High-risk tools in Unreal

High severity Unreal MCP Server 33 of 127 tools

33 of the 127 tools in Unreal are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

build_cook_run Execute

Full BuildCookRun pipeline — build, cook, stage, package, and optionally deploy/run. This is the primary command for packaging a project.
build_graph Execute

Execute a BuildGraph XML script for CI/CD automation.
build_plugin Execute

Build a plugin standalone.
build_target Execute

Build a C++ target using UnrealBuildTool. Compiles the project
call_preset_function Execute

Call a function exposed via a Remote Control Preset.
clean_project Execute

Clean build artifacts for the project.
compile_blueprint Execute

Compile a Blueprint.
content_audit Execute

Run content audit to find costly or problematic assets (runs ContentAudit commandlet).
cook_content Execute

Cook content only (no C++ build). Converts assets to platform-specific format.
execute_console_command Execute

Run a console command in the Unreal Editor (e.g.,
execute_python Execute

Execute arbitrary Python code in the Unreal Editor
generate_lods Execute

Generate LODs for a static mesh.
package_project Execute

Package the project for distribution. Runs build + cook + stage + package.
recompile_material Execute

Recompile a material after making changes to its graph.
reinit_niagara_system Execute

Reinitialize a Niagara system on an actor.
render_sequence Execute

Queue a Movie Render Queue job for a sequence.
reset_niagara_system Execute

Reset a Niagara system on an actor.
run_all_automation_tests Execute

Run all automation tests.
run_automation_test Execute

Run a specific automation test by name.
run_automation_tests_by_category Execute

Run automation tests matching a category pattern.
run_editor_utility_blueprint Execute

Run an Editor Utility Blueprint
run_editor_utility_widget Execute

Run an Editor Utility Widget by asset path.
run_gauntlet Execute

Launch a Gauntlet test session via UAT. Runs tests in a full game instance.
run_map_check Execute

Run Map Check validation on the current level.
run_stat_command Execute

Execute a stat console command (e.g., stat fps, stat unit, stat memory).
select_actors Execute

Set the editor
spawn_niagara_at_location Execute

Spawn a Niagara particle system at a world location.
spawn_niagara_attached Execute

Spawn a Niagara system attached to an actor.
start_csv_profiling Execute

Start CSV profiling capture for performance regression analysis.
start_trace Execute

Start an Unreal Insights trace session with selected channels.
stop_trace Execute

Stop the active Unreal Insights trace session.
validate_assets Execute

Run data validation on assets in a directory.
validate_data Execute

Trigger the Data Validation framework on assets.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

High-risk tools in Unreal

Tools at high risk

Attacks that target this class

More on Unreal

Enforce policy on every Unreal tool call.