# BIM-MODE AutoCAD MCP

Security-hardened Model Context Protocol (MCP) server and stdio bridge for **Autodesk AutoCAD (2021-2025)** by **BIM-MAN Company**.

## Quick Install

### Option 1: GitInstall (PowerShell one-liner)

```powershell
irm https://raw.githubusercontent.com/BIM-MODE/BIM-MODE-AutoCAD-MCP/main/gitinstall.ps1 | iex
```

This downloads the latest verified release archive, installs `BIM-MODE-AutoCAD.bundle` to your Autodesk `ApplicationPlugins` folder, installs `BimMode.Bridge.exe`, and connects detected AI clients automatically.

### Option 2: npm / npx

```bash
npx bim-mode-autocad-mcp --install
```

Or add directly in your MCP client config:

```json
{
  "mcpServers": {
    "bim-mode-autocad-mcp": {
      "command": "npx",
      "args": ["-y", "bim-mode-autocad-mcp"]
    }
  }
}
```

### Option 3: Manual Release ZIP

1. Download `BIM-MODE-AutoCAD-MCP-v*.zip` from [GitHub Releases](https://github.com/BIM-MODE/BIM-MODE-AutoCAD-MCP/releases).
2. Extract and run `INSTALL.bat`.
3. Start or restart AutoCAD (2021-2025) and open the **BIM-MODE AutoCAD MCP** ribbon tab.

## Supported AutoCAD Versions & Commands

- AutoCAD 2021 - 2024 (`.NET Framework 4.8`)
- AutoCAD 2025+ (`.NET 8`)
- Ribbon / CLI commands inside AutoCAD:
  - `BIMMODECONNECT` - Connect Claude Desktop, Claude Code, Cursor, Windsurf, Gemini CLI, VS Code, LM Studio, Kimi, or Codex
  - `BIMMODESTATUS` - Show server port, security posture, and connected AI clients
  - `BIMMODEREADONLY` - Toggle read-only mode (blocks all drawing writes)
  - `BIMMODEAPPROVAL` - Toggle interactive approval prompts before drawing writes
  - `BimMode` / `BimModeSTOP` - Start or stop the local MCP server

## Security Architecture

See [SECURITY.md](SECURITY.md) for full details. Defaults out of the box:

- Loopback-only HTTP (`127.0.0.1`) with Host/Origin checks against DNS-rebinding
- Per-user 256-bit random bearer token with restrictive user ACLs
- Write approval prompts **ON** (`"approval": "writes"`)
- Arbitrary command/LISP/script execution **OFF** (`"allowFullTrustCode": false`)
- Path validation blocking UNC credential leaks, WebDAV paths, and Windows device paths
- IT enterprise policy enforcement via `C:\ProgramData\BIM-MODE\policy.json` (`policy.json` template included)

## License

Apache License 2.0 ([LICENSE-APACHE-2.0.txt](LICENSE-APACHE-2.0.txt)) - BIM-MAN Company