# Portamora

> Discover atmospheric 3D worlds, read controls, and build and publish authorized environments.

- name: app.portamora/mcp
- version: 0.2.0
- connection class: R2 (oauth_consent_once)
- trust: 80/100 flags: no-repository
- quality: 92/100 (strong)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/app.portamora%2Fmcp
- tools: https://api.protogrid.dev/v1/servers/app.portamora%2Fmcp/tools

**An agent can connect after a one-time OAuth consent by a human.** Remote endpoint behind OAuth 2. Tokens stay with the agent; the registry only exposes the authorization metadata.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "portamora": {
      "type": "http",
      "url": "https://portamora.app/mcp",
      "headers": {
        "Authorization": "Bearer ${PORTAMORA_TOKEN}"
      }
    }
  }
}
```

Placeholders to fill: `${PORTAMORA_TOKEN}`.

## Trust

- hygiene: 80
- liveness: 100
- freshness: 85
- provenance: 55
- drivers: +dns-namespace +website +reachable +uptime-100% ~updated-36d-ago -no-repository
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 92/100 (strong)

### protocol: n/a (weight 25)

- n/a `protocol.modern`, `protocol.stateless`, `protocol.transport`, `protocol.list_ttl`: no remote answered a protocol handshake (not probed yet, unreachable, or local-only)

### authorization: 83 (weight 15)

- pass `auth.prm`: Protected Resource Metadata (RFC 9728) published
- pass `auth.as_metadata`: authorization server metadata reachable
- warn `auth.cimd`: only Dynamic Client Registration, deprecated in 2026-07-28 in favour of CIMD
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 93 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 8 of 8 tools declare readOnlyHint or destructiveHint
- warn `tools.directory_hints`: 6 of 8 tools declare all four hints; missing: get_starter (destructiveHint); read_guide (destructiveHint)
- pass `tools.token_cost`: about 1,195 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 100 (weight 15)

- pass `stability.changes`: no tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 8, about 1,195 tokens to load them all
- tool set hash: 463d63a151f36974b3a29014ffbbe8eb
- badge: [![protogrid quality](https://protogrid.dev/badge/app.portamora/mcp.svg)](https://protogrid.dev/servers/app.portamora/mcp)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

_No tool definition changes recorded._

## Remotes

- https://portamora.app/mcp (streamable-http, auth oauth2, reachable true, uptime30d 1)

## Packages

_none_

## Tools (8)

- `get_community`: Read server-evaluated community and play-counting flags. Personal state is returned by me.get. Lists use cursor pagination.
- `get_creator`: Read an active creator profile. Email addresses, roles and account state are never exposed.
- `get_starter`: Get the editable starter ZIP and the build guide. Download and build it in your own workspace; the MCP server does not execute world code.
- `get_version`: Read the current ready version of a published world. Unpublished versions are not exposed.
- `get_world`: Read a public world page. Offline and removed worlds retain a notice; drafts are not exposed.
- `list_comments`: Read plain-text comments, newest first, with deletion placeholders. Viewer controls are private; no-store. Lists use cursor pagination.
- `read_guide`: Read an official Portamora guide, policy, agent discovery file, or OpenAPI specification. Start with worlds before building and workflows before uploading.
- `search_worlds`: Browse and search published worlds. Sort by newest, liked, or trending. The days filter accepts 1, 7 (API default), or 30 UTC calendar days including today, or all for any sort. Newest filters publication date unless days=all or creator is specified. Liked ranks period likes, or lifetime likes when days=all. Trending ranks period activity, or lifetime plays and likes when days=all, with publication-age decay in both cases. Older worlds may appear in activity rankings. The Explore website defaults to liked/all; API defaults remain newest/7. Search text can include exact #tags; custom tags are supported without a fixed vocabulary. Liked and trending require the community flag. Follow nextCursor with unchanged filters until null. Drafts and offline worlds are excluded. Public; no authentication is required.