Atlas / MCP servers / ivg-design / Rive Animation Viewer

Rive Animation ViewerBLOCK

Name: Rive Animation Viewer
Author: ivg-design

mcp/ivg-design/rive-animation-viewer

MCP server by ivg-design · app · desktop app · mcp · Audited 2026-10-09

Rive animation desktop viewer (Tauri) dual platform (Mac/PC) . Features demo bundle generation for distributing self-contained animation executables to clients. Embedded MCP Server

Verdict

BLOCK

Grade

Trust score

41 /100

Exposed tools

47 23r · 19w · 5d

Transport

stdio

License

NOASSERTION

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

A local and desktop viewer for .riv files with runtime controls, JavaScript configuration editing, ViewModelInstance debugging tools, media and standalone export, a bundled native MCP sidecar, and desktop auto-update support.

For media export and recording, see Media export and recording. Release history belongs in the changelog; validation evidence is kept in reports.

Release

Prepared release candidate: 2.5.9 (native acceptance and publication pending).
Current public release: 2.5.8 (GitHub release).
macOS downloads and updater apps are Developer ID signed, notarized, and stapled; updater payloads retain their separate update signatures.

Regression Gates

The repo has explicit prebuild guards for the application, export, and window-chrome surfaces:

npm run check:architecture enforces file-size and folder-shape budgets
npm run check:deps enforces dependency-cruiser import boundaries
tests/smoke/ui-regressions.smoke.test.js protects the shared scrollbar contract, custom window-chrome structure, Tauri window config, and exported demo chrome contract
tests/unit/ui/window-chrome.test.js protects desktop window-control wiring and Tauri/non-Tauri behavior split
npm run test runs the full Vitest suite before every package build
cargo check --manifest-path src-tauri/Cargo.toml validates the native Tauri layer

These gates reduce regression risk, but they remain code and DOM contract tests. Packaged desktop behavior still requires native acceptance with a real .riv file.

Quick Start

npm install
npm start  # Opens the browser DEV viewer at http://localhost:1420; MCP uses isolated port 9278

Browser preview and packaged DEV sessions may share port 9278, but the bridge always routes agent commands to the packaged desktop app while it is connected. The b

Read from source at commit 3e744cdedc13OBSERVED · 2026-10-09

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code

claude mcp add rav-landing-page -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "rav-landing-page": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}

Exposed tools (47)

23 read · 19 write · 5 destructive. Blast radius: 5 tools can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

Tool	Risk	Description
`generate_web_instantiation_code`	read	Generate a copy-paste-ready web instantiation snippet for the animation currently loaded in RAV.
`rav_apply_code`	write	Apply the current editor code and reload the animation with the new
`rav_capture_canvas`	read	Capture the currently rendered RAV canvas as a PNG image with dimensions, renderer, and playback-surface metadata.
`rav_configure_workspace`	write	Set workspace UI state inside RAV. This can open or close the left/right
`rav_console_clear`	destructive	Clear the visible transcript of the bottom console panel (Events or JS mode). Does not close the panel.
`rav_console_close`	read	Close the JavaScript console panel (switches back to Event Console mode).
`rav_console_exec`	write	Execute JavaScript in the REPL console. The code is evaluated in the
`rav_console_open`	read	Open the bottom console panel. Defaults to JS mode. Optional
`rav_console_read`	read	Read the JS console transcript, including REPL input/result rows and
`rav_console_set_filter`	write	Apply filters to the rendered console transcript. Mirrors the existing on-screen filter toggles.
`rav_console_set_mode`	write	Set the bottom console panel mode to Event Console (
`rav_eval`	read	Evaluate arbitrary JavaScript with explicit surface authority.
`rav_export_demo`	read	Export the current animation as a self-contained standalone HTML demo file.
`rav_export_demo_visual`	read	Orchestrate the Snippet & Export Controls dialog visually: open the dialog, apply the control selection, set package source and snippet mode, click Export, and write the demo to output_path.
`rav_get_artboards`	read	List all artboard names available in the currently loaded .riv file.
`rav_get_editor_code`	read	Get the current code in the RAV script editor (CodeMirror).
`rav_get_event_log`	read	Get recent event log entries from RAV. Events include native runtime
`rav_get_global_vm_tree`	read	List every file-level global ViewModel with its live hierarchy, paths, kinds, and values.
`rav_get_state_machines`	read	List all state machine names on the current artboard.
`rav_get_vm_tree`	read	Get the full ViewModel hierarchy tree for the loaded animation. Returns
`rav_global_vm_clear_image`	destructive	Clear an image property on a named file-level global ViewModel through the authoritative playback surface.
`rav_global_vm_fire`	write	Fire a trigger on a named file-level global ViewModel.
`rav_global_vm_get`	read	Get a value from a named file-level global ViewModel.
`rav_global_vm_set`	write	Set a number, boolean, string, enum, or color property on a named file-level global ViewModel.
`rav_global_vm_set_image`	write	Set an image property on a named file-level global ViewModel through the authoritative playback surface.
`rav_open_file`	read	Open a .riv file in RAV by its absolute file path. The file is read from
`rav_open_isolated_playback`	read	Open the current animation in a separate, ordinary opaque Tauri webview using the exact self-contained standalone-export payload.
`rav_pause`	read	Pause animation playback.
`rav_play`	write	Start or resume animation playback.
`rav_reset`	destructive	Reset and restart the animation from the beginning, preserving ViewModel
`rav_reset_artboard`	destructive	Reset to the default artboard and default state machine that was detected when the file was first loaded.
`rav_set_alignment`	write	Set the canvas alignment within the viewer.
`rav_set_anonymous_usage`	write	Enable or disable RAV anonymous version reporting through the same preference controller used by Settings.
`rav_set_canvas_color`	write	Set the canvas background color. Use
`rav_set_canvas_size`	write	Set explicit canvas pixel sizing. Use mode
`rav_set_editor_code`	write	Replace the code in the RAV script editor. This does NOT reload the
`rav_set_layout`	write	Set the canvas layout fit mode.
`rav_set_runtime`	write	Switch the Rive runtime engine.
`rav_status`	read	Get current RAV application status: loaded file, runtime, playback state,
`rav_switch_artboard`	read	Switch to a different artboard and/or playback target (state machine or animation).
`rav_switch_vm_instance`	read	Switch to a specific ViewModel instance key and confirm that the dedicated playback surface bound that exact instance.
`rav_toggle_instantiation_controls_dialog`	read	Open, close, or toggle the Snippet & Export Controls dialog inside RAV.
`rav_vm_clear_image`	destructive	Clear a ViewModel image through the authoritative playback surface.
`rav_vm_fire`	write	Fire a trigger ViewModel property by path.
`rav_vm_get`	read	Get the current value of a ViewModel property by path. Use rav_get_vm_tree
`rav_vm_set`	write	Set the value of a ViewModel property by path. Supports number, boolean,
`rav_vm_set_image`	write	Set a ViewModel image through the authoritative playback surface using a bounded byte array.

Trust audit

BLOCKgrade F · trust 41/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	FAIL
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	WARN
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (12 observation(s))
Network: declared (10 observation(s))
Shell: declared (9 observation(s))
Dependencies: not all pinned
Secrets in source: found

Findings (25)

HIGHInventory / provenance · inv.suspicious_name · CWE-1104

src/app/platform/export/demo-payload.js

demo-payload.js

Why it matters. member named after an attack tool

Fix. remove or justify

HIGHInventory / provenance · inv.suspicious_name · CWE-1104

src/app/platform/render-surface/image-replay/payload.js

payload.js

Why it matters. member named after an attack tool

Fix. remove or justify

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

src-tauri/src/demo-template/js/core/bridge/eval.js:145

var value = await settleRenderSurfaceEvalValue(eval(expression));

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

src-tauri/src/demo-template/js/core/editor-config.js:4

var config = (new Function('return (' + code + '\n);'))();

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

src/app/platform/mcp/commands/editor-console.js:200

const result = await eval(expression);

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

src/app/ui/console/repl-history-controller.js:36

await exec(code);

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

MEDIUMInventory / provenance · inv.binary · CWE-1104

src/app/rive/view-model/ui/watch-controls.js

watch-controls.js

Why it matters. a compiled or binary member cannot be reviewed from source

Fix. ship source, or explain the binary in the README

MEDIUMInformation disclosure · disclose.log_secret · CWE-209, CWE-532

vendor/codemirror-bundle.js:23742

console.log(base2 + this.stackID(stack) + ` (via recover-delete ${this.parser.getName(token)})`);

MEDIUMNetwork egress · net.beacon_words · CWE-200, CWE-319

src/app/platform/render-surface/controller/bridge.js:37

'Unable to acknowledge staged renderer readiness; waiting for its retry beacon.',

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319

scripts/run-updater-acceptance.mjs:168

const requestPath = new URL(request.url, 'http://127.0.0.1').pathname;

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319

scripts/run-updater-acceptance.mjs:318

const baseUrl = `http://127.0.0.1:${port}/${token}`;

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319

src-tauri/src/app/updater.rs:288

Some("http://127.0.0.1:43991/token/latest.json"),

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319

src-tauri/src/app/updater.rs:304

Some("http://127.0.0.1:43991/latest.json"),

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319

src-tauri/src/app/updater.rs:325

"http://127.0.0.1/latest.json",