High-risk tools in Godot

High severity Godot MCP Server 37 of 386 tools

37 of the 386 tools in Godot are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

compile_shader Execute

Compile (reimport) a .gdshader via Godot editor or local validation.
editor_bake_lightmaps Execute

Trigger lightmap baking.
editor_bake_navigation Execute

Bake navigation meshes for all NavigationRegion nodes in current scene.
editor_debug_break Execute

Stop execution (break) in debugger.
editor_debug_continue Execute

Resume execution in debugger.
editor_debug_step Execute

Step into next line in debugger.
editor_debug_step_over Execute

Step over current line in debugger.
editor_enable_plugin Execute

Enable a named editor plugin.
editor_evaluate_expression Execute

Evaluate a GDScript expression in debugger/editor context.
editor_focus Execute

Bring the Godot editor window to the foreground.
editor_get_class_doc Execute

Open Godot documentation for a class in browser.
editor_open_asset Execute

Open an asset in editor.
editor_open_dock Execute

Open a dock: filesystem, inspector, scene, output.
editor_pause Execute

Pause the editor scene tree (note: only affects the editor tree, not a separately running game).
editor_play Execute

Play project from editor.
editor_play_current_scene Execute

Play the currently edited scene from the editor.
editor_reimport_asset Execute

Force reimport of an asset.
editor_reload_scene Execute

Save and reload current scene.
editor_run_gdscript Execute

Execute arbitrary GDScript code in editor context.
editor_run_specific_scene Execute

Run a specific scene (not just main).
editor_set_selection Execute

Select node in editor.
editor_show_toast Execute

Push a toast notification to the editor toaster (info/warning/error).
editor_simulate_key Execute

Simulate a key press in the editor (e.g. "F5" to run, "Ctrl+S" to save).
editor_stop Execute

Stop playing in editor.
editor_toggle_snap Execute

Toggle 3D snap mode.
editor_unpause Execute

Resume the editor scene tree from pause.
export_project Execute

Export project via Godot CLI preset.
launch_editor Execute

Launch Godot editor with project.
run_project Execute

Run the Godot project.
runtime_call_method Execute

Call a method on a node in the running game.
runtime_emit_signal Execute

Emit a signal on a node in the running game.
runtime_freeze Execute

Pause (freeze) the running game.
runtime_input Execute

Inject a key input event into the running game.
runtime_resume Execute

Resume (unpause) the running game.
runtime_set_node Execute

Set properties on a node in the running game (live mutation).
runtime_step Execute

Advance the running game by N frames deterministically while paused (frame stepping).
stop_project Execute

Stop all running Godot processes.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in Godot

Tools at high risk

Attacks that target this class

More on Godot

Enforce policy on every Godot tool call.