Tool updates

Unity MCP 1.2.0 limits OAuth token forwarding to local hosts

Published Oct 18, 2026, 19:11 (Bangkok time)

By GameSlash

AI Game Developer for Unity released 1.2.0 on October 18, tightening account-token handling and fixing OpenUPM configuration and connection hints.

Unity MCP editor interface showing agent connection and project tool controls — Image: Ivan Murzak / Unity-MCP — Existing official documentation screenshot (Apache-2.0), not a new-feature capture

Ivan Murzak's AI Game Developer (Unity MCP) released version 1.2.0 on October 18, 2026. The official release notes describe security and installation fixes, rather than a new game-generation model.

Keep credentials on the local machine

The update adopts McpPlugin 8.9.0 and tightens token handling: a custom OAuth account token is sent only to loopback hosts, reducing the risk of accidentally forwarding a token to a non-local address. It also improves the connection-error hint shown when Unity cannot reach the server.

Unity MCP configuration screen showing AI coding agent setup and Skills settings — Image: Ivan Murzak / Unity-MCP — Existing official documentation screenshot (Apache-2.0), not a new-feature capture

Packaging and configuration corrections

The release fixes OpenUPM route validation so descriptive YAML no longer causes it to reject an otherwise valid setup, and adjusts CI test-report retention for the release workflow. These are maintenance changes relevant to Unity developers already connecting Claude, Codex or another MCP client.

The two screenshots illustrate the plugin's established editor and setup interface. Neither shows proof of the OAuth fix itself. GameSlash reviewed the public release notes and source images, but did not install version 1.2.0 or run a security test.

Sources: Unity MCP 1.2.0 release | Project repository | License

View source