Is Blender Open Mcp safe to use?

Blender Open Mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install Blender Open Mcp?

Blender Open Mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with Blender Open Mcp?

Blender Open Mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is Blender Open Mcp actively maintained?

Blender Open Mcp is recently maintained — last commit was 87 days ago. It has 105 GitHub stars.

Blender Open Mcp

Name: Blender Open Mcp
Author: dhakalnirajan

uv · by dhakalnirajan

Open Models MCP for Blender Using Ollama

105 GitHub PyPI

No known CVEs

No license

Maintained

Last commit 87d ago

Works with most clients

Transport: stdio, sse, http

0 tools

Grade F

Edit this pageView history

Design

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "blender-open-mcp": {
      "args": [
        "--transport",
        "stdio"
      ],
      "command": "blender-mcp"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/blender-open-mcp)](https://mcppedia.org/s/blender-open-mcp)

Read me

What Blender Open Mcp does

Control Blender 3D with natural language prompts via local AI models. Built on the Model Context Protocol (MCP), connecting Claude, Cursor, or any MCP client to Blender through a local Ollama LLM.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

uvx 'uv' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

46/100across 5 weighted dimensions

How we score →

0255075100

−54

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

5 fixed

CVE-2025-54368info · fixed

uv allows ZIP payload obfuscation through parsing differentials

## Impact In versions 0.8.5 and earlier of uv, remote ZIP archives were handled in a streamwise fashion, and file entries were not reconciled against the archive's central directory. This enabled two parser differentials against other Python package installers: 1. An attacker could contrive a ZIP archive that would extract with legitimate contents on some package installers, and malicious contents on others due to multiple local file entries. The attacker could choose which installer to target

Affected: >= 0Fixed in 0.8.6source →

GHSA-4gg8-gxpx-9rphinfo · fixed

uv is vulnerable to arbitrary file write through entry point names

### Impact In versions of uv prior to 0.11.15, when installing a distribution containing an entry point specification (under `console_scripts` or `gui_scripts`), uv would place the generated entry point according to the given name even if doing so resulted in a path outside of the environment's scripts directory. A malicious wheel could use this to place an executable outside of the intended environment, including in a directory already present on the user's `PATH`. This could shadow or overwr

Affected: >= 0Fixed in 0.11.15source →

GHSA-pjjw-68hj-v9mwinfo · fixed

uv vulnerable to arbitrary file deletion through RECORD entries

## Impact Wheel RECORD entries can contain relative paths that traverse outside of the wheel’s installation prefix. In versions 0.11.5 and earlier of uv, these wheels were not rejected on installation and the RECORD was respected without validation on uninstall. uv uses the RECORD to determine files to remove on uninstall. Consequently, a malicious or malformed wheel could induce deletion of arbitrary files outside of the wheel’s installation prefix on uninstall. uv does not use the RECORD fi

Affected: >= 0Fixed in 0.11.6source →

CVE-2025-13327medium · fixedCVSS 6.3

PYSEC-2026-2295

A flaw was found in uv. This vulnerability allows an attacker to execute malicious code during package resolution or installation via specially crafted ZIP (Zipped Information Package) archives that exploit parsing differentials, requiring user interaction to install an attacker-controlled package.

Affected: >= 0Fixed in 0.9.6source →

GHSA-w476-p2h3-79g9info · fixed

uv has differential in tar extraction with PAX headers

### Impact In versions 0.9.4 and earlier of uv, tar archives containing PAX headers with file size overrides were not handled properly. As a result, an attacker could contrive a source distribution (as a tar archive) that would extract differently when installed via uv versus other Python package installers. The underlying parsing differential here originates with astral-tokio-tar, which disclosed this vulnerability as CVE-2025-62518. In practice, the impact of this vulnerability is **low**:

Affected: >= 0Fixed in 0.9.5source →

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Blender Open Mcp safe to use?: Blender Open Mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install Blender Open Mcp?: Blender Open Mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with Blender Open Mcp?: Blender Open Mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is Blender Open Mcp actively maintained?: Blender Open Mcp is recently maintained — last commit was 87 days ago. It has 105 GitHub stars.

Similar servers

Others in design

View all →

Shadcn Ui Mcp Server90

A mcp server to allow LLMS gain context about shadcn ui component structure,usage and installation,compaitable with react,svelte 5,vue & React Native

2.8k 5

Image MCP Server90

AI image generation and editing with prompt optimization and quality presets. Powered by Nano Banana

131 2

io.github.HaD0Yun/gopeak90

GoPeak — The most comprehensive MCP server for Godot Engine. 95+ tools, LSP, DAP, screenshots.

225 4

MeiGen AI Design MCP89

MeiGen-AI-Design-MCP — Turn Claude Code / OpenClaw into your local Lovart. Local ComfyUI, 1,400+ prompt library, multi-direction parallel generation.

1.5k 6

MCP Security Weekly

Get CVE alerts and security updates for Blender Open Mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Design

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "blender-open-mcp": {
      "args": [
        "--transport",
        "stdio"
      ],
      "command": "blender-mcp"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/blender-open-mcp)](https://mcppedia.org/s/blender-open-mcp)

Read me

What Blender Open Mcp does

Control Blender 3D with natural language prompts via local AI models. Built on the Model Context Protocol (MCP), connecting Claude, Cursor, or any MCP client to Blender through a local Ollama LLM.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

uvx 'uv' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

blender-open-mcp

Open Models MCP for Blender3D using Ollama

Control Blender 3D with natural language prompts via local AI models. Built on the Model Context Protocol (MCP), connecting Claude, Cursor, or any MCP client to Blender through a local Ollama LLM.

Architecture

MCP Client (Claude/Cursor/CLI)
         │ HTTP / stdio
         ▼
┌─────────────────────┐
│   FastMCP Server    │  ← server.py  (port 8000)
│   blender-open-mcp  │
└─────────────────────┘
    │ TCP socket           │ HTTP
    ▼                      ▼
┌──────────────┐    ┌─────────────┐
│  Blender     │    │   Ollama    │  (port 11434)
│  Add-on      │    │  llama3.2   │
│  addon.py    │    │  gemma3...  │
│  (port 9876) │    └─────────────┘
└──────────────┘
       │ bpy
       ▼
  Blender Python API

Three independent processes:

FastMCP Server (server.py): Exposes MCP tools over HTTP or stdio
Blender Add-on (addon.py): TCP socket server running inside Blender
Ollama: Local LLM serving natural language queries

Installation

Prerequisites

Dependency	Version	Install
Blender	3.0+	blender.org
Python	3.10+	System or python.org
Ollama	Latest	ollama.com
uv	Latest	`pip install uv`

1. Clone and set up

git clone https://github.com/dhakalnirajan/blender-open-mcp.git
cd blender-open-mcp

# Create virtual environment and install
uv venv
source .venv/bin/activate   # Linux / macOS
# .venv\Scripts\activate    # Windows

uv pip install -e .

2. Install the Blender Add-on

Open Blender
Go to Edit → Preferences → Add-ons → Install...
Select addon.py from the repository root
Enable "Blender MCP"
Open the 3D Viewport, press N, find the Blender MCP panel
Click "Start MCP Server" (default port: 9876)

3. Pull an Ollama model

ollama pull ollama run llama3.2

(Other models like Gemma3 can also be used.)

Setup

Start the Ollama Server: Ensure Ollama is running in the background.
Start the MCP Server:

blender-mcp

Custom options:

blender-mcp \
  --host 127.0.0.1 \
  --port 8000 \
  --blender-host localhost \
  --blender-port 9876 \
  --ollama-url http://localhost:11434 \
  --ollama-model llama3.2

For stdio transport (Claude Desktop, Cursor):

blender-mcp --transport stdio

Usage

MCP Client CLI

# Interactive shell
blender-mcp-client interactive

# One-shot scene info
blender-mcp-client scene

# Call a specific tool
blender-mcp-client tool blender_get_scene_info
blender-mcp-client tool blender_create_object '{"primitive_type": "SPHERE", "name": "MySphere"}'

# Natural language prompt
blender-mcp-client prompt "Create a metallic sphere at position 0, 0, 2"

# List all available tools
blender-mcp-client tools

Python API

import asyncio
from client.client import BlenderMCPClient

async def demo():
    async with BlenderMCPClient("http://localhost:8000") as client:
        # Scene inspection
        print(await client.get_scene_info())

        # Create objects
        await client.create_object("CUBE", name="MyCube", location=(0, 0, 0))
        await client.create_object("SPHERE", name="MySphere", location=(3, 0, 0))

        # Apply materials
        await client.set_material("MyCube", "GoldMat", color=[1.0, 0.84, 0.0, 1.0])

        # Move objects
        await client.modify_object("MySphere", location=(3, 0, 2), scale=(1.5, 1.5, 1.5))

        # PolyHaven assets
        categories = await client.get_polyhaven_categories("textures")
        await client.download_polyhaven_asset("brick_wall_001", resolution="2k")
        await client.set_texture("MyCube", "brick_wall_001")

        # Render
        await client.render_image("/tmp/my_render

... [View full README on GitHub](https://github.com/dhakalnirajan/blender-open-mcp#readme)

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

46/100across 5 weighted dimensions

How we score →

0255075100

−54

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

5 fixed

CVE-2025-54368info · fixed

uv allows ZIP payload obfuscation through parsing differentials

Affected: >= 0Fixed in 0.8.6source →

GHSA-4gg8-gxpx-9rphinfo · fixed

uv is vulnerable to arbitrary file write through entry point names

Affected: >= 0Fixed in 0.11.15source →

GHSA-pjjw-68hj-v9mwinfo · fixed

uv vulnerable to arbitrary file deletion through RECORD entries

Affected: >= 0Fixed in 0.11.6source →

CVE-2025-13327medium · fixedCVSS 6.3

PYSEC-2026-2295

Affected: >= 0Fixed in 0.9.6source →

GHSA-w476-p2h3-79g9info · fixed

uv has differential in tar extraction with PAX headers

Affected: >= 0Fixed in 0.9.5source →

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Blender Open Mcp safe to use?: Blender Open Mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install Blender Open Mcp?: Blender Open Mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with Blender Open Mcp?: Blender Open Mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is Blender Open Mcp actively maintained?: Blender Open Mcp is recently maintained — last commit was 87 days ago. It has 105 GitHub stars.