← MCP servers · ahujasid

Blender Model Context Protocol

BLOCKgrade D · trust 61/100

Community plugin to control Blender 3D with any LLM of your choice

3d modelingaiblenderblender addonblender mcpclaudegenerative aillm

Overview

From the repository's own README, as read at the audited commit.

<div align="center"># MCP for Blender**Connect Blender to any LLM***formerly `blender-mcp` — the PyPI package is now [`mcp-for-blender`](https://pypi.org/project/mcp-for-blender/).**Existing setups keep working; no config change is required. [Read more](https://github.com/ahujasid/mcp-for-blender/issues/366)***Disclaimer:** This is a third-party integration and not made by BlenderPrompt-assisted 3D modeling, scene creation, and manipulation — driven by AI.[![PyPI Downloads](https://static.pepy.tech/personalized-badge/blender-mcp?period=total&units=INTERNATIONAL_SYSTEM&left_color=BLACK&right_color=GREEN&left_text=downloads)](https://pepy.tech/projects/blender-mcp)[![PyPI Version](https://img.shields.io/pypi/v/blender-mcp?color=blue)](https://pypi.org/project/blender-mcp/)[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)[![Discord](https://img.shields.io/badge/Discord-join-5865F2?logo=discord&logoColor=white)](https://discord.gg/SNqPn4TcKQ)[**Website**](https://mcp-for-blender.com/) · [**Full Tutorial**](https://www.youtube.com/watch?v=lCyQ717DuzQ) · [**Discord**](https://discord.gg/SNqPn4TcKQ) · [**Sponsor**](https://github.com/sponsors/ahujasid) · [**Buy me a coffee**](https://buymeacoffee.com/ahujasid) · [**Feedback**](https://cal.com/siddharth-ahuja/feedback-call)<a href="https://trendshift.io/repositories/14834?utm_source=repository-badge&amp;utm_medium=badge&amp;utm_campaign=badge-repository-14834" target="_blank" rel="noopener noreferrer"><img src="https://trendshift.io/api/badge/repositories/14834" alt="ahujasid%2Fblender-mcp | Trendshift" width="250" height="55"/></a><br />**Supporters**[CodeRabbit](https://www.coderabbit.ai/)[Kevin Guanche Darias](https://github.com/KevinGuancheDarias)[Guillermo Rauch](https://github.com/rauchg)**All supporters:** [Support this project](https://github.com/sponsors/ahujasid)</div>---## Quickstart> **Note:** the PyPI package `blender-mcp` is now **`mcp-for-blender`**. Existing setups> keep working

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code
claude mcp add mcp-for-blender -- uvx mcp-for-blender
claude-desktop
{
  "mcpServers": {
    "mcp-for-blender": {
      "command": "uvx",
      "args": [
        "mcp-for-blender"
      ]
    }
  }
}

Exposed tools (6) 5 read · 1 write · 0 destructive

ToolRiskDescription
disable_telemetrywrite
get_addon_statusread
get_hunyuan3d_statusread
get_viewport_screenshotread
poll_hunyuan_job_statusread
record_trajectory_feedbackread

Details

Source
ahujasid/blender-mcp
PyPI
mcp-for-blender
License
MIT
Stars
28,809 · pushed 0d ago

Trust audit

Do not install this without reading the findings. The audit found something that could harm you or your machine.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeFAIL
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
UNDECLARED (5 observation(s))
Network
declared (5 observation(s))
Shell
declared (4 observation(s))
Dependencies
pinned
Secrets in source
found

Findings (14)

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
addon.py:1500
exec(code, namespace)
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
src/blender_mcp/bundled/addon.py:1500
exec(code, namespace)
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
src/blender_mcp/safe_mode.py:196
"eval": "eval() executes arbitrary expressions",
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
src/blender_mcp/safe_mode.py:197
"exec": "exec() executes arbitrary code",
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
MEDIUMFilesystem / path · fs.destructive · CWE-22, CWE-59
addon.py:2261
shutil.rmtree(temp_dir)
MEDIUMFilesystem / path · fs.destructive · CWE-22, CWE-59
addon.py:3284
shutil.rmtree(temp_dir)
MEDIUMFilesystem / path · fs.destructive · CWE-22, CWE-59
addon.py:3290
shutil.rmtree(temp_dir)
MEDIUMFilesystem / path · fs.destructive · CWE-22, CWE-59
addon.py:3301
shutil.rmtree(temp_dir)
MEDIUMFilesystem / path · fs.destructive · CWE-22, CWE-59
addon.py:3315
shutil.rmtree(temp_dir)
MEDIUMHard-coded secrets · secret.generic · CWE-798, CWE-321
tests/test_polypizza.py:17
API_KEY = "test-key-not-a-real-one"
LOWCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
tests/test_addon_autostart.py:92
exec(  # noqa: S102 - execute only the selected functions from our own source.
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94
src/blender_mcp/server.py:1101
image_data = base64.b64decode(result["image_data"])
LOWSupply chain · prompt.pipe_to_shell · CWE-829, CWE-1357
README.md:53
curl -LsSf https://astral.sh/uv/install.sh | sh
LOWSupply chain · prompt.pipe_to_shell · CWE-829, CWE-1357
README.md:205
curl -LsSf https://astral.sh/uv/install.sh | sh

Gates applied: no_behavioural_pass.

Audited 2026-09-17 · audit v0.4.0 · source sha 49eb1d78c324 · full audit: observations/trust-audit/mcp-server/ahujasid__blender-model-context-protocol.json · Report an issue or request a re-scan

Audit history

DateSourceVerdictGradeScoreChange
2026-09-1749eb1d78c324BLOCKD61first audit

Alternatives

Other servers in the same categories, safer ones first.

Questions

What is the Blender Model Context Protocol MCP server?

Community plugin to control Blender 3D with any LLM of your choice

What tools does Blender Model Context Protocol expose?

6 in total: 5 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is Blender Model Context Protocol safe to connect to an agent?

No — not without reading the findings first. The audit graded it D (61/100) and found 4 critical or high issues in the source. Each one is listed on this page with the file and line it is on.

What credentials does Blender Model Context Protocol need?

No credential environment variables were found in its source, so it appears to need none.

How current is this page?

The grade is for one exact copy of the source (49eb1d78c324), read on 2026-09-17. The repository is watched and re-audited when it changes.

Provenance: OBSERVED · read 2026-09-17 · job trust-audit-2026-09-17