# Aspicio (npm · @aspicio/mcp)

DXF and PDF/X-4 for AI agents: structured facts, PNG renders, an interactive in-chat viewer.

- Trust score: 70/100 (medium)
- Change this week: +24
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- remote · `aspicio-api.frontsail.app`: 77/100, [markdown](https://verifymcp.io/servers/frontsail-ai-aspicio/aspicio-api.md), [page](https://verifymcp.io/servers/frontsail-ai-aspicio/aspicio-api)
- npm · `@aspicio/mcp`: 70/100 (this document), [markdown](https://verifymcp.io/servers/frontsail-ai-aspicio/aspicio-mcp.md), [page](https://verifymcp.io/servers/frontsail-ai-aspicio/aspicio-mcp)

## Channel facts

- Registry: `npm`
- Package: `@aspicio/mcp`
- Version: `0.12.0`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 90/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (111 of 115), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (111 of 115), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 0 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 76/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 730 tokens (~121/item across 6 items; 6 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
  - Structured output schemas are declared (50% of tools); any adoption earns full credit.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add frontsail-ai-aspicio -- npx -y @aspicio/mcp
```

### Codex

```bash
codex mcp add frontsail-ai-aspicio -- npx -y @aspicio/mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "frontsail-ai-aspicio": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@aspicio/mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add frontsail-ai-aspicio --command npx --arg -y --arg @aspicio/mcp
```

### Hermes

```yaml
mcp_servers:
  frontsail-ai-aspicio:
    command: "npx"
    args: ["-y", "@aspicio/mcp"]
```

### Other

```json
{
  "mcpServers": {
    "frontsail-ai-aspicio": {
      "command": "npx",
      "args": [
        "-y",
        "@aspicio/mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 70, +34)

- [security regression] Provenance: unverified → fail
- [security improvement] Install scripts: unverified → pass
- [security improvement] Known CVEs: unverified → partial
- [functional regression] Tool coverage: 100 → unverified
- [functional regression] Security disclosure: fail → unverified
- [functional regression] Schema quality: pass → fail
- [functional improvement] MCP protocol: unverified → pass
- [functional improvement] Stability: unverified → 0.23
- [functional improvement] Schema quality: unverified → excellent
- [functional improvement] License: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Maintenance: unverified → pass
- [functional] Licence: MIT
- [functional] Package version: 0.11.1 → 0.12.0

### 2026-08-01 (score 36, +29)

- [security improvement] Malware scan: unverified → pass
- [functional regression] Dependency health: partial → unverified
- [functional improvement] Tool coverage: unverified → 100

### 2026-07-31 (score 7, −21)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 28, −18)

- [security regression] Malware scan: pass → unverified

### 2026-07-27 (score 46)

First indexed and scored.

## MCP tools (6)

### `describe_dxf` (~132 tokens)

Describe a DXF drawing

Return a structured JSON summary of a DXF drawing — units, bounding box, layers (with the color actually drawn), per-type entity counts, and any skipped/unsupported types. Use this to answer structural questions (what layers exist, how many parts, what size, is it to scale) without rendering an image. For a PDF use describe_pdf; if you do not know the format, use describe_doc.

Input parameters:

- `source` (string, required): An http(s) URL, a local file path, or inline DXF text. A PDF is binary: pass it as a URL or a path, never inline.

Output parameters:

- `bounds`: World-space extents, null for an empty drawing
- `entityCount` (integer)
- `entityTypes` (object): Top-level entities per DXF type
- `format` (string): Which format was read ("dxf", "pdf")
- `layers` (array)
- `segmentCount` (integer)
- `size`: Bounding-box size in drawing units, null when empty
- `texts` (array): Unique TEXT/MTEXT strings, blocks included
- `units` (string): Drawing-unit label (e.g. "mm"), "" when unitless
- `unsupported` (object): Per-kind counts of what was skipped

### `render_dxf` (~139 tokens)

Render a DXF to an image

Render a DXF drawing to a PNG image you can look at. Use this to answer visual questions (what does it look like, where is a feature, does it look right) — it returns an image, not text. For structural facts, prefer describe_dxf. For a PDF use render_pdf; if you do not know the format, use render_doc.

Input parameters:

- `source` (string, required): An http(s) URL, a local file path, or inline DXF text. A PDF is binary: pass it as a URL or a path, never inline.
- `width` (integer): PNG width in pixels (default 1200)

### `describe_pdf` (~123 tokens)

Describe a PDF drawing

Return a structured JSON summary of a PDF drawing — units (points), bounding box, layers, per-type entity counts, the text it contains, and what was skipped (images, shadings, transparency). Use this for structural questions about a PDF without rendering it. For a DXF use describe_dxf; if you do not know the format, use describe_doc.

Input parameters:

- `source` (string, required): An http(s) URL, a local file path, or inline DXF text. A PDF is binary: pass it as a URL or a path, never inline.

Output parameters:

- `bounds`: World-space extents, null for an empty drawing
- `entityCount` (integer)
- `entityTypes` (object): Top-level entities per DXF type
- `format` (string): Which format was read ("dxf", "pdf")
- `layers` (array)
- `segmentCount` (integer)
- `size`: Bounding-box size in drawing units, null when empty
- `texts` (array): Unique TEXT/MTEXT strings, blocks included
- `units` (string): Drawing-unit label (e.g. "mm"), "" when unitless
- `unsupported` (object): Per-kind counts of what was skipped

### `render_pdf` (~134 tokens)

Render a PDF to an image

Render a PDF drawing's vector content to a PNG you can look at. Images, shadings, and transparency are not drawn — they are reported by describe_pdf — so this shows line work and text, not a page facsimile. For a DXF use render_dxf; if you do not know the format, use render_doc.

Input parameters:

- `source` (string, required): An http(s) URL, a local file path, or inline DXF text. A PDF is binary: pass it as a URL or a path, never inline.
- `width` (integer): PNG width in pixels (default 1200)

### `describe_doc` (~96 tokens)

Describe a drawing of any supported format

Return a structured JSON summary of a drawing in any supported format (DXF or PDF), detected from its bytes rather than its name. Use this when you do not know which format you have; the reply names the format that was read.

Input parameters:

- `source` (string, required): An http(s) URL, a local file path, or inline DXF text. A PDF is binary: pass it as a URL or a path, never inline.

Output parameters:

- `bounds`: World-space extents, null for an empty drawing
- `entityCount` (integer)
- `entityTypes` (object): Top-level entities per DXF type
- `format` (string): Which format was read ("dxf", "pdf")
- `layers` (array)
- `segmentCount` (integer)
- `size`: Bounding-box size in drawing units, null when empty
- `texts` (array): Unique TEXT/MTEXT strings, blocks included
- `units` (string): Drawing-unit label (e.g. "mm"), "" when unitless
- `unsupported` (object): Per-kind counts of what was skipped

### `render_doc` (~106 tokens)

Render a drawing of any supported format

Render a drawing in any supported format (DXF or PDF) to a PNG you can look at, detected from its bytes rather than its name. Use this when you do not know which format you have.

Input parameters:

- `source` (string, required): An http(s) URL, a local file path, or inline DXF text. A PDF is binary: pass it as a URL or a path, never inline.
- `width` (integer): PNG width in pixels (default 1200)

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/frontsail-ai-aspicio/aspicio-mcp#diagnostics

## Score history

- 2026-08-03: 70
- 2026-08-02: 70
- 2026-08-01: 36
- 2026-07-31: 7
- 2026-07-30: 28
- 2026-07-28: 46
- 2026-07-27: 46

## Links

- npm package: https://www.npmjs.com/package/@aspicio/mcp
- Socket report: https://socket.dev/npm/package/@aspicio/mcp
- Repository: https://github.com/frontsail-ai/aspicio
- Website: https://aspicio.frontsail.app/
- Changelog RSS feed: https://verifymcp.io/servers/frontsail-ai-aspicio/aspicio-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/frontsail-ai-aspicio/aspicio-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/frontsail-ai-aspicio/aspicio-mcp