Connect
Optimize
Secure
Announcing StackOne Defender: leading open-source prompt injection guard for your agent • Read More →
Production-ready Autodesk MCP server with 51 extensible actions — plus built-in authentication, security, and optimized execution.
Coverage
Create, read, update, and delete across Autodesk — and extend your agent's capabilities with custom actions.
Authentication
Per-user OAuth in one call. Your Autodesk MCP server gets session-scoped tokens with zero credentials stored on your infra.
Agent Auth →Security
Every Autodesk tool response scanned for prompt injection in milliseconds — 88.7% accuracy, all running on CPU.
Prompt Injection Defense →Performance
Free up to 96% of your agent's context window to enhance reasoning and reduce cost, on every Autodesk call.
Tools Discovery →A Autodesk MCP server lets AI agents read and write Autodesk data through the Model Context Protocol — Anthropic's open standard for connecting LLMs to external tools. StackOne's Autodesk MCP server ships with 51 pre-built actions, fully extensible via the Connector Builder — plus managed authentication, prompt injection defense, and optimized agent context. Connect it from MCP clients like Claude Desktop, Cursor, and VS Code, or from agent frameworks like OpenAI Agents SDK, LangChain, and Vercel AI SDK.
Every action from Autodesk's API, ready for your agent. Create, read, update, and delete — scoped to exactly what you need.
Add a new user to a BIM 360 account.
Query all users in a specific BIM 360 account
Get details of a specific user in a BIM 360 account by user ID.
Update a specific user's status or default company in a BIM 360 account.
Create a new project in a BIM 360 account with required and optional settings.
List projects in a hub. Hub admins/executives see all projects; other users see only assigned projects.
Update properties of a specific BIM 360 project (name, status, dates, address, value, etc.).
Add a project admin to a specific BIM 360 project and service type. BIM 360 only — not compatible with ACC.
List users in a project. Supports filtering by name, email, access level, company, role, status, products, and more.
Update a user's company and industry roles for a BIM 360 project.
Create or redefine the business units of a specific BIM 360 account or Forma hub.
Query all business units in a specific BIM 360 account or Forma hub.
List all accessible hubs for the authenticated user
Get details of a specific hub by ID
List all projects within a specific hub
Get details of a specific project
Create a new folder in a project
Get details of a specific folder
Search for items within a folder
Rename or move a folder
Create a new OSS bucket owned by the calling application.
List the buckets owned by the calling application. Supports pagination.
Delete a bucket owned by the calling application. Irreversible.
Create the first version of a file (item) in a project folder. Requires a pre-uploaded storage object. Or use `upload_file_in_project_folder` for a single-call workflow.
Get details of a specific item (file) by ID
Update properties of an existing item (file) in a project — extension metadata and description.
Create a new version of an existing item (file) in a project. Requires a pre-uploaded storage object.
Get details of a specific version, including the storage URN needed for downloading the file.
Add a new webhook to receive notifications on a specified system event.
List all registered webhooks (paginated). Returns the first page if `pageState` is not provided.
Get details of a specific webhook by its hook ID (callback URL, scope, status, creator, and configuration).
Partially update a webhook (status, filter, hookAttribute, token, autoReactivateHook, hookExpiry).
Delete a webhook subscription based on its `hook_id`. Permanent — the webhook will no longer receive event notifications.
Create a storage location (placeholder) for a file in a project, returning a storage URN for later binary upload.
PUT binary content directly to a signed S3 upload URL obtained from `get_signed_s3_upload_urls`. No Autodesk auth is sent — the URL is pre-signed.
Upload a file binary and create an item (with first version) inside a project folder, in one call.
List companies in a hub. Supports filtering by name, trade, ERP ID, tax ID, status, and date range.
List the industry roles for a BIM 360 project (e.g., contractor, architect). BIM 360 only — not compatible with ACC.
List the root (top-level) folders in a project
List the contents of a specific folder
Get details of a specific bucket owned by the calling application.
List all objects in a specific bucket (paginated). Use this to discover `objectKey` values for `get_signed_s3_download_url`.
Get the latest (tip) version of an item, including the storage URN needed for downloading the file.
List all versions of a specific item
Get a signed S3 URL to download an object directly from Autodesk OSS. Works with both 3-legged and 2-legged auth depending on bucket ownership.
Get signed S3 URLs that the client can PUT binary parts to. Step 2 of the file-upload workflow. Pass the returned URLs to `upload_to_s3` action.
Get available download formats for a version
Get download links for a version
List all webhooks for a specific system (paginated). Returns the first page if `pageState` is not provided.
Delete an object from an app-owned OSS bucket. This operation is irreversible.
Finalize a signed S3 upload session to OSS after uploading binary via `upload_to_s3` action. Step 4 of the file-upload workflow.
One endpoint. Any framework. Your agent is talking to Autodesk in under 10 lines of code.
MCP Clients
Agent Frameworks
{
"mcpServers": {
"stackone": {
"command": "npx",
"args": [
"-y",
"mcp-remote@latest",
"https://api.stackone.com/mcp?x-account-id=<account_id>",
"--header",
"Authorization: Basic <YOUR_BASE64_TOKEN>"
]
}
}
}Anthropic's code_execution processes data already in context. Custom MCP code mode keeps raw tool responses in a sandbox. 14K tokens vs 500.
11 min
Benchmarking BM25, TF-IDF, and hybrid search for MCP tool discovery across 916 tools. The 80/20 TF-IDF/BM25 hybrid hits 21% Top-1 accuracy in under 1ms.
10 min
MCP tools that read emails, CRM records, and tickets are indirect prompt injection vectors. Here's how we built a two-tier defense that scans tool results in ~11ms.
12 min
origin_owner_id.All the tools you need to build and scale AI agent integrations, with best-in-class connectivity, execution, and security.