High-risk tools in Godot

High severity Godot MCP Server 39 of 321 tools

39 of the 321 tools in Godot are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

bake_navigation_mesh Execute

Bake the navigation mesh for a NavigationRegion
capture_frames Execute

🔴 Game must be running. Capture frames from the running game viewport as PNG files
click_button_by_text Execute

🔴 Game must be running. Find and click a button by its text content
continue_execution Execute

Continue execution when paused at a breakpoint
evaluate_expression Execute

Evaluate a GDScript expression in the editor or running game context
execute_editor_script Execute

Execute a GDScript snippet in the editor context (EditorScript)
execute_game_script Execute

🔴 Game must be running. Execute a GDScript snippet in the running game context
export_for_platform Execute

Export the project for a specific platform
export_project Execute

Export the project using a specific preset
force_garbage_collection Execute

Force garbage collection and report the amount of memory freed
initialize_git_repository Execute

Initialize a Git repository in the project directory with a proper .gitignore
move_to Execute

🔴 Game must be running. Directly move a node to a target position
navigate_character Execute

Move a character to a target position using direct movement or pathfinding
navigate_to Execute

🔴 Game must be running. Navigate a node to a target position using pathfinding
open_scene Execute

Open a scene file in the editor
play_scene Execute

Start playing the current or specified scene. Required before using any runtime tools (get_game_*, capture_frames, etc.)
record_gameplay Execute

Record gameplay for a duration, capturing input events and/or game state
reload_plugin Execute

Reload editor plugins (triggers plugin re-initialization)
reload_project Execute

Rescan the project filesystem for new or changed files
replay_gameplay Execute

Replay a previously recorded gameplay session
replay_recording Execute

🔴 Game must be running. Replay a previously recorded game session
run_exported_build Execute

Run an exported build and capture its output
run_stress_test Execute

Run a stress test on the game (spawn entities, measure performance)
run_test_scenario Execute

Run a multi-step test scenario against the running game
select_nodes Execute

Select nodes in the editor
set_game_node_property Execute

🔴 Game must be running. Set a property on a node in the running game
simulate_action Execute

Simulate an input action (from InputMap) being pressed/released
simulate_gameplay_scenario Execute

Run a sequence of gameplay actions (input, wait, check) as an automated scenario
simulate_key Execute

Simulate a keyboard key press/release in the running game
simulate_mouse_click Execute

Simulate a mouse click at a screen position
simulate_mouse_move Execute

Simulate mouse movement to a screen position
simulate_sequence Execute

Simulate a sequence of input events with timing
start_recording Execute

🔴 Game must be running. Start recording game state changes
step_into Execute

Step into the current function call when paused at a breakpoint
step_over Execute

Step over the current line when paused at a breakpoint
stop_recording Execute

🔴 Game must be running. Stop recording and return the recorded game state data
stop_scene Execute

Stop the currently playing scene
wait_for_game_event Execute

Wait for a specific game event (signal, node creation, property change) with timeout
wait_for_node Execute

🔴 Game must be running. Wait for a node to appear in the running game tree

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

High-risk tools in Godot

Tools at high risk

Attacks that target this class

More on Godot

Enforce policy on every Godot tool call.