Atlas / MCP servers / hhhh124hhhh / Godot

GodotBLOCK

mcp/hhhh124hhhh/godot-5

godot-mcp 自然语言游戏开发利器

Verdict
BLOCK
Grade
D
Trust score
69 /100
Exposed tools
20 10r · 9w · 1d
Transport
—
License
MIT
Stars
43
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

一个全面的 Godot 引擎与 AI 助手的集成解决方案,使用模型上下文协议 (MCP) 实现。该插件允许 AI 助手与您的 Godot 项目进行交互,提供强大的代码辅助、场景操作和项目管理功能。

🌟 主要特性

🤖 智能技能系统

  • Context7 自动研究: 自动获取最新的 Godot 文档和最佳实践
  • Godot 兼容性检查器: 自动检测和修复 Godot 3.x 到 4.x 的 API 兼容性问题
  • MCP 编排工具: 智能协调多个 MCP 工具完成复杂开发任务
  • 中文开发指南: 为中文开发者提供完整的本地化配置和开发指导

🔧 强大的 MCP 工具集

  • Godot 兼容性工具:
  • detect_godot_version - 检测项目 Godot 版本
  • check_godot_api_compatibility - 检查 API 兼容性问题
  • fix_godot_api_compatibility - 自动修复兼容性问题
  • get_godot_migration_advice - 获取版本迁移建议
  • 标准开发工具:
  • 节点工具: 创建、修改、删除节点
  • 脚本工具: 编辑、分析、创建 GDScript 文件
  • 场景工具: 操作场景和结构
  • 编辑器工具: 控制编辑器功能
  • 增强开发工具:
  • Chrome DevTools: 网页调试和性能分析
  • Sequential Thinking: 结构化思维和问题分解
  • Context7: 获取最新库文档和 API 信息

🎯 自动化代码生成

  • 智能触发: 当需要代码生成、配置步骤或库文档查询时,自动使用 Context7 MCP 工具
  • 实时文档查询: 无需明确请求,系统自动获取最新技术文档
  • 最佳实践应用: 结合项目实际情况提供最优解决方案

🎮 技术基础:Godot 引擎

godot-mcp 基于 Godot 4.x 引擎构建,这是我们的技术基础和AI自动开发的平台。

⚙️ Godot 4.x 系统要求

  • 推荐版本: Godot 4.3+ (兼容 4.2+)
  • 支持平台: Windows 10+、macOS 10.13+、Linux (Ubuntu 18.04+)
  • 下载地址: 官方下载页面

🎯 为什么选择 Godot 作为基础引擎?

1. AI 友好架构

  • 结构化的项目文件格式
  • 清晰的 API 设计和命名规范
  • 完整的节点系统和场景管理
  • 热重载功能,实时查看修改效果

2. 轻量级且强大

  • 完全免费、开源
  • 零配置即可开始开发
  • 丰富的内置功能,减少开发时间
  • 跨平台导出支持

3. 现代化技术栈

  • 全新的 Vulkan 渲染后端
  • 改进的物理引擎和 UI 系统
  • 支持多线程渲染和资源优化

🛠️ 与 godot-mcp 的集成优势

godot-mcp 通过 MCP 协议将 AI 能力与 Godot 引擎无缝集成:

  • 🤖 AI 驱动开发: 自然语言命令自动生成代码和配置
  • 🔧 智能工具: 节点操作、脚本编辑、场景管理等
  • 🎨 自动化测试: AI 辅助的功能验证和问题排查
  • 📚 实时学习: 自动获取最新 Godot 文档和最佳实践

📚 Godot 学习资源

  • 官方文档: https://docs.godotengine.org/
  • 示例项目: https://github.com/godotengine/godot-demo-projects
  • 社区资源: https://godotengine.org/asset-library/asset

🚀 快速开始

🎉 小白用户专享: 运行 ./setup-mcp-tools.sh (Linux/macOS) 或 setup-mcp-tools.bat (Windows) 一键配置所有 AI 技能!
📖 详细指南: 查看 AI 技能快速配置指南 或 [5分钟快速开始指南](QUICK_S
Read from source at commit 43395783e36eOBSERVED · 2026-10-08
Advertisement
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code
claude mcp add godot-mcp-server -- npx -y [email protected]
claude-desktop
{
  "mcpServers": {
    "godot-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}
03

Exposed tools (20)

10 read · 9 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

ToolRiskDescription
check_godot_api_compatibilityread检查GDScript代码中的API兼容性问题
create_nodewriteCreate a new node in the Godot scene tree
create_resourcewriteCreate a new resource in the project
create_scenewriteCreate a new empty scene with optional root node type
create_scriptwriteCreate a new GDScript file in the project
create_script_templatewriteGenerate a GDScript template with common boilerplate
delete_nodedestructiveDelete a node from the Godot scene tree
detect_godot_versionread检测项目中使用的Godot版本和配置信息
edit_scriptwriteEdit an existing GDScript file
execute_editor_scriptwriteExecutes arbitrary GDScript code in the Godot editor
fix_godot_api_compatibilityread自动修复GDScript代码中的API兼容性问题
get_current_scenereadGet information about the currently open scene
get_godot_migration_adviceread获取Godot版本迁移建议和最佳实践
get_node_propertiesreadGet all properties of a node in the Godot scene tree
get_project_inforeadGet information about the current Godot project
get_scriptreadGet the content of a GDScript file
list_nodesreadList all child nodes under a parent node in the Godot scene tree
open_scenereadOpen a scene in the editor
save_scenewriteSave the current scene to disk
update_node_propertywriteUpdate a property of a node in the Godot scene tree
04

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeFAIL
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfaceWARN
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (6 observation(s))
Network
declared (5 observation(s))
Shell
declared (3 observation(s))
Dependencies
not all pinned
Secrets in source
none-found

Findings (3)

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
.claude/skills/godot-skills/sub-skills/godot-mcp-auto-launcher/scripts/start-mcp.js:38
exec(cmd, (error, stdout) => {
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59
delete_node
Why it matters. 1 tool(s) can delete or overwrite
Fix. prefer a read-only mode or scoped tokens; the page states the blast radius
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
server/package.json
fastmcp, websocket, ws, zod, @types/node, @types/ws, nodemon, typescript
Why it matters. 8 dependency range(s) float
Fix. pin exact versions or ship a lockfile

Gates applied: no_behavioural_pass.

Audited 2026-10-08 · audit v0.4.1 · source sha 43395783e36efull audit observations/trust-audit/mcp-server/hhhh124hhhh__godot-5.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-0843395783e36eBLOCKD69first audit
06

Questions

What is the Godot MCP server?

godot-mcp 自然语言游戏开发利器

What tools does Godot expose?

20 in total: 10 read-only, 9 that write, and 1 that can delete or overwrite (delete_node). Every one is listed on this page with its risk.

Is Godot safe to connect to an agent?

No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on. Separately from the audit: 1 of its tools can destroy data, so scope the token you give it to what you actually need.

What credentials does Godot need?

No credential environment variables were found in its source, so it appears to need none.

How current is this page?

The grade is for one exact copy of the source (43395783e36e), read on 2026-10-08. The repository is watched and re-audited when it changes.

Advertisement