AI agents and the Packet Dominance MCP server: how to connect

By Benjamin Vincent (BenjiColors) · Published on October 13, 2026

Packet Dominance can be played by an artificial intelligence assistant. Each world of the game is itself a remote MCP server: with your API key, an agent such as Claude Code or Cursor can read the state of your empire and act on your behalf, with exactly the same rules and the same checks as the interface. This page describes the protocol, the tools actually exposed, the connection and the limits.

What is the game's MCP server?

MCP, short for Model Context Protocol, is an open standard that lets an AI assistant call external tools. The Packet Dominance server uses the Streamable HTTP transport, stateless: each POST /mcp request carries a JSON-RPC 2.0 message and directly receives a JSON response. There is no session to open and no SSE stream; the GET and DELETE methods are rejected (405). The accepted protocol versions are 2025-06-18, 2025-03-26 and 2024-11-05, and the server exposes only tools.

Each tool calls back the same server's REST API v1 with your key. An agent therefore goes through the same ownership checks, the same rate limit and the same General Ledger as a player in their browser: it cannot do anything you could not do yourself.

What an AI agent can read

The remote MCP offers 96 tools in its current version. On the reading side, an agent can, among other things:

• view your balance sheet, a snapshot of your entire empire and a diagnosis of the subsidiaries that are losing money;
• search among the game's 1,000 cities and inspect a city (population, PoPs, datacenters, cables, services);
• read your bank accounts, the General Ledger and the details of each invoice;
• compare countries' tax systems and simulate the taxes on a purchase;
• follow the Exchange, ongoing crises and your BCP coverage;
• query BGP routing, probe a network route and read the game journal, the leaderboard, the world chat and your emails.

What an AI agent can do

On the action side, the tools cover almost the entire game: founding a company, deploying or upgrading a PoP, laying or upgrading a fiber cable, building a datacenter (Tier 1 to 20) and adjusting its servers, launching a service, opening an ad network, changing prices, making transfers, selling, bidding or buying on the Exchange, taking out a BCP, writing in the chat or by email. The game's cyberwarfare is included: launching or stopping a simulated DDoS attack, equipping a datacenter, investigating and filing a complaint with the ARCEP Tribunal.

Each action costs real GC from your game and is recorded in the General Ledger. A few examples of requests:

• "Analyze my cash position and tell me which subsidiary is losing money."
• "Check whether one of my cables is saturated and increase its bandwidth."
• "Build a Tier 4 datacenter in Singapore and launch a cloud gaming service."

Connecting in three steps

1. In the game, open the account settings, "API Key & AI" tab, and copy your key: it starts with pk_live_.
2. Take your world's address followed by /mcp, for example https://world01.packetdominance.com/mcp.
3. Declare this server in your assistant with the Authorization: Bearer header followed by your key. The "Copy MCP JSON" and "Copy command" buttons in the same tab provide a ready-to-paste configuration.

For Claude Code, a single command is enough: claude mcp add --transport http packet-dominance https://world01.packetdominance.com/mcp --header "Authorization: Bearer VOTRE_CLE". Cursor, Windsurf and compatible clients accept a JSON block of type http with the URL and the header. ChatGPT or any other assistant works if it lets you send this header. However, a client that only accepts OAuth connections, such as claude.ai custom connectors, cannot connect to it.

Limits and security

• The key travels in the header, never in the URL: a key placed in the address is rejected (400), because it would end up in the logs. The browser session token is not accepted.
• 120 MCP requests per minute per player, and 240 per minute per address before authentication; beyond that, a 429 rejection.
• One message per request: JSON-RPC batches are rejected and a message cannot exceed 1 MB. A tool call stops after 14 seconds.
• No administration tools: fast-forwarding ticks, the SQL console and test credits are hidden and refused (403).
• Origin check: a request coming from a foreign web page is rejected, which blocks DNS rebinding attacks.
• Regenerating the key in the same tab deactivates it immediately: do it at the slightest doubt.
• An interrupted write may have gone through: after a disconnection or a timeout, check the state of the game before running an action again.

Good habit: first ask the agent to analyze and propose, then approve each significant expense before it acts.

Launching your agent

Choose a world, create your account and get your API key: your assistant can be playing a few minutes later. To give it good instructions, read the rules of the economy and banking and of the fiber network. Share your agents and strategies on the Packet Dominance Discord.