Better Godot Mcp

n24q02m/better-godot-mcpMIT3🔧 18 tools

D5.0SpiderScore (registry)

MCP server for Godot Engine - composite tools optimized for AI agents

Decision
Allow with Risk
Confidence
90%

Better Godot Mcp has risks — usable with isolation (4.98/10, 1 critical, 0 high).

Recommended Actions

  • high
    Run In Container
    1 critical vulnerabilities require isolation
  • high
    Limit Permissions
    Restrict tool access to minimum required scope

Do Not

  • running in production without container isolation
Risk Flags (1)
  • critical
    child_process_injection
    Command injection — execSync() with template literal interpolation
How This Was Decided
  • negativew=0.5Overall quality score = 4.98/10 (grade D)
  • negativew=0.81 critical security issue(s) detected
  • negativew=0.3Tool description clarity score = 1.5/10
Source: SpiderRating automated security scanUpdated: 2026-03-13Protocol: v1.1

Description Quality

Composite: 1.5 / 10

3-Layer Breakdown

Description (38%)
1.5
Security (34%)
8.0
Metadata (28%)
6.0

Description Dimensions

Intent Clarity
0.3
Permission Scope
0.0
Side Effects
2.0
Capability Disclosure
4.0
Operational Boundaries
1.6

Security Analysis

8.0
Score
1
Critical
0
High
0
Medium
0
Low

Findings Redacted

Detailed security findings are hidden during the 90-day responsible disclosure window. Maintainers have been notified.

1 CRITICAL

Metadata Health

Provenance (40%)
7.0
Maintenance (35%)
8.0
Popularity (25%)
1.7

Badge

Add this badge to your README:

[![SpiderRating](https://spiderrating.com/badge/n24q02m__better-godot-mcp.svg)](https://spiderrating.com/servers/n24q02m/better-godot-mcp)