Better GodotSAFE
Composite MCP server for Godot Engine -- 17 composite tools for AI-assisted game development.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
ARCHIVED 2026-09-13 — This repository is no longer maintained. Use the Godot editor + GDScript CLI toolchain instead of this MCP server. Existing installations keep working but receive no updates or support.
mcp-name: io.github.n24q02m/better-godot-mcp
Composite MCP server for Godot Engine -- 17 composite tools for AI-assisted game development.
[](https://mcp.n24q02m.com/get-started/modes-overview/) [](https://github.com/n24q02m/better-godot-mcp/actions/workflows/ci.yml) [](https://codecov.io/gh/n24q02m/better-godot-mcp) [](https://www.npmjs.com/package/@n24q02m/better-godot-mcp) [](https://hub.docker.com/r/n24q02m/better-godot-mcp) [](LICENSE)
[](#) [](#) [](#) [](https://github.com/python-semantic-release/python-semantic-release) [](https://developer.mend.io/)
3527ef471a09OBSERVED · 2026-10-08Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add better-godot-mcp -- npx -y @n24q02m/[email protected]
claude mcp add better-godot-mcp:latest -- docker run -i --rm docker.io/n24q02m/better-godot-mcp:latest:None
Exposed tools (8)
7 read · 1 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
animation | read | Animation management. Actions: create_player|add_animation|add_track|add_keyframe|list. Use help tool for full docs. |
audio | read | Audio bus and stream management. Actions: list_buses|add_bus|add_effect|create_stream. Use help tool for full docs. |
help | read | Full documentation. Omit topic for the overview; use a topic when compressed descriptions are insufficient. |
navigation | read | Navigation regions, agents, obstacles. Actions: create_region|add_agent|add_obstacle. Use help tool for full docs. |
physics | read | Physics config. Actions: layers|collision_setup|body_config|set_layer_name. Use help tool for full docs. |
shader | write | Godot shader management. Actions: create|read|write|get_params|list. Use help tool for full docs. |
tilemap | read | TileSet and TileMap management. Actions: create_tileset|add_source|set_tile|paint|list. Use help tool for full docs. |
ui | read | UI Control nodes and themes. Actions: create_control|set_theme|layout|list_controls. Use help tool for full docs. |
Trust audit
SAFEgrade B · trust 86/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (7 observation(s))
- Network
- declared (1 observation(s))
- Shell
- declared (3 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (16)
const DEFAULT_ENDPOINT := "http://127.0.0.1:3000/mcp"
.coderabbit.yaml
.infisical.json
.mise.toml
.pre-commit-config.yaml
.gdignore
import type { GodotConfig } from '../../godot/types.js'import type { GodotConfig } from '../../godot/types.js'import { detectGodot, isExecutable, isVersionSupported, tryGetVersion } from '../../godot/detector.js'import type { GodotConfig } from '../../godot/types.js'import { launchGodotEditor } from '../../godot/headless.js'The dock defaults to `http://127.0.0.1:3000/mcp`. Update the endpoint if the server is using a
BASE_URL = os.environ.get("GODOT_BASE_URL", "http://127.0.0.1:61157").rstrip("/")The dock defaults to `http://127.0.0.1:3000/mcp`. Update the endpoint if the server is using a
const DEFAULT_ENDPOINT := "http://127.0.0.1:3000/mcp"
@modelcontextprotocol/sdk, zod, @biomejs/biome, @types/node, @vitest/coverage-v8, esbuild, tsx, typescript
Gates applied: no_behavioural_pass.
3527ef471a09full audit observations/trust-audit/mcp-server/n24q02m__better-godot.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | 3527ef471a09 | SAFE | B | 86 | first audit |
Questions
What is the Better Godot MCP server?
Composite MCP server for Godot Engine -- 17 composite tools for AI-assisted game development.
What tools does Better Godot expose?
8 in total: 7 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Better Godot safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (86/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does Better Godot need?
No credential environment variables were found in its source, so it appears to need none.
How does Better Godot run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as @n24q02m/better-godot-mcp at 1.24.4.
How current is this page?
The grade is for one exact copy of the source (3527ef471a09), read on 2026-10-08. The repository is watched and re-audited when it changes.