Atlas / MCP servers / quellant / OpenSCAD

OpenSCADSAFE

Name: OpenSCAD
Author: quellant

mcp/quellant/openscad-2

MCP server by quellant · Audited 2026-10-07

⚑ Report / re-scan Source ↗

A Model Context Protocol (MCP) server for OpenSCAD 3D modeling and rendering

Verdict

SAFE

Grade

Trust score

89 /100

Exposed tools

11 10r · 0w · 1d

Transport

—

License

MIT

Stars

149

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://pypi.org/project/openscad-mcp/) [](https://github.com/robertcoop/openscad-mcp/actions/workflows/ci.yml) [](https://pypi.org/project/openscad-mcp/) [](https://modelcontextprotocol.io) [](./LICENSE)

A Model Context Protocol (MCP) server that lets AI assistants design 3D-printable parts and assemblies in OpenSCAD: render with a stated scale, measure exact geometry, check assemblies for interference and clearance, extract holes and features, judge printability, and export. Built with FastMCP for Python; OpenSCAD 2021.01 is the supported floor and dev snapshots are used when present.

Prerequisites

[OpenSCAD](https://openscad.org/downloads.html) installed on your system
[uv](https://docs.astral.sh/uv/getting-started/installation/) (recommended) or Python 3.10+

Installation

The server is published on PyPI as openscad-mcp, so uv runs it with no clone and no virtualenv: uvx openscad-mcp. uv keeps a cached copy; uv tool upgrade openscad-mcp (or uvx openscad-mcp@latest) pulls a new release, and uvx [email protected] pins one.

Claude Code

Add the server with a single command:

claude mcp add openscad --transport stdio -- uvx openscad-mcp

Or, if OpenSCAD is not on your PATH:

claude mcp add openscad --transport stdio \
--env OPENSCAD_PATH=/path/to/openscad -- uvx openscad-mcp

Use the --scope flag to control where the configuration is saved:

Read from source at commit 440621bdd30aOBSERVED · 2026-10-07

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code

claude mcp add openscad-mcp -- uvx openscad-mcp

claude-desktop

{
  "mcpServers": {
    "openscad-mcp": {
      "command": "uvx",
      "args": [
        "openscad-mcp"
      ]
    }
  }
}

Exposed tools (11)

10 read · 0 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

Tool	Risk	Description
`check`	read
`clear_cache`	destructive
`export_model`	read
`get_libraries`	read
`get_project_files`	read
`measure`	read
`model`	read
`reference`	read
`render`	read
`scad_eval`	read
`validate`	read

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	PASS
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	WARN
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (9 observation(s))
Network: none-observed
Shell: none-observed
Dependencies: pinned
Secrets in source: none-found

Findings (10)

MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59

clear_cache

Why it matters. 1 tool(s) can delete or overwrite

Fix. prefer a read-only mode or scoped tokens; the page states the blast radius

LOWInventory / provenance · inv.hidden_file · CWE-1104

.coveragerc

.coveragerc

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

tests/test_analysis.py:840

assert shadow.rewritten_refs  # ../../config/... made absolute

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

tests/test_openscad_mcp.py:1044

render_scad_to_png(scad_file="/home/user/scad/../../etc/passwd")