Atlas / MCP servers / chrrxs / Roblox Studio MCP

Roblox Studio MCPBLOCK

Name: Roblox Studio MCP
Author: chrrxs

mcp/chrrxs/robloxstudio-mcp

MCP server by chrrxs · mcp · roblox · roblox studio · Audited 2026-10-12

MCP server for Roblox Studio runtime debugging, playtest control, screenshots/input, multiplayer testing, and per-peer server/client eval from AI agents.

Verdict

BLOCK

Grade

Trust score

69 /100

Exposed tools

3 3r · 0w · 0d

Transport

streamable-http

License

MIT

Stars

297

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Connect your coding agent directly to Roblox Studio. It can edit places, run Luau in live server and client contexts, start and stop playtests, and collect logs, screenshots, memory reports, and profiler captures from each peer.

[](https://www.npmjs.com/package/@chrrxs/robloxstudio-mcp)

What it can do

Debug a running game

Run Luau with eval_server_runtime or eval_client_runtime. Both tools execute in a live server or client context and use the same require cache as your game scripts.
Instrument live code with breakpoints. It records each hit without pausing the playtest.
Read output from edit mode, the server, or a specific client with get_runtime_logs, including messages logged during startup.

Automate playtests

Start, inspect, and stop solo or multi-client sessions with solo_playtest and multiplayer_playtest.
Open or close Studio windows with manage_instance. It can launch a baseplate, a local place file, a published place, or an older place revision.

Find performance problems

Record server or client CPU timings with capture_script_profiler and capture_micro_profiler.
Break down memory use with get_memory_breakdown or attribute scene cost with get_scene_analysis.

Work in edit mode

Run Luau in Studio's edit context with execute_luau.
Use set_properties for instance properties and find_and_replace_in_scripts for script text. For project-specific bulk edits, use execute_luau.
For large generated Luau, use the verified chunk-staging workflow: explicit instance routing, UTF-8 byte/hash readback, ownership-checked cleanup, and bounded recovery without blindly replaying mutations.
Use selection to inspect or update Studio selection and frame a part or model before capturing the viewport.
Capture the viewport with capture_screenshot, then send mouse or keyboard input. See

Read from source at commit 8953a18d2b0aOBSERVED · 2026-10-12

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add studio-plugin --env AUTH_EMPTY_READS=${AUTH_EMPTY_READS} --env AUTH_TEST_HOME=${AUTH_TEST_HOME} --env AUTH_TOKEN_FILE=${AUTH_TOKEN_FILE} --env ROBLOX_OPEN_CLOUD_API_KEY=${ROBLOX_OPEN_CLOUD_API_KEY} -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "studio-plugin": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "AUTH_EMPTY_READS": "${AUTH_EMPTY_READS}",
        "AUTH_TEST_HOME": "${AUTH_TEST_HOME}",
        "AUTH_TOKEN_FILE": "${AUTH_TOKEN_FILE}",
        "ROBLOX_OPEN_CLOUD_API_KEY": "${ROBLOX_OPEN_CLOUD_API_KEY}"
      }
    }
  }
}

Exposed tools (3)

3 read · 0 write · 0 destructive.

Tool	Risk	Description
`Gems`	read
`VIP`	read	Perks
`noop`	read

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	WARN
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (1 observation(s))
Network: none-observed
Shell: declared (2 observation(s))
Dependencies: not all pinned
Secrets in source: found

Findings (25)

HIGHFilesystem / path · fs.credential_store · CWE-22, CWE-59

scripts/studio-test-snapshot.mjs:17

'.git-credentials', '.gitconfig', '.netrc', '_netrc', '.pypirc', '.dockercfg',

Why it matters. touches a credential store

MEDIUMInventory / provenance · inv.binary · CWE-1104

packages/core/assets/Baseplate.rbxl

Baseplate.rbxl

Why it matters. a compiled or binary member cannot be reviewed from source

Fix. ship source, or explain the binary in the README

MEDIUMHard-coded secrets · secret.generic · CWE-798, CWE-321

packages/core/src/__tests__/creator-store-assets.test.ts:47

apiKey: 'asset-delivery-only-key',

MEDIUMHard-coded secrets · secret.generic · CWE-798, CWE-321

packages/core/src/__tests__/managed-instance-registry.test.ts:17

token: 'active-parent-test-lock',

LOWInventory / provenance · inv.suspicious_name · CWE-1104

packages/core/src/__tests__/payload-timeout-diagnostics.test.ts

payload-timeout-diagnostics.test.ts

Why it matters. member named after an attack tool

Fix. remove or justify

LOWInventory / provenance · inv.suspicious_name · CWE-1104

tests/luau-payload-transfers.mjs

luau-payload-transfers.mjs

Why it matters. member named after an attack tool

Fix. remove or justify

LOWInventory / provenance · inv.suspicious_name · CWE-1104

tests/studio-payload-boundaries.mjs

studio-payload-boundaries.mjs

Why it matters. member named after an attack tool

Fix. remove or justify

LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338

scripts/studio-package-cache.mjs:92

const hash = createHash('md5');

LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338

scripts/studio-package-cache.mjs:110

const hash = createHash('md5');

LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338

tests/studio-package-cache.mjs:13

const md5 = (bytes) => createHash('md5').update(bytes).digest('hex');

LOWFilesystem / path · fs.credential_store · CWE-22, CWE-59

tests/studio-test-snapshot.mjs:54

'config/token.json', '.git-credentials', '.netrc', '.aws/credentials',

Why it matters. touches a credential store

LOWFilesystem / path · fs.credential_store · CWE-22, CWE-59

tests/studio-test-snapshot.mjs:55

'.ssh/id_ed25519', '.claude.json', '.codex/auth.json', 'mcp.json',

Why it matters. touches a credential store

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

packages/core/src/__tests__/installer-release.test.ts:99

const wrapper = path.resolve(__dirname, '../../../', packageName, 'src/install-plugin.ts');

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

packages/core/src/__tests__/property-correctness.test.ts:7

const source = readFileSync(resolve(__dirname, '../../../../studio-plugin/src/modules', file), 'utf8');

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

packages/core/src/__tests__/selection.test.ts:158

entryPoints: [path.resolve(process.cwd(), '../../studio-plugin/src/modules/handlers/MetadataHandlers.ts')],

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

packages/core/src/__tests__/studio-cooperative-job-runner.test.ts:51

entryPoints: [path.resolve(process.cwd(), '../../studio-plugin/src/modules/CooperativeJobRunner.ts')],

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

packages/core/src/__tests__/studio-handler-failures.test.ts:22

const source = readFileSync(resolve(__dirname, '../../../../studio-plugin/src/modules/handlers/PropertyHandlers.ts'), 'utf8');