execute_menu_item · GameDevBench MCP: Risk & Policy

WHAT IT DOES

What execute_menu_item does on GameDevBench MCP

AI agents invoke execute_menu_item to trigger actions in GameDevBench MCP. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call — builds kicked off, notifications sent, workflows started.

WHY IT NEEDS A POLICY

Why execute_menu_item needs a policy

This tool triggers menu actions in Godot, which can execute arbitrary game engine operations—including running code, modifying project state, launching builds, or invoking plugins. The effects are determined by the menu item argument and cannot be safely sandboxed.

From the tool's definition Tool name 'execute_menu_item' indicates it triggers menu actions within Godot. Combined with server context showing AppleScript-based automation and sibling tools like 'execute_blender_code' and 'create_script', this tool executes external operations with…

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

execute_menu_item Rate-limited

execute_menu_item stays usable, but rate-capped — a runaway agent can't fire it dozens of times a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "execute_menu_item": {
      "limits": [
        {
          "counter": "execute_menu_item_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

RATE-LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches GameDevBench MCP, so you can run agents against it safely.

FAQ

Questions about execute_menu_item

What does the execute_menu_item tool do? +

execute_menu_item. It is categorised as a Execute tool in the GameDevBench MCP MCP Server, which means it can trigger actions or run processes. Use rate limits and argument validation.

How do I enforce a policy on execute_menu_item? +

Register the GameDevBench MCP server in PolicyLayer and add a rule for execute_menu_item: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches GameDevBench MCP. Nothing to install.

What risk level is execute_menu_item? +

execute_menu_item is a Execute tool with high risk. Execute tools should be rate-limited and have argument validation enabled.

Can I rate-limit execute_menu_item? +

Yes. Add a rate_limit block to the execute_menu_item rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block execute_menu_item completely? +

Set action: deny in the PolicyLayer policy for execute_menu_item. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides execute_menu_item? +

execute_menu_item is provided by the GameDevBench MCP server (seeleai/gamedevbench-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.