Back to Home
LeeSinLiang icon

godot-mcp

Verified Safe

by LeeSinLiang

Overview

Enables AI assistants to control and access the Godot game engine for tasks like launching the editor, managing projects, editing scenes, and remote debugging.

Installation

Run Command
node build/index.js

Environment Variables

  • GODOT_PATH
  • DEBUG

Security Notes

The server executes system commands and spawns Godot processes using `child_process.execAsync` and `child_process.spawn`. Input parameters are passed to Godot scripts as JSON strings, with efforts made to escape quotes for the shell. Path validation (`validatePath`) is present to mitigate basic path traversal. The remote debugging feature connects to local ports (6006/6007) and can execute GDScript via the Debug Adapter Protocol (DAP), posing a risk if the AI input were to be malicious. However, the screenshot feature's GDScript is hardcoded by the server, reducing injection risk there. The primary security model relies on the AI agent being trustworthy and the internal Godot scripts correctly interpreting parameters. The setup scripts (`init.js`, `bin/godot-mcp-init.js`) prompt for paths and perform checks like `existsSync` and `godot --version` validation.

Similar Servers

Stats

Interest Score35
Security Score7
Cost ClassMedium
Avg Tokens10000
Stars1
Forks0
Last Update2025-12-04

Tags

GodotGame DevelopmentAI AssistantMCPRemote Debugging