Atlas / MCP servers / ozankasikci / Unity Editor

Unity EditorSAFE

Name: Unity Editor
Author: ozankasikci

mcp/ozankasikci/unity-editor

MCP server by ozankasikci · game development · game engine · mcp · Audited 2026-10-08

⚑ Report / re-scan Source ↗

An MCP server and client for LLMs to interact with Unity Projects

Verdict

SAFE

Grade

Trust score

88 /100

Exposed tools

11 9r · 2w · 0d

Transport

stdio · streamable-http

License

MIT

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://github.com/ozankasikci/unity-editor-mcp/actions/workflows/test-coverage.yml) [](https://codecov.io/gh/ozankasikci/unity-mcp) [](https://opensource.org/licenses/MIT) [](https://www.npmjs.com/package/unity-editor-mcp)

⚠️ This project is in beta and under heavy development. Features and APIs may change. Use at your own discretion.

Unity Editor MCP (Model Context Protocol) enables AI assistants like Claude and Cursor to interact directly with the Unity Editor, allowing for AI-assisted game development and automation.

🚀 Key Features

🎮 GameObject Management: Create primitives, modify transforms, manage hierarchy, and delete objects
🔧 Component System: Add, remove, modify, and list components on GameObjects with full property control
🎭 Prefab Workflow: Complete prefab mode editing - open, modify, save, and exit with override management
🔍 Smart Search: Find GameObjects by name, tag, layer, or component type with exact/partial matching
📊 Scene Analysis: Analyze scene composition, component statistics, and prefab connections
🎯 Component Inspection: Get component values, find objects by component, trace references between objects
🎬 Scene Control: Create, load, save scenes, manage build settings, and work with multiple scenes
🏃 Play Mode Testing: Start, pause, and stop play mode, check editor state and compilation status
🖼️ Screenshot Capture: Take screenshots of Game View or Scene View with analysis capabilities
🎨 Asset Management: Create and modify prefabs, materials, scripts with comprehensive property control
🖱️ UI Automation: Interact with Unity UI ele

Read from source at commit 2188e3088a98OBSERVED · 2026-10-08

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code

claude mcp add com.unity.editor-mcp -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "com.unity.editor-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}

Exposed tools (11)

9 read · 2 write · 0 destructive.

Tool	Risk	Description
`analyze_scene_contents`	read	Analyze and get statistics about the current scene
`create_scene`	write	Create a new scene in Unity
`find_by_component`	read	Find all GameObjects that have a specific component type
`get_component_values`	read	Get all properties and values of a specific component
`get_gameobject_details`	read	Get detailed information about a specific GameObject
`get_object_references`	read	Find all references to and from a GameObject
`get_scene_info`	read	Get detailed information about a scene
`list_scenes`	read	List all scenes in the Unity project
`load_scene`	read	Load a scene in Unity
`ping`	read	Test connection to Unity Editor
`save_scene`	write	Save the current scene in Unity

Trust audit

SAFEgrade B · trust 88/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	WARN
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (5 observation(s))
Network: declared (5 observation(s))
Shell: none-observed
Dependencies: not all pinned
Secrets in source: none-found

Findings (17)

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319

mcp-server/src/core/daemonServer.js:444

`http://127.0.0.1:${port}`,

LOWInventory / provenance · inv.hidden_file · CWE-1104

mcp-server/.c8rc.json

.c8rc.json

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

mcp-server/src/core/serverMetadata.js:6

const packageJsonPath = fileURLToPath(new URL('../../package.json', import.meta.url));

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

mcp-server/src/handlers/analysis/AnalyzeSceneContentsToolHandler.js:2

import { analyzeSceneContentsToolDefinition } from '../../tools/analysis/analyzeSceneContents.js';

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

mcp-server/src/handlers/analysis/FindByComponentToolHandler.js:2

import { findByComponentToolDefinition } from '../../tools/analysis/findByComponent.js';

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

mcp-server/src/handlers/analysis/GetComponentValuesToolHandler.js:2

import { getComponentValuesToolDefinition } from '../../tools/analysis/getComponentValues.js';

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

mcp-server/src/handlers/analysis/GetGameObjectDetailsToolHandler.js:2

import { getGameObjectDetailsToolDefinition } from '../../tools/analysis/getGameObjectDetails.js';

LOWNetwork egress · net.raw_ip · CWE-200, CWE-319

mcp-server/tests/unit/core/daemonRegistry.test.js:38

url: 'http://127.0.0.1:49152/mcp',

LOWNetwork egress · net.raw_ip · CWE-200, CWE-319

mcp-server/tests/unit/core/daemonRegistry.test.js:54

assert.equal(registry.url, 'http://127.0.0.1:49152/mcp');

LOWNetwork egress · net.raw_ip · CWE-200, CWE-319

mcp-server/tests/unit/core/daemonServer.test.js:44

const response = await fetch(`http://127.0.0.1:${daemon.port}/health`);

LOWNetwork egress · net.raw_ip · CWE-200, CWE-319

mcp-server/tests/unit/core/daemonServer.test.js:53

assert.equal(registry.url, `http://127.0.0.1:${daemon.port}/mcp`);