Atlas / MCP servers / jingcheng-chen / Rhino

RhinoBLOCK

Name: Rhino
Author: jingcheng-chen

mcp/jingcheng-chen/rhino-3

MCP server by jingcheng-chen · Audited 2026-09-26

⚑ Report / re-scan Source ↗

RhinoMCP connects Rhino 3D to AI Agent through the Model Context Protocol (MCP)

Verdict

BLOCK

Grade

Trust score

69 /100

Exposed tools

49 32r · 15w · 2d

Transport

stdio

License

MIT

Stars

1,106

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Control Rhino 3D and Grasshopper with AI, in plain language.

RhinoMCP connects Rhino to AI agents through the Model Context Protocol, so assistants like Claude and Cursor can model geometry, read your document, and build Grasshopper definitions for you, just by chatting.

[](https://pypi.org/project/rhinomcp/) [](https://www.rhino3d.com/) [](https://www.python.org/) [](https://modelcontextprotocol.io/) [](LICENSE)

Quick start · What it can do · Usage · Examples · Tool reference

English · 简体中文

Highlights

For development of the autonomous improvement experiments, start with the continuation guide.

Describe what you want and the assistant builds it in Rhino.
It reads your document and can capture the viewport, so it works from what is actually on screen.
It scripts Grasshopper for you: finding components, wiring them, setting sliders, and solving.
A single plugin and a single config entry cover both Rhino and Grasshopper.
When you need more control, it can run native Rhino commands, RhinoScript-Python, or RhinoCommon C#.

[!NOTE] RhinoMCP targets Rhino 8 on Windows and macOS.

Demos

[](https://youtu.be/pi6dbqUuhI4)

Two-way interaction: the AI

Read from source at commit fd9801107445OBSERVED · 2026-09-26

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code

claude mcp add rhinomcp -- uvx rhinomcp

claude-desktop

{
  "mcpServers": {
    "rhinomcp": {
      "command": "uvx",
      "args": [
        "rhinomcp"
      ]
    }
  }
}

Exposed tools (49)

32 read · 15 write · 2 destructive. Blast radius: 2 tools can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

Tool	Risk	Description
`analyze_objects`	read	Inspect validity, bounding dimensions, and volume for created objects.
`assembly_command`	read	Call an allowed command after reading its schema. Failures are recorded.
`boolean_difference`	read	Subtract closed-solid cutters from a base solid. On success deletes sources
`boolean_intersection`	read
`boolean_union`	read
`capture_viewport`	read
`create_layer`	write
`create_object`	write	Create a primitive. BOX params: width (X), length (Y), height (Z).
`create_objects`	write
`create_planar_region`	write	Create one planar Brep face from closed coplanar boundary curves.
`create_source`	destructive	Create exactly one declared new file; never overwrite an existing file.
`delete_object`	destructive	Delete one construction object by ID in the dedicated experiment document.
`describe_command`	read	Read an allowed command schema. Available: create_layer, create_object,
`describe_modeling_command`	read	Read the exact existing RhinoMCP parameter schema before using a command.
`extrude_curve`	read	Extrude a profile by a world XYZ vector. Cap a closed planar profile to
`get_or_set_current_layer`	write
`get_reference_image`	read	Read one calibrated reference image. No candidate or hidden model access.
`gh_add_component`	write	Add a Grasshopper component to the active canvas.
`gh_build_graph`	write	Create and wire a Grasshopper graph in one batched canvas operation.
`gh_capture_preview`	read	Capture live Grasshopper preview in a Rhino viewport without baking.
`gh_connect_components`	read	Connect one Grasshopper output parameter to one input parameter.
`gh_create_document`	write	Create or activate a Grasshopper document for subsequent canvas commands.
`gh_disconnect_components`	read	Disconnect one Grasshopper wire, or all sources from a target input.
`gh_expire_solution`	read	Expire the whole Grasshopper solution or selected components.
`gh_layout_components`	read	Lay out Grasshopper canvas objects using wires as a left-to-right graph.
`gh_mutate_graph`	write	Batch edit, rewire, and verify an existing or new Grasshopper graph.
`gh_run_solution`	write	Run a Grasshopper solution and report runtime warnings/errors.
`gh_set_parameter_value`	write	Set a slider, toggle, panel, value list, or regular input parameter value.
`gh_update_component`	write	Update basic Grasshopper object metadata, position, enabled state, or preview state.
`inspect_view`	read	Inspect your current model: perspective, front, right, back, left, top.
`intersect_curves`	read
`join_surfaces`	read	Join 2..12 existing surfaces using Rhino
`loft`	read
`modeling_command`	read	Call an allowed existing modeling command using its exact parameter schema.
`modify_object`	write
`modify_objects`	write
`offset_curve`	read
`pipe`	read
`project_curve`	read
`read_source`	read	Read an explicitly allowed candidate source file and its SHA-256.
`redo`	read
`replace_source`	read	Replace an allowed source file only if it still matches the last read hash.
`rotate_object`	read	Rotate about the CURRENT WORLD BOUNDING-BOX CENTER, using XYZ radians.
`select_objects`	read
`split_curve`	read
`sweep1`	read	Sweep profiles along one rail using RoadlikeTop framing. Optional planar
`translate_object`	read	Translate an existing object by a world XYZ vector in millimeters.
`undo`	read
`update_object_attributes`	write

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	WARN
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (2 observation(s))
Network: declared (4 observation(s))
Shell: declared (2 observation(s))
Dependencies: pinned
Secrets in source: none-found

Findings (11)

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

experiments/validate_sweep_source.py:19

exec(compile(Path(spec.origin).read_text(), spec.origin, "exec"), module.__dict__)

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

MEDIUMCode injection · code.dynamic_import · CWE-78, CWE-94, CWE-95

server/src/rhinomcp/__init__.py:47

mod = importlib.import_module(f"{__name__}.tools.{info.name}")

MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59

create_source, delete_object

Why it matters. 2 tool(s) can delete or overwrite

Fix. prefer a read-only mode or scoped tokens; the page states the blast radius

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

experiments/tests/test_flaws.py:260

finding["evidence"][0]["path"] = "../../outside"

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

server/verify_guidance_install.py:55

"get_modeling_guidance", {"topic": "../../etc/passwd"}