rbx-mcp-engine

The primary security consideration is the `run_code` tool, which allows AI agents to execute arbitrary Luau code within Roblox Studio with 'God Mode' privileges. While this is an advertised core feature enabling deep engine access and control, it inherently presents a significant risk if the AI agent or its prompts are compromised. The server communicates with the AI client via standard I/O (stdio JSON-RPC) and with Roblox Studio via a localhost-bound WebSocket (port 44755), limiting external network attack surface. No hardcoded secrets or obvious malicious patterns were found in the provided source.