Roblox Bridge Agent (evonar543/roblox_bridge_agent) is an MCP server listed on the M8ven Trust Index. It scores 64 out of 100, grade C. It declares 79 tools. No publisher has claimed this listing.
A local-first MCP bridge and script operations layer that connects coding agents to authorized Roblox Luau development clients via websocket, enabling live execution, file watching, diagnostics, permission-gated script capsules, crash detection, and a dashboard.
Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
evonar543
Source: Glama
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.
These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.
rba_ws_startStart the local RBA websocket bridge used by the Lua autoloader.
rba_ws_stopStop the local RBA websocket bridge.
rba_ws_statusShow websocket bridge status, connected clients, and recent client events.
rba_connection_infoReturn the active RBA websocket host, port, URL, candidate URLs, and published connection-state checks.
rba_eventsRead recent websocket/client events captured by RBA.
rba_clear_eventsClear buffered RBA events, optionally only those matching type/client filters.
rba_clientsList connected RBA websocket clients.
rba_health_checkDiagnose the shared RBA bridge, Instance Manager endpoint, connected clients, autoexec targets, recent errors, and optional eval/ping health.
rba_detect_roblox_crashRead-only Roblox process and RBA heartbeat diagnosis. Reports healthy, bridge_disconnected, not_running, or likely_crashed without changing any process.
rba_restart_robloxSafely restart RobloxPlayerBeta.exe: discover and verify the current/installed executable path, close only RobloxPlayerBeta processes, then launch the verified executable normally.
rba_development_snapshotOne development-oriented snapshot: RBA health, Roblox crash likelihood, autoexec state, and optional static script preflight. Does not execute the inspected script.
rba_unified_statusVerify the complete local workflow: RBA websocket service, Instance Manager connector endpoint, and every executor autoexec copy.
rba_agent_bootstrapPrepare RBA for an agent session: start or attach the bridge, sync autoexec, optionally start dashboard, notify clients, and return health.
rba_notify_clientsShow an in-game RBA notification on connected Roblox clients.
rba_set_client_statusUpdate the in-game RBA status panel on connected Roblox clients.
rba_client_infoShow full details for one connected RBA websocket client.
rba_select_clientSet the default client used when a tool target is omitted.
rba_disconnect_clientClose one connected RBA websocket client.
rba_send_luaSend Lua source text to connected development clients through the websocket bridge.
rba_send_lua_fileSend a Lua file from the RBA workspace to connected development clients.
rba_eval_luaRun Lua and wait for structured return values or errors from connected clients.
rba_eval_lua_fileRun a workspace Lua file and wait for structured return values or errors from connected clients.
rba_execute_fileExecute a workspace Lua file in Roblox, either fire-and-forget send or eval with structured results.
rba_execute_bundleExecute multiple workspace Lua files in order with syntax checks, optional delay, and stop-on-error control.
rba_lua_syntax_checkRun local Lua syntax validation with luac for a workspace file or provided source before sending to Roblox.
rba_ping_clientsPing connected clients and return round-trip timing plus basic place/job details.
rba_install_debug_runtimeInstall debug helpers on connected clients and return an initial runtime snapshot.
rba_probe_runtimeRun a built-in realtime probe such as summary, character, camera, players, environment, or datamodel.
rba_install_console_mirrorMirror client print/warn output back to RBA events with a Roblox-safe rate limit.
rba_script_preflightStatically inspect a workspace Lua file or provided source before execution: syntax, metrics, lifecycle/loop checks, dynamic loading, remote calls, and direct transform writes. Never executes the script.
rba_create_script_capsuleCreate a named RBA script capsule: a permission-gated policy envelope around one workspace Lua file. Capsules preflight and snapshot source before dispatch; they do not claim to OS-sandbox code inside a Roblox executor.
rba_list_script_capsulesList registered script capsules and their explicit permissions, source file, timestamps, and policy-sandbox limitation.
rba_set_script_capsule_permissionsReplace a script capsule's explicit capability grants. The next capsule run is blocked when static source requirements are not granted.
rba_capsule_snapshotCreate a source snapshot for one script capsule. Use it as a time-travel restore point before an edit or experiment.
rba_list_capsule_snapshotsList time-travel source snapshots for one RBA script capsule.
rba_rollback_script_capsuleRestore a capsule source file from a selected snapshot. RBA captures the current source first as a safety snapshot.
rba_run_script_capsulePreflight, permission-check, optionally snapshot, and then dispatch a script capsule. Missing required permissions block the run before any Lua reaches a client.
rba_git_statusInspect the RBA workspace Git repository, selected branch/origin, changed and staged files, and the exact autoloader fingerprint without changing Git state.
rba_git_sync_filesExplicitly commit selected existing RBA workspace files and optionally push the current branch. It refuses to run with a pre-staged index and never uses git add --all, so unrelated scripts are not swept into a sync.
rba_uninstall_console_mirrorRestore print/warn after rba_install_console_mirror.
rba_wait_for_eventWait briefly for the next websocket event, optionally filtered by type and client id.
rba_context_snapshotCapture status, clients, recent events, runtime summary, and optional Roblox screenshot in one call.
rba_watch_fileWatch a workspace Lua file and auto-send or eval it in Roblox on change for live editing.
rba_start_live_sessionWatch multiple workspace Lua files as one live-editing session and optionally run them once immediately.
rba_unwatch_fileStop one active RBA file watcher.
rba_stop_all_watchersStop every active RBA live-edit file watcher.
rba_list_watchersList active RBA file watchers.
rba_list_script_profilesList script profiles from the workspace profile JSON file.
rba_run_script_profileRun a named script profile from the workspace profile JSON file.
rba_set_autorunConfigure optional profile/file execution that runs automatically when a Roblox client connects.
rba_get_autorunShow the current RBA autorun-on-connect configuration.
rba_dashboard_startStart the local RBA dashboard HTTP server.
rba_dashboard_stopStop the local RBA dashboard HTTP server.
rba_list_presetsList built-in Lua websocket presets.
rba_run_presetRun a built-in Lua preset on connected development clients.
rba_get_character_positionReturn the local character position and CFrame from connected development clients.
rba_teleport_to_positionTeleport the local character to exact coordinates and remember the previous position.
rba_teleport_to_partTeleport the local character to a Workspace BasePart or Model path, with an optional local offset.
rba_return_to_last_teleportReturn the local character to its position before the most recent RBA teleport.
rba_teleport_to_placeTeleport the local player to a Roblox place, optionally joining a specific public server job.
rba_write_fileCreate or replace a file inside the RBA workspace.
rba_install_autoexecInstall the current RBA autoloader into an executor autoexec path, backing up any existing file first.
rba_sync_autoexecSync the workspace unified autoloader to one autoexec target, backing up changed content by default.
rba_sync_all_autoexecSync the same unified RBA and Roblox Instance Manager autoloader to every configured executor target.
rba_autoexec_targetsShow every configured executor autoexec target and verify its installed loader hash against the workspace source.
rba_list_autoexec_backupsList sidecar backups created for an autoexec target.
rba_restore_autoexec_backupRestore an autoexec sidecar backup and preserve the currently installed file first.
rba_append_fileAppend text to a file inside the RBA workspace, creating it when needed.
rba_read_fileRead a workspace file, capped to a safe byte limit.
rba_backup_fileCreate a timestamped backup of a workspace file under .rba-backups.
rba_list_backupsList workspace file backups, optionally filtered to one original path.
rba_restore_backupRestore a .rba-backups file, first backing up the current destination when it exists.
rba_batch_filesRun multiple workspace file operations in one call.
rba_list_windowsList visible desktop windows that can be used as screenshot targets.
rba_capture_window_screenshotCapture a screenshot of a visible Windows process window and return it as an MCP image.
rba_capture_roblox_screenshotCapture RobloxPlayerBeta.exe and return the screenshot as an MCP image for visual context.
rba_read_imageRead a workspace PNG/JPEG file and return it as an MCP image.
rba_list_filesList files inside the RBA workspace.
rba_search_filesSearch text files inside the RBA workspace.
RBA_AUTOEXEC_INCLUDE_DEFAULTSRBA_AUTOEXEC_PATHRBA_AUTOEXEC_PATHSRBA_CAPSULES_PATHRBA_CONTROL_CONNECT_TIMEOUT_MSRBA_CONTROL_PROBE_BATCH_SIZERBA_DASHBOARD_PORTRBA_EVENT_DATA_MAX_BYTESRBA_EVENT_LIMITRBA_EVENT_LOG_FLUSH_MSRBA_FILE_IO_CONCURRENCYRBA_INSTANCE_MANAGER_SCRIPT_URLRBA_LOG_DIRRBA_LOG_MAX_FILE_BYTESRBA_LOG_ROTATIONSRBA_LOG_VALUE_DEPTHRBA_MAX_PENDING_LOG_LINESRBA_MAX_PORT_CANDIDATESRBA_PROFILES_PATHRBA_ROOTWorkspace file tools reject traversal outside .RBA_SEARCH_MAX_FILE_BYTESRBA_SYNC_AUTOEXECRBA_WS_HOSTRBA_WS_MAX_BUFFERED_BYTESRBA_WS_MAX_PAYLOAD_BYTESRBA_WS_PORTRBA_WS_PORT_RANGERBA_WS_RATE_LIMITRBA_WS_RATE_WINDOW_MSTool annotations
No tools have read-only/destructive annotations
Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.
All four hints declared on every tool
79/79 tools missing one or more hints — rba_ws_start (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); rba_ws_stop (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); rba_ws_status (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +76 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
Destructive tools are labelled
7 tools perform destructive updates without destructiveHint — rba_development_snapshot deletes at line 1946 (fs.rm(tempPath, { force: true })); rba_execute_file deletes at line 1946 (fs.rm(tempPath, { force: true })); rba_execute_bundle deletes at line 1946 (fs.rm(tempPath, { force: true }))
Add destructiveHint:true to any tool whose handler calls .delete(), .upsert(), .update(), unlink, rm, DELETE, DROP, REPLACE INTO, or any operation that overwrites existing data.
Descriptions match behaviour
1 tool describes read intent but its handler mutates — rba_script_preflight (line 1923: fs.mkdir(tmpRoot, { recursive: true }))
Rename the tool, rewrite the description, or move the side-effect into a separate clearly-named tool.
Tool inputs are validated
78/79 tool handlers declare input schemas (99%)
Declare an inputSchema with zod/joi/yup on every tool definition.
Tool test coverage
Only 6/79 tools referenced in tests (8%)
Write tests that reference each tool by name so every tool has at least one test.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/evonar543/roblox_bridge_agent)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check