Is Navisworks Mcp safe to install?

SaferSkills independently audited Navisworks Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

README.md · 1 file

README.md2.2 KB · Markdown

Navisworks MCP

Navisworks coordination and clash detection via APS — Upload NWD files, extract clashes, generate reports, retrieve viewpoints.

Tools (5)

Tool	Description
`nwd_upload`	Upload NWD files for coordination
`nwd_get_clashes`	Extract clash detection results
`nwd_export_report`	Generate coordination reports (PDF/XLSX/HTML)
`nwd_get_viewpoints`	Retrieve saved viewpoints
`nwd_list_objects`	List model objects and properties

Quick Start

{
  "mcpServers": {
    "navisworks": {
      "url": "https://navisworks-mcp.itmartin24.workers.dev/mcp"
    }
  }
}

Architecture

Runtime: Cloudflare Workers
Auth: APS OAuth2 (client_credentials)

Part of ScanBIM Labs AEC MCP Ecosystem

MIT — ScanBIM Labs LLC

Authentication

Two accepted header formats. Use one, do NOT mix:

x-scanbim-api-key: <your_user_key> — value is the user_key verbatim.
Authorization: Bearer sk_scanbim_<your_user_key> — value is the entire string including the sk_scanbim_ prefix; the D1 user_key column must match this full string.

Mixing formats auto-creates a fresh free-plan row for the alternate key (you'll silently get a new 50-credit account on each switch).

Get your user_key at scanbim.app/settings/billing.

Example

curl -X POST https://mcp.scanbimlabs.io/unified/mcp \
  -H "content-type: application/json" \
  -H "x-scanbim-api-key: $SCANBIM_USER_KEY" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"list_models","arguments":{}}}'

Response codes

200 — tool call proceeded; credits debited.
401 — missing or malformed auth header (middleware returns JSON-RPC error code -32001).
402 — insufficient credits; response body includes checkout_urls for all 5 credit packs and top_up_url for the billing page.

Navisworks Mcp— agent skill

Is Navisworks Mcp safe to install?

Navisworks MCP

Tools (5)

Quick Start

Architecture

Part of ScanBIM Labs AEC MCP Ecosystem

Authentication

Example

Response codes

Audit the pieces. Scan the whole. Decide.