Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "catalogue": {
      "type": "http",
      "url": "https://3dassets.dev/mcp",
      "headers": {
        "Authorization": "Bearer ${CATALOGUE_TOKEN}"
      }
    }
  }
}

claude mcp add --transport http catalogue https://3dassets.dev/mcp --header "Authorization: Bearer ${CATALOGUE_TOKEN}"

[mcp_servers.catalogue]
url = "https://3dassets.dev/mcp"
bearer_token_env_var = "CATALOGUE_TOKEN"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "catalogue": {
      "type": "remote",
      "url": "https://3dassets.dev/mcp",
      "enabled": true,
      "headers": {
        "Authorization": "Bearer {env:CATALOGUE_TOKEN}"
      }
    }
  }
}

{
  "mcpServers": {
    "catalogue": {
      "type": "http",
      "url": "https://3dassets.dev/mcp",
      "headers": {
        "Authorization": "Bearer ${CATALOGUE_TOKEN}"
      }
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=catalogue&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vM2Rhc3NldHMuZGV2L21jcCIsImhlYWRlcnMiOnsiQXV0aG9yaXphdGlvbiI6IkJlYXJlciAke0NBVEFMT0dVRV9UT0tFTn0ifX0%3D"
}

{
  "servers": {
    "catalogue": {
      "type": "http",
      "url": "https://3dassets.dev/mcp",
      "headers": {
        "Authorization": "Bearer ${CATALOGUE_TOKEN}"
      }
    }
  }
}

{
  "mcpServers": {
    "catalogue": {
      "httpUrl": "https://3dassets.dev/mcp",
      "headers": {
        "Authorization": "Bearer ${CATALOGUE_TOKEN}"
      }
    }
  }
}

extensions:
  "catalogue":
    enabled: true
    name: "catalogue"
    type: streamable_http
    uri: "https://3dassets.dev/mcp"
    headers:
      "Authorization": "Bearer ${CATALOGUE_TOKEN}"
    timeout: 300

Placeholders to fill from your own secret store: ${CATALOGUE_TOKEN}. The registry never accepts secret values.

Quality 80 / 100good

protocol88 · weight 25

pass
protocol.modernsupports 2026-07-28 (server/discover)
pass
protocol.statelessanswers without a session
pass
protocol.transportstreamable HTTP
warn
protocol.list_ttltools/list declares ttlMs 0, so clients re-fetch it on every use

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene71 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
fail
tools.annotationsno tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
fail
tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: search_assets (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); list_licenses (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); create_account (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …
pass
tools.token_costabout 3,357 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stability100 · weight 15

pass
stability.changesno tool changes in 30 days
pass
stability.rug_pullno tool changed its meaning under the same name

dependencies67 · weight 15

pass
deps.known_vulnsno known advisory in 98 resolved packages
fail
deps.mcp_sdk_version@modelcontextprotocol/sdk 1.30.1 has 1 known advisory (GHSA-6qxp-vccf-f47h); update @modelcontextprotocol/sdk to 1.31.0 or later
pass
deps.resolvable[email protected] resolved: 98 packages

20 tools, about 3,357 tokens to load them all · tool set bdb472303b53 · checked 2026-10-19 21:10 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 63 / 100

provenance85

liveness0

freshness85

hygiene100

+repository +dns-namespace +website -unreachable(5 failures) ~updated-42d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Dependencies

[email protected] npm97 dependencies, resolved · MCP SDK @modelcontextprotocol/sdk 1.30.1 · advisories checked 2026-10-19

advisory	severity	package	fixed in
GHSA-6qxp-vccf-f47hMCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server	high	`@modelcontextprotocol/[email protected]`MCP SDK, direct	fixed in `1.31.0`

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://3dassets.dev/mcp` streamable-http	none	no (5 failures)	89%	489 ms	2026-07-28	2026-10-13

package	registry	version	runtime	secrets
`3dassets-mcp`	npm	1.0.0	–	`THREEDASSETS_API_KEY`

Tools (20)

`create_account`	Create a contributor account for the user. Needs only a username and email. There is no password anywhere in this product, so never ask the user for one. A 6-digit code is emailed to them; ask the user to read it to you, then call verify_account to receive their API key. Only do this with the user’s explicit consent.
`finalize_upload`	After PUTting the file to the URL from get_upload_url, describe the asset and submit it for processing and review.
`get_asset`	Full details for one asset by slug: CDN URL, licence + attribution text, stats, bounding box, animations, and ready-to-paste loader snippets.
`get_asset_usage`	Code or steps to load an asset in three.js, React Three Fiber, <model-viewer>, Blender, Godot or Unity.
`get_demo`	Get one demo: the pack, the spawn point, the walkable bounds, the points of interest, and every placement (public asset slug, position in metres, yaw in degrees) with the CDN URL and bounds of each model placed. Load the models with a plain GLTFLoader and apply the transforms to reproduce the scene.
`get_pack`	Get a free pack manifest with direct CDN URLs, licences, geometry budgets, loader snippets and its assembled starter scene. Download models individually or use the starter scene.
`get_upload_url`	For clients that can upload bytes: returns a presigned PUT URL for a .glb (and optionally a PNG preview). Then call finalize_upload with the returned keys.
`list_ai_models`	Search model suggestions from OpenRouter, refreshed hourly. Custom model/tool names are accepted; the list is not exhaustive. Unavailable suggestions never block uploads.
`list_categories`	List categories available on 3dassets.dev (slugs are what other tools accept).
`list_demos`	List the walkable demo scenes staff have built from single packs. Each is a small environment a person can walk through on the site and an agent can load as a layout. Use get_demo for the placements.
`list_licenses`	Returns the sole accepted submission dedication: CC0 1.0 Universal. No licence selection is needed.
`list_tags`	List tags available on 3dassets.dev (slugs are what other tools accept).
`my_assets`	List the user’s submissions with status (processing, pending review, published, rejected + reason, failed + reason). `pendingEdit` means the user has metadata changes waiting for review; the published version is unchanged until they are approved.
`my_packs`	List the user’s pack proposals with status (submitted, approved + pack URL, rejected + reason) and the status of each member model.
`search_assets`	Search the free GLB catalogue on 3dassets.dev (three.js, Blender, Godot, Unity) by text, category (what it is), theme (what world) and style (what look). Returns direct CDN URLs (CORS *, immutable) that load with a plain GLTFLoader. Published models use CC0 1.0 Universal: free personal and commercial use without attribution. Licence metadata is retained in each result.
`search_packs`	Find cohesive free GLB game kits by text, theme or style. Returns file counts, total bytes and starter scene URLs. Use get_pack for every individual model and loader snippet.
`submit_asset_from_url`	Submit a .glb hosted at a public https URL on the user’s behalf (requires their API key). We download it, validate and re-encode it, then a human reviews it before publishing. CC0 is automatic, but the user must accept its irrevocable dedication before submission. Max 25 MB, 1M triangles, embedded textures only.
`submit_pack`	Group 2–50 of the user’s own uploads (any that are processing, pending or published) into a pack proposal. Upload the models first with finalize_upload or submit_asset_from_url, then pass their slugs here. Each model is still reviewed on its own; a person approves the pack as a whole, which publishes any members still pending and creates the pack page. Nothing goes live until then. The user is emailed the outcome.
`update_asset`	Edit the metadata of one of the user’s own assets. The uploaded GLB can never be changed. Editing an asset that is already published does not change it: the proposal goes to the review queue and the live version keeps serving until a person approves it.
`verify_account`	Exchange the emailed 6-digit code for the account’s API key. Show the key to the user and tell them to configure it as the Bearer token for this MCP server.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "dev.3dassets/catalogue",
  "title": "3DAssets.dev",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://3dassets.dev/mcp",
      "type": "streamable-http",
      "headers": [
        {
          "name": "Authorization",
          "isSecret": true,
          "description": "Optional. \"Bearer <api key>\" from https://3dassets.dev/account, needed only to submit models on the user behalf; search and download work without it."
        }
      ]
    }
  ],
  "version": "1.0.1",
  "packages": [
    {
      "version": "1.0.0",
      "transport": {
        "type": "stdio"
      },
      "identifier": "3dassets-mcp",
      "registryType": "npm",
      "registryBaseUrl": "https://registry.npmjs.org",
      "environmentVariables": [
        {
          "name": "THREEDASSETS_API_KEY",
          "format": "string",
          "isSecret": true,
          "description": "Optional. The user API key from https://3dassets.dev/account, needed only to submit models on the user behalf."
        }
      ]
    }
  ],
  "repository": {
    "url": "https://github.com/3dassets-dev/3dassets",
    "source": "github"
  },
  "websiteUrl": "https://3dassets.dev",
  "description": "Search and download free CC0 GLB models and game packs, and submit new ones on a user behalf."
}