Goalz

io.github.geby85Published by GitHub account geby85v1.0.0Updated Nov 1, 2026

Manage your Goalz football manager account via hosted OAuth MCP.

VerifiedStreamable HTTPWeb executable

Overview

AI-generated overview

Hosted OAuth MCP endpoint for the Goalz football manager game, letting an assistant read and manage a player's manager account, club, transfers and messages.

What you can do
  • Read and manage the manager account and profile
  • Read and manage the player's club
  • Handle transfers, including write actions
  • Read and send in-game messages
  • Generate a club crest preview, when the rights are granted
  • View and revoke the account's own sessions and connections, subject to account-management permission
When to use it
For players of the Goalz football manager game who want an AI assistant to look at their manager and club data, handle transfers and messages, or draft a crest preview through the hosted endpoint instead of the web interface.
Requirements
A remote Streamable HTTP endpoint at the Goalz site; no local package or runtime. OAuth sign-in through the provider's browser consent flow is required, and the host must request scopes such as manager:read, manager:manage, club:read, club:manage, transfers:write, messages:read and messages:write. Goalz grants only manager:read if a client requests no scopes.
Before you install
Approving the full scope set grants write access to transfers and messages, so check the consent screen and the scopes the host actually requests rather than assuming read-only. Crest generation can consume quota or incur cost and sends the documented inputs to an image provider; it only creates a private preview that the manager must accept or discard. Account, resource and effective scopes are checked on every tool call.

Installation

In SourceWeft

  1. Open Goalz in the dashboard and add it to a workspace.
  2. Connect the required credentials. They are stored privately and never shown on public pages.
  3. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.geby85%2Fgoalz/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config. The client completes OAuth sign-in on first connect.

{
  "mcpServers": {
    "goalz": {
      "type": "http",
      "url": "https://www.goalz.de/mcp/apps"
    }
  }
}

README

Goalz plugins

This repository contains reviewed, portable connection packages for Goalz. They connect to the hosted Goalz MCP endpoint; they do not contain a local server, backend source, or account credentials.

Packages

  • packages/openai/ contains the OpenAI Agent Plugins manifest and OAuth configuration. It asks the browser consent flow for all seven reviewed gameplay scopes because Goalz filters the available tools to the scopes the host actually requests and receives. Read-only setup is documented in the package README.
  • packages/grok-build/ follows the xAI plugin layout. The source.path for an xAI catalog entry must point to this directory. xAI category metadata is optional; no category is selected by default.
  • packages/cursor-grokbot/ contains the documented Cursor plugin format. The Grok Bot Connect apps flow is a separate catalog; a Cursor package or listing does not establish Grok Bot availability.
  • server.json describes one remote-only Streamable HTTP MCP endpoint for registry discovery. It adds no local executable or package runtime.

Each package directory is self-contained for its platform's current source/import workflow. Preserve hidden manifest files when copying or archiving a package. Platform requirements and submission flows can change; consult the linked official documentation before import or submission.

Authentication and permissions

The endpoint is https://www.goalz.de/mcp/apps. Authentication is OAuth in the provider's browser flow. The OpenAI package explicitly requests manager:read, manager:manage, club:read, club:manage, transfers:write, messages:read, and messages:write so the complete reviewed gameplay tool set can be exposed after the user approves those rights. Goalz requires manager:read; if another client omits a scope request, Goalz grants only that read scope. For Grok Build and Cursor, the endpoint manifest does not itself request OAuth scopes: check the scopes the host actually asks for and the browser consent screen. Do not assume write access from a connection URL alone.

The server checks account, resource, and effective scopes on every tool call. Passwords, email codes, and newly issued manual API credentials remain in Goalz's normal browser account flows. Account controls such as viewing and revoking this account's own sessions or existing connections remain subject to the granted account-management permission.

Wappen generation remains available when the necessary rights are granted. It can consume quota or incur cost and sends the documented generation inputs to an image provider. It creates a private preview; it does not activate or publish the result. The manager chooses separately whether to accept or discard the preview. See the Goalz privacy information before using it.

Publication state

Goalz 1.0.0 was published to the official MCP Registry on 2026-10-24 as io.github.geby85/goalz. The registry reports this version as active and latest. Its remote endpoint is https://www.goalz.de/mcp/apps; production discovery and the OAuth challenge were verified before publication. The Registry hosts the connection metadata; Goalz hosts the server.

OpenAI publisher/domain verification and review materials, Grok Build/Cursor catalog approval, and Grok Bot availability remain separate provider steps. An MCP Registry listing does not establish approval in those provider catalogs.

Grok Bot's documented Connect apps user flow is described at https://cursor.com/help/grok-bot/connect-apps; it does not document a plugin-source submission route. Do not treat a Cursor listing as a Grok Bot listing.

Help and source terms

The authored plugin configuration, skills, and documentation are licensed under MIT. The Goalz name, logo, icon, and game artwork are reserved and excluded from that license. See LICENSE and NOTICE.md.

Official platform documentation

Source: README.md at commit 6718a62

Tools

0
This server asks you to sign in, so SourceWeft could not read its tools without an account and has not indexed them. What a connected account sees can depend on that account and its permissions.

Version history

1
  1. v1.0.0LatestOct 25, 2026

Score

75% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.