cocos-mcp-server
by DaxianLee
Overview
Enables AI assistants to interact with the Cocos Creator editor through a Model Context Protocol (MCP) server, providing control over scene, node, component, asset, and project operations.
Installation
No command providedSecurity Notes
CRITICAL RISK: The `debug_execute_script` tool (found in `source/tools/debug-tools.ts`) allows arbitrary JavaScript code execution within the Cocos Creator editor's scene context via a direct `eval` call. This constitutes a Remote Code Execution (RCE) vulnerability if an AI client is compromised or a malicious prompt is executed. While the server defaults to binding to `127.0.0.1`, the `Access-Control-Allow-Origin: *` header in `source/mcp-server.ts` implies it could be configured for broader network access, escalating the risk significantly. Even with local-only access, this feature could lead to severe compromise of the project or local system if exploited.
Similar Servers
unity-mcp
MCP for Unity acts as a bridge, allowing AI assistants to interact directly with the Unity Editor to manage assets, control scenes, edit scripts, and automate tasks.
XcodeBuildMCP
A Model Context Protocol (MCP) server that provides Xcode-related tools for AI assistants, enabling programmatic interaction with Xcode projects, simulators, devices, and Swift packages.
gdai-mcp-plugin-godot
The GDAI MCP plugin enables AI to remotely control the Godot Engine editor, automating tasks like scene creation, node manipulation, script editing, and debugging.
Unreal_mcp
Enables AI assistants to control and automate Unreal Engine via its Remote Control API for game development tasks.