High-risk tools in Godot

High severity Godot MCP Server 26 of 282 tools

26 of the 282 tools in Godot are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

compile_shader Execute

Compile (reimport) a .gdshader via Godot editor or local validation.
editor_bake_lightmaps Execute

Trigger lightmap baking.
editor_bake_navigation Execute

Bake navigation meshes for all NavigationRegion nodes in current scene.
editor_debug_break Execute

Stop execution (break) in debugger.
editor_debug_continue Execute

Resume execution in debugger.
editor_debug_step Execute

Step into next line in debugger.
editor_debug_step_over Execute

Step over current line in debugger.
editor_enable_plugin Execute

Enable a named editor plugin.
editor_evaluate_expression Execute

Evaluate a GDScript expression in debugger/editor context.
editor_focus Execute

Bring the Godot editor window to the foreground.
editor_get_class_doc Execute

Open Godot documentation for a class in browser.
editor_open_asset Execute

Open an asset in editor.
editor_open_dock Execute

Open a dock: filesystem, inspector, scene, output.
editor_play Execute

Play project from editor.
editor_reimport_asset Execute

Force reimport of an asset.
editor_reload_scene Execute

Save and reload current scene.
editor_run_gdscript Execute

Execute arbitrary GDScript code in editor context.
editor_run_specific_scene Execute

Run a specific scene (not just main).
editor_set_selection Execute

Select node in editor.
editor_simulate_key Execute

Simulate a key press in the editor (e.g. "F5" to run, "Ctrl+S" to save).
editor_stop Execute

Stop playing in editor.
editor_toggle_snap Execute

Toggle 3D snap mode.
export_project Execute

Export project via Godot CLI preset.
launch_editor Execute

Launch Godot editor with project.
run_project Execute

Run the Godot project.
stop_project Execute

Stop all running Godot processes.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in Godot

Tools at high risk

Attacks that target this class

More on Godot

Enforce policy on every Godot tool call.