fusion360-mcp-server (aurafriday)

Fusion 360 add-in that exposes the app as an MCP tool so AI agents can drive it, including arbitrary Python execution inside Fusion with thread-safe API calls; also listed on the Autodesk App Store.

MCP serverSource-availableStaleMCAD

What it does and how it connects

This Fusion 360 add-in connects Fusion to the Aura Friday MCP-Link server so AI agents can drive it as a remote tool, and it is also listed on the Autodesk App Store. The add-in exposes Fusion through generic API calls, arbitrary Python execution inside Fusion, and calls to other MCP tools, with all Fusion API calls executed on the main thread through a work queue.

An agent can run any Fusion API command by path, or run Python with full access to adsk.core, adsk.fusion and adsk.cam, loaded add-ins, SQLite databases, browser automation and user popups, with pre-injected shortcuts for app, ui, design and rootComponent. Three documentation sources are available: live API introspection, Autodesk's online docs with code samples, and a built-in best-practices guide.

The README states the add-in covers Fusion's electronics design, CAM with more than 280 classes, McMaster-Carr component insertion and simulation, all through the same Python path. Python execution has full system access with no sandboxing, which the README flags directly, and the license is proprietary: the source is visible in the repository but all rights are reserved by Aura Friday.

What engineers report

  • exec into globals() with no isolation means one prompt-injected instruction anywhere in an agent's context can run arbitrary code in the CAD host.

Recurring errors it addresses

Error Index entries this tool is built to reduce or work around.

Sources

  1. 1READMEgithub.com
  2. 2GitHub repo statsapi.github.com
  3. 3GitHub issue 8github.com
  4. 4Autodesk App Store listingapps.autodesk.com

Not verified

  • Pricing: none stated on the repo or store listing.
  • License: the LICENSE file states Proprietary with all rights reserved by Aura Friday; the catalog license of source-available is correct in that the source is visible.
  • The release tag is literally 'latest', dated 2026-01-28, as returned by the GitHub API.
  • The issue 8 voice comes from static analysis only; the reporter states it is not a confirmed vulnerability.

Last verified November 6, 2026. Listings are informational. The evidence score measures public, verifiable evidence and is not an endorsement or a compatibility claim.