C — Moderate risk signals Graded October 17, 2026Several concerns worth a closer look before you install.Based on public adoption and transparency signals as of Oct 17, 2026. Our opinion, not a code audit or security guarantee.
App connector · Web & browsing
solidcraft
SolidCraft: an open-source parametric 3D CAD application built in pure Rust. Desktop, web, and automation through MCP.
Bottom line: Like any CAD tool that touches your files and network, SolidCraft poses moderate risk if used with untrusted design files or connected to the internet without care.
- Popularity score
- 40/100
- Rank
- #340 of 500
- GitHub stars
- 3.3k
What it does
SolidCraft is a 3D computer-aided design (CAD) tool written in the Rust programming language. It lets users create and edit 3D models through a desktop app, web browser, or automated scripts using MCP (a standard for connecting AI assistants to tools).
Who it’s for
Engineers, designers, and developers who want an open-source CAD application. People interested in automation or connecting 3D design work to AI assistants through MCP.
Copy-paste setup
Check these steps against the project’s own instructions before running anything.
Follow the project's README. The GitHub repository likely contains installation instructions for desktop, web, and MCP server setup specific to your operating system.
Risks
- File system access: The tool can read and write 3D model files on your computer; a compromised version could access, modify, or delete files.
- Network requests: If run as an MCP server connected to Claude or other AI assistants, it exchanges design data over the network; unencrypted connections could leak model information.
- Code injection in designs: CAD files or parametric scripts could contain hidden instructions that cause unexpected behavior when processed.
- Rust safety doesn't prevent logic flaws: While Rust prevents some memory errors, bugs in the application logic could still cause crashes or unintended modifications.
- Untrusted dependencies: Open-source projects depend on libraries maintained by others; those libraries could be compromised or contain vulnerabilities.
How to stay secure
Least-privilege permissions
- Run the tool with a user account that has minimal access to sensitive files.
- Store CAD projects in a dedicated folder, not in system directories.
Network isolation
- Use MCP only on trusted local networks or over encrypted, authenticated connections.
- Avoid exposing the MCP server directly to the internet.
Monitoring
- Watch for unexpected file access or network traffic when opening unknown CAD files.
- Check GitHub for security advisories or recent vulnerability reports.
Red flags to watch for
- Design files from untrusted sources or unexpected file modifications after opening them.
- Error messages or crashes when processing certain files—could signal malicious content.
Alternatives
- FreeCAD: Popular open-source 3D CAD tool with Python scripting support.
- OpenSCAD: Parametric 3D modeler using script-based design.
- Blender: Free 3D creation suite; can be scripted for automation.