An MCP server with tools for CAD interaction and knowledge base retrieval.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio counts 3 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
execute_python_code
-
open_file_in_cad
-
retrieve_from_knowledge_base
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed v0.1.6 · analyzer v33 · 4w ago
danger signals3
- dynamic code execution eval()/exec() creo_mcp-0.1.6/src/cq_warehouse/fastener.py :109
result = eval(measure) - dynamic code execution eval()/exec() creo_mcp-0.1.6/src/cq_warehouse/thread.py :53
result = eval(measure.strip().replace(" ", "+")) * IN - dynamic code execution eval()/exec() creo_mcp-0.1.6/src/main.py :34
exec(code)
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 19
network 1
- net creo_mcp-0.1.6/src/main.py :4
import requests
tool registrations 3
- execute_python_code creo_mcp-0.1.6/src/main.py :26
- open_file_in_cad creo_mcp-0.1.6/src/main.py :41
- retrieve_from_knowledge_base creo_mcp-0.1.6/src/main.py :68
declared dependencies 7
- mcp@>=1.11.0
- cadquery@>=2.5.2
- creopyson@>=0.7.7
- httpx@>=0.28.1
- openai@>=1.95.1
- build@>=1.2.2.post1
- twine@>=6.1.0