Blender MCP

Blender MCP refers to software that connects large language model clients and AI agents to Blender, the free and open-source 3D creation suite, through the Model Context Protocol (MCP). Two projects carry the name. The older and far more widely starred is a community project by Siddharth Ahuja, first published in March 2025 as BlenderMCP (blender-mcp) and renamed MCP for Blender (mcp-for-blender) in September 2026.^[1][2] The second is the Blender MCP Server developed by Blender Lab, the Blender Foundation's innovation program, which reached version 1.0.0 in April 2026 and was offered as an official Blender connector for Claude when Anthropic launched its creative-software connectors on 28 April 2026.^{[15][21][23][26]}

Both projects use the same basic design: a Blender add-on that runs a TCP socket server inside Blender, and a separate MCP server process that an MCP client launches and that relays requests to the add-on. Both let the model run Python code inside Blender through the bpy API. That is the core capability of both, and their main security risk.^[1][20][15] The community project adds asset search and AI 3D-model generation; the Blender Lab server concentrates on inspecting blend files, searching Blender's documentation and running code.^[1][22]

How it works

Blender exposes nearly all of its functionality through its Python API, so a model that can write and run bpy code can create objects, change materials, set up lighting and cameras, and query scene data. An MCP server packages that ability as named tools that any MCP client can call. In both projects the MCP server talks to the client over standard input and output (stdio) and to Blender over a local TCP socket.^[1][20]

Sources: project READMEs and repository metadata.^{[1][5][15][20]}

MCP for Blender (community project)

Origin and history

Ahuja created the GitHub repository ahujasid/blender-mcp on 7 March 2025. The first commits that day record a socket connection between Blender and the server, and version 0.1.0 was uploaded to PyPI on 8 March 2025.^[1][4][6] The README of 11 March 2025 described the tool as connecting "Blender to Claude AI through the Model Context Protocol (MCP), allowing Claude to directly interact with and control Blender." It listed nine tools, including get_scene_info, create_object, modify_object, delete_object, set_material and execute_blender_code, and it already warned that the code-execution tool "allows running arbitrary Python code in Blender, which can be powerful but potentially dangerous." The code was published under the MIT License, copyright Siddharth Ahuja.^[5]

Integrations followed quickly. Poly Haven asset support was merged on 13 March 2025, and Hyper3D Rodin text-to-3D and image-to-3D generation was merged from a branch in the GitHub organization of Deemos, Rodin's developer, on 16 March 2025.^[6] The Japanese CG news site CGWORLD reported that Ahuja announced the Rodin integration on 24 March 2025 and that Deemos offered free API keys to the add-on's users.^[7] Sketchfab model search and viewport screenshots arrived in June 2025, and Tencent Hunyuan3D generation in November 2025.^[6]

Speaking at the AI Engineer World's Fair 2025, where the event listed him as a designer, engineer and creator of Blender MCP, Ahuja said the project had more than 11,000 GitHub stars and over 160,000 downloads at that point. He also showed a demo combining it with a separate Ableton Live MCP server he wrote.^[8][33]

On 1 September 2026 a commit renamed the project to "MCP for Blender" in order "to avoid confusion with official blender foundation", and on 16 September 2026 the repository moved to ahujasid/mcp-for-blender, and mcp-for-blender 2.0.0 (a name first used on PyPI for version 1.9.0 on 1 September) became the main package.^[6][2][3] The announcement said the rename made clear that the project is "a community plugin, a third-party integration not made by Blender, and not to be confused with the official Blender Lab". The old blender-mcp package became a compatibility wrapper that installs the new one, and blender-mcp 1.9.4 remained the last release before the rename.^[2][4] The project's GitHub description now reads "Not affiliated with the official Blender Foundation."^[1]

Sources: commit history, PyPI release history and issue #366.^{[2][3][4][6][9]}

As of 30 October 2026 the repository had 32,730 stars and 2,966 forks on GitHub, and the latest PyPI release was mcp-for-blender 2.2.6, uploaded on 28 October 2026.^[1][3] Ahuja authored about 180 of the roughly 260 commits on the main branch. Other contributors include developers whose GitHub profiles list Deemos and Poly Haven, including Poly Haven's Greg Zaal, who fixed the Poly Haven integration.^[6]

Tools

Early versions exposed one MCP tool per operation and per service, with names such as get_viewport_screenshot, search_polyhaven_assets, download_sketchfab_model and generate_hyper3d_model_via_text.^[6] A refactor on 30 September 2026 simplified the tool set. The README as of 30 October 2026 says the AI "writes Blender Python itself for modelling, layout, materials, animation, rigging and retopology", and that the MCP "adds what Python can't do on its own, as nine tools":^[1]

The integrations differ in setup. According to the README, Poly Haven needs no API key, and the add-on writes asset IDs, authors and license data onto imported objects as custom properties. Poly Pizza needs a free key, and because most of its catalogue is CC-BY, the add-on stores a ready-made credit line on each import. Sketchfab, Hyper3D, Hunyuan3D, Meshy and Tripo use the user's own credentials. Hunyuan3D can call either Tencent Cloud's mainland service or its international service.^[1] A paid "Premium" option, integrated on 25 September 2026, lets users generate models with Meshy, Hunyuan3D, Tripo and Hyper3D Rodin without their own API keys.^[1][6]

Clients and installation

The project began as a Claude Desktop integration, but the current README covers Claude Desktop, Claude Code, OpenAI Codex, Cursor, Visual Studio Code, OpenCode and Antigravity, plus instructions for building a Docker image of the MCP server. A one-line installer or uvx mcp-for-blender setup detects the installed clients, lets the user pick which to set up, adds a blender entry to each chosen configuration, and installs and enables the add-on. A Codex plugin adds a live viewport inside the chat and thumbnail pickers for asset libraries.^[1]

Telemetry

The README says that by default the server sends a minimal anonymous usage record: a random install ID, a session ID, the tool name, success or failure, duration, software versions, operating system and a timestamp. Prompts, generated code, viewport screenshots, scene data and "trajectory steps" are collected only if the user opts in. The README also states that telemetry data "may be used to improve MCP for Blender, for research, and to train AI models", and that setting DISABLE_TELEMETRY=true turns off collection entirely.^[1] The repository's history shows anonymous telemetry was added in November 2025 and consent was changed from opt-out to opt-in on 21 July 2026.^[6]

Blender Lab MCP Server (official)

Development

The Blender Foundation announced Blender Lab on 7 November 2025 as "the innovation space where designers, developers, and researchers work together on challenging and future-facing projects". The announcement, by Francesco Siddi, listed "AI and ML technologies, starting with a Blender MCP server" among projects that "could be added soon".^[17] In January 2026 Blender's development outlook said the Lab would launch by exploring natural-language input, with the aim to "develop an MCP server for Blender, with communication handled via the existing Python API."^[18]

The project's repository, lab/blender_mcp on projects.blender.org, was created in February 2026. Its commit history is mostly the work of long-time Blender developer Campbell Barton, with contributions from Dalai Felinto.^[20] Blender's Q1 2026 Lab report framed the work this way: "The Blender project keeps a firm artist-centric policy when it comes to AI. With this in mind, some exploration of LLM powered tools has started, with an implementation of an MCP connector for Blender." The report noted that the project page includes instructions for a local setup "using open-source tools and models with open weights."^[19]

Source: projects.blender.org release list.^[21]

Blender's Lab overview lists the MCP Server project as "Released" and describes it as "a standalone Model Context Protocol server and integration with Blender (as an add-on), allowing LLM chats and other systems to interact with the software using natural language."^[16] As of 30 October 2026 the repository had 33 stars and 33 forks, and its code is licensed under the GNU GPL version 3.^[20]

Features

The project page describes the server as "a lightweight MCP (Model Context Protocol) server for Blender" that "offers a natural language interface with Blender's Python API, improving access to documentation, and allowing users to explore and understand complex setups." It requires Blender 5.1 or newer, and it notes that "Blender does not have any built-in functionality for connecting to LLMs": users install the add-on, an LLM client and the MCP server themselves. The add-on can be installed from a Blender Lab extension repository so that users get update notices. Clients that support MCP Bundles can use the .mcpb package, and the documentation walks through setup with llama.cpp.^[15]

The server bundles Blender Python API reference and user-manual excerpts in reStructuredText, along with prompts sent to the model at connection time.^[20] Its generated tool list includes:^[22]

Unlike the community project, the Lab server has no asset-library or generative-3D tools. Its sample uses are analytical. One example on the project page asks the model to find objects with high polygon counts relative to their on-screen size in the Classroom benchmark scene. The page then points out that the model's first answer missed a Solidify modifier that doubled one object's polygon count. Other tested prompts cover fixing typos in data-block names, suggesting naming conventions, finding which objects use a material, and documenting a Geometry Nodes setup.^[15]

Anthropic connector and funding controversy

On 28 April 2026 Anthropic announced connectors for creative software, including Blender. Its post said "the Blender developers have created an MCP connector, which is now officially available for Claude", that it can be used to "analyze and debug entire Blender scenes, or build custom scripts to batch-apply changes to objects in a scene", and that because it is built on MCP "it is accessible to other LLMs in addition to Claude."^[23] The same day the Blender Foundation announced that Anthropic was joining the Blender Development Fund as a Corporate Patron, with the support "dedicated towards Blender core development", including the Python API.^[24] CG Channel reported the patronage as worth 240,000 euros a year and said the Blender community's reaction was divided.^[26]

On 1 May 2026 Siddi, as chairman of the Blender Foundation, wrote that "we should have opened up more conversation and perspectives from contributors before making this decision, and for that we are sorry." The Foundation said it would take the money as a one-time donation instead of a Development Fund membership, would set out its position on generative AI, and that "no generative AI functionality is currently available or planned to be integrated in Blender."^[25] Anthropic updated its post the same day to say Blender had elected to receive the contribution as a one-time donation.^[23] CG Channel reported that Anthropic's logo was removed from the Development Fund site.^[27] The MCP server remained listed on blender.org as a released Lab project.^[16]

Security

Both projects run model-written code with the full privileges of the Blender process. The Blender Lab page warns that "the MCP server will execute LLM generated code in Blender without any guards in place to protect your data from removal or being sent to a remote location", and it recommends a virtual machine or a system without sensitive data.^[15] The community README warns that the add-on's socket server "has no authentication or encryption, so anyone who can reach that port can run Python inside Blender", and that by default "the AI can run any Python code in Blender."^[1] Because an agent can be steered by text in its inputs, prompt injection is one way such a tool could be abused; the published advisories also describe man-in-the-middle attacks.^[9]

Several vulnerability reports have been filed against the community project:

Sources: NVD and the GitHub Advisory Database. VulDB rated its three records Low (CVSS 4.0 scores of 2.0 to 2.1).^{[9][10][11][12]}

The three VulDB records cover versions up to a January 2026 commit and stem from issues filed in March 2026. The record for the execute_blender_code issue says the project "was informed of the problem early through an issue report but has not responded yet."^[12][13] The path-traversal advisory, assigned by VulnCheck, describes attackers using a man-in-the-middle position or prompt injection to supply malicious file paths.^[9] In a separate case, a pull request merged on 4 June 2026 removed a line from two tool descriptions that told the model to "silently remember" the API key type. The contributor argued that hidden instructions in tool descriptions, which clients pass to the model verbatim, amount to tool poisoning "regardless of intent".^[14]

In September 2026 the project added an optional safe mode, enabled with BLENDER_MCP_SAFE_MODE=1. It checks each script before it runs and blocks risky operations such as direct file access, launching programs, network access and installing persistent code. The README says normal modelling, rendering, saving and import and export still work in safe mode.^[1][6]

Use in research and production

Several 2026 research projects use Blender MCP tools as the agent's interface to Blender. In the BlenderWorld benchmark, released in October 2026, agents running in Claude Code or Codex work in Blender through "Python API and MCP tools", building editable scenes from text, image and video references. The paper's appendix lists the MCP endpoints it used, including execute_blender_code, get_scene_info, get_viewport_screenshot, search_polyhaven_assets and download_sketchfab_model.^[28] These names match the community BlenderMCP server's tools before its September 2026 simplification, although the paper does not name the repository.^[6][28] The Zero-HLM humanoid-robotics paper describes a multimodal agent that builds simulated scenes "using Blender MCP and IsaacLab".^[29]

Independent game developers have described Blender MCP servers as one step in AI-assisted asset pipelines. In an October 2026 Reddit post about the farming game Just Farm, the developer, posting as u/SirKnighty, wrote that Claude Opus 5.5 in Claude Code wrote "basically all of the C#". The developer said that models from Tripo went through "Blender + MCP, driven by scripts, to clean up, split, rescale and fix those models before they go into the game", and that a Unity MCP server identified as Funplay MCP let Claude drive the Unity editor. The post did not say which Blender MCP server the developer used.^[30][31] Showcase posts in the r/TopologyAI subreddit in October 2026 carried titles such as "Opus 5.5 + Blender MCP + 3D AI + Unity 6 = a Cozy Fishing Game Made Solo".^[32] The wider practice is covered in AI in gaming and AI game development.

Related MCP bridges

Similar community MCP servers exist for other creative tools and game engines. They include Ahuja's own Ableton Live server, created in March 2025; CoplayDev/unity-mcp for the Unity Editor (MIT License, about 15,500 GitHub stars as of 30 October 2026); chongdashu/unreal-mcp for Unreal Engine; and Coding-Solo/godot-mcp for Godot.^{[33][34][35][36]} Anthropic's April 2026 launch added connectors for Adobe applications, Affinity, Autodesk Fusion, Resolume, SketchUp, Splice and Ableton alongside Blender.^[23] For MCP servers in general, see MCP server.

Continue reading

• MMCP serverAn MCP server is a program that implements the Model Context Protocol (MCP) to expose tools, resources, and prompts to MCP clients running inside an AI application or AI agentMentioned 21 times above
• Model Context ProtocolModel Context Protocol (MCP) is an open protocol for exchanging context and invoking capabilities between applications that use large language models and external programs or data sources.Mentioned 4 times above
• PPrompt injectionPrompt injection is a class of security vulnerabilities in which an attacker crafts malicious input designed to override, subvert, or manipulate the instructions governing a large language model (LLM).Mentioned twice above
• BBlenderWorldBlenderWorld is a benchmark for visual AI agents that build editable 3D scenes in Blender, the open-source 3D creation suite, from text briefs, reference images, reference videos and structured specification…Listed in See also
• Hunyuan 3DHunyuan 3D is a family of open weight generative artificial intelligence models from Tencent that turn text prompts, single images, sketches, and other inputs into ready to use three dimensional assets…Listed in See also
• RRodin Gen-2Rodin Gen-2 is a generative artificial intelligence model for producing three dimensional assets from text prompts or reference images, developed by the Shanghai based company Deemos and delivered through the…Listed in See also

More from See also

• Steam AI disclosure
• Developing Games with AI

More to read

• Claude (language model)
• Anthropic
• Large Language Model
• AI Agents

Topics:AI AgentsAI in GamingDeveloper ToolsOpen Source AI

References

1. ^1 ^2 ^3 ^4 ^5 ^6 ^7 ^8 ^9 ^10 ^11 ^12 ^13 ^14 ^15"MCP for Blender" (README and repository metadata), ahujasid/mcp-for-blender, GitHub. Accessed 30 October 2026. github.com/...mcp-for-blender
2. ^1 ^2 ^3 ^4Siddharth Ahuja, "blender-mcp is now mcp-for-blender", GitHub issue #366, 16 September 2026. github.com/...366
3. ^1 ^2 ^3"mcp-for-blender", PyPI. Accessed 30 October 2026. pypi.org/...mcp-for-blender
4. ^1 ^2 ^3"blender-mcp", PyPI (release history). Accessed 30 October 2026. pypi.org/...blender-mcp
5. ^1 ^2"BlenderMCP - Blender Model Context Protocol Integration", README at commit 2c8b2f2, 11 March 2025. github.com/...README.md
6. ^1 ^2 ^3 ^4 ^5 ^6 ^7 ^8 ^9 ^10 ^11Commit history, ahujasid/mcp-for-blender, GitHub (including commits 283ab86, 4e4089c, 62227ca, 33de875, 41d98fc, dff6a01, 8b4e062 and b704265). Accessed 30 October 2026. github.com/...main
7. ^"AIエージェントとの対話だけでRodinがBlender内で3Dシーンを生成! オープンソースのBlenderアドオン「BlenderMCP 1.1.0」リリース", CGWORLD, 1 April 2025. cgworld.jp/...01-202504-BlenderMCP110
8. ^"Blender MCP and the Future of Creative Tools - Siddharth Ahuja", AI Engineer World's Fair 2025. ai.engineer/...E-blender-mcp-future-creative-tools
9. ^1 ^2 ^3 ^4"BlenderMCP path traversal in download_polyhaven_asset allows arbitrary file writes" (GHSA-4h8q-hh2j-755w, CVE-2026-66004), GitHub Advisory Database, 24 July 2026. github.com/...GHSA-4h8q-hh2j-755w
10. ^"CVE-2026-10661", National Vulnerability Database, 2 June 2026. nvd.nist.gov/...CVE-2026-10661
11. ^"CVE-2026-10662", National Vulnerability Database, 2 June 2026. nvd.nist.gov/...CVE-2026-10662
12. ^1 ^2"CVE-2026-10688", National Vulnerability Database, 2 June 2026. nvd.nist.gov/...CVE-2026-10688
13. ^"RCE via unsanitized exec() in execute_blender_code", GitHub issue #201, ahujasid/mcp-for-blender, 10 March 2026. github.com/...201
14. ^"Security: drop prompt-injection lines from get_*_status docstrings", GitHub pull request #237, ahujasid/mcp-for-blender, merged 4 June 2026. github.com/...237
15. ^1 ^2 ^3 ^4 ^5 ^6"MCP Server", Blender Lab, blender.org. Accessed 30 October 2026. blender.org/...mcp-server
16. ^1 ^2"Blender Lab", blender.org. Accessed 30 October 2026. blender.org/lab
17. ^Francesco Siddi, "Introducing Blender Lab", blender.org, 7 November 2025. blender.org/...introducing-blender-lab
18. ^"Projects to Look Forward to in 2026", blender.org, 30 January 2026. blender.org/...projects-to-look-forward-to-in-2026
19. ^"Blender Lab Activity Report - Q1 2026", blender.org, 24 April 2026. blender.org/...blender-lab-activity-report-q1-2026
20. ^1 ^2 ^3 ^4 ^5 ^6"lab/blender_mcp" (repository, readme.md and commit history), projects.blender.org. Accessed 30 October 2026. projects.blender.org/...blender_mcp
21. ^1 ^2"Releases", lab/blender_mcp, projects.blender.org. Accessed 30 October 2026. projects.blender.org/...releases
22. ^1 ^2"Tools" (readme_tools.rst), lab/blender_mcp, projects.blender.org. Accessed 30 October 2026. projects.blender.org/...readme_tools.rst
23. ^1 ^2 ^3 ^4"Claude for Creative Work", Anthropic, 28 April 2026 (updated 1 May 2026). anthropic.com/...claude-for-creative-work
24. ^"Anthropic joins the Blender Development Fund as Corporate Patron", blender.org, 28 April 2026. blender.org/...evelopment-fund-as-corporate-patron
25. ^Francesco Siddi, "Upcoming Blender Development Fund and AI Policies", blender.org, 1 May 2026. blender.org/...er-development-fund-and-ai-policies
26. ^1 ^2Jim Thacker, "AI developer Anthropic becomes Blender's latest Corporate Patron", CG Channel, 29 April 2026. cgchannel.com/...-blenders-latest-corporate-patron
27. ^Jim Thacker, "Anthropic's patronage of Blender downgraded to one-off donation", CG Channel, 4 May 2026. cgchannel.com/...er-downgraded-to-one-off-donation
28. ^1 ^2"BlenderWorld: Benchmarking Visual Agents for 3D Creation from Real-World References", arXiv:2610.23986, October 2026. arxiv.org/...2610.23986
29. ^"Zero-HLM: Generalizable Humanoid Loco-Manipulation without Real Robot Data", arXiv:2610.35075, October 2026. arxiv.org/...2610.35075
30. ^u/SirKnighty, "My game got removed from gamedev subs for using AI, so here's exactly how I made it", r/accelerate, Reddit, 27 October 2026. reddit.com/..._removed_from_gamedev_subs_for_using
31. ^"Just Farm", Dasi Games, Steam store page. Accessed 30 October 2026. store.steampowered.com/...5341880
32. ^"Opus 5.5 + Blender MCP + 3D AI + Unity 6 = a Cozy Fishing Game Made Solo", r/TopologyAI, Reddit, 11 October 2026. reddit.com/...der_mcp_3d_ai_unity_6_a_cozy_fishing
33. ^1 ^2"ableton-mcp", ahujasid, GitHub. Accessed 30 October 2026. github.com/...ableton-mcp
34. ^"unity-mcp", CoplayDev, GitHub. Accessed 30 October 2026. github.com/...unity-mcp
35. ^"unreal-mcp", chongdashu, GitHub. Accessed 30 October 2026. github.com/...unreal-mcp
36. ^"godot-mcp", Coding-Solo, GitHub. Accessed 30 October 2026. github.com/...godot-mcp

Show all 36 references