registry / breakpoint-mcp / 1.19.0

breakpoint-mcp@1.19.0

MCP server exposing Godot to AI coding assistants over the Model Context Protocol — developed and tested with Claude — across four planes (CLI, live editor, LSP+DAP, runtime) with elicitation-gated destructive tools, long jobs on the formal MCP task model

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs `breakpoint-mcp init --client <client>` or invokes privileged MCP tools after configuring the server.

Impact

Can modify the selected project's addon/config files and register this package as an AI-client MCP server; privileged tools may launch Godot.

Mechanism

Explicit MCP client configuration, project addon installation, and Godot process control.

Rationale

No concrete malicious chain was found after source inspection. The package nonetheless performs explicit user-command AI-agent configuration and exposes powerful project tooling, so it warrants a warning under the stated lifecycle policy.

Evidence

package.jsondist/cli/init.jsdist/cli/clients.jsdist/cli/github.jsdist/tools/processes.jsdist/secret.js<projectPath>/addons/breakpoint_mcp<projectPath>/project.godot<projectPath>/.vscode/mcp.json~/.cursor/mcp.json~/.codeium/windsurf/mcp_config.json~/Library/Application Support/Claude/claude_desktop_config.json

breakpoint-mcp@1.19.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code