Kicad (ProductOfAmerica) MCP Server
mcp-server-kicad
PyPI
v0.20.1
Published by productofamerica — no publish provenance, so origin is unverified, but the source is public: the repository link below is self-declared yet readable, so you can inspect the code before adopting it.
MCP servers for KiCad schematic, PCB, and export automation
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 7 = 93. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −6 | capability blast radius (high) — client exposure if the model is manipulated |
| −1 | publisher verification (public source) — no provenance, but the source is public and inspectable |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 3
high Shell/command execution in server code (mcp_server_kicad/_freerouting.py)MTC-SRC-002
In the server's implementation (`mcp_server_kicad/_freerouting.py:84`): Spawning a shell/process is command-execution capability; with unsanitized tool input it is command injection / RCE. This is read from the code itself — not from the tool description — so a poisoned server cannot hide it behind honest-looking metadata.
Evidence: try: result = subprocess.run( ["java", "-version"], capture_output=True, t
Fix: Review this call path: confirm it never receives unsanitized tool input, constrain it, or remove it. Treat a server whose code reaches these sinks as high-capability regardless of what its tools claim.
Location: server mcp_server_kicad/_freerouting.py
high Shell/command execution in server code (mcp_server_kicad/_shared.py)MTC-SRC-002
In the server's implementation (`mcp_server_kicad/_shared.py:833`): Spawning a shell/process is command-execution capability; with unsanitized tool input it is command injection / RCE. This is read from the code itself — not from the tool description — so a poisoned server cannot hide it behind honest-looking metadata.
Evidence: try: return subprocess.run( [executable] + args, capture_output=True, te
Fix: Review this call path: confirm it never receives unsanitized tool input, constrain it, or remove it. Treat a server whose code reaches these sinks as high-capability regardless of what its tools claim.
Location: server mcp_server_kicad/_shared.py
low Shell/command execution in packaging/dev tooling (tests/conftest.py)MTC-SRC-002
In a packaging/dev/install script (shipped, but not the server runtime) (`tests/conftest.py:485`): Spawning a shell/process is command-execution capability; with unsanitized tool input it is command injection / RCE. This is read from the code itself — not from the tool description — so a poisoned server cannot hide it behind honest-looking metadata.
Evidence: f): self.proc = subprocess.Popen( self.argv, stdin=subprocess.PIPE, stdout=s
Fix: Review this call path: confirm it never receives unsanitized tool input, constrain it, or remove it. Treat a server whose code reaches these sinks as high-capability regardless of what its tools claim.
Location: server tests/conftest.py
Tools 109
Each tool and what it can reach — statically extracted from the published source.
add_copper_zoneno sensitive capabilityadd_global_labelno sensitive capabilityadd_hierarchical_labelno sensitive capabilityadd_hierarchical_sheetno sensitive capabilityadd_junctionsno sensitive capabilityadd_keepout_zoneno sensitive capabilityadd_labelno sensitive capabilityadd_lib_symbolno sensitive capabilityadd_pcb_lineno sensitive capabilityadd_pcb_textno sensitive capability
Show 99 more tools ↓
add_power_symbolno sensitive capabilityadd_sheet_pinno sensitive capabilityadd_symbolno sensitive capabilityadd_textno sensitive capabilityadd_thermal_viasno sensitive capabilityadd_traceno sensitive capabilityadd_viano sensitive capabilityadd_wiresno sensitive capabilityannotate_schematicno sensitive capabilityauto_place_decoupling_capno sensitive capabilityautoroute_pcbno sensitive capabilitycheck_placementno sensitive capabilityconnect_pinsno sensitive capabilitycreate_projectno sensitive capabilitycreate_schematicno sensitive capabilitycreate_sym_lib_tableno sensitive capabilitycreate_symbol_libraryno sensitive capabilityduplicate_sheetno sensitive capabilityexport_3dno sensitive capabilityexport_bomno sensitive capabilityexport_footprint_svgno sensitive capabilityexport_gerbersno sensitive capabilityexport_hierarchical_netlistno sensitive capabilityexport_ipc2581no sensitive capabilityexport_netlistno sensitive capabilityexport_pcbno sensitive capabilityexport_positionsno sensitive capabilityexport_schematicno sensitive capabilityexport_symbol_svgno sensitive capabilityfill_zonesno sensitive capabilityflatten_hierarchyno sensitive capabilityget_board_infono sensitive capabilityget_footprint_boundsno sensitive capabilityget_footprint_infono sensitive capabilityget_footprint_padsno sensitive capabilityget_net_connectionsno sensitive capabilityget_pin_positionsno sensitive capabilityget_schematic_summaryno sensitive capabilityget_sheet_infono sensitive capabilityget_symbol_infono sensitive capabilityget_symbol_instancesno sensitive capabilityget_symbol_pinsno sensitive capabilityget_versionno sensitive capabilityis_root_schematicno sensitive capabilitylist_cross_sheet_netsno sensitive capabilitylist_hierarchyno sensitive capabilitylist_lib_footprintsno sensitive capabilitylist_lib_symbolsno sensitive capabilitylist_pcb_footprintsno sensitive capabilitylist_pcb_graphic_itemsno sensitive capabilitylist_pcb_layersno sensitive capabilitylist_pcb_netsno sensitive capabilitylist_pcb_tracesno sensitive capabilitylist_pcb_zonesno sensitive capabilitylist_schematic_bus_entriesno sensitive capabilitylist_schematic_componentsno sensitive capabilitylist_schematic_global_labelsno sensitive capabilitylist_schematic_hierarchical_labelsno sensitive capabilitylist_schematic_junctionsno sensitive capabilitylist_schematic_labelsno sensitive capabilitylist_schematic_no_connectsno sensitive capabilitylist_schematic_sheetsno sensitive capabilitylist_schematic_wiresno sensitive capabilitylist_unconnected_pinsno sensitive capabilitymodify_hierarchical_labelno sensitive capabilitymodify_hierarchical_sheetno sensitive capabilitymove_componentno sensitive capabilitymove_footprintno sensitive capabilitymove_hierarchical_sheetno sensitive capabilityno_connect_pinno sensitive capabilityplace_componentno sensitive capabilityplace_footprintno sensitive capabilityremove_componentno sensitive capabilityremove_dangling_tracksno sensitive capabilityremove_footprintno sensitive capabilityremove_hierarchical_labelno sensitive capabilityremove_hierarchical_sheetno sensitive capabilityremove_junctionno sensitive capabilityremove_labelno sensitive capabilityremove_no_connectno sensitive capabilityremove_sheet_pinno sensitive capabilityremove_textno sensitive capabilityremove_tracesno sensitive capabilityremove_wireno sensitive capabilityreorder_sheet_pagesno sensitive capabilityrun_drcno sensitive capabilityrun_ercno sensitive capabilityrun_jobsetno sensitive capabilityset_component_propertyno sensitive capabilityset_net_classno sensitive capabilityset_page_sizeno sensitive capabilityset_trace_widthno sensitive capabilitytrace_hierarchical_netno sensitive capabilityupdate_pcb_from_schematicno sensitive capabilityupgrade_footprint_libno sensitive capabilityupgrade_symbol_libno sensitive capabilityvalidate_boardno sensitive capabilityvalidate_hierarchyno sensitive capabilitywire_pins_to_netno sensitive capability
What this scan could not see
- Tools were statically extracted from the published source (109 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 7
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v0.20.1 latest |
A 93/100 | 3 | 1.13.0 | 2026-08-25 |
v0.19.4 |
A 93/100 | 4 | 1.12.1 | 2026-08-15 |
v0.17.3 |
A 93/100 | 4 | 1.12.1 | 2026-08-14 |
v0.17.1 |
A 93/100 | 4 | 1.12.1 | 2026-08-13 |
v0.13.4 |
A 93/100 | 4 | 1.12.1 | 2026-08-12 |
Show 2 more versions ↓
v0.10.0 |
A 93/100 | 3 | 1.12.1 | 2026-08-10 |
v0.9.1 |
A 93/100 | 4 | 1.12.1 | 2026-07-27 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan mcp-server-kicad --online --registry pypiOther implementations of Kicad 5
Independent packages implementing the same tool, scanned with the same engine. Compare all 6 side by side →
MCP server exposing KiCad PCB Editor functionality via IPC API
KiCad MCP Server
Automate KiCad with an MCP server, Codex skill, and GUI plugin for inspection, safe edits, ERC/DRC, capability inventory, readiness reports, and fabrication exports.
Model Context Protocol (MCP) server for automated KiCad PCB design
MCP server for AI-assisted PCB design with KiCad
More in Productivity & Workflow
MCP AgentChat - 让 AI Agent 通过 Telegram 与用户实时交互：发送消息、图片，等待用户回复
A Model Context Protocol (MCP) server for Airthings Air Quality Monitor devices.
MCP server for Anki
TypeScript package for reading and searching Apple Notes on macOS via direct SQLite access. Includes markdown conversion, attachment support, and offers a local MCP server!
Verified biotech catalyst calendar (PDUFA/AdComm/trial readouts) anchored to official sources.
Appointment booking platform letting agents check provider availability and create bookings.