rvt-mcpBLOCK
BIMwright — AI-native Revit MCP server (Revit 2022–2027)
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
rvt-mcp
MCP gateway for Autodesk Revit — local tools for agents, optional personal bake loop
English · Tiếng Việt · 简体中文 · 日本語
What it is
An early all-C# MCP implementation for Revit — researched and implemented since March 2026.
rvt-mcp is a local bridge between an MCP client and a running Revit session. A .NET 8 server talks MCP over stdio; a thin add-in per Revit year (2022–2027) runs inside Revit and is reached over localhost TCP (≤2024) or a named pipe (≥2025). Nothing leaves the machine, it is C# end to end, and lengths are millimetres at the tool boundary. Details: ARCHITECTURE.md.
Agents get a typed tool surface for common Revit work, a C# escape hatch for everything else, and an optional way to turn repeated patterns into per
06a7a7014114OBSERVED · 2026-10-08Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | FAIL |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (1 observation(s))
- Network
- declared (2 observation(s))
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (16)
<!-- agents-install-guide -->
# RvtMcp-MCP
# Contributing to rvt-mcp
# Firm Profiles
builder.WebHost.UseUrls($"http://127.0.0.1:{port}");Console.Error.WriteLine($"[RvtMcp] SSE server listening on http://127.0.0.1:{port}");.mcp.json.example
$packer = (Resolve-Path (Join-Path $PSScriptRoot '../../scripts/publish-nupkg.ps1')).Path
for name in ('../outside.txt', 'server/../../outside.txt', '/absolute.txt',$uninstaller = Join-Path $PSScriptRoot '../../scripts/uninstall-all.ps1'
$installer = Join-Path $PSScriptRoot '../../scripts/install.ps1'
$path = (Resolve-Path (Join-Path $PSScriptRoot "../../scripts/$name")).Path
send_code defaults **on**, independently of ToolBaker; call-log defaults **off**. CLI overrides environment variables, which override JSON. Authenticated server settings override plugin settings for t
After recovery, repeat the [three verification stages](#verify-and-hand-off). A closed Revit session or a pending Desktop restart is not a reason to uninstall or purge an otherwise valid installation.
If the user explicitly says "skip the prompts, just install", still preview changes and verify the result; combine the two approval gates into one upfront approval. **Never silently skip preview or ve
Gates applied: no_behavioural_pass.
06a7a7014114full audit observations/trust-audit/mcp-server/bimwright__rvt-mcp.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | 06a7a7014114 | BLOCK | D | 69 | first audit |
Questions
What is the rvt-mcp MCP server?
BIMwright — AI-native Revit MCP server (Revit 2022–2027)
Is rvt-mcp safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (69/100) and found 4 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What credentials does rvt-mcp need?
No credential environment variables were found in its source, so it appears to need none.
How does rvt-mcp run?
It speaks stdio, so it runs as a local process your client starts.
How current is this page?
The grade is for one exact copy of the source (06a7a7014114), read on 2026-10-08. The repository is watched and re-audited when it changes.