
Security News
Agent Baseline Publishes Security Reference Architecture for Software Factories
Agent Baseline’s new reference architecture shows how to secure software factories with four boundaries enforced outside the AI agent.
@spark-apps/unity-mcp
Advanced tools
Simplified Unity Editor control via MCP - Execute ANY Unity API code with execute_csharp, manage scenes, automate testing, and monitor console. 8 essential tools with unlimited flexibility.
Unity MCP provides real-time control of Unity Editor through the Model Context Protocol, allowing you to:
Feature | Description |
|---|---|
| Select, move, rotate, and scale objects with natural language | |
| Align, distribute, duplicate objects with undo support | |
| Enter play mode and run test scenarios programmatically | |
| Load, save, inspect scene hierarchy in real-time |
Option 1: Claude Code (Recommended)
claude mcp add @spark-apps/unity-mcp
Option 2: Manual Installation
npm i -g @spark-apps/unity-mcp
Then add to your MCP client config:
%APPDATA%\\Claude\\claude_desktop_config.json~/Library/Application Support/Claude/claude_desktop_config.json~/.config/Claude/claude_desktop_config.json{
"mcpServers": {
"unity-mcp": {"command": "npx", "args": ["-y", "@spark-apps/unity-mcp"]}
}
}
Restart your MCP client after installation.
Why is this needed? Unity MCP installs C# editor scripts into your Unity project that create an HTTP server on port 8080. The MCP tools communicate with Unity through this server.
Setup Steps:
Setup Unity MCP in my project at /path/to/unity/project
Assets/Editor/UnityMCP/:
MCPEditorServer.cs - HTTP serverEditorCommandHandler.cs - Command processor with undo supportPlayModeHandler.cs - Play mode automationSceneHandler.cs - Scene operations[Unity MCP] Server started on port 8080Done! The MCP tools can now control Unity Editor via HTTP.
Safe Operations (Read-only)
Tool | Description |
|---|---|
| Install editor integration into Unity project | |
| Select by name, tag, or pattern with framing | |
| Find by component type or pattern | |
| List all scenes in build settings | |
| Get complete scene hierarchy | |
| Find objects in current scene | |
| Get play mode status and logs |
Modifications (With Undo Support)
Tool | Description |
|---|---|
| Move, rotate, scale objects | |
| Align left/right/top/bottom/center | |
| Distribute evenly along axis | |
| Clone objects with undo support | |
| Start play mode programmatically | |
| Exit play mode programmatically | |
| Execute automated test scenarios | |
| Slow motion or fast forward | |
| Load scene by name or index | |
| Save current or all scenes |
Destructive Operations (Use with Caution)
Tool | Description |
|---|---|
| Delete objects with undo support | |
| Remove missing scripts and empty objects |
MCP Server Not Showing:
node --versionUnity Editor Not Responding:
Assets/Editor/UnityMCP/ scripts are installed[Unity MCP] Server started on port 8080Port Already in Use:
8080lsof -i :8080 (Mac/Linux) or netstat -ano | findstr :8080 (Windows)Contributions welcome! Focus areas:
Not in scope: Code generation (use context7 MCP instead)
MIT © Muammar Yacoob
FAQs
Simplified Unity Editor control via MCP - Execute ANY Unity API code with execute_csharp, manage scenes, automate testing, and monitor console. 8 essential tools with unlimited flexibility.
The npm package @spark-apps/unity-mcp receives a total of 13 weekly downloads. As such, @spark-apps/unity-mcp popularity was classified as not popular.
We found that @spark-apps/unity-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Agent Baseline’s new reference architecture shows how to secure software factories with four boundaries enforced outside the AI agent.

Security News
arXiv now limits authors to two submissions a month as AI slop overwhelms moderators, delays good papers, and sparks debate over applying the limit to everyone.

Research
/Security News
A new GhostAction wave hits hundreds of GitHub repos, expanding CI/CD secret theft to cloud and AI credentials in source code and git history.