High-risk tools in Unity MCP Server
25 of the 324 tools in Unity MCP Server are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
unity_particle_playbackExecuteControl particle system playback: play, stop, pause, restart, or clear.
-
unity_advanced_toolExecuteExecute an advanced/specialized Unity tool by name. Use unity_list_advanced_tools
-
unity_buildExecuteStart a build of the Unity project for a target platform.
-
unity_execute_codeExecuteExecute arbitrary C# code inside the Unity Editor. The code runs in the editor context with access to all Unity APIs. Useful for one-off operations, queries, and automation. Ret...
-
unity_execute_menu_itemExecuteExecute a Unity Editor menu command by its path (e.g.
-
unity_mppm_startExecuteStart the currently active scenario. By default also enters Play mode on the main editor
-
unity_mppm_stopExecuteStop the running scenario. By default also exits Play mode on the main editor so
-
unity_scene_newExecuteCreate a new empty scene.
-
unity_testing_run_testsExecuteStart a Unity Test Runner test run. Returns a job ID immediately — use unity_testing_get_job to poll for progress and results.
-
unity_amplify_focus_nodeExecuteFocus the Amplify Shader Editor view on a specific node, centering and optionally zooming to it.
-
unity_profiler_analyzeExecuteRun a comprehensive performance analysis combining memory, rendering stats, profiler frame data, and scene complexity. Returns optimization suggestions based on configurable thr...
-
unity_selection_focus_scene_viewExecuteControl the Scene View camera: frame a GameObject, set pivot/rotation/zoom, toggle orthographic.
-
unity_debugger_enableExecuteEnable or disable the Frame Debugger. When enabled, Unity pauses rendering after a specific draw call so you can inspect the GPU state. Uses reflection to access internal Unity ...
-
unity_hub_install_editorExecuteInstall a specific Unity Editor version. Optionally include platform modules (android, ios, webgl, linux, macos, windows-il2cpp).
-
unity_hub_install_modulesExecuteInstall additional platform modules to an already-installed Unity Editor version.
-
unity_mppm_activate_playerExecuteActivate a Virtual Player (clone Unity Editor process). index must be 2, 3, or 4
-
unity_mppm_activate_scenarioExecuteLoad/activate a specific scenario by its asset path.
-
unity_navmesh_bakeExecuteBake the NavMesh for AI navigation. Optionally configure agent radius, height, slope, and climb.
-
unity_navmesh_set_destinationExecuteSet the destination for a NavMeshAgent (requires Play mode).
-
unity_play_modeExecuteControl Unity Editor play mode: enter play, pause, or stop.
-
unity_profiler_enableExecuteEnable or disable the Unity Profiler. Optionally enable deep profiling for detailed call stacks (has significant performance overhead).
-
unity_scene_openExecuteOpen a scene by its asset path (relative to Assets/).
-
unity_sceneview_set_cameraExecuteControl the Scene View camera: set pivot, rotation, zoom, orthographic mode, look-at target, or frame selection.
-
unity_texture_reimportExecuteForce reimport a texture to apply pending changes.
-
unity_uma_rebuild_global_libraryExecuteRebuild or repair the UMA Global Library (UMAAssetIndexer).
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.