Atlas / MCP servers / 6ninelives / Godot

GodotBLOCK

mcp/6ninelives/godot-8
Verdict
BLOCK
Grade
D
Trust score
69 /100
Exposed tools
57 43r · 13w · 1d
Transport
stdio
License
MIT
Stars
26
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Project Overview

Godot MCP provides a comprehensive, production-ready integration between Large Language Models (LLMs) and the Godot Engine (versions 4.x). It creates a unified Model Context Protocol interface allowing AI assistants to intelligently read, write, and manipulate Godot project files, interact with the live Godot Editor, and perform End-to-End (E2E) testing on running games. By consolidating multiple AI-to-Godot features into a single robust toolkit, Godot MCP dramatically lowers the friction of AI-assisted game development.

Installation & Usage

1. Prerequisites

  • Node.js (v18 or higher)
  • Godot Engine 4.x
  • Supported MCP client (e.g., Claude Desktop)

2. Add the Godot Plugin

Navigate to your specific Godot project's root folder in your terminal and run:

npx -y @xianlee/godot-mcp install

This will automatically copy the addons/godot_mcp folder into your project. Enable the godot_mcp plugin via Project > Project Settings > Plugins in the Godot Editor.

3. Configure the MCP Client (Claude Desktop Example)

Add the following configuration to your mcp config json:

{
"mcpServers": {
"godot-mcp": {
"command": "npx",
"args": ["-y", "@xianlee/godot-mcp"],
"env": {
"GODOT_PATH": ""
}
}
}
}

4. Running the Complete Toolchain

  1. Ensure your Godot editor is open with the godot_mcp plugin enabled.
  2. Start your MCP Client (like Claude Desktop). The server will download on-the-fly and seamlessly jump into the Godot WebSocket.

Feature List

  • Live Editor Manipulation: Modify nodes, properties, and scenes in real-time within the Godot Editor.
  • Deep Project Context: Read and analyze scripts, scene structures (.tscn), and project files dynamically.
  • Version-Aware Godot Docs: Automatically query Godot documentation matching your specific engine version.
  • **End-t
Read from source at commit 2762d6e10dd7OBSERVED · 2026-10-08
Advertisement
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code
claude mcp add godot-mcp-server -- npx -y [email protected]
claude-desktop
{
  "mcpServers": {
    "godot-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}
03

Exposed tools (57)

43 read · 13 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

ToolRiskDescription
add_nodewriteAdd a node to an existing scene
capture_visionreadCapture screenshots and viewport snapshots from Godot.
create_game_featurewriteStep-by-step prompt for implementing a new game feature:
create_game_levelwriteComprehensive prompt for creating a playable 2D game level that uses
create_scenewriteCreate a new Godot scene file
debug_godot_projectreadStructured prompt for debugging a failing Godot project:
debug_projectreadDebug and diagnose a Godot project.
edit_nodewriteEdit properties of an existing node in a scene
error_messagereadThe error message or description of the problem to debug.
execute_editor_scriptwriteExecutes arbitrary GDScript code in the Godot editor
export_mesh_libraryreadExport a scene as a MeshLibrary resource
feature_descriptionreadDescription of the game feature to implement.
game_inputreadSimulate player input in a running Godot game (via the game bridge).
game_scenereadInspect and control the scene tree of a running Godot game (via the game bridge).
game_statereadQuery the state of a running Godot game (via the game bridge).
game_waitreadWait for conditions in a running Godot game before proceeding (via the game bridge).
get_debug_outputreadGet the current debug output and errors
get_documentation_filereadGet the content of a specific documentation file
get_documentation_treereadGet a tree of available Godot documentation topics
get_godot_versionreadGet the installed Godot version
get_project_assetsreadScan a Godot project to discover all reusable assets (scenes, scripts, textures, audio, resources).
get_project_contextreadRead an existing level/scene file and extract its structural blueprint:
get_project_diagnosticsreadValidate all scripts in a Godot project without running it.
get_project_inforeadRetrieve metadata about a Godot project
get_uidreadGet the UID for a specific file in a Godot project (for Godot 4.4+)
godot_docsreadSearch and retrieve Godot documentation.
godot_expertreadSystem prompt that makes the AI a Godot game development expert —
godot_versionreadGodot version (e.g.
inspect_projectreadDeep project introspection through the Godot editor.
launch_editorreadLaunch Godot editor for a specific project
level_descriptionwriteDescription of the level to create (theme, layout, difficulty).
list_projectsreadList Godot projects in a directory
load_spritereadLoad a sprite into a Sprite2D node
manage_animationreadManage animations in a Godot scene.
manage_assetreadManage Godot assets (sprites, meshes, UIDs).
manage_audioreadManage audio operations within Godot.
manage_game_bridgereadManage the E2E game testing bridge.
manage_nodereadManage nodes in the Godot scene tree.
manage_physicsreadManage physics bodies, collision shapes, layers, and areas in a Godot scene.
manage_projectreadManage Godot projects (headless, no addon required).
manage_project_configreadManage Godot project configuration (project.godot).
manage_scenereadManage Godot scenes and resources.
manage_scriptreadManage GDScript files in the Godot project.
manage_signalreadManage Godot signals in scenes and scripts.
manage_uiwriteCreate and configure UI elements in a Godot scene.
project_pathreadAbsolute path to the Godot project (optional).
reference_scenereadPath to an existing level scene to study for patterns (e.g.
remove_nodedestructiveRemove a node from a scene
run_and_verifywriteRun a Godot project, wait for output, analyze errors, and return a structured
run_projectwriteRun the Godot project and capture output
save_scenewriteSave changes to a scene file
search_projectreadSearch for files or read file contents in a Godot project.
semantic_searchreadPerform a semantic search across the Godot project codebase to find relevant code snippets, functions, or scenes based on natural language meaning.
stop_projectwriteStop the currently running Godot project
update_project_uidswriteUpdate UID references in a Godot project by resaving resources (for Godot 4.4+)
validate_scenereadValidate and optionally auto-fix .tscn or .tres files WITHOUT launching Godot.
visualize_projectreadAnalyze and map the project structure for AI understanding.
04

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeFAIL
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfaceWARN
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (10 observation(s))
Network
declared (5 observation(s))
Shell
declared (2 observation(s))
Dependencies
not all pinned
Secrets in source
none-found

Findings (9)

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
server/src/utils/visualizer_server.ts:232
exec(`${cmd} ${url}`, (err) => {
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59
remove_node
Why it matters. 1 tool(s) can delete or overwrite
Fix. prefer a read-only mode or scoped tokens; the page states the blast radius
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
server/src/tools/core/context_tools.ts:13
import { MCPTool } from '../../utils/types.js';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
server/src/tools/core/context_tools.ts:14
import { validatePath, isGodotProject, detectProjectPath } from '../../core/path-manager.js';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
server/src/tools/core/discovery_tools.ts:12
import { MCPTool } from '../../utils/types.js';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
server/src/tools/core/discovery_tools.ts:13
import { validatePath, isGodotProject, detectProjectPath } from '../../core/path-manager.js';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
server/src/tools/core/search_tools.ts:14
import { MCPTool } from '../../utils/types.js';
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
package.json
@xenova/transformers, fastmcp, sqlite-vec, sqlite3, websocket, ws, zod, @types/node
Why it matters. 8 dependency range(s) float
Fix. pin exact versions or ship a lockfile
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
server/package.json
@modelcontextprotocol/sdk, @xenova/transformers, fastmcp, sqlite-vec, sqlite3, websocket, ws, zod
Why it matters. 14 dependency range(s) float
Fix. pin exact versions or ship a lockfile

Gates applied: no_behavioural_pass.

Audited 2026-10-08 · audit v0.4.1 · source sha 2762d6e10dd7full audit observations/trust-audit/mcp-server/6ninelives__godot-8.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-082762d6e10dd7BLOCKD69first audit
06

Questions

What tools does Godot expose?

57 in total: 43 read-only, 13 that write, and 1 that can delete or overwrite (remove_node). Every one is listed on this page with its risk.

Is Godot safe to connect to an agent?

No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on. Separately from the audit: 1 of its tools can destroy data, so scope the token you give it to what you actually need.

What credentials does Godot need?

No credential environment variables were found in its source, so it appears to need none.

How does Godot run?

It speaks stdio, so it runs as a local process your client starts. It is published on npm as godot-mcp-server at 1.0.0.

How current is this page?

The grade is for one exact copy of the source (2762d6e10dd7), read on 2026-10-08. The repository is watched and re-audited when it changes.

Advertisement