blender-plugin
Scenario for Blender: AI images, video, 3D and PBR materials in the viewport, plus a local MCP server for agents. Blender 5.0+ extension, GPL-3.0-or-later.
No outside reports on file
Use this only if you trust the developers and only on machines where you don't mind Blender and connected agents accessing your files and running code.
Based on public adoption and transparency signals as of Oct 25, 2026. Our opinion, not a code audit or security guarantee.
What it can access
- Local filesNo local folder access notedLOW
- Command executionNo shell command runner notedLOW
- Network reachConnects to outside service APINOTED
- CredentialsNo API token requiredLOW
- Package sourceGitHub (scenario-labs/blender-plugin)PUBLIC
Inferred from this listing’s public package details and description. Check the project’s source before installing.
Install
No npm or PyPI package is listed. Install from source: github.com/scenario-labs/blender-plugin ↗
Everything known
We found nothing about this project in the sources we read (last checked 2026-10-30). That does not mean it has no problems.
0 incidents · 0 advisories · 0 news articles · 0 community threads · checked 2026-10-30
Popularity grade: C (from public signals such as stars and downloads, not a code review). Graded 2026-10-25.
Sources we read: OSV, GitHub Advisory Database, CISA Known Exploited Vulnerabilities, 44 security news feeds and our incident library. Last checked 2026-10-30.
About Blender Plugin
This is a Blender extension that lets you generate AI images, videos, 3D models, and PBR materials (special textures for realistic surfaces) directly in Blender's viewport. It includes a local MCP server that connects AI agents to Blender's tools.
Who it’s for
3D artists and designers who use Blender and want to speed up their workflow with AI-generated content. Teams using AI agents that need to automate 3D asset creation.
Alternatives
- Comfy UI: Standalone node-based AI tool for image and video generation, runs locally with less system integration.
- Stable Diffusion WebUI: Web interface for AI image generation, separate from 3D software.
- Built-in Blender AI (future): Blender Foundation's official AI features, which may be more vetted.
- Runway Gen-3: Cloud-based AI video generator, requires account but isolated from your files.
Setup
Check these steps against the project’s own instructions before running anything.
Follow the project's README on GitHub for installation steps, as Blender extensions have specific setup requirements that vary by version.
Why this grade
Signal-based grade (3/7 points): well starred on GitHub, public source code. This reflects adoption and transparency, not a code review.
Popularity and upkeep
- GitHub stars
- 903
- Listing last refreshed
- 2026-10-29
These are public popularity signals, not a maintenance check. Look at the repository’s commit history and open issues.
Risks to watch for
- File system access: The MCP server can likely read and write files on your computer where Blender runs, potentially exposing project files or sensitive data.
- Blender script execution: Extensions can run Python code inside Blender, which could modify your projects or access Blender's internal data without warning.
- AI prompt injection: Malicious prompts sent through agents could trick the plugin into generating or exfiltrating unwanted content.
- Network communication: The local server talks to other services (AI APIs, agents); misconfigured or intercepted requests could leak project details.
- Unsigned code: GitHub projects may not be digitally signed, so you're trusting that the code you download hasn't been tampered with.
How to lower the risk
Least-privilege permissions
- Run Blender under a limited user account with no access to sensitive folders.
- Disable the MCP server when you don't need AI agent connections.
Network isolation
- Use a firewall rule to restrict the local server's outbound traffic to only necessary services.
- Keep the plugin on an isolated or test machine if working with confidential 3D designs.
Monitoring
- Watch Blender's logs and console for unexpected file access or network requests.
- Check your file system for new or modified files after using AI generation features.
Red flags to watch for
- Prompts that ask Blender to "run a script" or "load from the web"—never trust these.
- Unusual network activity or delays when the server is idle.
- Plugin updates that suddenly add new permissions or require internet access.
Questions
How do I install Blender Plugin?
Blender Plugin does not publish a standalone npm or PyPI package. Clone or follow the setup instructions in its source repository at github.com/scenario-labs/blender-plugin.
Are there security reports about Blender Plugin?
No reports found for this package in our research (last checked 2026-10-30). Blender Plugin currently holds Grade C (Moderate risk signals) based on public adoption and transparency signals. Key risk areas to watch include file system access, blender script execution, ai prompt injection.
Is Blender Plugin actively maintained?
Blender Plugin has 903 GitHub stars. Our directory data was last refreshed on 2026-10-29. Check recent commit activity, release tags, and open issues at github.com/scenario-labs/blender-plugin before pinning it in production.
What are alternatives to Blender Plugin?
Notable alternatives to Blender Plugin include Comfy UI (Standalone node-based AI tool for image and video generation, runs locally with less system integration), Stable Diffusion WebUI (Web interface for AI image generation, separate from 3D software), Built-in Blender AI (future) (Blender Foundation's official AI features, which may be more vetted), Runway Gen-3 (Cloud-based AI video generator, requires account but isolated from your files). You can also compare Blender Plugin side by side with other MCP servers in the Related tools section on this page.
README badge and team notes
Maintain or use Blender Plugin? Show its live grade in your GitHub README, docs site, or run a check from the terminal before you install.
GitHub README Markdown:
[](https://agentarmorhq.com/skills/scenario-labs-blender-plugin)HTML embed:
<a href="https://agentarmorhq.com/skills/scenario-labs-blender-plugin"><img src="https://agentarmorhq.com/api/badge/scenario-labs-blender-plugin" alt="AgentArmorHQ Risk Grade for Blender Plugin" height="20" /></a>Terminal check:
curl -fsSL https://agentarmorhq.com/api/cli | node --input-type=module - check "scenario-labs-blender-plugin"Share with your security lead
Need sign-off to use blender-plugin? Copy this note for Slack, a ticket or a pull request.
### AgentArmorHQ Security Review Memo: blender-plugin
- **Listing URL:** https://agentarmorhq.com/skills/scenario-labs-blender-plugin
- **Type:** App connector
- **Risk Grade:** Grade C (Moderate risk signals)
- **Outside Security Advisories on File:** 0
- **Public Adoption:** 903 GitHub stars
#### Permission & Blast-Radius Signals
- **Local files:** No local folder access noted
- **Command execution:** No shell command runner noted
- **Network reach:** Connects to outside service API
- **Credentials:** No API token required
- **Package source:** GitHub (scenario-labs/blender-plugin)
#### Recommended Hardened Setup
- **Source Repo:** https://github.com/scenario-labs/blender-plugin
- **Controls:** Pin an exact version in `.mcp.json`, scope access to a single workspace folder, and use a least-privilege read-only token where supported.
_Based on public adoption and transparency signals as of Oct 25, 2026. Our opinion, not a code audit or security guarantee._Key facts
- Type
- App connector
- Publisher
- scenario-labs
- Source code
- github.com/scenario-labs/blender-plugin
- Est. context load
- ~900 tokens / turn (~5 tool schemas, 0.45% of 200k context)
- Popularity
- 903 GitHub stars
- Last updated
- 2026-10-29
- Last graded
- 2026-10-25
Community
Discussions for Blender Plugin
Ask questions or share configuration tips. Governed by our Community Rules & Terms.
No posts match this filter yet.
Be the first to ask a question or share a working tip.
Check before you install, in Claude
Your assistant answers Block, Review or No known issues for any package before it installs it.
Get this check inside Claude