Skip to main content
Glama

╔═══════════════════════════════════════════════════════╗
║  XENOZMCP  —  v0.1.0                                 ║
║  AI → Roblox Studio neural bridge                    ║
║  Transport: stdio | WebSocket :17613                  ║
║  Encryption: AES-256-GCM                             ║
║  Status: ████████████ 100% operational               ║
╚═══════════════════════════════════════════════════════╝

XenozMCP is a Model Context Protocol server that opens a neural link between AI consciousness and the Roblox metaverse. It translates AI intent into Studio actions — executing Luau, manipulating instances, controlling play-testing, and commanding the Open Cloud — all secured by military-grade AES-256-GCM encryption.

Connect any MCP-compatible client (Claude, Cursor, Copilot) or inject directly into 8 AI chat sites via the browser extension. One protocol. Infinite creation.


SYSTEM ARCHITECTURE

┌─────────────────────────────────────────────────────┐
│                    AI CONSCIOUSNESS                  │
│         Claude · Cursor · GPT · DeepSeek            │
└─────────────────────┬───────────────────────────────┘
                      │ stdio / WebSocket
                      ▼
┌─────────────────────────────────────────────────────┐
│                  XENOZMCP KERNEL                     │
│                                                     │
│  ┌────────────┐  ┌────────────┐  ┌───────────────┐  │
│  │Studio MCP  │  │Open Cloud  │  │AES-256-GCM    │  │
│  │Controller  │  │Gateway     │  │Encrypted Vault│  │
│  └─────┬──────┘  └──────┬─────┘  └───────┬───────┘  │
│        │                │                │          │
│  ┌─────┴──────┐  ┌──────┴─────┐          │          │
│  │StudioMCP   │  │apis.roblox │          │          │
│  │.exe (stdio)│  │.com (REST) │          │          │
│  └─────┬──────┘  └────────────┘          │          │
│        │                                  │          │
└────────┼──────────────────────────────────┼──────────┘
         │                                  │
         ▼                                  ▼
  ┌──────────────┐                 ┌──────────────────┐
  │ Roblox Studio│                 │  Local Vault     │
  │  Metaverse   │                 │  (encrypted keys)│
  └──────────────┘                 └──────────────────┘

Dual-Channel Communication

Channel

Transport

Port

Clients

MCP Core

stdio

—

Claude Desktop, Cursor, Claude Code, Copilot

Extension Bridge

WebSocket

17613

DeepSeek, ChatGPT, Claude, Gemini, Qwen, Mistral, Perplexity


Related MCP server: Melo

DEPLOYMENT

Prerequisites

  • Node.js ≥ 18 — the runtime

  • Roblox Studio — with MCP enabled (Assistant → MCP Servers → Studio as MCP Server)

Quick Launch

# Clone from the source
git clone https://github.com/Xenoz-GitHub/XenozMCP.git
cd XenozMCP

# Initialize the kernel
npm install
npm run build

# Activate the bridge
node dist/index.js

Or double-click start-xenoz.bat on Windows — it auto-installs, builds, and fires up.

Extension Injection (for AI chat sites)

chrome://extensions → Developer Mode → Load unpacked → select extension/

Then open any supported AI site and hit ▶ Start Studio Agent.

Claude Desktop Configuration

{
  "mcpServers": {
    "xenoz-mcp": {
      "command": "node",
      "args": ["path/to/XenozMCP/dist/index.js"]
    }
  }
}

COMMAND MATRIX

System Core

Command

Function

Security

studio_status

Ping the neural link

—

vault_set

Encrypt & store a secret

AES-256-GCM

vault_get

Decrypt & retrieve

AES-256-GCM

vault_has

Probe key existence

—

vault_list

Enumerate stored keys

—

Studio Manipulation

Command

Function

list_studio_commands

Scan available Studio MCP commands

execute_luau

Inject and run Luau bytecode

script_read

Extract script source by path

screen_capture

Photograph the viewport (multi-angle)

inspect_instance

Read instance properties and children

start_stop_play

Toggle play-testing dimension

get_studio_state

Query the Studio status matrix

search_game_tree

Locate instances by name or class

open_place

Open a place by ID

Open Cloud Commands

Command

Function

cloud_list_data_stores

Scan data store index

cloud_get_data_store_entry

Read from the data stream

cloud_set_data_store_entry

Write to the data stream

cloud_get_universe_info

Access universe metadata

cloud_publish_place

Deploy a place to production

cloud_list_places

Map all places in a universe

cloud_send_notification

Broadcast to all active players


SECURITY PROTOCOL

XenozMCP uses AES-256-GCM (Galois/Counter Mode) for all secret storage — the same encryption standard securing banking and military communications. Each secret is encrypted with a unique initialization vector, authenticated with a 128-bit GCM tag, and derived through 600,000 PBKDF2 iterations.

plaintext → AES-256-GCM → iv:tag:ciphertext → vault.store

Set your vault key via XENOZ_VAULT_KEY environment variable, or let XenozMCP generate one on first launch.


CONFIGURATION

Edit config.json to bind your Open Cloud credentials:

{
  "openCloud": {
    "apiKey": "your-api-key",
    "defaultUniverseId": "123456789"
  }
}

Sensitive values can also be injected at runtime through the vault_set command — never stored in plaintext.


ENVIRONMENT VARIABLES

Variable

Purpose

XENOZ_VAULT_KEY

64-char hex key for the AES-256-GCM vault


LICENSE

MIT — fork it, mod it, deploy it.


Available Tools

21 tools
cloud_get_data_store_entryB

Get a value from a data store

Inputs: key (required), universeId (required), dataStoreName (required).

cloud_get_universe_infoB

Get information about a Roblox universe/experience

Inputs: universeId.

cloud_list_data_storesB

List all data stores for a universe

Inputs: universeId.

cloud_list_placesB

List all places in a universe

Inputs: universeId.

cloud_publish_placeC

Publish a place to Roblox

Inputs: placeId (required), universeId (required), publishType.

cloud_send_notificationB

Send a notification to all players in an experience

Inputs: message (required), universeId (required).

cloud_set_data_store_entryC

Set a value in a data store

Inputs: key (required), value (required), universeId (required), dataStoreName (required), +1 more.

execute_luauA

Execute Luau code in Roblox Studio. Use return for output (print is NOT captured). Runs synchronously (~20s budget).

Inputs: code (required), timeout.

get_studio_stateB

Get the current state of Roblox Studio connection and place info

Inputs: no named parameters.

inspect_instanceA

Inspect a Roblox instance by dot-path. Returns properties, attributes, and children.

Inputs: path (required).

list_studio_commandsA

List all available Roblox Studio MCP commands with descriptions and parameter details

Inputs: no named parameters.

open_placeB

Open a Roblox place in Studio by place ID and universe ID

Inputs: place_id (required), universe_id (required), task.

screen_captureA

Capture the Roblox Studio viewport. Takes a screenshot of the current scene.

Inputs: single.

script_readA

Read the full contents of a script in Roblox Studio by path

Inputs: target_file (required).

search_game_treeB

Search for instances in the game tree by name or class

Inputs: query (required), scope, max_results.

start_stop_playB

Start or stop play-testing in Roblox Studio

Inputs: is_start (required).

studio_statusB

Check if Roblox Studio is connected and available

Inputs: no named parameters.

vault_getB

Retrieve a decrypted value from the encrypted vault

Inputs: name (required).

vault_hasB

Check if a key exists in the encrypted vault

Inputs: name (required).

vault_listA

List all stored key names in the encrypted vault (values not shown)

Inputs: no named parameters.

vault_setA

Securely store an encrypted value (AES-256-GCM). Use for API keys and secrets.

Inputs: name (required), value (required).

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    TDQS

    A3.5/5.0

    Scored across 21 tools

    Disambiguation5/5

    Tools are clearly separated into three distinct domains: cloud services, Roblox Studio interaction, and vault management. No overlapping purposes; each tool has a unique and well-defined role.

    Naming Consistency4/5

    The naming convention is predominantly snake_case with descriptive prefixes (cloud_, vault_). Some names like 'start_stop_play' combine two actions but are still understandable. Overall consistent.

    Tool Count4/5

    21 tools is above the typical range but justified by the server's broad scope covering cloud operations, Studio control, and a secure vault. Each tool serves a distinct purpose without redundancy.

    Completeness4/5

    The tool set covers core workflows for cloud data stores, Studio management, and vault operations. A minor gap is the absence of a delete operation for data store entries, but overall it's comprehensive.

    Related MCP Connectors

    Related MCP Servers

    • A
      license
      Not graded
      quality
      D
      maintenance
      An agentic MCP server for Roblox Studio that provides over 45 tools for script diffing, playtest automation, and bulk instance manipulation. It enables AI agents to manage full development cycles within Roblox, including transaction-safe batch operations and real-time script reviews.
      2 npm
      1
      MIT
    • A
      license
      A
      quality
      B
      maintenance
      Debug and inspection tooling for Roblox projects, exposed as an MCP server so an AI agent can explore the instance tree, read/write properties, call remotes, and run Luau in a Roblox client driven by an executor.
      14
      14 npm
      MIT
    • A
      license
      A
      quality
      D
      maintenance
      Debug and inspection tooling for Roblox projects, exposed as an MCP server so an AI agent can explore the instance tree, read/write properties, call remotes, and run Luau in a Roblox client driven by an executor.
      14
      14 npm
      1
      MIT