Editor commands, Python execution, PIE, undo/redo, hot reload, viewport, performance, sequencer, build pipeline, logs, editor control. Actions: - start_editor: Launch Unreal Editor with the current project and reconnect bridge - stop_editor: Close Unreal Editor gracefully - restart_editor: Stop ...
Accepts freeform code/query input (command); Accepts file system path (filePath); High parameter count (44 properties)
Part of the Ue MCP server. Enforce policies on this tool with Intercept, the open-source MCP proxy.
AI agents may call editor to permanently remove or destroy resources in Ue. Without a policy, an autonomous agent could delete critical data in a loop with no way to undo the damage. Intercept blocks destructive tools by default and requires explicit human approval before enabling them.
Without a policy, an AI agent could call editor in a loop, permanently destroying resources in Ue. There is no undo for destructive operations. Intercept blocks this tool by default and only allows it when a human explicitly approves the action.
Destructive tools permanently remove data. Block by default. Only enable with explicit approval workflows.
tools:
editor:
rules:
- action: deny
reason: "Blocked by default — enable with approval" See the full Ue policy for all 20 tools.
Agents calling destructive-class tools like editor have been implicated in these attack patterns. Read the full case and prevention policy for each:
Other tools in the Destructive risk category across the catalogue. The same policy patterns (deny, require_approval) apply to each.
editor is one of the critical-risk operations in Ue. For the full severity-focused view — only the critical-risk tools with their recommended policies — see the breakdown for this server, or browse all critical-risk tools across every MCP server.
Editor commands, Python execution, PIE, undo/redo, hot reload, viewport, performance, sequencer, build pipeline, logs, editor control. Actions: - start_editor: Launch Unreal Editor with the current project and reconnect bridge - stop_editor: Close Unreal Editor gracefully - restart_editor: Stop then start the editor - execute_command: Run console command. Params: command - execute_python: Run Python in editor. Params: code - run_python_file: Run a Python file from disk with __file__/__name__ populated (#142). Params: filePath, args? - set_property: Set UObject property. Params: objectPath, propertyName, value - play_in_editor: PIE control. Params: pieAction (start|stop|status) - get_runtime_value: Read PIE actor value. Params: actorLabel, propertyName - set_pie_time_scale: Fast-forward PIE game time. Params: factor (>0). Raises WorldSettings caps and calls SetGlobalTimeDilation. - hot_reload: Hot reload C++ - undo: Undo last transaction - redo: Redo last transaction - get_perf_stats: Editor performance stats - run_stat: Run stat command. Params: command - set_scalability: Set quality. Params: level - capture_screenshot: Screenshot. Params: filename?, resolution? - capture_scene_png: Headless PNG screenshot via SceneCapture2D (works unfocused, guaranteed RGBA8 LDR). Params: outputPath, location?, rotation?, width? (default 1280), height? (default 720), fov? (default 90) (#148) - get_viewport: Get viewport camera - set_viewport: Set viewport camera. Params: location?, rotation? - focus_on_actor: Focus on actor. Params: actorLabel - create_sequence: Create Level Sequence. Params: name, packagePath? - get_sequence_info: Read sequence. Params: assetPath, includeSectionDetails? (attach sockets, first transform key values per track) - add_sequence_track: Add track. Params: assetPath, trackType, actorLabel? - play_sequence: Play/stop/pause sequence. Params: assetPath, sequenceAction - build_all: Build all (geometry, lighting, paths, HLOD) - build_geometry: Rebuild BSP geometry - build_hlod: Build HLODs - validate_assets: Run data validation. Params: directory? - get_build_status: Get build/map status - cook_content: Cook content. Params: platform? - get_log: Read output log. Params: maxLines?, filter?, category? - search_log: Search log. Params: query - get_message_log: Read message log. Params: logName? - list_crashes: List crash reports - get_crash_info: Get crash details. Params: crashFolder - check_for_crashes: Check for recent crashes - set_dialog_policy: Auto-respond to dialogs matching a pattern. Params: pattern, response - clear_dialog_policy: Clear dialog policies. Params: pattern? - get_dialog_policy: Get current dialog policies - list_dialogs: List active modal dialogs - respond_to_dialog: Click a button on the active modal dialog. Params: buttonIndex?, buttonLabel? - open_asset: Open asset in its editor. Params: assetPath - reload_bridge: Hot-reload Python bridge handlers from disk. It is categorised as a Destructive tool in the Ue MCP Server, which means it can permanently delete or destroy data. Block by default and require explicit approval.
Add a rule in your Intercept YAML policy under the tools section for editor. You can allow, deny, rate-limit, or validate arguments. Then run Intercept as a proxy in front of the Ue MCP server.
editor is a Destructive tool with critical risk. Critical-risk tools should be blocked by default and only enabled with explicit human approval.
Yes. Add a rate_limit block to the editor rule in your Intercept policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.
Set action: deny in the Intercept policy for editor. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.
editor is provided by the Ue MCP server (ue-mcp). Intercept sits as a proxy in front of this server to enforce policies before tool calls reach the server.
Open source. One binary. Zero dependencies.
npx -y @policylayer/intercept