High-risk tools in Godot MCP Server
25 of the 167 tools in Godot MCP Server are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
assert_screen_textExecuteAssert that a given text string appears on the screen within a timeout.
-
bake_navigation_meshExecuteBake the navigation mesh for a NavigationRegion3D node.
-
call_game_node_methodExecuteCall a method on a node in the running game.
-
connect_game_signalExecuteListen to a signal on a node in the running game and return fired events.
-
deploy_to_androidExecuteBuild and deploy the project to a connected Android device.
-
dismiss_dialogsExecuteDismiss any open modal dialogs in the Godot editor.
-
execute_game_scriptExecuteExecute arbitrary GDScript code in the running game context.
-
export_projectExecuteExport the project using a named export preset.
-
focus_nodeExecuteFocus/frame a node in the 2D/3D viewport.
-
open_sceneExecuteOpen a scene in the Godot editor.
-
play_animationExecutePlay an animation on an AnimationPlayer node.
-
play_sceneExecuteRun the project (or a specific scene) in the Godot game window.
-
reload_pluginExecuteReload an editor plugin by name.
-
run_editor_scriptExecuteExecute arbitrary GDScript code in the editor context (EditorScript).
-
run_stress_testExecuteRun a stress test scenario and collect performance data over time.
-
run_test_scenarioExecuteRun a structured test scenario in the running game and collect results.
-
select_nodeExecuteSelect a node in the editor scene tree panel.
-
simulate_actionExecuteSimulate an Input Map action in the running game.
-
simulate_keyExecuteSimulate a keyboard key event in the running game.
-
simulate_mouse_clickExecuteSimulate a mouse button click in the running game.
-
simulate_mouse_moveExecuteSimulate mouse movement in the running game.
-
simulate_sequenceExecuteSimulate a sequence of input events in the running game.
-
start_frame_captureExecuteStart continuous frame capture from the running game.
-
stop_frame_captureExecuteStop continuous frame capture from the running game.
-
stop_sceneExecuteStop the currently running game.
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.