Back to Browse

Mcp MCP Server

Developer ToolsUse Caution4.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Attach weapons and props to rigged 3D characters: hand-bone detection, fist close, engine binds.

About

Attach weapons and props to rigged 3D characters: hand-bone detection, fist close, engine binds.

Security Report

4.2
Use Caution4.2High Risk

This is a lean MCP client for the GripForge 3D rigging API with appropriate authentication and minimal attack surface. The code properly validates inputs, handles file I/O safely with path resolution, and stores the API key via environment variables. The main concerns are modest: no input validation on out_dir path traversal despite using resolve(), broad error messages that could leak API structure details, and lack of request timeout handling on the fetch call. Permissions align well with the server's purpose (file read/write for 3D models, HTTP to GripForge API). Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

3 files analyzed · 7 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

HTTP Network Access

Connects to external APIs or services over the internet.

What You'll Need

Set these up before or after installing:

GripForge API key (gf_...) — create one at https://gripforge.ai/accountRequired

Environment variable: GRIPFORGE_API_KEY

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-gripforgeai-mcp": {
      "env": {
        "GRIPFORGE_API_KEY": "your-gripforge-api-key-here"
      },
      "args": [
        "-y",
        "@gripforgeai/mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

@gripforgeai/mcp

Attach weapons & props to rigged characters — from Claude Code, Cursor or any MCP client. Thin client for the GripForge API.

Install (Claude Code)

claude mcp add gripforge -e GRIPFORGE_API_KEY=gf_... -- npx -y @gripforgeai/mcp

Or in .mcp.json:

{
  "mcpServers": {
    "gripforge": {
      "command": "npx",
      "args": ["-y", "@gripforgeai/mcp"],
      "env": { "GRIPFORGE_API_KEY": "gf_..." }
    }
  }
}

Get a free API key at https://gripforge.ai/login — the free plan includes 3 API/MCP attaches per month to try it out (plus 15 in the web Studio). Paid plans from €29/mo for production use.

Install (Grok)

grok mcp add gripforge --env GRIPFORGE_API_KEY=gf_... -- npx -y @gripforgeai/mcp

Or in ~/.grok/config.toml:

[mcp_servers.gripforge]
command = "npx"
args = ["-y", "@gripforgeai/mcp"]
enabled = true
startup_timeout_sec = 45

[mcp_servers.gripforge.env]
GRIPFORGE_API_KEY = "gf_..."

Also works with Cursor, Windsurf and any MCP-compatible client — same command / args / env triple.

Tools

  • gripforge_attach — character + prop in, bone-local bind + Three.js / Unity / Godot snippets out. Styles: melee, gun, shield, staff (scythe/polearm). With export_glb: true (+ out_dir) it also writes attached.glb: the character with the fist closed and the prop attached, textures preserved — use this for mitten-hand rigs, whose closed fist cannot travel in a JSON bind.
  • gripforge_formats — supported formats & options.

Env

  • GRIPFORGE_API_KEY (required) — 1 credit = 1 successful attach
  • GRIPFORGE_API_URL (optional) — defaults to https://gripforge.ai

Reviews

No reviews yet

Be the first to review this server!