.2 server jar from Mojang, verifies the SHA-1 declared by Mojang's version manifest, and prepares local validation data. The MCP server never downloads the jar or accepts terms on a model's behalf.
packwright-mcp setup-version 26.2 \
--accept-minecraft-eula \
--workspace /absolute/path/to/datapacks
Authoritative tests run net.minecraft.gametest.Main with Java 25 in a newly created disposable universe. A user world path is never accepted as the test universe. See Validation and vanilla testing.
Function-type GameTests resolve Minecraft's internal test_function registry; a datapack .mcfunction does not register a Test Function. Use minecraft:always_pass only for pack-load/runner smoke coverage, or an existing block-based test structure for behavior-focused tests.
Spyglass is deliberately not installed as a runtime dependency. The adapter is compatibility-pinned to Spyglass 0.4.65 and verifies the configured executable's --version output before use. An operator who has independently installed and reviewed a safe build may opt in with PACKWRIGHT_SPYGLASS_COMMAND; Packwright never downloads or enables it automatically.
Packwright resolves every requested path beneath the configured workspace, rejects traversal and symlink escapes, limits scans and payloads, and never recursively deletes directories. Existing files can be replaced or deleted only with explicit intent and the current SHA-256. Raw authoring is limited to supported datapack text formats; binary NBT and pack.png may be inspected and packaged but not authored.
Read Security model before granting the server access to valuable projects. Consider source control and PACKWRIGHT_READ_ONLY=true for review-only sessions.
For common startup, cache, Java, validation, and build failures, see Troubleshooting. Maintainers and contributors can find the component boundaries in Architecture.
npm ci
npm run lint
npm run format:check
npm run typecheck
npm test
npm run build
npm pack --dry-run
Minecraft integration tests are intentionally separate because they download Mojang's server jar and require Java 25 plus explicit EULA acceptance. Contribution setup and test expectations are in CONTRIBUTING.md.
Packwright MCP is available under the MIT License. External software and service terms are summarized in THIRD_PARTY_NOTICES.md.
Minecraft is a trademark of Microsoft Corporation. This project follows the Minecraft Usage Guidelines and uses no Mojang or Microsoft artwork.
Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.