Atlas / MCP servers / programalyst / unity-semantic-bridge

unity-semantic-bridgeCAUTION

mcp/programalyst/unity-semantic-bridge

Unity MCP bridge designed for Human-Agent Coworking.

Verdict
CAUTION
Grade
B
Trust score
89 /100
Exposed tools
33 20r · 9w · 4d
Transport
—
License
Apache-2.0
Stars
8
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

A Unity MCP Bridge built for agents working alongside you in a live Editor session — not just querying a static project. Token-efficient tools give your agent visibility into what changed in the scene while you were both working in it.

Note: Unity Semantic Bridge is optimized for projects that use uGUI and URP (Universal Render Pipeline).If your project uses UI Toolkit, HDRP or BiRP use the official Unity CLI instead

Features

  • Optimized scene heirarchy query and gameobject inspection tools with workflow hints for agents - more token efficient than official Unity CLI tool
  • In Editor connection status and auto reconnect through domain reloads.
  • Not tied to Unity Licensing - Runs 100% local. No need to reauthenticate when token expires
  • Dedicated tools for agent to see human actions and changes
  • Dedicated tools for working with Scriptable objects (error prone if agent uses bash to work SOs directly)
  • Dedicated tools for uGUI. Makes uGUI accessible for agents to create a hierarchy, set layout properties, assign references, and inspect the result
  • Bounded batch inspection and property edits with dry runs, expected-value checks, stale-reference protection, and grouped Undo
  • Read-only prefab comparisons with component filtering and structured numeric values that preserve imported precision
  • In Editor MCP log so you can see what tools are called
  • Dedicated Lighting tools for URP projects

Prerequisites

  • Unity 2022.3–6.3.
  • Git on PATH and uv for Python setup.

Installation

Install both the Unity package and the Python MCP server:

  1. In U
Read from source at commit e1ccc9b71e89OBSERVED · 2026-10-10
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code
claude mcp add com.gamenami.unity-semantic-bridge -- npx -y [email protected]
claude-desktop
{
  "mcpServers": {
    "com.gamenami.unity-semantic-bridge": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}
03

Exposed tools (33)

20 read · 9 write · 4 destructive. Blast radius: 4 tools can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

ToolRiskDescription
add_componentwrite
author_uiwriteCreate/revise ordinary uGUI in one Edit Mode transaction on Unity
clear_console_logsdestructiveClears old Unity Editor console logs.
create_gameobjectwrite
create_scriptable_objectwrite
delete_assetdestructiveDeletes an asset via AssetDatabase.DeleteAsset (supports Undo).
delete_gameobjectdestructive
find_asset_referencesreadFinds all assets or scenes that reference a specific asset path.
get_asset_catalog_statusread
get_compilation_statusread
get_component_coderead
get_component_inspector_valuesread
get_console_logsreadReturns the most recent errors and warnings from the Unity Console.
get_gameobject_treeread
get_lights_affecting_objectread
get_physics_layersread
get_project_settingsread
get_project_treereadReturns the folder structure starting from the given path.
get_recent_unity_eventsreadReturns Unity Editor events (hierarchy/selection/play-mode/console/objectChanged changes)
get_screenshotread
get_urp_pipeline_settingsreadReturns the URP render pipeline asset
inspect_gameobjectread
inspect_uireadInspect calculated uGUI layout, screen bounds, visibility estimates, interaction,
notify_unityreadSends a message to the Unity Editor chat window.
raycast_uireadQuery actual raycasters, returning each hit
refresh_assetsreadQueue AssetDatabase.Refresh on Unity
remove_componentdestructiveRemove a component by instance_id
save_ui_contextwriteExplicitly save the entire containing scene or current prefab contents, including
set_editor_throttlingwriteExplicitly change Unity
set_parentwrite
set_play_modewriteEnters or exits Play Mode in the Unity Editor.
undo_ui_batchreadUndo the latest UI batch only if no intervening Undo activity occurred.
update_scriptable_objectwrite
04

Trust audit

CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeWARN
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfaceWARN
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (1 observation(s))
Network
declared (4 observation(s))
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (8)

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319
com.gamenami.unity-semantic-bridge/Editor/EditorBridge.cs:27
/// <c>SendNotification("unity/hierarchyChanged", new JObject{...})</c> -> POST http://127.0.0.1:1074/rpc (via <see cref="SendRequestAsync"/>, acked)
MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319
com.gamenami.unity-semantic-bridge/Editor/EditorBridge.cs:33
private static readonly string Prefix = $"http://127.0.0.1:{Port}/";
MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319
com.gamenami.unity-semantic-bridge/Editor/EditorBridge.cs:38
private static readonly string PythonRpcUrl = $"http://127.0.0.1:{PythonEventPort}/rpc";
MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319
com.gamenami.unity-semantic-bridge/Editor/Window/SemanticBridgeWindow.cs:67
EditorGUILayout.HelpBox($"HTTP bridge active at http://127.0.0.1:{EditorBridge.ListeningPort}/rpc — ready to receive JSON-RPC commands.", MessageType.Info);
MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59
clear_console_logs, delete_asset, delete_gameobject, remove_component
Why it matters. 4 tool(s) can delete or overwrite
Fix. prefer a read-only mode or scoped tokens; the page states the blast radius
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
docs/installation.md:133
`http://127.0.0.1:1073/rpc`. Unity sends events to Python at
LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94
mcp-editor-bridge/mcp_tools.py:138
return Image(data=base64.b64decode(result), format="jpeg")
INFOInventory / provenance · inv.oversize · CWE-1104
images/usb-editor-mode.png
images/usb-editor-mode.png
Why it matters. 2021483 bytes not read

Gates applied: no_behavioural_pass.

Audited 2026-10-10 · audit v0.4.1 · source sha e1ccc9b71e89full audit observations/trust-audit/mcp-server/programalyst__unity-semantic-bridge.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-10e1ccc9b71e89CAUTIONB89first audit
06

Questions

What is the unity-semantic-bridge MCP server?

Unity MCP bridge designed for Human-Agent Coworking.

What tools does unity-semantic-bridge expose?

33 in total: 20 read-only, 9 that write, and 4 that can delete or overwrite (clear_console_logs, delete_asset, delete_gameobject, remove_component). Every one is listed on this page with its risk.

Is unity-semantic-bridge safe to connect to an agent?

With care. The audit graded it B (89/100) and found 8 things worth knowing before you trust this server, listed below with the exact line each was found on. Separately from the audit: 4 of its tools can destroy data, so scope the token you give it to what you actually need.

What credentials does unity-semantic-bridge need?

No credential environment variables were found in its source, so it appears to need none.

How current is this page?

The grade is for one exact copy of the source (e1ccc9b71e89), read on 2026-10-10. The repository is watched and re-audited when it changes.

Advertisement