io.github.doritoman90000/universal-game-modder
NPM · UNIVERSAL-GAME-MODDER
Local MCP server: detects a game's engine and gives agents native binary analysis/patching tools.
Available components
Last scanned (7 hours ago)
Scores higher than 76% of npm servers
Category Developer Tools
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security98
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 61 of 158 dependencies flagged as unhealthy (1 deprecated). View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 63 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability79
- AI-judged instruction clarity (excellent).Pass
- Tool/resource definitions use about 6792 tokens (~67/item across 100 items; 100 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "build_and_deploy" implies "deploy" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 100 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 31 Oct 26 0
- Stability: 0.97 → pass security
- 30 Oct 26 0
- Stability: pass → 0.97 functional
- 24 Oct 26 0
- Stability: 0.97 → pass security
- 23 Oct 26 0
- Stability: pass → 0.97 functional
- 22 Oct 26 0
- Security disclosure: unverified → fail ▼ functional
- 21 Oct 26 0
- Security disclosure: fail → unverified ▼ functional
- 17 Oct 26 0
- Stability: 0.97 → pass security
- 16 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Analysed npm/universal-game-modder@0.1.4
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Dependencies 158 packages
| Packages resolved | 158 |
|---|---|
| Deprecated | 1 |
| Stale | 60 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
analyze_bepinex_log ~44
Analyze BepInEx log for errors, warnings, and patch issues.
| Name | Type | Req | Description |
|---|---|---|---|
| log_path | string | yes | Path to BepInEx LogOutput.log |
No output schema declared.
No examples provided.
analyze_dll_structure ~37
Analyze the overall structure of a DLL: sections, imports, exports summary.
| Name | Type | Req | Description |
|---|---|---|---|
| file_path | string | yes | Path to DLL file |
No output schema declared.
No examples provided.
analyze_file_format ~46
Detect file format from magic bytes. Works with PE, ELF, Mach-O, ZIP, Java class, and other formats.
| Name | Type | Req | Description |
|---|---|---|---|
| file_path | string | yes | Path to the file |
No output schema declared.
No examples provided.
analyze_godot_pck ~49
Analyze a Godot .pck archive and list its contents.
| Name | Type | Req | Description |
|---|---|---|---|
| file_path | string | yes | Path to .pck file |
| filter | string | – | Optional filename filter |
No output schema declared.
No examples provided.
analyze_pe_full ~54
Full PE (Portable Executable) analysis. Shows headers, sections, data directories, and whether it is managed (.NET) or native.
| Name | Type | Req | Description |
|---|---|---|---|
| file_path | string | yes | Path to PE file (.exe or .dll) |
No output schema declared.
No examples provided.
analyze_save_format ~28
Analyze game save system by examining SaveManager classes.
| Name | Type | Req | Description |
|---|---|---|---|
| assembly | string | yes | Assembly key |
No output schema declared.
No examples provided.
build_and_deploy ~75
Compile a mod project and deploy the output to the game mods directory.
| Name | Type | Req | Description |
|---|---|---|---|
| build_command | string | – | Custom build command (auto-detected if omitted) |
| deploy_path | string | – | Path to deploy the built mod (auto-detected if omitted) |
| project_path | string | yes | Path to the mod project directory |
No output schema declared.
No examples provided.
calculate_checksums ~36
Calculate MD5, SHA1, SHA256 checksums for a file.
| Name | Type | Req | Description |
|---|---|---|---|
| file_path | string | yes | Path to the file |
No output schema declared.
No examples provided.
compare_binaries_detailed ~62
Compare two binary files and show differences.
| Name | Type | Req | Description |
|---|---|---|---|
| file_path_a | string | yes | Path to first file |
| file_path_b | string | yes | Path to second file |
| max_diffs | number | – | Max differences to show (default 50) |
No output schema declared.
No examples provided.
compare_signatures ~84
Compare expected Harmony patch signature with actual target method.
| Name | Type | Req | Description |
|---|---|---|---|
| game_assembly | string | yes | Assembly key |
| patch_kind | string | – | Patch kind: prefix or postfix (default: prefix) |
| patch_params | string | yes | Patch parameter types (comma-separated) |
| target_method | string | yes | Target method name |
| target_type | string | yes | Target type name |
No output schema declared.
No examples provided.
compile_plugin ~96
Compile a BepInEx plugin C# source file using Roslyn.
| Name | Type | Req | Description |
|---|---|---|---|
| assembly_name | string | – | Assembly name (optional) |
| bepinex_core_directory | string | yes | Path to BepInEx/core directory |
| managed_directory | string | yes | Path to game Managed directory |
| output_path | string | yes | Output DLL path |
| source_files | string | yes | C# source file path(s), semicolon-separated |
No output schema declared.
No examples provided.
debug_mod ~50
Analyze mod logs to diagnose errors and suggest fixes.
| Name | Type | Req | Description |
|---|---|---|---|
| game_path | string | – | Game directory (for auto-detecting log location) |
| log_path | string | – | Path to the mod log file |
No output schema declared.
No examples provided.
decode_assets ~308
Universal Asset Decoder. Reads a PR-1 autopsy catalog, cracks open Unity .assets containers, and decodes their members back into The Model (decoded=1, decoded_path set): Texture2D -> PNG (streamed pixels from sibling .resS), Mesh -> glTF .glb + .obj (plain/uncompressed; compressed noted+deferred), and AudioClip -> WAV (PCM) / OGG (bare Vorbis); FSB5-wrapped Vorbis + other codecs are noted+deferred. Read-only on game files; decoded files + DB rows are the only writes. Pass either db_path (the .autopsy.db) or game_path (whose default .autopsy/ DB is used). Optional out_dir overrides where decoded files land; asset_kinds restricts to textures, meshes, or audio.
| Name | Type | Req | Description |
|---|---|---|---|
| asset_kinds | string | – | Which asset kinds to decode. 'all' (default) does textures + meshes + audio; restrict with 'textures', 'meshes', or 'audio'. |
| db_path | string | – | Path to the <game>.autopsy.db produced by unpack_game. |
| game_path | string | – | Game install dir; its default .autopsy/<name>.autopsy.db is used if db_path is omitted. |
| limit | number | – | Optional cap on textures decoded (for quick smoke runs). |
| out_dir | string | – | Optional output dir for decoded PNGs. Defaults to <db_dir>/decoded/. |
No output schema declared.
No examples provided.
decompile_method ~66
Decompile a single method to C# source code.
| Name | Type | Req | Description |
|---|---|---|---|
| assembly | string | yes | Assembly key |
| method_name | string | yes | Method name |
| parameter_count | number | – | Parameter count to disambiguate overloads |
| type_name | string | yes | Full type name |
No output schema declared.
No examples provided.
decompile_type ~44
Decompile a type to full C# source code.
| Name | Type | Req | Description |
|---|---|---|---|
| assembly | string | yes | Assembly key |
| type_name | string | yes | Full type name (Namespace.ClassName) |
No output schema declared.
No examples provided.
detect_engine ~55
Scan a game directory and detect what engine it uses (Unity, Unreal, Godot, Java, etc.). Returns engine type, runtime, and primary assembly path.
| Name | Type | Req | Description |
|---|---|---|---|
| game_path | string | yes | Full path to the game directory |
No output schema declared.
No examples provided.
detect_networking ~29
Detect networking frameworks and flag unsafe-to-patch methods.
| Name | Type | Req | Description |
|---|---|---|---|
| assembly | string | yes | Assembly key |
No output schema declared.
No examples provided.
diff_assemblies ~77
Compare two assembly versions to show changes.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | – | Max results (default 200) |
| new_assembly_path | string | yes | Path to new version DLL |
| old_assembly_path | string | yes | Path to old version DLL |
| show_methods | boolean | – | Show method-level changes (default: true) |
No output schema declared.
No examples provided.
disassemble_function ~210
Disassemble a function starting at an RVA in a native PE (x86-64). Linear sweep from the entry RVA to the first terminal instruction (ret/iret) or max_bytes, whichever comes first — a PR-3.1 boundary heuristic (CFG-accurate bounds arrive with the call-graph in PR-3.2), so the function EXTENT is tagged provenance=inferred while the decoded bytes themselves are verified. Read-only on the binary. Writes a 'function' row into The Model when db_path/game_path is supplied and the binary is catalogued.
| Name | Type | Req | Description |
|---|---|---|---|
| binary_path | string | yes | Path to the PE (.exe/.dll). |
| db_path | string | – | Optional .autopsy.db for writeback. |
| game_path | string | – | Optional game dir; default .autopsy DB used if db_path omitted. |
| max_bytes | number | – | Safety cap on sweep length (default 4096). |
| rva | number | yes | Entry RVA of the function. |
No output schema declared.
No examples provided.
disassemble_range ~229
Disassemble an arbitrary byte range of a native PE (x86-64) starting at an RVA. Resolves the RVA to its section and file offset, reads ONLY that slice (read-only on the binary), and decodes it with Capstone. Returns the instruction listing. If db_path or game_path is given AND the binary is catalogued in that autopsy DB, the decoded instructions are also summarized into The Model as a 'function' row spanning the range (provenance=verified for the bytes). Pure read-only when no DB is supplied.
| Name | Type | Req | Description |
|---|---|---|---|
| binary_path | string | yes | Path to the PE (.exe/.dll) to disassemble. |
| db_path | string | – | Optional .autopsy.db for writeback. |
| game_path | string | – | Optional game dir; its default .autopsy DB is used if db_path is omitted. |
| length | number | – | Number of bytes to disassemble (default 256, clamped to the section). |
| rva | number | yes | Relative virtual address to start at (e.g. 0x1000). |
No output schema declared.
No examples provided.
extract_dll_classes ~73
Extract class names from a .NET DLL using stream-based analysis. Works with very large files.
| Name | Type | Req | Description |
|---|---|---|---|
| file_path | string | yes | Path to DLL file |
| max_classes | number | – | Max classes to return (default 200) |
| search_terms | array | – | Filter by these terms (case-insensitive) |
No output schema declared.
No examples provided.
extract_strings ~52
Simple string extraction from a binary file.
| Name | Type | Req | Description |
|---|---|---|---|
| file_path | string | yes | Path to binary file |
| filter | string | – | Optional filter |
| min_length | number | – | Minimum string length (default 4) |
No output schema declared.
No examples provided.
extract_strings_advanced ~100
Extract ASCII and UTF-16 strings from a binary file with filtering.
| Name | Type | Req | Description |
|---|---|---|---|
| encoding | string | – | Encoding: ascii, utf16, both (default: both) |
| file_path | string | yes | Path to the binary file |
| filter | string | – | Optional filter (case-insensitive substring match) |
| max_results | number | – | Max results (default 500) |
| min_length | number | – | Minimum string length (default 4) |
No output schema declared.
No examples provided.
find_blueprints_of_type ~58
Search for all Blueprint assets inheriting from a parent class.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | – | Max results (default 50) |
| parent_class | string | yes | Parent class name |
| path_filter | string | – | Optional path filter |
No output schema declared.
No examples provided.
find_gameplay_values ~86
Search for gameplay-related values (health, damage, speed, money, etc.) across the game code. Works with any engine by using the appropriate search tools.
| Name | Type | Req | Description |
|---|---|---|---|
| assembly_path | string | yes | Path to the game assembly/binary to search |
| search_terms | array | yes | Terms to search for (e.g. ["Health", "Damage", "Speed", "Money"]) |
No output schema declared.
No examples provided.
find_references ~66
Find all references to a method or field.
| Name | Type | Req | Description |
|---|---|---|---|
| assembly | string | yes | Assembly key |
| limit | number | – | Max results (default 100) |
| member_name | string | yes | Member name to find references to |
| type_name | string | yes | Type containing the member |
No output schema declared.
No examples provided.
find_renamed_types ~72
Find types likely renamed after a game update.
| Name | Type | Req | Description |
|---|---|---|---|
| min_similarity | number | – | Min similarity threshold 0-1 (default: 0.6) |
| new_assembly_path | string | yes | Path to new version DLL |
| old_assembly_path | string | yes | Path to old version DLL |
No output schema declared.
No examples provided.
find_steam_games ~41
Search configured Steam library paths for installed games. Optionally filter by name.
| Name | Type | Req | Description |
|---|---|---|---|
| filter | string | – | Optional name filter (case-insensitive partial match) |
No output schema declared.
No examples provided.
game_status ~29
Get the current session state including loaded game, engine type, cached analysis data, and mod build status.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
generate_harmony_patch ~101
Generate correct Harmony patch class for a specific method.
| Name | Type | Req | Description |
|---|---|---|---|
| assembly | string | yes | Assembly key |
| method_name | string | yes | Target method name |
| parameter_count | number | – | Parameter count for overload disambiguation |
| patch_class_name | string | – | Custom name for the patch class |
| patch_type | string | – | Patch type: prefix, postfix, both (default: both) |
| type_name | string | yes | Target type name |
No output schema declared.
No examples provided.
generate_plugin ~123
Generate complete BepInEx 5 plugin template with Harmony patching.
| Name | Type | Req | Description |
|---|---|---|---|
| author | string | – | Author name |
| description | string | – | Plugin description |
| include_config | boolean | – | Include config system |
| include_harmony | boolean | – | Include Harmony setup |
| managed_directory | string | – | Path to game Managed directory |
| plugin_guid | string | yes | Plugin GUID (e.g. com.author.pluginname) |
| plugin_name | string | yes | Plugin class name |
| version | string | – | Version string (default 1.0.0) |
No output schema declared.
No examples provided.
get_class_hierarchy ~44
Get inheritance chain for a Blueprint class.
| Name | Type | Req | Description |
|---|---|---|---|
| asset_path | string | yes | Blueprint asset path |
| max_levels | number | – | Max inheritance levels (default 10) |
No output schema declared.
No examples provided.
get_inheritance_tree ~43
Get full inheritance tree for a type (ancestors and descendants).
| Name | Type | Req | Description |
|---|---|---|---|
| assembly | string | yes | Assembly key |
| type_name | string | yes | Full type name |
No output schema declared.
No examples provided.
get_method_il ~48
Get raw IL bytecode for a method.
| Name | Type | Req | Description |
|---|---|---|---|
| assembly | string | yes | Assembly key |
| method_name | string | yes | Method name |
| type_name | string | yes | Full type name |
No output schema declared.
No examples provided.
get_serialized_fields ~43
Get all serialized fields for a MonoBehaviour or ScriptableObject.
| Name | Type | Req | Description |
|---|---|---|---|
| assembly | string | yes | Assembly key |
| type_name | string | yes | Full type name |
No output schema declared.
No examples provided.
gorebox_generate_discovery_mod ~110
Generate a GoreBox Lua mod that discovers all available API functions, globals, tables, and callbacks. Writes results to a dump file in the mod folder. Use this when you need to learn what Lua API is available in a game that uses Lua scripting.
| Name | Type | Req | Description |
|---|---|---|---|
| mod_name | string | – | Name for the discovery mod (default: APIDisco) |
| mods_dir | string | yes | Path to the game Mods directory (e.g. C:/Users/.../GoreBox/Mods) |
No output schema declared.
No examples provided.
gorebox_generate_mod ~152
Generate a GoreBox-compatible Lua mod with proper info.json and main.lua. Creates a ready-to-use mod in the Mods directory.
| Name | Type | Req | Description |
|---|---|---|---|
| description | string | – | Mod description |
| display_name | string | – | Display name in the mod browser |
| is_plugin | boolean | – | Whether this is a plugin mod (default true) |
| lua_code | string | yes | The Lua script code for main.lua |
| mod_name | string | yes | Name for the mod folder |
| mods_dir | string | yes | Path to the game Mods directory |
| safe_mode | boolean | – | Whether to run in safe mode (default false) |
| version | string | – | Version string (default 1.0.0) |
No output schema declared.
No examples provided.
gorebox_list_mods ~40
List all installed GoreBox mods with their info.json contents and file structure.
| Name | Type | Req | Description |
|---|---|---|---|
| mods_dir | string | yes | Path to the game Mods directory |
No output schema declared.
No examples provided.
gorebox_read_api_dump ~74
Read and parse an API discovery dump file generated by gorebox_generate_discovery_mod. Returns structured information about all discovered globals, functions, tables, and callbacks.
| Name | Type | Req | Description |
|---|---|---|---|
| dump_path | string | yes | Path to the dump.txt file |
| filter | string | – | Optional filter string to match entries (case-insensitive) |
No output schema declared.
No examples provided.
hex_read ~59
Read raw bytes from a file at a specific offset.
| Name | Type | Req | Description |
|---|---|---|---|
| file_path | string | yes | Path to the file |
| length | number | – | Number of bytes to read (default 256) |
| offset | number | yes | Byte offset to start reading |
No output schema declared.
No examples provided.
hex_replace ~83
Replace bytes at a specific offset or replace a pattern throughout the file.
| Name | Type | Req | Description |
|---|---|---|---|
| file_path | string | yes | Path to the file |
| offset | number | – | Specific offset to replace at (if provided, ignores search_hex) |
| replace_hex | string | yes | Hex pattern to replace with (must be same length) |
| search_hex | string | – | Hex pattern to find |
No output schema declared.
No examples provided.
hex_search ~72
Search for a hex pattern in a binary file.
| Name | Type | Req | Description |
|---|---|---|---|
| file_path | string | yes | Path to the file |
| hex_pattern | string | yes | Hex pattern to search for (e.g. "48 8B 05 ?? ?? ?? ??") |
| max_results | number | – | Max results (default 20) |
No output schema declared.
No examples provided.
hex_write ~70
Write raw bytes to a file at a specific offset.
| Name | Type | Req | Description |
|---|---|---|---|
| file_path | string | yes | Path to the file |
| hex_data | string | yes | Hex string to write (e.g. "90 90 90" or "909090") |
| offset | number | yes | Byte offset to write at |
No output schema declared.
No examples provided.
inspect_type ~45
Inspect type structure (fields, properties, methods) without decompiling method bodies.
| Name | Type | Req | Description |
|---|---|---|---|
| assembly | string | yes | Assembly key |
| type_name | string | yes | Full type name |
No output schema declared.
No examples provided.
jar_add_file ~69
Add a file from disk into the JAR.
| Name | Type | Req | Description |
|---|---|---|---|
| jar_path | string | yes | Destination path within JAR |
| overwrite | boolean | – | Overwrite if exists (default: true) |
| session_id | string | yes | Session ID |
| source_path | string | yes | Source file on disk |
No output schema declared.
No examples provided.
jar_add_file_content ~68
Write text content as a new file in the JAR.
| Name | Type | Req | Description |
|---|---|---|---|
| content | string | yes | File content |
| encoding | string | – | Encoding (default: utf-8) |
| jar_path | string | yes | Destination path within JAR |
| session_id | string | yes | Session ID |
No output schema declared.
No examples provided.
jar_close ~43
Close a JAR session and clean up temp files.
| Name | Type | Req | Description |
|---|---|---|---|
| cleanup | boolean | – | Delete temp files (default: true) |
| session_id | string | yes | Session ID |
No output schema declared.
No examples provided.
jar_compile_java ~121
Compile Java source code and optionally inject into JAR.
| Name | Type | Req | Description |
|---|---|---|---|
| auto_classpath | boolean | – | Auto-add JAR to classpath (default: true) |
| class_name | string | yes | Fully-qualified class name |
| classpath | array | – | Additional classpath entries |
| inject_into_jar | boolean | – | Inject compiled class into JAR (default: true) |
| java_release | number | – | Java release target (default: 21) |
| session_id | string | yes | Session ID |
| source_code | string | yes | Java source code |
No output schema declared.
No examples provided.
jar_detect_mod_info ~35
Auto-detect mod loader, version, and structure from JAR contents.
| Name | Type | Req | Description |
|---|---|---|---|
| session_id | string | yes | Session ID |
No output schema declared.
No examples provided.
jar_diff ~39
Show differences between original and modified file.
| Name | Type | Req | Description |
|---|---|---|---|
| class_path | string | yes | File path within JAR |
| session_id | string | yes | Session ID |
No output schema declared.
No examples provided.
How do I install the io.github.doritoman90000/universal-game-modder MCP server?
io.github.doritoman90000/universal-game-modder runs locally as an npm package, launched with npx -y universal-game-modder. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · universal-game-modder
claude mcp add doritoman90000-universal-game-modder -- npx -y universal-game-modder
What is the io.github.doritoman90000/universal-game-modder MCP server?
io.github.doritoman90000/universal-game-modder is an MCP server listed in the public MCP registry as io.github.doritoman90000/universal-game-modder. Local MCP server: detects a game's engine and gives agents native binary analysis/patching tools. This page covers its npm package (universal-game-modder).
Is the io.github.doritoman90000/universal-game-modder MCP server safe to use?
io.github.doritoman90000/universal-game-modder scores 83 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 5 November 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.doritoman90000/universal-game-modder MCP server expose?
io.github.doritoman90000/universal-game-modder exposes 100 tools: detect_engine, load_game, game_status, find_steam_games, mod_this_game, and 95 more. Their descriptions and schemas cost roughly 6,792 tokens of context every time the server is loaded.
Is the io.github.doritoman90000/universal-game-modder MCP server still maintained?
io.github.doritoman90000/universal-game-modder is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the io.github.doritoman90000/universal-game-modder MCP server under?
io.github.doritoman90000/universal-game-modder declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.