Blender Model Context Protocol
BLOCKgrade D · trust 61/100Community plugin to control Blender 3D with any LLM of your choice
3d modelingaiblenderblender addonblender mcpclaudegenerative aillmOverview
From the repository's own README, as read at the audited commit.
<div align="center"># MCP for Blender**Connect Blender to any LLM***formerly `blender-mcp` — the PyPI package is now [`mcp-for-blender`](https://pypi.org/project/mcp-for-blender/).**Existing setups keep working; no config change is required. [Read more](https://github.com/ahujasid/mcp-for-blender/issues/366)***Disclaimer:** This is a third-party integration and not made by BlenderPrompt-assisted 3D modeling, scene creation, and manipulation — driven by AI.[](https://pepy.tech/projects/blender-mcp)[](https://pypi.org/project/blender-mcp/)[](LICENSE)[](https://discord.gg/SNqPn4TcKQ)[**Website**](https://mcp-for-blender.com/) · [**Full Tutorial**](https://www.youtube.com/watch?v=lCyQ717DuzQ) · [**Discord**](https://discord.gg/SNqPn4TcKQ) · [**Sponsor**](https://github.com/sponsors/ahujasid) · [**Buy me a coffee**](https://buymeacoffee.com/ahujasid) · [**Feedback**](https://cal.com/siddharth-ahuja/feedback-call)<a href="https://trendshift.io/repositories/14834?utm_source=repository-badge&utm_medium=badge&utm_campaign=badge-repository-14834" target="_blank" rel="noopener noreferrer"><img src="https://trendshift.io/api/badge/repositories/14834" alt="ahujasid%2Fblender-mcp | Trendshift" width="250" height="55"/></a><br />**Supporters**[CodeRabbit](https://www.coderabbit.ai/)[Kevin Guanche Darias](https://github.com/KevinGuancheDarias)[Guillermo Rauch](https://github.com/rauchg)**All supporters:** [Support this project](https://github.com/sponsors/ahujasid)</div>---## Quickstart> **Note:** the PyPI package `blender-mcp` is now **`mcp-for-blender`**. Existing setups> keep working
Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add mcp-for-blender -- uvx mcp-for-blender
{
"mcpServers": {
"mcp-for-blender": {
"command": "uvx",
"args": [
"mcp-for-blender"
]
}
}
}Exposed tools (6) 5 read · 1 write · 0 destructive
| Tool | Risk | Description |
|---|---|---|
disable_telemetry | write | |
get_addon_status | read | |
get_hunyuan3d_status | read | |
get_viewport_screenshot | read | |
poll_hunyuan_job_status | read | |
record_trajectory_feedback | read |
Details
- Source
- ahujasid/blender-mcp
- PyPI
mcp-for-blender- License
- MIT
- Stars
- 28,809 · pushed 0d ago
Trust audit
Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- UNDECLARED (5 observation(s))
- Network
- declared (5 observation(s))
- Shell
- declared (4 observation(s))
- Dependencies
- pinned
- Secrets in source
- found
Findings (14)
exec(code, namespace)
exec(code, namespace)
"eval": "eval() executes arbitrary expressions",
"exec": "exec() executes arbitrary code",
shutil.rmtree(temp_dir)
shutil.rmtree(temp_dir)
shutil.rmtree(temp_dir)
shutil.rmtree(temp_dir)
shutil.rmtree(temp_dir)
API_KEY = "test-key-not-a-real-one"
exec( # noqa: S102 - execute only the selected functions from our own source.
image_data = base64.b64decode(result["image_data"])
curl -LsSf https://astral.sh/uv/install.sh | sh
curl -LsSf https://astral.sh/uv/install.sh | sh
Gates applied: no_behavioural_pass.
Audited 2026-09-17 · audit v0.4.0 · source sha 49eb1d78c324 · full audit: observations/trust-audit/mcp-server/ahujasid__blender-model-context-protocol.json · Report an issue or request a re-scan
Audit history
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-09-17 | 49eb1d78c324 | BLOCK | D | 61 | first audit |
Alternatives
Other servers in the same categories, safer ones first.
Questions
What is the Blender Model Context Protocol MCP server?
Community plugin to control Blender 3D with any LLM of your choice
What tools does Blender Model Context Protocol expose?
6 in total: 5 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Blender Model Context Protocol safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (61/100) and found 4 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What credentials does Blender Model Context Protocol need?
No credential environment variables were found in its source, so it appears to need none.
How current is this page?
The grade is for one exact copy of the source (49eb1d78c324), read on 2026-09-17. The repository is watched and re-audited when it changes.
Provenance: OBSERVED · read 2026-09-17 · job trust-audit-2026-09-17