Search / io.github.flisko/openboss
protogridR0· no sign-inPublic internet HP bar. Agents smack it over MCP. They cannot complete payment.
v1.0.0 · active · repository · website · descriptor JSON · versions
{
"mcpServers": {
"openboss": {
"type": "http",
"url": "https://api.openboss.lol/mcp"
}
}
}claude mcp add --transport http openboss https://api.openboss.lol/mcp[mcp_servers.openboss]
url = "https://api.openboss.lol/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"openboss": {
"type": "remote",
"url": "https://api.openboss.lol/mcp",
"enabled": true
}
}
}{
"mcpServers": {
"openboss": {
"type": "http",
"url": "https://api.openboss.lol/mcp"
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=openboss&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vYXBpLm9wZW5ib3NzLmxvbC9tY3AifQ%3D%3D"
}{
"servers": {
"openboss": {
"type": "http",
"url": "https://api.openboss.lol/mcp"
}
}
}{
"mcpServers": {
"openboss": {
"httpUrl": "https://api.openboss.lol/mcp"
}
}
}extensions:
"openboss":
enabled: true
name: "openboss"
type: streamable_http
uri: "https://api.openboss.lol/mcp"
timeout: 300
protocol.modernnewest supported version is 2025-06-18; 2026-07-28 not supported, older versions are deprecated until 2027-07-28protocol.statelessonly applies to 2026-07-28 serversprotocol.transportstreamable HTTPprotocol.list_ttlonly applies to 2026-07-28 serversauth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptionsevery tool has a descriptiontools.description_lengthdescriptions are concisetools.schemasevery tool has an object input schematools.annotationsno tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky onestools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: create_checkout (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_boss (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_leaderboard (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …tools.token_costabout 1,414 tokens to load every tooltools.api_dumptools are not a one-to-one API dumpstability.changesno tool changes in 30 daysstability.rug_pullno tool changed its meaning under the same namedeps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI packageNo tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+repository +namespace-matches-repo +website +reachable +uptime-94% ~updated-52d-ago
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
| remote | auth | reachable | uptime 30d | p50 | protocol | last ok |
|---|---|---|---|---|---|---|
https://api.openboss.lol/mcp streamable-http | none | yes | 94% | 779 ms | 2025-06-18 | 2026-10-20 |
check_purchase | Given the sessionId from create_checkout, report whether the person has paid yet. Once paid, returns a walletToken and the smack balance it holds — pass that token to smack_boss to spend it. Poll every few seconds after sending someone to the checkout URL; card payments settle asynchronously, so "not paid yet" shortly afterwards is normal rather than a failure. Keep the walletToken: it IS the wallet, there is no account behind it, and whoever holds it holds the smacks. |
create_checkout | Open a Stripe Checkout Session for one smack pack and return its URL. THIS DOES NOT PAY — hand the URL to the person, who opens it and enters their own card. That page is where they are told smacks are not refundable and that there are no prizes and no payouts, which is why it cannot be skipped. Then poll check_purchase with the returned sessionId until it reports paid, and you get a walletToken to spend with smack_boss. Pass an existing walletToken to top that same wallet up instead of starting a new one. |
get_boss | Return the world boss everyone is currently hitting: its name, lore, tier, current and maximum hit points, active affixes, the live momentum multiplier, and how much damage has been dealt. Use this to answer "what is the boss right now", "how much health is left", or before deciding whether to smack it. One boss exists at a time and everyone in the world shares it. |
get_graveyard | Return bosses that have already been killed, newest first, each with the display name of whoever landed the killing blow. That engraving is permanent and is the only thing anyone actually wins. Use this for "who has killed a boss", "how many bosses have died", or to look up a past boss. |
get_leaderboard | Return the damage leaderboard for the current boss — display names and total damage, highest first — together with the most recent hits. Use this to answer "who is winning", "who has done the most damage", or to see whether a particular name is on the board. Resets when the boss dies. |
get_pixel | Return the current state of The Pixel (thepixel.lol): who owns it, what they paid, its colour, the minimum price to take it, and recent ownership history. Use this for "who owns the pixel" or "what would it cost to buy it". BUYING IT IS NOT AVAILABLE AS A TOOL — a purchase needs a person at the payment page, because a bid that loses a simultaneous takeover is charged in full and refunds nothing. Send the human to https://thepixel.lol to buy. |
get_wallet | Return the smack balance held by a walletToken. Use it to decide whether to keep smacking or to buy another pack. |
list_packs | Return every smack pack for sale: id, price in US dollars, how many smacks it buys, and any bonus. Call this before create_checkout so you can tell the person what they are about to pay. Prices are final — no VAT or tax is added at checkout. Also reports the free allowance, so you can mention that trying it costs nothing. |
smack_boss | Land one smack on the current boss and return the damage dealt and the remaining hit points. One swing per call — call it repeatedly to keep hitting. PAID: pass walletToken (from check_purchase) to spend one smack from that wallet. Paid hits are the real thing — they can crit, they take the momentum multiplier, and only a paid hit can land the killing blow and put a name on the grave forever. FREE: pass visitorId instead and it costs nothing. Three per visitorId — the count is held for about thirty days — then FREE_EXHAUSTED, which is the limit working and not a fault. It is NOT an hourly allowance: waiting does not give them back. A free smack can never land the killing blow and free damage is capped per boss, so the engraving stays with somebody who paid for it. Pass one or the other. If both arrive, the wallet is spent. |
Schemas: list_tools.
{
"name": "io.github.flisko/openboss",
"title": "OpenBoss",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://api.openboss.lol/mcp",
"type": "streamable-http"
}
],
"version": "1.0.0",
"repository": {
"url": "https://github.com/flisko/openboss-mcp",
"source": "github"
},
"websiteUrl": "https://openboss.lol",
"description": "Public internet HP bar. Agents smack it over MCP. They cannot complete payment."
}