LeashIndex Get the report

Index / devtools

Unity MCP Server

io-github-rachitkumarrastogi-unity-mcp-server declares 134 capabilities across 134 tools, with 1 critical issue. One of them, no-revocation, is recorded for every server in the index because MCP has no field in which to declare a way to switch a tool off; a missing declaration is not evidence that the control is missing.

92/100 exposureHigh exposure

Manifest recorded 2026-11-03 from tools/list answered by the npm package unity-mcp-server@1.7.0 (published to npm as unity-mcp-server, listed in the official MCP registry as io.github.rachitkumarrastogi/unity-mcp-server 1.7.0), run in an isolated container with no network access and placeholder credentials. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 134 tools

134 of 134 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

high · no-expiry · All 134 tools

134 of 134 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 134 tools

134 of 134 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

low · uncapped-read · All 134 tools

134 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
get_project_inforead inferred
list_build_scenesread inferred
read_agent_docsread inferred
get_player_settingsread inferred
list_packagesread inferred
get_quality_settingsread inferred
get_scripting_definesread inferred
list_assembliesread inferred
get_assembly_for_pathread inferred
list_scripts_by_assemblyread inferred
list_asmdef_referencesread inferred
list_scriptsread inferred
find_scripts_by_contentread inferred
list_all_scenesread inferred
get_scene_summaryread inferred
get_scene_components_by_typeread inferred
get_scene_objects_by_tagread inferred
get_all_components_by_typeread inferred
get_scene_hierarchy_flatread inferred
get_lighting_scene_inforead inferred
list_prefabsread inferred
list_prefab_variantsread inferred
list_prefabs_with_componentread inferred
get_prefab_summaryread inferred
find_referencesread inferred
get_asset_folder_treeread inferred
list_assets_by_extensionread inferred
list_video_clipsread inferred
list_legacy_font_assetsread inferred
list_render_texturesread inferred
list_terrain_dataread inferred
list_lighting_settings_assetsread inferred
search_assets_by_nameread inferred
get_texture_metaread inferred
search_projectread inferred
get_meta_for_assetread inferred
get_broken_asset_refsread inferred
list_scriptable_objectsread inferred
list_materialsread inferred
list_materials_using_shaderread inferred
list_shadersread inferred
list_animator_controllersread inferred
list_animation_clipsread inferred
get_animator_statesread inferred
get_animator_transitionsread inferred
list_avatar_masksread inferred
list_animator_override_controllersread inferred
list_audio_clipsread inferred
list_audio_mixersread inferred
get_addressables_inforead inferred
get_localization_tablesread inferred
get_input_axesread inferred
get_tags_and_layersread inferred
list_test_assembliesread inferred
get_repo_docsread inferred
get_project_versionread inferred
get_changelogread inferred
get_physics_settingsread inferred
get_audio_settingsread inferred
get_navigation_settingsread inferred
get_xr_settingsread inferred
get_script_execution_orderread inferred
get_version_control_settingsread inferred
get_layer_collision_matrixread inferred
get_cloud_services_configread inferred
get_package_dependency_graphread inferred
list_package_samplesread inferred
list_unity_hub_projectsread inferred
list_render_pipelinesread inferred
list_timeline_playablesread inferred
list_sprite_atlasesread inferred
list_tilemap_assetsread inferred
list_sprite_assetsread inferred
list_shader_graphsread inferred
list_vfx_graphsread inferred
list_tmp_fontsread inferred
get_tmp_settings_pathread inferred
list_ui_documentsread inferred
list_input_action_assetsread inferred
get_input_actions_summaryread inferred
list_presetsread inferred
list_editor_scriptsread inferred
get_prefab_script_guidsread inferred
get_assembly_dependency_graphread inferred
list_ci_configsread inferred
list_large_assetsread inferred
get_playfab_configread inferred
list_figma_related_assetsread inferred
get_firebase_configread inferred
get_steam_configread inferred
get_discord_configread inferred
get_fmod_configread inferred
get_wwise_configread inferred
list_substance_assetsread inferred
list_speedtree_assetsread inferred
list_lottie_assetsread inferred
get_analytics_or_crash_configread inferred
get_ads_configread inferred
get_git_lfs_trackedread inferred
get_plastic_configread inferred
get_graphics_settingsread inferred
get_time_settingsread inferred
list_subscenesread inferred
list_visual_scripting_assetsread inferred
get_script_public_apiread inferred
get_build_target_inforead inferred
get_feature_set_inferenceread inferred
get_project_statsread inferred
get_scene_referenced_assetsread inferred
detect_assembly_cyclesread inferred
find_script_referencesread inferred
get_broken_script_refsread inferred
get_prefab_dependenciesread inferred
get_release_readinessread inferred
get_build_size_estimateread inferred
search_toolsread inferred
get_multiplayer_stackread inferred
list_build_profilesread inferred
get_physics_stackread inferred
get_optimization_package_inventoryread inferred
get_ugs_cloud_stackread inferred
get_accessibility_stackread inferred
list_cinemachine_assetsread inferred
get_platform_build_hintsread inferred
get_render_pipeline_migration_hintsread inferred
get_localization_stackread inferred
get_ai_ml_package_inventoryread inferred
list_ml_model_assetsread inferred
find_ai_related_scriptsread inferred
list_ai_prompt_or_config_assetsread inferred
list_ml_agents_training_configsread inferred
get_ai_stack_summaryread inferred
list_ai_skillsread inferred
read_ai_skillread inferred
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.