High-risk tools in Unity MCP Server
24 of the 339 tools in Unity MCP Server are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
unity_advanced_toolExecuteExecute an advanced Unity tool by name (${advanced.length} cached + plugin lazy-loaded;
-
unity_amplify_focus_nodeExecuteFocus the Amplify Shader Editor view on a specific node, centering and optionally zooming to it.
-
unity_buildExecuteBuild the project for a target platform.
-
unity_debugger_enableExecuteEnable or disable the Frame Debugger. When enabled, Unity pauses rendering after a specific draw call so you can inspect the GPU state. Uses reflection to access internal Unity ...
-
unity_execute_codeExecuteRun C# in the Unity Editor with Unity API access. Return a small JSON result. If an error has executionCompleted=true, the code already ran; inspect its effects before retrying.
-
unity_execute_menu_itemExecuteExecute a Unity Editor menu command by its path (e.g.
-
unity_hub_install_editorExecuteInstall a specific Unity Editor version. Optionally include platform modules (android, ios, webgl, linux, macos, windows-il2cpp).
-
unity_hub_install_modulesExecuteInstall additional platform modules to an already-installed Unity Editor version.
-
unity_mppm_activate_playerExecuteActivate a Virtual Player (clone Unity Editor process). index must be 2, 3, or 4
-
unity_mppm_activate_scenarioExecuteLoad/activate a specific scenario by its asset path.
-
unity_mppm_startExecuteStart the currently active scenario. By default also enters Play mode on the main editor
-
unity_mppm_stopExecuteStop the running scenario. By default also exits Play mode on the main editor so
-
unity_navmesh_bakeExecuteBake the NavMesh for AI navigation. Optionally configure agent radius, height, slope, and climb.
-
unity_navmesh_set_destinationExecuteSet the destination for a NavMeshAgent (requires Play mode).
-
unity_particle_playbackExecuteControl particle system playback: play, stop, pause, restart, or clear.
-
unity_play_modeExecuteControl Unity Editor play mode: enter play, pause, or stop.
-
unity_profiler_analyzeExecuteRun a comprehensive performance analysis combining memory, rendering stats, profiler frame data, and scene complexity. Returns optimization suggestions based on configurable thr...
-
unity_profiler_enableExecuteEnable or disable the Unity Profiler. Optionally enable deep profiling for detailed call stacks (has significant performance overhead, and switching it can trigger a script relo...
-
unity_sceneview_set_cameraExecuteControl the Scene View camera: set pivot, rotation, zoom, orthographic mode, look-at target, or frame selection.
-
unity_selection_focus_scene_viewExecuteControl the Scene View camera: frame a GameObject, set pivot/rotation/zoom, toggle orthographic.
-
unity_testing_run_testsExecuteStart a Unity Test Runner test run. Returns a job ID immediately — use unity_testing_get_job to poll for progress and results.
-
unity_texture_reimportExecuteForce reimport a texture to apply pending changes.
-
unity_uma_rebuild_global_libraryExecuteRebuild or repair the UMA Global Library (UMAAssetIndexer).
-
unity_undo_lastExecuteRevert the latest verified MCP Undo group, optionally by agentId. Newer MCP/native groups require force:true. Only Unity-registered changes are covered; this revert creates no R...
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.