revit-model-mcpCAUTION
MCP server for live Autodesk Revit models: query, aggregate and inspect by default, act only behind opt-in gates
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Model MCP for Autodesk® Revit® connects an MCP client such as Claude Desktop or Claude Code to a live Revit project. Ask questions about the model, check it, and change it in plain language. Every change is one named undo entry in Revit, and read-only mode is one switch away.
[](https://github.com/sharafutdinovdi/revit-model-mcp/actions/workflows/ci.yml) [](https://github.com/sharafutdinovdi/revit-model-mcp/releases/latest) [](https://pypi.org/project/revit-model-mcp/) [](https://scorecard.dev/viewer/?uri=github.com/sharafutdinovdi/revit-model-mcp) [](LICENSE)
Claude Desktop runs on a Mac and connects to Revit 2026 on a Windows workstation. Actions are enabled in this recording.
What happens in the recording
- "What model is open in Revit right now?" The client reads the document, levels and room counts.
- "Which level
1ae98e69bab7OBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add revit-model-mcp --env REVIT_MCP_TOKEN=${REVIT_MCP_TOKEN} -- uvx revit-model-mcp==0.9.1Trust audit
CAUTIONgrade B · trust 81/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | FAIL |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (1 observation(s))
- Network
- declared (6 observation(s))
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (18)
act only behind opt-in gates
new Property("HTTP_URL_PREFIX", "http://127.0.0.1:53110/") { Secure = true },.pre-commit-config.yaml
.release-please-manifest.json
$installerDirectory = Join-Path $PSScriptRoot '../../output'
Open `http://127.0.0.1:8000/revit-model-mcp/`.
- [ ] **5.3a HTTP health and tool call**: with HTTP enabled, `curl -i http://127.0.0.1:<port>/health` returns `200` and a JSON body whose `commands` is a non-empty list. Then run one tool (for example
`show urlacl` must list the exact prefix, for example `http://127.0.0.1:53110/`, for the Windows user that runs Revit.
For a per-machine MSI, pass `HTTP_ENABLED=1 HTTP_URL_PREFIX="http://127.0.0.1:53111/"` to `msiexec /i <package.msi>` from an elevated prompt.
image = base64.b64decode(encoded, validate=True)
content = base64.b64decode(encoded, validate=True)
result = json.loads(base64.b64decode(output, validate=True))
state = json.loads(base64.b64decode(package["state"], validate=True))
base64.b64decode(output.strip(), validate=True).decode("utf-8-sig")b64decode( ... subprocess.
every change is one named undo entry
docs/screenshots/revit-model-mcp_claude-desktop.gif
Gates applied: no_behavioural_pass.
1ae98e69bab7full audit observations/trust-audit/mcp-server/sharafutdinovdi__revit-model-mcp.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | 1ae98e69bab7 | CAUTION | B | 81 | first audit |
Questions
What is the revit-model-mcp MCP server?
MCP server for live Autodesk Revit models: query, aggregate and inspect by default, act only behind opt-in gates
Is revit-model-mcp safe to connect to an agent?
With care. The audit graded it B (81/100) and found 18 things worth knowing before you trust this server, listed below with the exact line each was found on.
What credentials does revit-model-mcp need?
It reads REVIT_MCP_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does revit-model-mcp run?
It speaks stdio, so it runs as a local process your client starts. It is published on PyPI as revit-model-mcp.
How current is this page?
The grade is for one exact copy of the source (1ae98e69bab7), read on 2026-10-11. The repository is watched and re-audited when it changes.