afk.ai Auto-Rig
NPM · AFK-RIG
Auto-rig 3D models (GLB, glTF, FBX) with skeleton, skin weights and 170+ animations via afk.ai.
Available components
Last scanned (3 hours ago)
Scores higher than 30% of npm servers
Category Design and Media
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security63
- No malware found by supply-chain analysis.Pass
- Known CVEs could not be checked: the version this server declares is not published in its registry.Unverified
- No install/post-install scripts declared.Pass
- Dependency health could not be checked: the version this server declares is not published in its registry.Unverified
Provenance & Transparency19
- Repository check failed: no source repository is declared. See how to fix → View diagnostics → Fail
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 0 days ago).Pass
- Security-disclosure policy not yet verified: we couldn't inspect the source repository.Unverified
Schema Quality & AI Usability53
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 2840 tokens (~284/item across 10 items; 10 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management10
- Stability observed for 3 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage98
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 94% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 10 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 11 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 5 Nov 26 −10
- Known CVEs: pass → unverified ▼ security
- Tool safety: pass → unverified ▼ security
- Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. security
- Capabilities: pass → unverified ▼ functional
- Dependency health: 0.85 → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- Stability: unverified → 0.10 ▲ functional
- First check of Schema quality: unverified functional
- Package version: 1.3.2 → 1.3.5 functional
- Package version: 1.3.2 → 1.3.4 functional
- 3 Nov 26 +15
- Malware scan: unverified → pass ▲ security
- 2 Nov 26 46
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Analysed npm/afk-rig@1.3.5
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
adjust_animation ~427
Change animations of a rigged .glb as afk.ai/rig's Adjust > Animation does, and write a new .glb: turn parts of the body (controls such as armsUp, posture, headUp in degrees), change how it moves (speed, motion, bounce, sway, lag, lookAhead, width, lift, part:arms...), move a hand, foot or the body (positions, the limb reaching for it), and for humans keep the arms out of the body. inspect_rig lists the controls this body type has, with their ranges. Reports each changed animation's ground [before, after] (and arms-through-body frames with keep_arms_out). Runs on this computer, free.
| Name | Type | Req | Description |
|---|---|---|---|
| animations | – | – | the animations to change: all (default) or names |
| controls | object | – | control id -> value, e.g. {"armsUp": 15, "speed": 1.2}. Turns are degrees; movement multiplies (1 leaves it) except lag (seconds), lookAhead (0-1) and width (model units) |
| file | string | yes | a rigged .glb (absolute, or relative to the server's working directory): one rig_model wrote, or any model on afk.ai's skeletons |
| keep_arms_out | number | – | humans: turn the arms, spine and neck as little as possible so arms and hands stay out of the body (1: all of the correction) |
| output | string | – | where to write the result (default: the next free <model>-v2.glb, -v3... beside it; never the input) |
| positions | object | – | hand_l, foot_r... or body: moved by an offset, the limb bending to reach it (feet stay planted) |
| ranges | object | – | only part of each animation for a control or position id (seconds), eased in and out |
| type | string | – | the body type, when it can't be told from the file (afk.ai's files say) |
No output schema declared.
No examples provided.
fix_spot ~298
Fix the skin weights of one spot of a rigged .glb (afk.ai/rig's Fix a spot) and write a new .glb. Pick the spot with where (every given condition must hold), then: follow (it moves with the wrong part: give it to bone), smooth (pinched, jagged or creased: strength light, medium or strong) or redo (it tears or sticks to another part: its weights worked out again from the nearest bones). Reports the bones the spot follows [before, after]. Runs on this computer, free.
| Name | Type | Req | Description |
|---|---|---|---|
| bone | string | – | follow: the bone the spot should move with |
| file | string | yes | a rigged .glb (absolute, or relative to the server's working directory): one rig_model wrote, or any model on afk.ai's skeletons |
| fix | string | yes | – |
| output | string | – | where to write the result (default: the next free <model>-v2.glb, -v3... beside it; never the input) |
| strength | string | – | smooth: how far (default medium) |
| type | string | – | the body type, when it can't be told from the file (afk.ai's files say) |
| where | – | yes | the spot: near a joint, moving with bones, a mesh, a piece, a box or a sphere (all given must hold) |
No output schema declared.
No examples provided.
fix_stretching ~184
Find where the skin of a rigged .glb stretches or tears across its animations and heal it (afk.ai/rig's Fix stretching), writing a new .glb. Reports torn skin [before, after] overall and per animation. Runs on this computer, free.
| Name | Type | Req | Description |
|---|---|---|---|
| animations | – | – | the animations to check and heal across (default all) |
| file | string | yes | a rigged .glb (absolute, or relative to the server's working directory): one rig_model wrote, or any model on afk.ai's skeletons |
| output | string | – | where to write the result (default: the next free <model>-v2.glb, -v3... beside it; never the input) |
| type | string | – | the body type, when it can't be told from the file (afk.ai's files say) |
No output schema declared.
No examples provided.
get_account ~51
How many rigs the account can make (rigs_left: its free rigs this month, then its Lifetime API credit this month with afk.ai Lifetime, then its API credits), and its credit balance for characters.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
image_to_character ~268
Make a rigged, animated 3D character from a picture (.png, .jpg or .webp of one character, whole; up to 20 MB): a 3D model made from the picture, rigged with every animation for its body type, written as a .glb. Takes about 2 to 3 minutes (up to 5 when the GPU is starting) and costs $0.25 of API credits, refunded if it fails. Returns where the file was written, what was charged and the credits left.
| Name | Type | Req | Description |
|---|---|---|---|
| animations | – | – | all (default), none (just the rig), or animation names from list_body_types |
| keep_arms_out | boolean | – | humans: keep the arms out of the body in every animation, on this computer after the download, as afk.ai/rig does (seconds to a minute) |
| output | string | – | where to write the rigged .glb (default: <picture>.rigged.glb next to it) |
| path | string | yes | the picture (absolute, or relative to the server's working directory) |
| type | string | – | what the character is: human for anything on two legs, fox for dogs/cats/wolves, horse for hoofed animals, and so on |
No output schema declared.
No examples provided.
inspect_rig ~260
Measure a rigged .glb: its bones (names, parents, positions), meshes, height, the animations with problems, worst first, each with the moment it's worst at to render (ground: % of height its lowest point goes below the rest floor or stays above it, and which bone; stretching: % of skin torn at worst; humans: frames with a forearm or hand through the body, and the deepest) and the animation controls adjust_animation takes. Flying, swimming and other animations that leave the floor on purpose are marked in_the_air and not judged against it. Runs on this computer, free: about a second, a few for a human's 196 animations.
| Name | Type | Req | Description |
|---|---|---|---|
| animations | array | – | only these animations, each listed whether it has a problem or not |
| file | string | yes | a rigged .glb (absolute, or relative to the server's working directory): one rig_model wrote, or any model on afk.ai's skeletons |
| limit | integer | – | at most this many animations with problems, worst first (default 40; the rest are named) |
| type | string | – | the body type, when it can't be told from the file (afk.ai's files say) |
No output schema declared.
No examples provided.
list_body_types ~37
The body types a model can be rigged as, and (with type) that type's animations.
| Name | Type | Req | Description |
|---|---|---|---|
| type | string | – | – |
No output schema declared.
No examples provided.
render_rig ~415
Draw a rigged .glb as an image to look at: at rest, or posed at a moment of one of its animations, with its skeleton over it (blue: its left, red: its right, orange: the middle) and rulers in model units. Pinkish-red skin is the inside of the mesh showing (a tear, or a part pushed through another). Also returns every joint drawn in the image with its pixel position and, posed, how far its lowest point is from the rest floor (lowest_point_vs_floor, % of height). Runs on this computer, free.
| Name | Type | Req | Description |
|---|---|---|---|
| animation | string | – | pose it in this animation (inspect_rig lists them); default: at rest |
| file | string | yes | a rigged .glb (absolute, or relative to the server's working directory): one rig_model wrote, or any model on afk.ai's skeletons |
| focus | – | – | zoom on a joint (name) or a point [x, y, z] |
| joints | – | – | joints to draw (default main: no fingers or tips) |
| radius | number | – | the zoomed area's radius in model units (default 15% of the height) |
| save_to | string | – | also write the PNG here |
| size | integer | – | pixels per view (default 640) |
| time | number | – | seconds into the animation (default: its middle; inspect_rig gives each problem's worst moment) |
| type | string | – | the body type, when it can't be told from the file (afk.ai's files say) |
| views | array | – | default front and left (front looks from +Z, so the model's left is on the image's right) |
| weights | boolean|string | – | true: color the skin by the bone each part follows; a bone name: how much each part follows that bone (blue none, red all) |
| xray | boolean | – | the mesh see-through, to see joints inside it |
No output schema declared.
No examples provided.
rig_model ~235
Auto-rig a 3D model file (.glb, .gltf with everything embedded, or .fbx; up to 200 MB) and write the rigged .glb with its animations. Takes about a minute. Returns where the file was written.
| Name | Type | Req | Description |
|---|---|---|---|
| animations | – | – | all (default), none (just the rig), or animation names from list_body_types |
| facing | – | – | which way the model faces, in degrees about its up axis; auto works it out |
| keep_arms_out | boolean | – | humans: keep the arms out of the body in every animation, on this computer after the download, as afk.ai/rig does (seconds to a minute) |
| output | string | – | where to write the rigged .glb (default: <model>.rigged.glb next to it) |
| path | string | yes | the model file (absolute, or relative to the server's working directory) |
| type | string | – | what the model is: human for anything on two legs, fox for dogs/cats/wolves, horse for hoofed animals, and so on |
No output schema declared.
No examples provided.
rig_status ~37
A rig's status by id (rig_model waits for its rig, so this is for rigs started elsewhere).
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | – |
No output schema declared.
No examples provided.
How do I install the afk.ai Auto-Rig MCP server?
afk.ai Auto-Rig runs locally as an npm package, launched with npx -y afk-rig. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · afk-rig
claude mcp add dyoburon-afk-rig -- npx -y afk-rig
What is the afk.ai Auto-Rig MCP server?
afk.ai Auto-Rig is an MCP server listed in the public MCP registry as io.github.dyoburon/afk-rig. Auto-rig 3D models (GLB, glTF, FBX) with skeleton, skin weights and 170+ animations via afk.ai. This page covers its npm package (afk-rig).
Is the afk.ai Auto-Rig MCP server safe to use?
afk.ai Auto-Rig scores 51 out of 100 on VerifyMCP. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the afk.ai Auto-Rig MCP server expose?
afk.ai Auto-Rig exposes 10 tools: rig_model, image_to_character, get_account, list_body_types, rig_status, and 5 more. Their descriptions and schemas cost roughly 2,212 tokens of context every time the server is loaded.
Is the afk.ai Auto-Rig MCP server still maintained?
afk.ai Auto-Rig is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the afk.ai Auto-Rig MCP server under?
afk.ai Auto-Rig declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.