Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

io.github.doritoman90000/universal-game-modder

NPM · UNIVERSAL-GAME-MODDER · SCANNED SEP 20

Local MCP server: detects a game's engine and gives agents native binary analysis/patching tools.

+5 this week 78 Trust /100
Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security98
  • No malware found by supply-chain analysis.Pass
  • No known CVEs affecting this package version or its production dependencies.Pass
  • No install/post-install scripts declared.Pass
  • 61 of 160 dependencies flagged as unhealthy (1 deprecated). View diagnostics → Partial
Provenance & Transparency45
Schema Quality & AI Usability79
  • AI-judged instruction clarity (excellent).Pass
  • Tool/resource definitions use about 6792 tokens (~67/item across 100 items; 100 tools + 0 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management60
  • Stability observed for 18 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Tool Safety75
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • 0 of 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "build_and_deploy" implies "deploy" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
  • An AI judge read all 100 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Install

How do I install the io.github.doritoman90000/universal-game-modder MCP server?

io.github.doritoman90000/universal-game-modder runs locally as an npm package, launched with npx -y universal-game-modder. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · universal-game-modder

# add to Claude Code
claude mcp add doritoman90000-universal-game-modder -- npx -y universal-game-modder
// .cursor/mcp.json
{
  "mcpServers": {
    "doritoman90000-universal-game-modder": {
      "command": "npx",
      "args": [
        "-y",
        "universal-game-modder"
      ]
    }
  }
}
// .vscode/mcp.json
{
  "servers": {
    "doritoman90000-universal-game-modder": {
      "command": "npx",
      "args": [
        "-y",
        "universal-game-modder"
      ]
    }
  }
}
# add to Codex CLI
codex mcp add doritoman90000-universal-game-modder -- npx -y universal-game-modder
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "doritoman90000-universal-game-modder": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "universal-game-modder"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add doritoman90000-universal-game-modder --command npx --arg -y --arg universal-game-modder
# ~/.hermes/config.yaml
mcp_servers:
  doritoman90000-universal-game-modder:
    command: "npx"
    args: ["-y", "universal-game-modder"]
// ~/.netclaw/config/netclaw.json
{
  "McpServers": {
    "doritoman90000-universal-game-modder": {
      "Transport": "stdio",
      "Command": "npx",
      "Arguments": [
        "-y",
        "universal-game-modder"
      ]
    }
  }
}
# add to Vellum
assistant mcp add doritoman90000-universal-game-modder -t stdio -c npx -a -y universal-game-modder
// mcp.json
{
  "mcpServers": {
    "doritoman90000-universal-game-modder": {
      "command": "npx",
      "args": [
        "-y",
        "universal-game-modder"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 20 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 57 to 60. That category is still filling its 30-day observation window: 17 days of observed history at the previous scan, 18 at this one. The score rises as the window fills, whether or not the server changes.

  • 18 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 50 to 53. That category is still filling its 30-day observation window: 15 days of observed history at the previous scan, 16 at this one. The score rises as the window fills, whether or not the server changes.

  • 16 Sept 26 +2
    • CVE-2026-82562 no longer affects this package security
    • CVE-2026-82417 no longer affects this package security
    • Known CVEs: fail → pass security
  • 15 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 40 to 43. That category is still filling its 30-day observation window: 12 days of observed history at the previous scan, 13 at this one. The score rises as the window fills, whether or not the server changes.

  • 13 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 33 to 37. That category is still filling its 30-day observation window: 10 days of observed history at the previous scan, 11 at this one. The score rises as the window fills, whether or not the server changes.

  • 11 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 27 to 30. That category is still filling its 30-day observation window: 8 days of observed history at the previous scan, 9 at this one. The score rises as the window fills, whether or not the server changes.

  • 10 Sept 26 +3
    • Stability: unverified → 0.27 functional
  • 2 Sept 26 68

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 20 Sept 2026 · Analysed npm/universal-game-modder@0.1.4

Provenance No attestation

The registry publishes no build provenance for this version, so there is nothing to verify.

Result No attestation
Ecosystem npm

Background: How many MCP packages publish verified provenance →

Dependencies 160 packages
Packages resolved 160
Deprecated 1
Stale 60
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 100 exposed · ~6,792 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
analyze_bepinex_log ~44

Analyze BepInEx log for errors, warnings, and patch issues.

NameTypeReqDescription
log_pathstringyesPath to BepInEx LogOutput.log

No output schema declared.

No examples provided.

analyze_dll_structure ~37

Analyze the overall structure of a DLL: sections, imports, exports summary.

NameTypeReqDescription
file_pathstringyesPath to DLL file

No output schema declared.

No examples provided.

analyze_file_format ~46

Detect file format from magic bytes. Works with PE, ELF, Mach-O, ZIP, Java class, and other formats.

NameTypeReqDescription
file_pathstringyesPath to the file

No output schema declared.

No examples provided.

analyze_godot_pck ~49

Analyze a Godot .pck archive and list its contents.

NameTypeReqDescription
file_pathstringyesPath to .pck file
filterstringOptional filename filter

No output schema declared.

No examples provided.

analyze_pe_full ~54

Full PE (Portable Executable) analysis. Shows headers, sections, data directories, and whether it is managed (.NET) or native.

NameTypeReqDescription
file_pathstringyesPath to PE file (.exe or .dll)

No output schema declared.

No examples provided.

analyze_save_format ~28

Analyze game save system by examining SaveManager classes.

NameTypeReqDescription
assemblystringyesAssembly key

No output schema declared.

No examples provided.

build_and_deploy ~75

Compile a mod project and deploy the output to the game mods directory.

NameTypeReqDescription
build_commandstringCustom build command (auto-detected if omitted)
deploy_pathstringPath to deploy the built mod (auto-detected if omitted)
project_pathstringyesPath to the mod project directory

No output schema declared.

No examples provided.

calculate_checksums ~36

Calculate MD5, SHA1, SHA256 checksums for a file.

NameTypeReqDescription
file_pathstringyesPath to the file

No output schema declared.

No examples provided.

compare_binaries_detailed ~62

Compare two binary files and show differences.

NameTypeReqDescription
file_path_astringyesPath to first file
file_path_bstringyesPath to second file
max_diffsnumberMax differences to show (default 50)

No output schema declared.

No examples provided.

compare_signatures ~84

Compare expected Harmony patch signature with actual target method.

NameTypeReqDescription
game_assemblystringyesAssembly key
patch_kindstringPatch kind: prefix or postfix (default: prefix)
patch_paramsstringyesPatch parameter types (comma-separated)
target_methodstringyesTarget method name
target_typestringyesTarget type name

No output schema declared.

No examples provided.

compile_plugin ~96

Compile a BepInEx plugin C# source file using Roslyn.

NameTypeReqDescription
assembly_namestringAssembly name (optional)
bepinex_core_directorystringyesPath to BepInEx/core directory
managed_directorystringyesPath to game Managed directory
output_pathstringyesOutput DLL path
source_filesstringyesC# source file path(s), semicolon-separated

No output schema declared.

No examples provided.

debug_mod ~50

Analyze mod logs to diagnose errors and suggest fixes.

NameTypeReqDescription
game_pathstringGame directory (for auto-detecting log location)
log_pathstringPath to the mod log file

No output schema declared.

No examples provided.

decode_assets ~308

Universal Asset Decoder. Reads a PR-1 autopsy catalog, cracks open Unity .assets containers, and decodes their members back into The Model (decoded=1, decoded_path set): Texture2D -> PNG (streamed pixels from sibling .resS), Mesh -> glTF .glb + .obj (plain/uncompressed; compressed noted+deferred), and AudioClip -> WAV (PCM) / OGG (bare Vorbis); FSB5-wrapped Vorbis + other codecs are noted+deferred. Read-only on game files; decoded files + DB rows are the only writes. Pass either db_path (the .autopsy.db) or game_path (whose default .autopsy/ DB is used). Optional out_dir overrides where decoded files land; asset_kinds restricts to textures, meshes, or audio.

NameTypeReqDescription
asset_kindsstringWhich asset kinds to decode. 'all' (default) does textures + meshes + audio; restrict with 'textures', 'meshes', or 'audio'.
db_pathstringPath to the <game>.autopsy.db produced by unpack_game.
game_pathstringGame install dir; its default .autopsy/<name>.autopsy.db is used if db_path is omitted.
limitnumberOptional cap on textures decoded (for quick smoke runs).
out_dirstringOptional output dir for decoded PNGs. Defaults to <db_dir>/decoded/.

No output schema declared.

No examples provided.

decompile_method ~66

Decompile a single method to C# source code.

NameTypeReqDescription
assemblystringyesAssembly key
method_namestringyesMethod name
parameter_countnumberParameter count to disambiguate overloads
type_namestringyesFull type name

No output schema declared.

No examples provided.

decompile_type ~44

Decompile a type to full C# source code.

NameTypeReqDescription
assemblystringyesAssembly key
type_namestringyesFull type name (Namespace.ClassName)

No output schema declared.

No examples provided.

detect_engine ~55

Scan a game directory and detect what engine it uses (Unity, Unreal, Godot, Java, etc.). Returns engine type, runtime, and primary assembly path.

NameTypeReqDescription
game_pathstringyesFull path to the game directory

No output schema declared.

No examples provided.

detect_networking ~29

Detect networking frameworks and flag unsafe-to-patch methods.

NameTypeReqDescription
assemblystringyesAssembly key

No output schema declared.

No examples provided.

diff_assemblies ~77

Compare two assembly versions to show changes.

NameTypeReqDescription
limitnumberMax results (default 200)
new_assembly_pathstringyesPath to new version DLL
old_assembly_pathstringyesPath to old version DLL
show_methodsbooleanShow method-level changes (default: true)

No output schema declared.

No examples provided.

disassemble_function ~210

Disassemble a function starting at an RVA in a native PE (x86-64). Linear sweep from the entry RVA to the first terminal instruction (ret/iret) or max_bytes, whichever comes first — a PR-3.1 boundary heuristic (CFG-accurate bounds arrive with the call-graph in PR-3.2), so the function EXTENT is tagged provenance=inferred while the decoded bytes themselves are verified. Read-only on the binary. Writes a 'function' row into The Model when db_path/game_path is supplied and the binary is catalogued.

NameTypeReqDescription
binary_pathstringyesPath to the PE (.exe/.dll).
db_pathstringOptional .autopsy.db for writeback.
game_pathstringOptional game dir; default .autopsy DB used if db_path omitted.
max_bytesnumberSafety cap on sweep length (default 4096).
rvanumberyesEntry RVA of the function.

No output schema declared.

No examples provided.

disassemble_range ~229

Disassemble an arbitrary byte range of a native PE (x86-64) starting at an RVA. Resolves the RVA to its section and file offset, reads ONLY that slice (read-only on the binary), and decodes it with Capstone. Returns the instruction listing. If db_path or game_path is given AND the binary is catalogued in that autopsy DB, the decoded instructions are also summarized into The Model as a 'function' row spanning the range (provenance=verified for the bytes). Pure read-only when no DB is supplied.

NameTypeReqDescription
binary_pathstringyesPath to the PE (.exe/.dll) to disassemble.
db_pathstringOptional .autopsy.db for writeback.
game_pathstringOptional game dir; its default .autopsy DB is used if db_path is omitted.
lengthnumberNumber of bytes to disassemble (default 256, clamped to the section).
rvanumberyesRelative virtual address to start at (e.g. 0x1000).

No output schema declared.

No examples provided.

extract_dll_classes ~73

Extract class names from a .NET DLL using stream-based analysis. Works with very large files.

NameTypeReqDescription
file_pathstringyesPath to DLL file
max_classesnumberMax classes to return (default 200)
search_termsarrayFilter by these terms (case-insensitive)

No output schema declared.

No examples provided.

extract_strings ~52

Simple string extraction from a binary file.

NameTypeReqDescription
file_pathstringyesPath to binary file
filterstringOptional filter
min_lengthnumberMinimum string length (default 4)

No output schema declared.

No examples provided.

extract_strings_advanced ~100

Extract ASCII and UTF-16 strings from a binary file with filtering.

NameTypeReqDescription
encodingstringEncoding: ascii, utf16, both (default: both)
file_pathstringyesPath to the binary file
filterstringOptional filter (case-insensitive substring match)
max_resultsnumberMax results (default 500)
min_lengthnumberMinimum string length (default 4)

No output schema declared.

No examples provided.

find_blueprints_of_type ~58

Search for all Blueprint assets inheriting from a parent class.

NameTypeReqDescription
limitnumberMax results (default 50)
parent_classstringyesParent class name
path_filterstringOptional path filter

No output schema declared.

No examples provided.

find_gameplay_values ~86

Search for gameplay-related values (health, damage, speed, money, etc.) across the game code. Works with any engine by using the appropriate search tools.

NameTypeReqDescription
assembly_pathstringyesPath to the game assembly/binary to search
search_termsarrayyesTerms to search for (e.g. ["Health", "Damage", "Speed", "Money"])

No output schema declared.

No examples provided.

find_references ~66

Find all references to a method or field.

NameTypeReqDescription
assemblystringyesAssembly key
limitnumberMax results (default 100)
member_namestringyesMember name to find references to
type_namestringyesType containing the member

No output schema declared.

No examples provided.

find_renamed_types ~72

Find types likely renamed after a game update.

NameTypeReqDescription
min_similaritynumberMin similarity threshold 0-1 (default: 0.6)
new_assembly_pathstringyesPath to new version DLL
old_assembly_pathstringyesPath to old version DLL

No output schema declared.

No examples provided.

find_steam_games ~41

Search configured Steam library paths for installed games. Optionally filter by name.

NameTypeReqDescription
filterstringOptional name filter (case-insensitive partial match)

No output schema declared.

No examples provided.

game_status ~29

Get the current session state including loaded game, engine type, cached analysis data, and mod build status.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

generate_harmony_patch ~101

Generate correct Harmony patch class for a specific method.

NameTypeReqDescription
assemblystringyesAssembly key
method_namestringyesTarget method name
parameter_countnumberParameter count for overload disambiguation
patch_class_namestringCustom name for the patch class
patch_typestringPatch type: prefix, postfix, both (default: both)
type_namestringyesTarget type name

No output schema declared.

No examples provided.

generate_plugin ~123

Generate complete BepInEx 5 plugin template with Harmony patching.

NameTypeReqDescription
authorstringAuthor name
descriptionstringPlugin description
include_configbooleanInclude config system
include_harmonybooleanInclude Harmony setup
managed_directorystringPath to game Managed directory
plugin_guidstringyesPlugin GUID (e.g. com.author.pluginname)
plugin_namestringyesPlugin class name
versionstringVersion string (default 1.0.0)

No output schema declared.

No examples provided.

get_class_hierarchy ~44

Get inheritance chain for a Blueprint class.

NameTypeReqDescription
asset_pathstringyesBlueprint asset path
max_levelsnumberMax inheritance levels (default 10)

No output schema declared.

No examples provided.

get_inheritance_tree ~43

Get full inheritance tree for a type (ancestors and descendants).

NameTypeReqDescription
assemblystringyesAssembly key
type_namestringyesFull type name

No output schema declared.

No examples provided.

get_method_il ~48

Get raw IL bytecode for a method.

NameTypeReqDescription
assemblystringyesAssembly key
method_namestringyesMethod name
type_namestringyesFull type name

No output schema declared.

No examples provided.

get_serialized_fields ~43

Get all serialized fields for a MonoBehaviour or ScriptableObject.

NameTypeReqDescription
assemblystringyesAssembly key
type_namestringyesFull type name

No output schema declared.

No examples provided.

gorebox_generate_discovery_mod ~110

Generate a GoreBox Lua mod that discovers all available API functions, globals, tables, and callbacks. Writes results to a dump file in the mod folder. Use this when you need to learn what Lua API is available in a game that uses Lua scripting.

NameTypeReqDescription
mod_namestringName for the discovery mod (default: APIDisco)
mods_dirstringyesPath to the game Mods directory (e.g. C:/Users/.../GoreBox/Mods)

No output schema declared.

No examples provided.

gorebox_generate_mod ~152

Generate a GoreBox-compatible Lua mod with proper info.json and main.lua. Creates a ready-to-use mod in the Mods directory.

NameTypeReqDescription
descriptionstringMod description
display_namestringDisplay name in the mod browser
is_pluginbooleanWhether this is a plugin mod (default true)
lua_codestringyesThe Lua script code for main.lua
mod_namestringyesName for the mod folder
mods_dirstringyesPath to the game Mods directory
safe_modebooleanWhether to run in safe mode (default false)
versionstringVersion string (default 1.0.0)

No output schema declared.

No examples provided.

gorebox_list_mods ~40

List all installed GoreBox mods with their info.json contents and file structure.

NameTypeReqDescription
mods_dirstringyesPath to the game Mods directory

No output schema declared.

No examples provided.

gorebox_read_api_dump ~74

Read and parse an API discovery dump file generated by gorebox_generate_discovery_mod. Returns structured information about all discovered globals, functions, tables, and callbacks.

NameTypeReqDescription
dump_pathstringyesPath to the dump.txt file
filterstringOptional filter string to match entries (case-insensitive)

No output schema declared.

No examples provided.

hex_read ~59

Read raw bytes from a file at a specific offset.

NameTypeReqDescription
file_pathstringyesPath to the file
lengthnumberNumber of bytes to read (default 256)
offsetnumberyesByte offset to start reading

No output schema declared.

No examples provided.

hex_replace ~83

Replace bytes at a specific offset or replace a pattern throughout the file.

NameTypeReqDescription
file_pathstringyesPath to the file
offsetnumberSpecific offset to replace at (if provided, ignores search_hex)
replace_hexstringyesHex pattern to replace with (must be same length)
search_hexstringHex pattern to find

No output schema declared.

No examples provided.

hex_search ~72

Search for a hex pattern in a binary file.

NameTypeReqDescription
file_pathstringyesPath to the file
hex_patternstringyesHex pattern to search for (e.g. "48 8B 05 ?? ?? ?? ??")
max_resultsnumberMax results (default 20)

No output schema declared.

No examples provided.

hex_write ~70

Write raw bytes to a file at a specific offset.

NameTypeReqDescription
file_pathstringyesPath to the file
hex_datastringyesHex string to write (e.g. "90 90 90" or "909090")
offsetnumberyesByte offset to write at

No output schema declared.

No examples provided.

inspect_type ~45

Inspect type structure (fields, properties, methods) without decompiling method bodies.

NameTypeReqDescription
assemblystringyesAssembly key
type_namestringyesFull type name

No output schema declared.

No examples provided.

jar_add_file ~69

Add a file from disk into the JAR.

NameTypeReqDescription
jar_pathstringyesDestination path within JAR
overwritebooleanOverwrite if exists (default: true)
session_idstringyesSession ID
source_pathstringyesSource file on disk

No output schema declared.

No examples provided.

jar_add_file_content ~68

Write text content as a new file in the JAR.

NameTypeReqDescription
contentstringyesFile content
encodingstringEncoding (default: utf-8)
jar_pathstringyesDestination path within JAR
session_idstringyesSession ID

No output schema declared.

No examples provided.

jar_close ~43

Close a JAR session and clean up temp files.

NameTypeReqDescription
cleanupbooleanDelete temp files (default: true)
session_idstringyesSession ID

No output schema declared.

No examples provided.

jar_compile_java ~121

Compile Java source code and optionally inject into JAR.

NameTypeReqDescription
auto_classpathbooleanAuto-add JAR to classpath (default: true)
class_namestringyesFully-qualified class name
classpatharrayAdditional classpath entries
inject_into_jarbooleanInject compiled class into JAR (default: true)
java_releasenumberJava release target (default: 21)
session_idstringyesSession ID
source_codestringyesJava source code

No output schema declared.

No examples provided.

jar_detect_mod_info ~35

Auto-detect mod loader, version, and structure from JAR contents.

NameTypeReqDescription
session_idstringyesSession ID

No output schema declared.

No examples provided.

jar_diff ~39

Show differences between original and modified file.

NameTypeReqDescription
class_pathstringyesFile path within JAR
session_idstringyesSession ID

No output schema declared.

No examples provided.

Common questions

What is the io.github.doritoman90000/universal-game-modder MCP server?

io.github.doritoman90000/universal-game-modder is an MCP server listed in the public MCP registry as io.github.doritoman90000/universal-game-modder. Local MCP server: detects a game's engine and gives agents native binary analysis/patching tools. This page covers its npm package (universal-game-modder).

Is the io.github.doritoman90000/universal-game-modder MCP server safe to use?

io.github.doritoman90000/universal-game-modder scores 78 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the io.github.doritoman90000/universal-game-modder MCP server expose?

io.github.doritoman90000/universal-game-modder exposes 100 tools: detect_engine, load_game, game_status, find_steam_games, mod_this_game, and 95 more. Their descriptions and schemas cost roughly 6,792 tokens of context every time the server is loaded.

Is the io.github.doritoman90000/universal-game-modder MCP server still maintained?

io.github.doritoman90000/universal-game-modder is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the io.github.doritoman90000/universal-game-modder MCP server under?

io.github.doritoman90000/universal-game-modder declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.