Atlas / MCP servers / dakkshin / After Effects

After EffectsBLOCK

mcp/dakkshin/after-effects

MCP Server for Adobe After Effects. Enables remote control (compositions, text, shapes, solids, properties) via the Model Context Protocol using ExtendScript.

Verdict
BLOCK
Grade
D
Trust score
65 /100
Exposed tools
13 6r · 7w · 0d
Transport
stdio
License
MIT
Stars
672
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

✨ A Model Context Protocol (MCP) server for Adobe After Effects that enables AI assistants and other applications to control After Effects through a standardized protocol.

Table of Contents

  • Features
  • Core Composition Features
  • Layer Management
  • Animation Capabilities
  • Setup Instructions
  • Prerequisites
  • Installation
  • Update MCP Config
  • Running the Server
  • Usage Guide
  • Creating Compositions
  • Working with Layers
  • Animation
  • Available MCP Tools
  • For Developers
  • Project Structure
  • Building the Project
  • Contributing
  • License

📦 Features

🎥 Core Composition Features

  • Create compositions with custom settings (size, frame rate, duration, background color)
  • List all compositions in a project
  • Get project information such as frame rate, dimensions, and duration

🧱 Layer Management

  • Create text layers with customizable properties (font, size, color, position)
  • Create shape layers (rectangle, ellipse, polygon, star) with colors and strokes
  • Create solid/adjustment layers for backgrounds an
Read from source at commit 3d7cb99e82cbOBSERVED · 2026-09-29
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code
claude mcp add after-effects-mcp -- npx -y [email protected]
claude-desktop
{
  "mcpServers": {
    "after-effects-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}
03

Exposed tools (13)

6 read · 7 write · 0 destructive.

ToolRiskDescription
apply-effectwriteApply an effect to a layer in After Effects
apply-effect-templatewriteApply a predefined effect template to a layer in After Effects
create-compositionwriteCreate a new composition in After Effects with specified parameters
get-helpreadGet help on using the After Effects MCP integration
get-resultsreadGet results from the last script executed in After Effects
mcp_aftereffects_applyEffectwriteApply an effect to a layer in After Effects
mcp_aftereffects_applyEffectTemplatewriteApply a predefined effect template to a layer in After Effects
mcp_aftereffects_get_effects_helpreadGet help on using After Effects effects
run-bridge-testwriteRun the bridge test effects script to verify communication and apply test effects
run-scriptwriteRun a read-only script in After Effects
setLayerExpressionread
setLayerKeyframeread
test-animationreadTest animation functionality in After Effects
04

Trust audit

BLOCKgrade D · trust 65/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeFAIL
L2Instruction surface (what it tells the agent)WARN
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
none-observed
Shell
declared (4 observation(s))
Dependencies
not all pinned
Secrets in source
none-found

Findings (6)

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
src/scripts/mcp-bridge-auto.jsx:1244
return eval("(" + text + ")");
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
src/scripts/mcp-bridge-auto.jsx:1731
: eval("(" + content + ")");
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
HIGHPrivilege escalation / persistence · priv.escalate · CWE-269, CWE-250
install-bridge.js:91
execSync(`sudo cp "${sourceScript}" "${destinationScript}"`, { stdio: 'inherit' });
Why it matters. asks for elevated privileges
HIGHPrivilege escalation / persistence · priv.escalate · CWE-269, CWE-250
install-bridge.js:118
console.error('3. You may need to run with sudo or copy manually via Finder');
Why it matters. asks for elevated privileges
MEDIUMPrompt injection · scope.undeclared_system · CWE-94, CWE-1427
<declared scope>
system use found in code, not declared in the description
Why it matters. the description does not admit a capability the code has
Fix. declare system use in the description, or remove it
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
package.json
@modelcontextprotocol/sdk, node-fetch, zod, @types/node, copyfiles, esbuild, typescript
Why it matters. 7 dependency range(s) float
Fix. pin exact versions or ship a lockfile

Gates applied: no_behavioural_pass.

Audited 2026-09-29 · audit v0.4.1 · source sha 3d7cb99e82cbfull audit observations/trust-audit/mcp-server/dakkshin__after-effects.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-09-293d7cb99e82cbBLOCKD65first audit
06

Questions

What is the After Effects MCP server?

MCP Server for Adobe After Effects. Enables remote control (compositions, text, shapes, solids, properties) via the Model Context Protocol using ExtendScript.

What tools does After Effects expose?

13 in total: 6 read-only, 7 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is After Effects safe to connect to an agent?

No — not without reading the findings first. The audit graded it D (65/100) and found 4 critical or high issues in the source. Each one is listed on this page with the file and line it is on.

What credentials does After Effects need?

No credential environment variables were found in its source, so it appears to need none.

How does After Effects run?

It speaks stdio, so it runs as a local process your client starts. It is published on npm as after-effects-mcp at 1.0.0.

How current is this page?

The grade is for one exact copy of the source (3d7cb99e82cb), read on 2026-09-29. The repository is watched and re-audited when it changes.

Advertisement