Is Acc Mcp safe to install?

SaferSkills independently audited Acc Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

README.md · 1 file

README.md2.4 KB · Markdown

ACC MCP

Autodesk Construction Cloud integration via APS — Manage projects, issues, RFIs, documents, and submittals.

Tools (9)

Tool	Description
`acc_list_projects`	List ACC/BIM 360 projects
`acc_create_issue`	Create issues via APS Issues API
`acc_update_issue`	Update issue status/priority/assignee
`acc_list_issues`	List and filter issues
`acc_create_rfi`	Create RFIs via APS RFIs API
`acc_list_rfis`	List and filter RFIs
`acc_search_documents`	Search drawings, specs, submittals
`acc_upload_file`	Upload files to project folders
`acc_project_summary`	Full project summary with counts

Quick Start

{
  "mcpServers": {
    "acc": {
      "url": "https://acc-mcp.itmartin24.workers.dev/mcp"
    }
  }
}

Architecture

Runtime: Cloudflare Workers
Auth: APS OAuth2 (client_credentials)
Database: Cloudflare D1 (usage logging)
Cache: Cloudflare KV (token caching)

Part of ScanBIM Labs AEC MCP Ecosystem

MIT — ScanBIM Labs LLC

Authentication

Two accepted header formats. Use one, do NOT mix:

x-scanbim-api-key: <your_user_key> — value is the user_key verbatim.
Authorization: Bearer sk_scanbim_<your_user_key> — value is the entire string including the sk_scanbim_ prefix; the D1 user_key column must match this full string.

Mixing formats auto-creates a fresh free-plan row for the alternate key (you'll silently get a new 50-credit account on each switch).

Get your user_key at scanbim.app/settings/billing.

Example

curl -X POST https://mcp.scanbimlabs.io/unified/mcp \
  -H "content-type: application/json" \
  -H "x-scanbim-api-key: $SCANBIM_USER_KEY" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"list_models","arguments":{}}}'

Response codes

200 — tool call proceeded; credits debited.
401 — missing or malformed auth header (middleware returns JSON-RPC error code -32001).
402 — insufficient credits; response body includes checkout_urls for all 5 credit packs and top_up_url for the billing page.

Acc Mcp— agent skill

Is Acc Mcp safe to install?

ACC MCP

Tools (9)

Quick Start

Architecture

Part of ScanBIM Labs AEC MCP Ecosystem

Authentication

Example

Response codes

Audit the pieces. Scan the whole. Decide.