Atlas / MCP servers / anonimus124 / Fusion

FusionBLOCK

Name: Fusion
Author: anonimus124

mcp/anonimus124/fusion-3

MCP server by anonimus124 · Audited 2026-10-08

⚑ Report / re-scan Source ↗

Verdict

BLOCK

Grade

Trust score

69 /100

Exposed tools

78 50r · 25w · 3d

Transport

stdio

License

—

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Control Autodesk Fusion 360 with natural language through Claude. FusionMCP is an MCP (Model Context Protocol) server that gives Claude direct access to Fusion 360's CAD engine -- sketching, modeling, assemblies, export, and more.

How It Works

Claude Desktop  ──stdio──▶  MCP Server (Python)  ──HTTP──▶  Fusion 360 Add-in
fusion_server.py                 FusionMCP.py
(your machine)                   (inside Fusion 360)

MCP Server (mcp_server/fusion_server.py) — Runs locally and exposes tools to Claude via the Model Context Protocol over stdio.
Fusion 360 Add-in (FusionMCP.py) — Runs inside Fusion 360, listens on http://127.0.0.1:7432, receives commands from the MCP server, and executes them on Fusion's main thread using the Fusion 360 Python API.

Features

Sketching

Primitives: rectangle, center rectangle, circle, line, arc, polygon, ellipse, spline, slot, text
Operations: fillet, offset, mirror, rectangular pattern
Constraints: coincident, tangent, perpendicular, parallel, horizontal, vertical, concentric, equal, midpoint, fix, collinear, smooth
Dimensions: distance, angle, diameter, radius

3D Modeling

Extrude, revolve, loft, sweep, helix, pipe
Shell, fillet, chamfer, draft, thread
Press/pull faces, thicken sketches
Boolean operations (join, cut, intersect)
Move, rotate, scale (uniform and non-uniform), copy, mirror
Rectangular and circular body patterns
Hole features (simple, counterbore, countersink)

Assembly

Create components, move bodies between components
Joints: rigid, revolute, slider, cylindrical, pin-slot, planar, ball
As-built joints

Inspection

Design info (components, sketches, bodies, parameters, joints)
Face/edge/sketch info for targeted operations
Body measurement (bounding box, volume, face/edge/vertex counts)
Distance measurement between entities
Featur

Read from source at commit 3cd17956cf72OBSERVED · 2026-10-08

Exposed tools (78)

50 read · 25 write · 3 destructive. Blast radius: 3 tools can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

Tool	Risk	Description
`add_constraint`	write
`add_construction_axis`	write
`add_construction_plane`	write
`add_parameter`	write
`add_sketch_dimension`	write
`add_sketch_fillet`	write
`add_thread`	write
`apply_appearance`	write
`capture_screenshot`	read
`chamfer_edges`	read
`circular_pattern_body`	read
`clear_design`	destructive	Delete all bodies, sketches, construction geometry, and features from the current design. Use with caution.
`combine_bodies`	read
`copy_body`	read
`create_as_built_joint`	write
`create_component`	write	Create a new empty component in the design.
`create_helix`	write
`create_hole`	write
`create_joint`	write
`create_new_document`	write
`create_pipe`	write
`create_sketch`	write
`create_sketch_on_face`	write
`delete_body`	destructive	Delete a body from the design.
`delete_sketch`	destructive
`draft_face`	read
`draw_arc`	read
`draw_center_rectangle`	read
`draw_circle`	read
`draw_ellipse`	read
`draw_line`	read
`draw_polygon`	read
`draw_rectangle`	read
`draw_slot`	read
`draw_spline`	read
`draw_text`	read
`execute_script`	write
`export_as_3mf`	read	Export as 3MF for modern 3D printing. Blank path = ~/Desktop/fusion_export.3mf
`export_as_f3d`	read	Export as Fusion archive (.f3d) for backup/sharing. Blank path = ~/Desktop/fusion_export.f3d
`export_as_step`	read	Export as STEP (universal CAD format). Blank path = ~/Desktop/fusion_export.step
`export_as_stl`	read	Export as STL for 3D printing. Blank path = ~/Desktop/fusion_export.stl
`extrude_sketch`	read
`fillet_edges`	read
`finish_sketch`	read
`fusion_status`	read	Check if Fusion 360 is running and the MCP bridge is active.
`get_bodies_info`	read	List all bodies with index, name, face count, edge count, and bounding box size.
`get_design_info`	read	Get full info about the current design: components, sketches, bodies, parameters, construction planes, joints.
`get_edge_info`	read
`get_face_info`	read
`get_sketch_info`	read
`get_timeline_info`	read	Get the feature timeline: ordered list of all features with names, types, and status.
`list_appearances`	read
`list_parameters`	read	List all parameters with values, units, and expressions.
`loft_sketches`	read
`measure_between`	read
`measure_body`	read
`mirror_body`	read
`mirror_sketch`	read
`move_body`	write
`move_body_to_component`	write
`offset_sketch`	read
`press_pull_face`	read
`rectangular_pattern_body`	read
`rectangular_pattern_sketch`	read
`redo`	read	Redo previously undone actions. Args: steps = how many to redo.
`rename_body`	write	Rename a body.
`revolve_sketch`	read
`rotate_body`	read
`save_as`	write
`save_design`	write	Save the current design. Use save_as first if the document is brand new.
`scale_body`	read
`set_body_color`	write
`shell_body`	read
`sweep_sketch`	read
`thicken_sketch`	read
`toggle_body_visibility`	read	Toggle a body visible or hidden.
`undo`	read	Undo the last action(s). Args: steps = how many to undo.
`update_parameter`	write

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	WARN
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (1 observation(s))
Network: declared (4 observation(s))
Shell: declared (1 observation(s))
Dependencies: not all pinned
Secrets in source: none-found

Findings (7)

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

FusionMCP.py:366

exec(code, {"__builtins__": __builtins__}, local_vars)

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319

mcp_server/fusion_server.py:14

FUSION_URL = "http://127.0.0.1:7432"

MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59

clear_design, delete_body, delete_sketch

Why it matters. 3 tool(s) can delete or overwrite

Fix. prefer a read-only mode or scoped tokens; the page states the blast radius

LOWInventory / provenance · inv.no_license · CWE-1104

Why it matters. no LICENSE file and no repo licence

Fix. add a licence

LOWNetwork egress · net.raw_ip · CWE-200, CWE-319

README.md:14

2. **Fusion 360 Add-in** (`FusionMCP.py`) — Runs inside Fusion 360, listens on `http://127.0.0.1:7432`, receives commands from the MCP server, and executes them on Fusion's main thread using the Fusio

LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94

mcp_server/fusion_server.py:1011

Image(data=base64.b64decode(b64), format="png")

LOWSupply chain · supply.unpinned · CWE-829, CWE-1357

mcp_server/requirements.txt

mcp, requests

Why it matters. 2 requirement(s) not pinned with ==

Fix. pin exact versions

Gates applied: no_behavioural_pass, no_license.

Audited 2026-10-08 · audit v0.4.1 · source sha 3cd17956cf72full audit observations/trust-audit/mcp-server/anonimus124__fusion-3.json · Report an issue / request a re-scan

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

Date	Source	Verdict	Grade	Score	Change
2026-10-08	`3cd17956cf72`	BLOCK	D	69	first audit

Questions

What tools does Fusion expose?

78 in total: 50 read-only, 25 that write, and 3 that can delete or overwrite (clear_design, delete_body, delete_sketch). Every one is listed on this page with its risk.

Is Fusion safe to connect to an agent?

No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on. Separately from the audit: 3 of its tools can destroy data, so scope the token you give it to what you actually need.

What credentials does Fusion need?

No credential environment variables were found in its source, so it appears to need none.

How does Fusion run?

It speaks stdio, so it runs as a local process your client starts.

How current is this page?

The grade is for one exact copy of the source (3cd17956cf72), read on 2026-10-08. The repository is watched and re-audited when it changes.

Source	anonimus124/fusion-mcp
Transports	stdio
Activity	pushed 207d ago