Back to Home
benhalverson icon

fusion-mcp

by benhalverson

Overview

An MCP server for Autodesk Fusion 360 to manage CAD data, export designs, automate tasks via Design Automation, and handle webhooks.

Installation

Run Command
pnpm run dev

Environment Variables

  • FORGE_CLIENT_ID
  • FORGE_CLIENT_SECRET
  • FORGE_API_BASE
  • FORGE_CALLBACK_URL

Security Notes

The application avoids hardcoded secrets by relying on environment variables for API credentials. The architecture uses a switch statement for tool calls, reducing direct arbitrary code execution risks. However, the `/webhook` endpoint explicitly notes that 'In a real implementation, you would: 1. Verify the webhook signature'. Without this crucial verification, the webhook endpoint is vulnerable to spoofed requests, potentially leading to unauthorized actions if implemented to process payloads. While the provided code only logs webhooks, this unaddressed vulnerability is critical for any extended use. Input parameters for Design Automation work items are JSON stringified, which reduces direct injection risks, but the underlying Design Automation activity itself needs careful design to prevent unintended CAD operations.

Similar Servers

Stats

Interest Score0
Security Score6
Cost ClassMedium
Avg Tokens500
Stars0
Forks0
Last Update2025-12-02

Tags

Autodesk FusionCloudflare WorkersHonoMCP ProtocolCAD Automation