Cocos
UnverifiedREPOcaravanglory/cocos-mcp-server
F
Catalogue entry updated 43 days ago
Auth postureNot probedno remote endpoint probed yet
Tools1579 Destructive · 20 Execute · 54 Write · 72 Read · 2 Other
Worst categoryDestructivegrade tracks the peak, not the average
Capability mix
Destructive 9Execute 20Write 54Read 72Other 2
What it can reach
Ingests untrusted inputTouches secretsReaches networkRuns codeTouches filesChanges permissionsSends external commsPersistsDeletes dataMoves money
Exfiltration pathReads content an attacker can plant and can send data outward — a prompt-injection-to-exfiltration route.
Tools 157
batch_delete_assetsclear_all_reference_imagesclear_broadcast_logclear_consoledelete_asset
View all 157 tools
delete_noderemove_componentremove_reference_imagerevert_prefabalign_view_with_nodebuild_projectchange_gizmo_toolchange_view_mode_2d_3dexecute_component_methodexecute_scene_scriptexecute_scriptfocus_camera_on_nodeslisten_broadcastopen_asset_externalopen_preferences_settingsrefresh_assetsrefresh_reference_imagereimport_assetrun_projectscene_snapshot_abortsoft_reload_scenestart_preview_serverstop_listeningstop_preview_serveradd_componentadd_reference_imagealign_camera_with_viewattach_scriptbatch_import_assetsbegin_undo_recordingcancel_undo_recordingchange_gizmo_coordinatechange_gizmo_pivotclose_scenecompress_texturescopy_assetcopy_nodecreate_assetcreate_nodecreate_prefabcreate_scenecut_nodeduplicate_nodeduplicate_prefabend_undo_recordingimport_assetimport_preferencesinstantiate_prefabmove_array_elementmove_assetmove_nodeopen_scenepaste_noderemove_array_elementreset_componentreset_node_propertyreset_node_transformreset_preferencesreset_scene_viewrestore_prefabrestore_prefab_nodesave_assetsave_asset_metasave_scenesave_scene_asset_component_propertyset_grid_visibleset_icon_gizmo_3dset_icon_gizmo_sizeset_node_propertyset_node_transformset_preferences_configset_reference_image_dataset_reference_image_opacityset_reference_image_positionset_reference_image_scaleswitch_reference_imageupdate_prefabcheck_builder_statuscheck_server_connectivitydetect_node_typeexport_asset_manifestexport_preferencesfind_asset_by_namefind_node_by_namefind_nodesgenerate_available_urlget_active_listenersget_all_nodesget_all_preferencesget_asset_dependenciesget_asset_detailsget_asset_infoget_assetsget_available_componentsget_broadcast_logget_build_settingsget_component_infoget_componentsget_console_logsget_current_sceneget_editor_infoget_log_file_infoget_network_interfacesget_node_infoget_node_treeget_performance_statsget_prefab_infoget_prefab_listget_project_infoget_project_logsget_project_settingsget_scene_hierarchyget_scene_listget_scene_view_statusget_server_statusget_unused_assetslist_reference_imagesload_prefabopen_build_panelquery_asset_db_readyquery_asset_pathquery_asset_urlquery_asset_uuidquery_component_has_scriptquery_current_reference_imagequery_gizmo_coordinatequery_gizmo_pivotquery_gizmo_tool_namequery_gizmo_view_modequery_grid_visiblequery_icon_gizmo_3dquery_icon_gizmo_sizequery_nodes_by_asset_uuidquery_preferences_configquery_reference_image_configquery_scene_classesquery_scene_componentsquery_scene_dirtyquery_scene_readyquery_server_ip_listquery_server_portquery_sorted_server_ip_listquery_view_mode_2d_3dscene_snapshotsearch_project_logsvalidate_asset_referencesvalidate_json_paramsvalidate_prefabvalidate_sceneformat_mcp_requestsafe_string_value
Change history
No change history on record for this server.
Recommended policy
batch_delete_assetsdeny
align_view_with_noderequire approval
add_componentrate limit
Read-only toolsallow
Full policy breakdown with enforcement rules →