Server data from the Official MCP Registry
Independent MCP integration for Autodesk Revit software through a local bridge.
Independent MCP integration for Autodesk Revit software through a local bridge.
This MCP server provides extensive control over Autodesk Revit, with 103+ tools exposed through the Model Context Protocol. While the codebase demonstrates reasonable structure and the localhost-only binding mitigates network exposure, several high-impact security concerns drive the score: (1) three extremely powerful reflection/execution tools (revit_invoke_method, revit_execute_python, revit_reflect_get/set) allow arbitrary code execution and API access without validation, (2) no input validation or sanitization on user-supplied parameters, (3) no authentication or authorization controls on any tool, and (4) the execute_python tool explicitly warns in its own documentation that it should be restricted in shared/production environments, yet has no restrictions. These design choices create significant risk in multi-user or less-trusted environments. Supply chain analysis found 4 known vulnerabilities in dependencies (0 critical, 3 high severity).
3 files analyzed · 16 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Set these up before or after installing:
Environment variable: MCP_REVIT_WORKSPACE_DIR
Environment variable: MCP_REVIT_ALLOWED_DIRECTORIES
Environment variable: MCP_REVIT_MODE
Environment variable: MCP_REVIT_BRIDGE_URL
Environment variable: MCP_REVIT_AUDIT_LOG
Environment variable: MCP_REVIT_LOG_LEVEL
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-sam-aec-aec-model-bridge": {
"env": {
"MCP_REVIT_MODE": "your-mcp-revit-mode-here",
"MCP_REVIT_AUDIT_LOG": "your-mcp-revit-audit-log-here",
"MCP_REVIT_LOG_LEVEL": "your-mcp-revit-log-level-here",
"MCP_REVIT_BRIDGE_URL": "your-mcp-revit-bridge-url-here",
"MCP_REVIT_WORKSPACE_DIR": "your-mcp-revit-workspace-dir-here",
"MCP_REVIT_ALLOWED_DIRECTORIES": "your-mcp-revit-allowed-directories-here"
},
"args": [
"aec-model-bridge"
],
"command": "uvx"
}
}
}Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.