DSH Godot Game Studio

简体中文 | English

A production-minded Godot 4 MCP plugin for DeepSeek Harness. It gives the agent seven bounded tools for project audits, strict tests, data validation, deterministic simulation, and release evidence.

This is the DeepSeek Harness companion to Codex Godot Game Studio. It is an independent MCP server and does not require Codex.

Tools

MCP tool	Purpose
godot_environment	Find Godot 4 and report exact version and allowed roots
godot_project_audit	Inventory scenes, scripts, tests, CI, content, exports, and path risks
godot_run_check	Run parse, script, or project checks with exit, log, marker, timeout, and output gates
godot_validate_content	Validate stable IDs, required fields, enums, and references in JSON content
godot_validate_asset_manifest	Validate provenance, license allowlists, selected files, and SHA-256
godot_run_seed_matrix	Run a project-local simulation script across deterministic seeds
godot_hash_artifacts	Record release artifact byte sizes and SHA-256

In DeepSeek Harness they appear as mcp__godot__godot_project_audit, mcp__godot__godot_run_check, and so on.

Install for DeepSeek Harness

DeepSeek Harness currently describes third-party tool integration through @deepseek-ai/dsh-mcp-client. Add the following row to the Cordis composition layer you use to launch DSH:

- id: mcp-godot-studio
  name: '@deepseek-ai/dsh-mcp-client'
  config:
    serverName: godot
    transport: stdio
    command: npx
    args:
      - '-y'
      - 'github:jeffxuan/dsh-godot-game-studio'
      - '--root'
      - !!js process.cwd()
    toolCallTimeoutMs: 900000
    failOnStartupError: true

The same configuration is available at examples/cordis.patch.yml. Launch DSH from the Godot project directory, or replace process.cwd() with an explicit trusted project root. Restart or reload the composition, then ask the agent to audit the project.

DeepSeek Harness is currently a developer preview. Its composition interfaces may change; this repository pins and tests the MCP protocol boundary while tracking upstream configuration changes explicitly.

Run standalone

Requires Node.js 20 or newer:

npm install
npm run build
GODOT_BIN=/path/to/godot node dist/index.js --root /path/to/godot-project

Multiple --root arguments are supported. An equivalent GODOT_PROJECT_ROOTS environment variable can contain multiple paths separated by the platform path delimiter.

Security model

• All file tools are restricted to configured project roots, including symlink resolution.
• The server exposes no arbitrary shell command tool.
• Godot scripts must use a project-local res://...gd path.
• Simulation seeds are arguments to a fixed Godot script, not command templates.
• Calls have bounded timeouts and retain at most 200 KB of process output.
• Project files and API keys are never uploaded by this server.

See SECURITY.md for the trust boundary. Only point the server at projects you trust: running a Godot project executes that project's scripts.

Development

npm ci
npm run check
npm test
npm pack --dry-run

Tests include path-containment and symlink-escape checks plus an end-to-end MCP stdio client that discovers all seven tools and calls a fixture audit.

Visual provenance

The two README images are original, deterministic HTML/CSS renders stored with their sources under docs/visual-source/. They contain no generated game art or third-party brand assets. Their product-evidence layout was informed by the clarity of OpenDesign; no OpenDesign assets or code are copied.

License

MIT. DeepSeek Harness and OpenDesign remain under their own licenses and are not bundled here.