For engineering teams running Autodesk Vault on their own server

An Autodesk Vault MCP server that reads Vault PLM files, items and change orders under the asking user's permissions

Pexon builds an Autodesk Vault MCP server so Claude, ChatGPT or Copilot can read files, items and change orders from the Vault PLM on the customer's own server. Vault Data API v2 is the REST interface, with a Vault session or a mapped Autodesk ID. Autodesk ships no Vault MCP server as of 15 October 2026.

What we build

A first Autodesk Vault tool list, written as the manifest your IT team signs

Built on what Autodesk documents: folders and folder contents, files and file versions, items, item versions and bill of materials, change orders, lifecycle states, search results. Backends named below are documented resources; "confirmed in blueprint" means the vendor documentation sits behind a login and the resource is checked against your release first.

# autodesk-vault-mcp-server: tool manifest, draft for blueprint week 1
# Every tool runs as the person asking. Nothing is written without a person confirming.
tools:
  get_server_info:    # -> product name and product version of this Vault server
    backend: GET /server-info
    mode: read
  list_folder:        # vault id, folder id -> files and subfolders
    backend: GET /vaults/{vaultId}/folders/{id}/contents
    mode: read
  get_file_version:   # vault id, file version id -> that file version
    backend: GET /vaults/{vaultId}/file-versions/{id}
    mode: read
  get_item_bom:       # vault id, item version id -> child items
    backend: GET /vaults/{vaultId}/item-versions/{id}/bill-of-materials
    mode: read
  list_change_orders: # vault id -> change orders
    backend: GET /vaults/{vaultId}/change-orders
    mode: read
audit: every call logged with user, tool, arguments and the Autodesk Vault response

The manifest is the contract. A question that needs an operation not on it gets a new line and a review, not a wider permission.

Checked 15 October 2026

Autodesk Vault at a glance: interfaces, access and what exists for AI

What we found
InterfacesVault Data API v2 (REST/JSON, docs public)
AuthenticationA Vault session from POST /sessions (Vault credentials) or POST /sessions/win-auth (Windows auth), sent as a bearer token. A three-legged Autodesk ID token works only when Autodesk Account mapping is enabled for that user. GET /server-info does not require a token.
Vendor MCP serverNo vendor server. Autodesk's public MCP list from 15 April 2026 names Fusion, Fusion Data, Revit, Product Help and Fusion Compute. Vault is not on it. Autodesk Assistant in Vault 2027 is an in-product technology preview, not an MCP server.
Vendor AI assistantAutodesk Assistant in Vault 2027, a technology preview inside the Vault client for search, help and some task automation. Autodesk states it provides no commitments or warranties during that phase.
Other connectorsMuhammadTaimur/Vault-MCP is a community server over the Vault REST API. Its sample configuration signs in with one Vault username and password, so the call is not the person asking.

Autodesk (US). Engineering teams that keep released CAD files, items and change orders in an on-premises Autodesk Vault. Autodesk describes Vault as PDM that integrates with Autodesk design tools and other CAD systems.

Why Autodesk Vault is hard for agents

Where a Autodesk Vault connection needs engineering, not configuration

01 · Network

The API lives on your Vault server

Vault Data API v2 is served by the customer's Vault server, or by a Vault Gateway, at /AutodeskDM/Services/api/vault/v2. It is not a public cloud endpoint for an on-premises vault. The connector runs in the network that can already reach that server.

02 · Identity

A session is the user, or it is the wrong user

The spec creates a session with Vault credentials or Windows authentication. Three-legged Autodesk ID is accepted only when Autodesk Account mapping is enabled for that user. A connector that signs in as one shared Vault account answers with that account's rights, which is the failure mode of the community sample.

03 · Spec

Read the spec the server actually serves

The OpenAPI file in Autodesk's public samples is version 2.0.17. Each Vault server also serves GET /openapi-spec.yml. The blueprint uses the installed spec, not the sample file, before a tool is named.

04 · Writes

The same API can upload and create jobs

The spec includes file upload, creating files and folders, and creating jobs, next to the reads. Those operations stay off the manifest. A question that needs a write goes back to the person in Vault.

Autodesk Vault holds the records. An assistant without a governed way in answers from whatever someone pasted into the chat. The connector is the governed way in: named operations, the person's own permissions, every call logged.

What the connector answers, and what it will not do

Questions it answers

  • Which files are in this folder, and which file version is current?
  • What is the bill of materials of this item version?
  • Which change orders are open, and which files do they touch?

What it will not do

  • Upload a file, create a folder, or start a job. Those endpoints exist and stay off the manifest.
  • See a file, item or change order the asking user cannot open in Vault. The call uses that person's session.
  • Sign in as a shared Vault administrator so the assistant can see more than the person who asked.

When this is the wrong page

If the design data is already in Autodesk Fusion, Autodesk ships its own Fusion MCP servers, in tech preview as of 15 April 2026. This page is for on-premises Vault. If the system of record is Teamcenter, Windchill or PRO.FILE, use that connector instead. A community Vault server that signs in as one Vault user is a sandbox, not a production connector.

Start with the Readiness Blueprint.

Two weeks, €4,900 fixed price. Week one agrees the tool list with your Autodesk Vault owners and checks every backend against your release and licence. Week two tests whether a person's own Autodesk Vault permissions reach through the connector. You keep the manifest and a costed build plan, whoever builds it. All prices are net and exclude VAT.

What we need from you: a named Autodesk Vault administrator, a test or sandbox system we may call, and one business owner who can say which questions the assistant should answer first. The first production connector is usually a use-case pilot from €15,000; it runs in your environment, and the code is yours.

Questions Autodesk Vault teams ask before the first tool call

Does Autodesk ship an MCP server for Vault?

Not for Vault data, as of 15 October 2026. Autodesk's public MCP list from 15 April 2026 names Fusion, Fusion Data, Revit, Product Help and Fusion Compute. Autodesk Assistant in Vault 2027 is an in-product technology preview, not an MCP server another client can call.

What can an assistant read from Autodesk Vault?

Folder contents, a file version, an item bill of materials and change orders, through Vault Data API v2 on your Vault server. Upload, create-folder and job endpoints exist in the same spec and stay off the tool list.

Can the assistant see a Vault file the user is not allowed to open?

No. The call uses that person's Vault session, from Vault credentials or Windows authentication. A shared Vault account would answer with the shared account's rights, which is why the connector does not use one.

What does an Autodesk Vault connector cost?

The two-week Readiness Blueprint is fixed at €4,900: the tool list, the installed OpenAPI spec checked against your Vault server, identity tested end to end, and a costed build plan. The production connector is usually a use-case pilot from €15,000. Prices are net, excluding VAT.

Next step

Not a sales call. An architecture call.

Thirty minutes with the engineer who would build the connector, with your Autodesk Vault administrator in the room if you like.