Loading npm security reports…
MCP Server for s&box game engine — enables Claude to build games through conversation
The runtime MCP interface intentionally provides an unsandboxed C# execution tool within a connected s&box editor. Documentation lookup can contact the official Facepunch s&box docs endpoints when its tools are called; no install-time attack behavior is established.
dist/tools/diagnostics.js exposes execute_csharp, compiling caller-supplied C# in the unsandboxed s&box editor.
dist/tools/diagnostics.jsView on unpkgdist/tools/diagnostics.js writes Editor/__Exec_<id>.cs, hotloads it, invokes it, then best-effort deletes it.
dist/tools/diagnostics.jsView on unpkgdist/tools/docs.js sends GITHUB_TOKEN only as an Authorization header to GitHub's official docs API.
package.jsonView on unpkgdist/transport/bridge-client.js writes commands to a configurable shared temp IPC directory for the s&box bridge.
dist/transport/bridge-client.jsView on unpkgdist/tools/diagnostics.js exposes execute_csharp, compiling caller-supplied C# in the unsandboxed s&box editor.
dist/tools/diagnostics.jsView on unpkgdist/tools/diagnostics.js writes Editor/__Exec_<id>.cs, hotloads it, invokes it, then best-effort deletes it.
dist/tools/diagnostics.jsView on unpkgdist/tools/docs.js sends GITHUB_TOKEN only as an Authorization header to GitHub's official docs API.
package.jsonView on unpkg · L34dist/transport/bridge-client.js writes commands to a configurable shared temp IPC directory for the s&box bridge.
dist/transport/bridge-client.jsView on unpkg