Is Revit Mcp safe to install?

SaferSkills independently audited Revit Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

README.md · 1 file

README.md2.4 KB · Markdown

Revit MCP

Revit integration via Autodesk Platform Services — Extract elements, parameters, run schedules, detect clashes, export IFC.

Tools (8)

Tool	Description
`revit_upload`	Upload Revit file to APS and translate
`revit_get_elements`	Get elements by category
`revit_get_parameters`	Get element parameters
`revit_run_schedule`	Extract schedule data
`revit_clash_detect`	Clash detection with VDC rules
`revit_export_ifc`	Export model as IFC
`revit_get_sheets`	List all sheets
`revit_get_views`	List all views

Quick Start

{
  "mcpServers": {
    "revit": {
      "url": "https://revit-mcp.itmartin24.workers.dev/mcp"
    }
  }
}

Architecture

Runtime: Cloudflare Workers
Auth: APS OAuth2 (client_credentials)
Database: Cloudflare D1 (usage logging)
Cache: Cloudflare KV (token caching)

Part of ScanBIM Labs AEC MCP Ecosystem

MIT — ScanBIM Labs LLC

Authentication

Two accepted header formats. Use one, do NOT mix:

x-scanbim-api-key: <your_user_key> — value is the user_key verbatim.
Authorization: Bearer sk_scanbim_<your_user_key> — value is the entire string including the sk_scanbim_ prefix; the D1 user_key column must match this full string.

Mixing formats auto-creates a fresh free-plan row for the alternate key (you'll silently get a new 50-credit account on each switch).

Get your user_key at scanbim.app/settings/billing.

Example

curl -X POST https://mcp.scanbimlabs.io/unified/mcp \
  -H "content-type: application/json" \
  -H "x-scanbim-api-key: $SCANBIM_USER_KEY" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"list_models","arguments":{}}}'

Response codes

200 — tool call proceeded; credits debited.
401 — missing or malformed auth header (middleware returns JSON-RPC error code -32001).
402 — insufficient credits; response body includes checkout_urls for all 5 credit packs and top_up_url for the billing page.

Revit Mcp— agent skill

Is Revit Mcp safe to install?

Revit MCP

Tools (8)

Quick Start

Architecture

Part of ScanBIM Labs AEC MCP Ecosystem

Authentication

Example

Response codes

Audit the pieces. Scan the whole. Decide.