Security policy

Private vulnerability reporting is enabled for this repository. Report vulnerabilities through GitHub's private report form or email sharafutdinov.di.dev@outlook.com. Include the affected version and steps to reproduce. Do not include credentials or confidential model data. Keep undisclosed vulnerabilities out of public issues and Discussions.

The add-in keeps the channel directory private. If another account can write to the override directory, the add-in uses the private default directory instead. Set REVIT_MCP_CHANNEL_DIR on the server to that directory or remove the server override. Responses can contain model paths and parameter values. See server privacy settings.

HTTP binds to loopback by default and authenticates every route except /health with a per-user token. Health reveals document name, Revit version, process ID and workstation read-only state. Protect %LOCALAPPDATA%\RevitModelMcp\settings.json and use an encrypted tunnel for remote access. The listener has no built-in TLS. Actions are enabled by default. One workstation read-only lock disables them: turn it on with the Model MCP ribbon button Read-only or the revit_set_read_only tool. Turning it off in chat needs explicit user confirmation, and the machine policy overrides the lock. See transport for bind settings and actions for read-only controls.

0.x releases are previews; report against the latest release or main.