BonsaiBLOCK
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Bonsai-mcp is a fork of BlenderMCP that extends the original functionality with dedicated support for IFC (Industry Foundation Classes) models through Bonsai. This integration is a platform to let LLMs read and modify IFC files.
Features
- IFC-specific functionality: Query IFC models, analyze spatial structures, examine building elements and extract quantities
- Eleven IFC tools included: Inspect project info, list entities, examine properties, explore spatial structure, analyze relationships and more
- Sequential Thinking: Includes the sequential thinking tool from modelcontextprotocol/servers for structured problem solving
- Execute Code tool from the original BlenderMCP implementation: Create and modify objects, apply materials, and execute Python code in Blender
Components
The system consists of two main components:
- Blender Addon (`addon.py`): A Blender addon that creates a socket server within Blender to receive and execute commands, including IFC-specific operations
- MCP Server (`tools.py`): A Python server that implements the Model Context Protocol and connects to the Blender addon
Installation - Through MCP Client Settings
Prerequisites
- Blender 4.0 or newer
- Python 3.12 or newer
- uv package manager
- Bonsai BIM addon for Blender (for IFC functionality)
Installing uv:
Mac:
brew install uv
Windows:
powershell -c "irm https://astral.sh/uv/install.ps1 | iex" set Path=C:\Users\[username]\.local\bin;%Path%
For other platforms, see the uv installation guide.
Clone the repository
git clone https://github.com/JotaDeRodriguez/Bonsai_mcp
Claude for Desktop In
8c295899e692OBSERVED · 2026-10-08Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add Bonsai_mcp -- uvx Bonsai_mcp
{
"mcpServers": {
"Bonsai_mcp": {
"command": "uvx",
"args": [
"Bonsai_mcp"
]
}
}
}Exposed tools (15)
14 read · 1 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
execute_blender_code | write | |
export_bc3_budget | read | |
export_drawing_png | read | Export drawings as PNG images with custom resolution. |
export_ifc_data | read | |
get_ifc_georeferencing_info | read | |
get_ifc_project_info | read | |
get_ifc_properties | read | |
get_ifc_quantities | read | |
get_ifc_relationships | read | |
get_ifc_spatial_structure | read | |
get_ifc_total_structure | read | |
get_selected_ifc_entities | read | |
get_user_view | read | |
list_ifc_entities | read | |
place_ifc_object | read |
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (1 observation(s))
- Network
- none-observed
- Shell
- declared (1 observation(s))
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (3)
exec(code, namespace)
image_data = base64.b64decode(result["data"])
image_data = base64.b64decode(result["data"])
Gates applied: no_behavioural_pass.
8c295899e692full audit observations/trust-audit/mcp-server/jotaderodriguez__bonsai.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | 8c295899e692 | BLOCK | D | 69 | first audit |
Questions
What tools does Bonsai expose?
15 in total: 14 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Bonsai safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.
What credentials does Bonsai need?
No credential environment variables were found in its source, so it appears to need none.
How current is this page?
The grade is for one exact copy of the source (8c295899e692), read on 2026-10-08. The repository is watched and re-audited when it changes.