Short answer: MCA Selector is a legitimate, open-source tool — but “safe” depends far more on where you download it from than on the tool itself. Any page that answers this question with an unqualified “100% safe, virus-free” is marketing, not information. This page gives you the verifiable version instead: what you can check, what the real risks are, and where the limits of any guarantee lie.
What speaks for the tool itself
- It is open source under the MIT licence. The full source code is public in the Querz/mcaselector repository on GitHub, so anyone can read exactly what the program does before running it — the strongest safety property a small tool can have.
- It is widely used and publicly maintained. The repository had 4,933 GitHub stars and more than two million downloads across all releases when we last checked (October 2026), with bugs tracked in public issues.
- It does not need your Minecraft account. MCA Selector works on world files on your disk, outside the game; it never asks for Mojang or Microsoft credentials.
The only official download source
The project’s README states it plainly: the only official and safe place to download MCA Selector is directly from the official GitHub repository (github.com/Querz/mcaselector). That warning exists because lookalike sites redistribute the tool through third-party file hosts where nobody can vouch for the file you actually receive.
To be transparent about this site: mcaselector.org is an unofficial resource site, not the project’s home. Our download page links the official GitHub release files as the main channel, clearly labels the one mirror we also list as a site mirror, and publishes the SHA-256 hashes of the official 2.9 packages so you can verify the file you downloaded is byte-identical to the one on GitHub.
How to verify your download with SHA-256
A SHA-256 hash is a fingerprint of a file: if even one byte differs, the fingerprint differs. Checking it takes under a minute:
- Windows (PowerShell):
Get-FileHash .\mcaselector-2.9-setup.exe -Algorithm SHA256 - macOS (Terminal):
shasum -a 256 mcaselector-2.9-aarch64.dmg - Linux (Terminal):
sha256sum mcaselector-2.9-x64.deb
Compare the output with the hash published on our download page (taken from the GitHub release data). A match means the file is exactly the official package. A mismatch means you should delete it and download again from GitHub.
The fake-site risk is real
Impersonation is not hypothetical for this project: in GitHub issue #593 the author flagged a lookalike domain as an untrusted impersonation of the project. “MCA Selector” plus a download button on an unfamiliar site is precisely how unofficial bundles travel. Two habits protect you: download from the GitHub repository (or a page that links you there), and verify the SHA-256 hash before running anything.
The other risk: what the tool does to your world
Even a genuine copy of MCA Selector is a powerful editor, and this is the risk nobody can waive for you: the tool modifies and deletes chunk data by design. Deletions and NBT Changer edits are written to your world files immediately and there is no undo. Used carelessly — deleting the wrong region, editing a world that is still open in the game — it can damage a save. That is not malware; it is the tool doing its job on the wrong target. The defence is boring and total: back up your world before every edit, work on the copy for risky operations, and close the world in Minecraft first. See our backup workflow and the full picture in what an .mca file is.
So, is it safe?
Downloaded from the official GitHub repository and verified against the published SHA-256 hashes, MCA Selector is the same open-source tool its public code shows it to be — we are not aware of a stronger, checkable claim than that, and we will not print one. Downloaded from a random mirror, no site can honestly promise you anything about the file. Source and hash first; backup always.
Download MCA Selector 2.9
Get the current release from the MCA Selector download page — official GitHub files for Windows, macOS, Linux and the cross-platform .jar, with SHA-256 hashes listed for every package.
One last backup reminder: keep the copy of your world you made before editing until you have loaded the edited world in Minecraft and confirmed it looks right. Deletions and NBT changes in MCA Selector are permanent once applied.
Related guides
Background reading on sources, formats and safe workflows: