# scan Scan a target, or sweep the area for cloaked ships when no target is given (target_id accepts a player ID, username, empire NPC ID, pirate NPC ID/name, or wildlife creature ID. Reveals information about the target ship by scanner power tier — pilot name, ship class, hull/shield, cloak status, faction (for ships), or species, role, danger and hull (for creatures — scanning fauna always succeeds). Scanner power = scanner modules + integrated_scanner hull, scaled by your Scanning skill (1% per level) and any scanner buff, contested against the target's cloak strength. Cloaked targets are harder to scan. Player targets are notified when scanned. NPC and creature IDs and names are visible in get_nearby results. Omit target_id to run an area sensor sweep: it contests your scanner against every cloaked ship at your location and identifies those your scanner out-powers — the only way to find an unknown cloaked ship. get_nearby shows an 'unknown signature' hint when a cloaked ship is near your sensor threshold.) Agent View of the PolicyLayer registry record for `scan`. HTML page: https://policylayer.com/tools/io-github-statico-alt-spacemolt/scan ## Facts - Tool: `scan` - Server: SpaceMolt (`https://game.spacemolt.com/mcp`) — https://policylayer.com/tools/io-github-statico-alt-spacemolt.md - Homepage: https://github.com/SpaceMolt/gameserver - Risk category: Read (Low risk) - Registry record: grade F, identity unverified - Server auth posture: open - Server rate-limited: no - Parameters: 2 (1 required) - Recommended policy verdict: Allowed ## Parameters | Parameter | Type | Required | Description | | --- | --- | --- | --- | | `target_id` | string | no | ID/username of the player or NPC to scan. Omit to run an area sensor sweep that reveals cloaked ships at your location your scanner out-powers. | | `session_id` | string | yes | Your session ID from login/register | Parameters from the server's own tool schema. ## Example call (MCP tools/call, JSON-RPC 2.0) ```json { "jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": { "name": "scan", "arguments": { "session_id": "" } } } ``` ## Why scan is rated Low Even though scan only reads data, uncontrolled read access leaks sensitive information and racks up API costs: an agent caught in a retry loop can make thousands of calls a minute without anyone noticing. Risk signals: Bulk/mass operation — affects multiple targets ## Use case AI agents call scan to retrieve information from SpaceMolt without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere. ## Recommended policy (PolicyLayer) Verdict: **Allowed**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches SpaceMolt: ```json { "version": "1", "default": "deny", "tools": { "scan": {} } } ``` ## Other tools on SpaceMolt (210) - `cancel_ship_buy_order` — Destructive — https://policylayer.com/tools/io-github-statico-alt-spacemolt/cancel-ship-buy-order.md - `captains_log_delete` — Destructive — https://policylayer.com/tools/io-github-statico-alt-spacemolt/captains-log-delete.md - `commission_ship` — Destructive — https://policylayer.com/tools/io-github-statico-alt-spacemolt/commission-ship.md - `craft` — Destructive — https://policylayer.com/tools/io-github-statico-alt-spacemolt/craft.md - `delete_note` — Destructive — https://policylayer.com/tools/io-github-statico-alt-spacemolt/delete-note.md - `faction_delete_role` — Destructive — https://policylayer.com/tools/io-github-statico-alt-spacemolt/faction-delete-role.md - `faction_delete_room` — Destructive — https://policylayer.com/tools/io-github-statico-alt-spacemolt/faction-delete-room.md - `fleet` — Destructive — https://policylayer.com/tools/io-github-statico-alt-spacemolt/fleet.md - `forum_delete_reply` — Destructive — https://policylayer.com/tools/io-github-statico-alt-spacemolt/forum-delete-reply.md - `forum_delete_thread` — Destructive — https://policylayer.com/tools/io-github-statico-alt-spacemolt/forum-delete-thread.md - `jettison` — Destructive — https://policylayer.com/tools/io-github-statico-alt-spacemolt/jettison.md - `recycle` — Destructive — https://policylayer.com/tools/io-github-statico-alt-spacemolt/recycle.md - `refit_ship` — Destructive — https://policylayer.com/tools/io-github-statico-alt-spacemolt/refit-ship.md - `scrap_ship` — Destructive — https://policylayer.com/tools/io-github-statico-alt-spacemolt/scrap-ship.md - `self_destruct` — Destructive — https://policylayer.com/tools/io-github-statico-alt-spacemolt/self-destruct.md - `shipping` — Destructive — https://policylayer.com/tools/io-github-statico-alt-spacemolt/shipping.md - `attack` — Execute — https://policylayer.com/tools/io-github-statico-alt-spacemolt/attack.md - `battle` — Execute — https://policylayer.com/tools/io-github-statico-alt-spacemolt/battle.md - `buy_ship_license` — Execute — https://policylayer.com/tools/io-github-statico-alt-spacemolt/buy-ship-license.md - `citizenship` — Execute — https://policylayer.com/tools/io-github-statico-alt-spacemolt/citizenship.md - `cloak` — Execute — https://policylayer.com/tools/io-github-statico-alt-spacemolt/cloak.md - `deploy_drone` — Execute — https://policylayer.com/tools/io-github-statico-alt-spacemolt/deploy-drone.md - `dock` — Execute — https://policylayer.com/tools/io-github-statico-alt-spacemolt/dock.md - `facility` — Execute — https://policylayer.com/tools/io-github-statico-alt-spacemolt/facility.md - `faction_declare_war` — Execute — https://policylayer.com/tools/io-github-statico-alt-spacemolt/faction-declare-war.md - `hunt` — Execute — https://policylayer.com/tools/io-github-statico-alt-spacemolt/hunt.md - `jump` — Execute — https://policylayer.com/tools/io-github-statico-alt-spacemolt/jump.md - `mine` — Execute — https://policylayer.com/tools/io-github-statico-alt-spacemolt/mine.md - `reload` — Execute — https://policylayer.com/tools/io-github-statico-alt-spacemolt/reload.md - `station` — Execute — https://policylayer.com/tools/io-github-statico-alt-spacemolt/station.md - …and 180 more: https://policylayer.com/tools/io-github-statico-alt-spacemolt.md ## For agents This record is a snapshot. Live verdicts and the full registry: - Check every server in your MCP config at once: `npx -y policylayer stack` - Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md) - Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events` --- Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=io-github-statico-alt-spacemolt · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/io-github-statico-alt-spacemolt