Surfcad MCP server

by artur0x0·io.github.artur0x0/surfcad·v0.0.1

No reviews yet

MCP server for SurfCAD: Fully featured script CAD built on Manifold, with helpers for AI agents

A92/100grade A

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

A92/100

full report

Adoption

Growing

0 stars336 downloads/wk

Reviews

Write one

Nobody has reviewed Surfcad yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Surfcad tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.10 · 2026-10-13 · same rubric, same numbers if you re-run it

no findings

Code scan1 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 6 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Overall 92/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

How Surfcad compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 92/100; higher than 95% of 48,255 servers
Downloads a week: 336; more than 82% of 12,191 servers with a package

Install Surfcad in Claude Code, Cursor or VS Code

Runs npx -y surfcad-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add surfcad -- npx -y surfcad-mcp

Add to Cursor

What the publisher says

From the Surfcad repository's README, as published. We do not edit it. Read it on GitHub

surfcad-agent

Bring-your-own-agent SurfCAD skill and helper library. SurfCAD is a web CAD app on a custom Manifold kernel. Agents bring their own model. This repo has no API keys and does not call a hosted model.

Pre-release. Version 0.1.0 is the tree layout, the vendored helper runtime, and the skill. The MCP server in packages/mcp-server is a placeholder (the stdio process is a later revision). server.json and the registry publish flow are not in this revision. Nothing here is published to npm from this tree.

npm surfcad and npm surfcad-mcp already exist as 0.0.1 placeholders ("coming soon"). This repo's packages are 0.1.0 and are not published yet. The plugin .mcp.json points at surfcad-mcp@0.1.0, which will not resolve from the registry until that version is published.

License: Apache-2.0.

Layout

.claude-plugin/marketplace.json     marketplace name: surfcad-agent
plugins/surfcad/                    plugin name: surfcad (no bin/)
  .claude-plugin/plugin.json
  .mcp.json                         npx -y surfcad-mcp@0.1.0
  skills/surfcad/SKILL.md           skill name: surfcad
  skills/surfcad/references/
packages/surfcad/                   npm surfcad, the helper library
  UPSTREAM                          pinned 3dculos SHA
  vendor/                           copy of that commit's sync-files.json list
packages/mcp-server/                npm surfcad-mcp, placeholder
scripts/sync-3dculos.mjs            re-vendor the pin
scripts/gen-references.mjs          regenerate four skill references

There is one skill folder. There is no .claude/skills or .agents/skills copy.

Helper library

packages/surfcad re-exports loadManifold, runScript, helperScope, and the STL / 3MF / STEP exporters. The wasm is vendor/built/manifold.wasm, resolved from the package directory, so it works from node_modules/surfcad without depending on the process working directory. It is the custom kernel shipped with 3dculos, not npm manifold-3d.

The pin is the full SHA in packages/surfcad/UPSTREAM. npm run sync downloads that commit from GitHub, copies every runtimeFiles and catalogFiles path from sync-files.json into vendor/ (paths kept), and writes vendor/MANIFEST.json. CI runs the sync again and fails if the tree differs.

npm test

Run that from this directory. The headless test builds a filleted box, a two-body assembly, and a bent sheet, and checks status, bounding box, volume, body count, and non-empty STL, 3MF, and STEP.

Install the skill

The skill's frontmatter is only name, description, license, compatibility, metadata, and allowed-tools. metadata.version is the string "0.1.0".

Nothing above is checked by us. What we check is on the safety report.

Surfcad: common questions

Is Surfcad MCP server safe?: Yes, by our scan: it is graded A (92/100). Read the Surfcad safety report
How do I install Surfcad?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Surfcad need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Surfcad maintained?: The last commit was 27 days ago (2026-10-08). The latest release is v0.0.1.
How does Surfcad compare with other MCP servers?: safety score 92/100 (higher than 95% of 48,255 servers); downloads a week 336 (more than 82% of 12,191 servers with a package). Full comparison.