
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
@dmytro-prototypes/control-mcp-server
Advanced tools
Drive a live AutoCAD session from an AI client through MCP
Drive a live AutoCAD session from Claude, Codex, Cursor, and other MCP clients — create and edit entities, manage layers/blocks/layouts, run commands and AutoLISP, and capture the current view.
npx -y @dmytro-prototypes/control-mcp-server
The platform binary ships alongside this package, selected automatically via
optionalDependencies. The launcher installs and runs a per-user copy:
~/Library/Application Support/Control/bin/control-mcp-server%LOCALAPPDATA%\Programs\Control\control-mcp-server.exeIf LOCALAPPDATA is unset, Windows uses %USERPROFILE%\AppData\Local.
Later launches reuse it when its contents match the packaged binary; a different
package version replaces it atomically. The copy preserves the packaged code
signature. If Windows blocks an update because the executable is running, close
the Control MCP connections in your clients and retry; the existing executable
is preserved when replacement fails.
Continue using the same npx command for startup and updates; no separate
installation command is needed.
Supported platforms are macOS Apple Silicon and Windows x64 — the platforms AutoCAD itself runs on.
npx -y @dmytro-prototypes/control-mcp-server login
Opens your browser to approve the sign-in; the key is then stored in your OS
credential store, never in a config file. npx -y @dmytro-prototypes/control-mcp-server status
shows what's signed in, and logout forgets it. The same commands are also
available as CONTROLLOGIN / CONTROLSTATUS / CONTROLLOGOUT typed directly
in AutoCAD, once the plugin is installed.
Client configuration examples for Claude Desktop, Claude Code, Codex, and Cursor are at your Control account's setup page.
FAQs
Drive a live AutoCAD session from an AI client through MCP
The npm package @dmytro-prototypes/control-mcp-server receives a total of 37 weekly downloads. As such, @dmytro-prototypes/control-mcp-server popularity was classified as not popular.
We found that @dmytro-prototypes/control-mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.