system_run_lisp

What system_run_lisp does on AutoCAD MCP Pro

AI agents invoke system_run_lisp to trigger actions in AutoCAD MCP Pro. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call: builds kicked off, notifications sent, workflows started.

Why system_run_lisp is rated High

This tool allows arbitrary AutoLISP code execution within the AutoCAD environment. AutoLISP has broad capabilities including file I/O, system command invocation, and unrestricted CAD manipulation. An AI agent with access to this tool could execute malicious code, modify production drawings without audit trails, delete entities, corrupt files, or trigger destructive CAD operations.

From the tool's definition Tool name 'system_run_lisp' indicates execution of AutoLISP code. AutoLISP is a programming language embedded in AutoCAD that can modify drawings, invoke COM operations, execute external commands, and interact with the file system.

Risk signalsAdmin/system-level operation

The rule that runs system_run_lisp safely

PolicyLayer is an MCP gateway: it sits between your AI agents and AutoCAD MCP Pro, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For system_run_lisp, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "system_run_lisp": {
      "limits": [
        {
          "counter": "system_run_lisp_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about system_run_lisp