Security and trust
You stay in control of your model and your data
An AI connected to your CAD program has to earn trust. This page explains how CADMCP.AI is designed to keep a person in charge of every change, and what passes through our server.
A person approves every change
Changes to your model become requests on an approval card inside the CAD program. Only a person at that computer can approve one. There is no approve command in the chat, the connector or our server.
The agent dials out
The agent opens an encrypted outgoing connection to our server. No port is opened on your computer and nothing on the internet can connect in.
We never ask for your AI keys
Your AI app signs in to CADMCP.AI with your CADMCP.AI account (OAuth). Your Claude or Codex account, and its usage, stay with your AI provider.
Only your own computers
Requests are sent only to computers paired to the account that signed in. Which computer receives a request is decided from your sign-in, never from anything the AI writes.
The agent checks everything
Each request to your computer is signed and expires within a minute. The agent checks the signature, refuses replays and accepts only tools on its own allow-list.
Pause, watch, unpair
The agent shows the recent calls it handled, has a switch that pauses all AI access at once, and can unpair your computer. None of this needs the website.
What passes through, what is kept
CAD files stay on your computer. The service sees what your AI app sees through the CADMCP.AI tools, and is designed to keep as little as possible.
| Data | Passes through our server | Kept by us |
|---|---|---|
| Your CAD files | No | No. They stay on your computer. |
| Tool requests from your AI app | Yes, in memory | No content. A fingerprint (hash) goes into the audit log. |
| Tool results (feature names, dimensions, properties, file names, screenshots) | Yes, in memory | No content. A fingerprint goes into the audit log. |
| Screenshots and full file paths | Only if you allow them in the agent | No |
| Your account (email, plan, subscription status) | Yes | Yes, while you have an account |
| Paired computers (name, agent version, last seen) | Yes | Yes, until you unpair |
| Card details | No. Stripe handles payment. | No full card numbers |
We do not train AI models on your requests, results or files, and we do not sell your data. Exact retention periods are in the Privacy Policy.
If our server were broken into
We design for that case too. By design, someone who took over our server could read model details from connected computers, move the selection or the camera, and put change requests in front of you. They could not approve those requests, change a model, run a program or open a file on your computer. You would see every request, and you could decline it or pause the agent.
That is why the approval card lives in the CAD program, and why the agent has its own pause switch.
How we are building it
- Every protection gets a test that fails when the protection is broken on purpose.
- The agent and its installer are code-signed, and the agent accepts only signed updates.
- An outside security test of the service and the agent is planned before launch.
- The online service is not for export-controlled data, for example ITAR.
Found a vulnerability? Report it to us.
CADMCP.AI
Be first in line
Create a free account to join early access. We will email you when the online connector opens. You keep your own AI plan and your own CAD licence.