Sbox MCP Policy · 287 Tools

POLICY

How to control Sbox

PolicyLayer is an MCP gateway — it sits between your AI agents and Sbox, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "add_achievement_trigger": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "add_beam": {
    "limits": [
      {
        "counter": "add_beam_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "capture_view": {
    "limits": [
      {
        "counter": "capture_view_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Sbox — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON SBOX →

Instant setup, no code required.

FULL CATALOGUE

All 287 Sbox tools

DESTRUCTIVE 11 tools

Destructive add_achievement_trigger SCENE-MUTATING: generate a data-driven achievement trigger-zone component AND create its GameObject now (named Destructive batch_delete Delete MANY GameObjects (and their entire subtrees) in one call. ALWAYS pass dryRun:true first — it reports ea Destructive clear_cave_path Clear all waypoints in CaveBuilder.Path and remove the built cave from the scene (invokes Destructive clear_forest_pois Wipe all POIs and trails in ForestGenerator and clear placed forest objects from the scene (invokes Destructive clear_terrain_features Wipe MapBuilder feature lists — Hills, Clearings, Trails, CavePath, or all of them (default). Destructive: the Destructive debug_clear Remove ALL debug-draw primitives at once by destroying the debug holder for the current scene (edit or play) — Destructive delete_camera_bookmark Delete one session-scoped camera bookmark and its comparison baselines. Returns deleted=false when already abs Destructive delete_gameobject Delete a GameObject from the active scene by its GUID Destructive delete_script Permanently delete a file from the project by its project-relative path (built for C scripts, but removes any Destructive remove_component Remove a component from a GameObject by type name (e.g. Destructive restore_checkpoint REPLACE the open scene

EXECUTE 43 tools

Execute add_render_target_camera CCTV / security monitor / mirror / simple portal: creates a secondary camera (IsMainCamera=false, Priority par Execute add_tts_voice Generate a text-to-speech speaker component over Sandbox.Speech.Synthesizer (the OS speech engine — dynamic NP Execute bake_navmesh Enable + bake the active scene Execute bake_reflections Bake all EnvmapProbe reflection probes in the scene (EnvmapProbe.BakeAll) so they actually capture their surro Execute build_terrain_mesh Build a standalone heightmap terrain mesh (a MeshComponent) from a hills/clearings JSON spec — independent of Execute console_run Run an s&box console command / ConCmd via Sandbox.ConsoleSystem.Run — e.g. a cvar ( Execute create_event_director Generate a generalized L4D-style AI/pacing director component (host-authoritative). On a configurable interval Execute create_npc_spawner Generate a spawner Component that instantiates an NPC prefab over time / in escalating waves at spawn points, Execute debug_draw_box Draw a wireframe debug box centered at a point. Renders in editor and play. Ideal for visualizing a trigger_zo Execute debug_draw_ray Draw a debug ray (drawn as an arrow) from an origin along a direction for a given length. Renders in editor an Execute debug_draw_sphere Draw a wireframe debug sphere at a point. Renders in editor and play. Ideal for visualizing a physics_overlap Execute drive_player EXPERIMENTAL — Drive the active PlayerController DURING PLAY MODE across multiple frames: synthesize sustained Execute execute_csharp EXPERIMENTAL. Compile + run a C snippet inside the s&box EDITOR (which is unsandboxed): writes a temp [ConCmd] Execute focus_object Highlight a GameObject by selecting it in the editor. NOTE: s&box exposes no dedicated focus API, so this only Execute frame_camera Aim the s&box EDITOR viewport camera at a GameObject (by id) or a world point (position + optional radius), th Execute generate_lipsync_dialogue Generate a lipsync dialogue performer — NPCs SPEAK their lines with MOVING MOUTHS: a sealed Component holding Execute instantiate_prefab Spawn a FULL prefab instance into the active scene — components and children recreated. Uses the engine Execute invoke_button Call a public method on a component. Matching is tried in order: (1) a [Button] attribute label, (2) the exact Execute invoke_method Call a public method BY NAME on a component of a live scene GameObject, passing ARGUMENTS. The with-args sibli Execute load_scene Open a scene in the s&box editor by its path Execute network_spawn Network-enable a GameObject so it is synchronized across all connected clients. Calls NetworkSpawn(). Returns Execute play_animation Play a named animation sequence on a GameObject Execute play_movie Start MoviePlayer playback. Targets the MoviePlayer on the given GameObject, or the first MoviePlayer in the s Execute play_sound_preview Play a sound in the editor for testing without entering play mode. Returns { playing, sound, volume }. Fire-an Execute playtest playtest Execute playtest_abort Stop the RUNNING playtest immediately: releases held input actions, restores UseInputControls, and finalizes t Execute pose_citizen Pose a Citizen by setting CitizenAnimationHelper params (enables PlayAnimationsInEditorScene so the pose shows Execute recompile_asset Compile a project asset by path — registers it with the editor Execute record_gameplay_clip Start recording live play-mode gameplay into a Sandbox.MovieMaker clip — REQUIRES play mode (start_play first; Execute restart_editor Restart the s&box editor and wait for the bridge to reconnect — closes the C-edit→recompile loop so addon/brid Execute run_self_test Run an end-to-end health check of the bridge: create a temp object, add a component, assign + measure a model, Execute select_object Select a GameObject in the editor (highlights it in the hierarchy and scene view). Replaces the current select Execute set_forest_seed Set ForestGenerator.Seed and (by default) regenerate — re-rolls the forest layout while keeping POIs, trails, Execute set_time_scale Set the running game Execute simulate_input Press or release a named input action during PLAY mode (via Sandbox.Input.SetAction) so input-driven behavior Execute spawn_particle EXPERIMENTAL — build an additive runtime ParticleEffect (no texture asset needed): kind = fire, embers, sparks Execute spawn_vpcf Spawn a REAL particle system by playing a compiled .vpcf asset through LegacyParticleSystem — the reliable pat Execute start_multiplayer_test Start a real local multiplayer test from PLAY MODE. Creates an explicitly private, hidden lobby when needed, v Execute start_play Enter play mode — starts running the game in the editor. Scripts execute, physics simulate, everything goes li Execute stop_movie Stop MoviePlayer playback (the counterpart to play_movie). Targets the MoviePlayer on the given GameObject, or Execute stop_multiplayer_test Stop every client process launched by start_multiplayer_test; exited clients are cleared while failed live kil Execute stop_play Exit play mode — stops the game and returns to editor. All runtime changes are discarded Execute trigger_hotload Force s&box to recompile and hotload all C scripts immediately. Use after creating or editing scripts to see c

WRITE 163 tools

READ 70 tools

Read capture_view Capture an inline PNG in edit or play mode. With no pose it renders the live main camera; pass exactly one id Read checkpoint_scene Snapshot the ENTIRE open scene (every root GameObject, full serialization) to temp storage OUTSIDE the project Read describe_project One-call project orientation: identity (name/ident/org/type), the open scene with object count, scene and pref Read describe_scene One-call orientation for the OPEN scene (works in edit and play mode): total/root object counts, component his Read describe_type Inspect a type Read drive_player_status EXPERIMENTAL — Read the result of the most recently FINISHED drive_player job: which controller members were a Read find_broken_references Scan the project for broken references, two layers in one call: (1) every GameObject in the open scene — rende Read find_in_project Grep the user Read find_objects Query the scene for GameObjects by name (case-insensitive substring), component type name, and/or tag — combin Read find_objects_near Find GameObjects within a world-space radius of exactly one explicit position or originId, sorted nearest firs Read gameplay_recording_status Poll the gameplay recording job. While recording returns { recording:true, jobId, elapsedSeconds (clip-timelin Read get_all_properties Dump all public properties of every component on a GameObject. Returns { id, components } where each entry is Read get_asset_info Get detailed metadata about a specific asset — type, path, tags, package source Read get_bounds Get provenance-rich world bounds for a GameObject. Preserves legacy top-level center/size/extents/mins/maxs/ra Read get_bridge_status Check the s&box Bridge connection — call this FIRST in a session. Returns a human summary plus JSON: connected Read get_compile_errors Scan the recent s&box log for compile errors and exceptions — the fast way for Claude to confirm whether its l Read get_doc_page Fetch the full Markdown of one s&box guide page (from search_docs). Pass a slug like \ Read get_method_signature Get the formal signature(s) of a method on a type — parameter names, types, defaults, return type, all overloa Read get_navmesh_path Query the baked navmesh for a walkable path between two world points (NavMesh.GetSimplePath). Returns the orde Read get_network_status Check the current multiplayer status. Returns { isActive, isHost, isClient, isConnecting, maxPlayers, serverNa Read get_package_details Fetch package information from the s&box package backend (Package.FetchAsync) by ident. Returns { fullIdent, t Read get_prefab_info Inspect a prefab file as a structured summary: { path, name, size, modified, totalObjects, maxDepth, reference Read get_profiler_stats Read live engine performance counters (ported from Unity Read get_project_config Read the full project configuration from the .sbproj file including title, description, version, type, package Read get_project_info Get information about the current s&box project — path, name, game type, dependencies, and configuration Read get_property Read a single property value from a component on a GameObject Read get_runtime_property Read a component property value during play mode. Must call start_play first Read get_scene_hierarchy Get the scene tree — GameObjects with their names, GUIDs, components, and parent/child relationships. Pair max Read get_selected_objects Get the GameObjects currently selected by the user in the s&box editor. Returns { count, selected } where each Read get_tags Read the tags currently on a GameObject. (Pair with set_tags to add/remove/clear, and find_objects to query by Read inspect_model_geometry Inspect a mounted model before placement without creating a GameObject. Returns model-local/default-pose aggre Read inspect_networked_object Inspect the live networking contract of a GameObject. Returns {id, name, network: {active, isProxy, isOwner, i Read is_playing Check current play state — returns Read list_animations List the animation sequences available on a GameObject Read list_asset_library List assets visible to the editor Read list_available_components List all instantiable component types in the TypeLibrary — built-in AND your project Read list_camera_bookmarks List all session-scoped camera bookmarks in stable name order. Returns resolved pose, optional target/lookAt, Read list_checkpoints List this project Read list_component_buttons List the [Button]-attributed methods on a component. NOTE: this only finds methods decorated with [Button]; in Read list_doc_categories List the categories of the official s&box guide documentation, with how many pages each has. Use a category na Read list_libraries List the s&box libraries/addons installed in this project (reads Libraries/ + each .sbproj). Discovers what Read list_movies List the project Read list_prefabs List all .prefab files in the project. Filter by name or path Read list_project_files Browse the project file tree. Optionally filter by directory path and/or file extension (e.g. Read list_scenes List all .scene files in the project with their paths and basic metadata Read list_sounds List the project Read measure_distance Measure the distance between two points or two GameObjects. Provide a/b as {x,y,z} or idA/idB as GUIDs. Return Read multiplayer_test_status Read the host-side state of the local multiplayer test harness without changing it: play/network state, connec Read networking_lint Static-scan the project Read physics_overlap Spatial volume query: return the GameObjects whose colliders intersect a SPHERE (center + radius) or a BOX (ce Read playtest_status Poll the playtest started by the playtest tool. While running: { active:true, step, totalSteps, passed, failed Read raycast Perform a physics raycast (Scene.Trace.Ray) from start to end — pass both; the handler traces the start→end se Read raycast_terrain Sample MapBuilder terrain height at world (x, y). Returns z (the surface height). Use to place props on the te Read razor_lint Static-scan .razor and .razor.scss files for the silent footguns that crash the Razor transpiler or stylesheet Read read_file Read the contents of a file in the s&box project (scripts, scenes, configs, etc.) Read read_log Read s&box Read sandbox_lint Static-scan the project Read save_inspect Inspect the game Read scene_validate Validate the active scene for the silent setup footguns that break controllers/physics/cameras: no CameraCompo Read screenshot_from Historical alias of capture_view. Frame a GameObject or use an explicit position with optional lookAt/rotation Read screenshot_orbit Capture a GameObject from several angles in one call without moving the real camera. Uses get_bounds for frami Read search_assets Search for assets in the project by name, type, or keyword. Returns models, materials, sounds, textures, prefa Read search_docs Search the official s&box guide documentation (the Facepunch/sbox-docs pages rendered at sbox.game/dev/doc) by Read search_types Find loaded types matching a name pattern. Useful for discovering Read services_query Read from Sandbox.Services — the cloud stats/leaderboard layer many games use as their real DB. action= Read simulate_npc_perception READ-ONLY edit-mode verifier: evaluate the NPC Read spawn_citizen Spawn an animated Citizen character: a SkinnedModelRenderer with the Citizen model, plus (by default) a Citize Read take_screenshot Capture a 1920x1080 PNG from the scene Read tune_vehicle Apply a handling preset to a vehicle component on a GameObject: arcade (forgiving), drift (low grip, sharp ste Read validate_project Validate that the project is ready for publishing. Runs four checks: .sbproj exists, at least one scene, proje

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Sbox

Can an AI agent delete data through the Sbox MCP server? +

Yes. The Sbox server exposes 11 destructive tools including add_achievement_trigger, batch_delete, clear_cave_path. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Sbox? +

The Sbox server has 163 write tools including add_beam, add_cave_waypoint, add_collider. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Sbox.

How many tools does the Sbox MCP server expose? +

287 tools across 4 categories: Destructive, Execute, Read, Write. 70 are read-only. 217 can modify, create, or delete data.

How do I enforce a policy on Sbox? +

Register the Sbox MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Sbox

What Sbox exposes to your agents

The most dangerous Sbox tools

How to control Sbox

All 287 Sbox tools

Related servers

Questions about Sbox

Enforce policy on every Sbox tool call.