
Research
/Security News
737 Chrome VPN Extensions Linked to Brand Impersonation and Browser Traffic Redirection
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.
@jamesworkbenchcrm/roblox-studio-mcp
Advanced tools
MCP server that connects AI coding assistants to Roblox Studio — read, create, modify, and delete instances in the DataModel
A Model Context Protocol (MCP) server that connects AI coding assistants like Claude Code directly to Roblox Studio. Read, create, modify, and delete instances in the DataModel — all from your terminal.
Claude Code (MCP Client)
|
MCP Server (stdio)
|
HTTP Bridge (localhost:3001)
|
Studio Plugin (polls every 200ms)
|
Roblox Studio DataModel
The bridge has two halves:
localhost:3001All write operations are wrapped in ChangeHistoryService, so every change can be undone with Ctrl+Z in Studio.
| Tool | Type | Description |
|---|---|---|
get_descendants | Read | Get all descendants with paths, optional maxDepth |
get_children | Read | Get immediate children of an instance |
get_properties | Read | Get serialized properties of an instance |
find_instances | Read | Search by className and/or namePattern |
get_services | Read | List all DataModel services |
get_selection | Read | Get currently selected instances in Studio |
create_instance | Write | Create a new Instance with properties |
set_properties | Write | Modify properties on an existing instance |
delete_instance | Write | Destroy an instance (undo-supported) |
clone_instance | Write | Clone an instance to a new parent |
move_instance | Write | Reparent an instance |
set_selection | Write | Set the Studio selection |
insert_service | Write | Insert a service via game:GetService() |
execute_luau | Write | Execute arbitrary Luau code in the plugin context |
Paths use dot-notation starting from game, e.g. game.Workspace.SpawnLocation.
git clone https://github.com/Justice219/roblox-studio-mcp.git
cd roblox-studio-mcp
npm install
npm run build
Or install directly from npm:
npm install -g @jamesworkbenchcrm/roblox-studio-mcp
Using Rojo:
rojo build plugin.project.json -o MCPBridge.rbxmx
Then copy the plugin file to your Roblox plugins folder:
| OS | Path |
|---|---|
| macOS | ~/Documents/Roblox/Plugins/MCPBridge.rbxmx |
| Windows | %LOCALAPPDATA%\Roblox\Plugins\MCPBridge.rbxmx |
Or build directly to the plugins folder:
# macOS
rojo build plugin.project.json -o ~/Documents/Roblox/Plugins/MCPBridge.rbxmx
# Windows
rojo build plugin.project.json -o "%LOCALAPPDATA%\Roblox\Plugins\MCPBridge.rbxmx"
Open Roblox Studio, then:
Home → Game Settings → Security → Allow HTTP Requests → ON
This is required for the plugin to communicate with the local MCP server.
Add the server to your MCP client configuration.
Claude Code (~/.claude/settings.json):
{
"mcpServers": {
"roblox-studio": {
"command": "node",
"args": ["/absolute/path/to/roblox-studio-mcp/dist/index.js"]
}
}
}
Claude Desktop (claude_desktop_config.json):
{
"mcpServers": {
"roblox-studio": {
"command": "node",
"args": ["/absolute/path/to/roblox-studio-mcp/dist/index.js"]
}
}
}
Replace /absolute/path/to/ with the actual path where you cloned the repo.
Once connected, your AI assistant can manipulate Studio directly:
"Create a Part named SpawnPad in Workspace at position 0, 5, 0"
"Get all children of ServerScriptService"
"Find all instances with className RemoteEvent"
"Set the BrickColor of game.Workspace.SpawnPad to Bright green"
The assistant uses the MCP tools to read the DataModel, create instances, set properties, and more — all reflected live in Studio with full undo support.
| Environment Variable | Default | Description |
|---|---|---|
MCP_BRIDGE_PORT | 3001 | HTTP bridge port |
MCP_BRIDGE_PORT=4000 npm start
# Watch mode — recompiles on file changes
npm run dev
# Type-check without emitting
npm run typecheck
# Build
npm run build
# Start the server
npm start
src/
├── index.ts # Entry point — wires up all components
├── types.ts # Interfaces, constants, command type definitions
├── mcp-server.ts # MCP tool definitions (14 tools with Zod validation)
├── http-bridge.ts # Express HTTP server (poll/result/heartbeat endpoints)
└── command-queue.ts # In-memory command queue with timeout management
plugin/
├── init.server.luau # Plugin entry point — polling loop, UI, toolbar
└── modules/
├── CommandRouter.luau # Dispatches commands to handlers
├── HttpClient.luau # HTTP requests to the bridge
├── PathResolver.luau # Dot-notation path ↔ Instance resolution
└── Serializer.luau # Roblox type ↔ JSON serialization
127.0.0.1 — it is never exposed to the networkChangeHistoryService for undo supportexecute_luau runs code in the plugin context with no sandboxing — only use with trusted inputThe serializer handles bidirectional conversion for:
Vector3 · Vector2 · CFrame · Color3 · BrickColor · UDim · UDim2 · Rect · NumberSequence · ColorSequence · NumberRange · Enum · Instance · Font · PhysicalProperties · Ray
All types use a { _type: "TypeName", ... } JSON format for lossless round-tripping.
Plugin shows red dot / "Disconnected"
npm start)3001)"Plugin not connected" error in Claude Code
Port already in use
MCP_BRIDGE_PORT=4000 npm start
npm install -g @jamesworkbenchcrm/roblox-studio-mcp
https://www.npmjs.com/package/@jamesworkbenchcrm/roblox-studio-mcp
MIT
FAQs
MCP server that connects AI coding assistants to Roblox Studio — read, create, modify, and delete instances in the DataModel
The npm package @jamesworkbenchcrm/roblox-studio-mcp receives a total of 34 weekly downloads. As such, @jamesworkbenchcrm/roblox-studio-mcp popularity was classified as not popular.
We found that @jamesworkbenchcrm/roblox-studio-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.