Cfast Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Cfast Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
CFAST MCP is an MCP server that lets an AI assistant build, run, and analyze CFAST (Consolidated Fire and Smoke Transport, NIST) fire simulations through conversation. It is built on top of PyCFAST and exposes the CFAST model as a set of tools. The AI assistant is able to create a model, add compartments, materials, vents, fires and devices step by step, run CFAST, and make summaries of the results.
Ask your assistant something like:
Create a 4 m × 3 m × 2.5 m room with a door (0.9 × 2 m) to the outside and a fire growing to 1 MW in 300 s. Run it and give me the peak upper-layer temperature then show me the folder where you create the file, so I can inspect it.
Results will probably look like this:
<img width="1920" height="944" alt="image" src="https://github.com/user-attachments/assets/9f4c87b3-c722-4153-b75b-53c75f9cb70e" />
| Group | Tools |
|---|---|
| Create & configure | create_model, update_simulation |
| Components | add_* / update_* for materials, compartments, wall vents, ceiling/floor vents, mechanical vents, fires, devices (targets & detectors), surface connections |
| Inspect | inspect_model (summary, optional .in file), get_model_files |
| Run & results | run_model, get_results (bounded previews and per-column min/max/final stats) |
Results are returned to the AI assistant as small text summaries. The generated files (.in, output .csv, logs) are written in a temporary directory while the session is active. Use get_model_files to locate them if you want to open them directly.
Note: models live in memory for the lifetime of the server process. Restarting the server (or your MCP client) will delete them.
Requires Python 3.10+ and CFAST 7.7.0+.
Install uv, then add cfast-mcp directly in your client configuration:
{
"mcpServers": {
"cfast": {
"command": "uvx",
"args": ["cfast-mcp"],
"env": { "CFAST": "/path/to/your/cfast/executable" }
}
}
}If you use Claude Code, a single command registers the server:
claude mcp add cfast -e CFAST=/path/to/your/cfast/executable -- cfast-mcpCreate a virtual environment and install from PyPI:
python -m venv venv
source venv/bin/activate # Linux/macOS
venv\Scripts\activate # Windows
pip install cfast-mcpThen add cfast-mcp to your client configuration:
{
"mcpServers": {
"cfast": {
"command": "cfast-mcp",
"env": { "CFAST": "/path/to/your/cfast/executable" }
}
}
}Download and install CFAST from the NIST CFAST website or the CFAST GitHub repository. Follow the installation instructions for your operating system and ensure cfast is available in your PATH. If CFAST is installed in a non-standard location, you can manually specify the path by setting the CFAST environment variable to point to the CFAST executable.
export CFAST="/path/to/your/cfast/executable" # Linux/macOS
set CFAST="C:\path\to\cfast.exe" # Windows (cmd)
$env:CFAST="C:\path\to\cfast.exe" # Windows (PowerShell)git clone https://github.com/bewygs/cfast-mcp.git
cd cfast-mcp
uv sync --extra dev # install dev dependencies
uv run pytest # run tests
uv run ruff check --fix . # lint
uv run mypy src/ # type-check~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.