Server data from the Official MCP Registry
MCP server connecting AI assistants to Autodesk Revit through a local bridge.
MCP server connecting AI assistants to Autodesk Revit through a local bridge.
This Revit MCP server contains several critical security vulnerabilities that pose significant risks. The most severe issues are: (1) an arbitrary Python code execution tool (`revit_execute_python`) that runs without validation or sandboxing, (2) unrestricted reflection-based API access (`revit_invoke_method`, `revit_reflect_get/set`) allowing any .NET code execution, (3) no authentication or authorization controls despite the README claiming optional OAuth2, and (4) dangerous filesystem operations (CSV/file export) without path validation. While the server's core architecture and HTTP bridge design are reasonable, the "power tools" batch of capabilities fundamentally bypass security boundaries and should not be exposed to untrusted AI clients. Supply chain analysis found 4 known vulnerabilities in dependencies (0 critical, 3 high severity).
3 files analyzed · 16 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Set these up before or after installing:
Environment variable: MCP_REVIT_WORKSPACE_DIR
Environment variable: MCP_REVIT_ALLOWED_DIRECTORIES
Environment variable: MCP_REVIT_MODE
Environment variable: MCP_REVIT_BRIDGE_URL
Environment variable: MCP_REVIT_AUDIT_LOG
Environment variable: MCP_REVIT_LOG_LEVEL
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-sam-aec-autodesk-revit-mcp-server": {
"env": {
"MCP_REVIT_MODE": "your-mcp-revit-mode-here",
"MCP_REVIT_AUDIT_LOG": "your-mcp-revit-audit-log-here",
"MCP_REVIT_LOG_LEVEL": "your-mcp-revit-log-level-here",
"MCP_REVIT_BRIDGE_URL": "your-mcp-revit-bridge-url-here",
"MCP_REVIT_WORKSPACE_DIR": "your-mcp-revit-workspace-dir-here",
"MCP_REVIT_ALLOWED_DIRECTORIES": "your-mcp-revit-allowed-directories-here"
},
"args": [
"revit-mcp-server"
],
"command": "uvx"
}
}
}Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.