ProjectM QA MCP

Item: ProjectM QA MCP
Rating: 74
Author: M8ven

A Unity Editor command bridge that uses JSON files under .codex/unity-commands for request/response, enabling tools to check Unity status, execute editor commands, parse test results, and capture screenshots.

→ chdnl0420-svg/UnityMCP · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

// known CVEs in dependencies

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

unknowncom.unity.nuget.newtonsoft-json@3.2.1MAL-2025-17358

Malicious code in com.unity.nuget.newtonsoft-json (npm)

Depend on this server? Get alerted when its CVEs change.Watch this server free →

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configPROJECTM_COMMAND_ROOT— 'C:\Project\CLIENT_KSH_ASIA_L\client\ProjectM\.codex\unity-commands'

configPROJECTM_DEFAULT_PROJECT_PATH— 'C:\Project\CLIENT_KSH_ASIA_L\client\ProjectM'

configPROJECTM_UNITY_PATH— 'C:\Program Files\Unity\Hub\Editor\2022.3.76f1\Editor\Unity.exe'

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/chdnl0420-svg-unitymcp-jg5g4z)](https://m8ven.ai/mcp/chdnl0420-svg-unitymcp-jg5g4z)

commit: 45b94bb62c55296a6e71b64db1b4122b88644d62

code hash: 20fd4d6f682fe25e512ca0955d2af947f378c040bb7ae9906415a0569ee928d3

verified: 6/23/2026, 10:43:08 AM

view raw JSON →