54
/ 100
1 month ago
glama

bambu-printer-mcp

A Bambu Lab-focused MCP server for controlling Bambu printers, manipulating STL files, and managing end-to-end 3MF print workflows from any MCP-compatible client.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Known vulnerabilities in dependencies: 1 critical, 3 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
🔐
You'll be asked for 3 credentials: BAMBU_CLIENT_KEY, BAMBU_PRINTER_ACCESS_TOKEN, BAMBU_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies1 critical3 high

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

criticalbasic-ftp@5.0.5GHSA-5rq4-664w-9x2c

Basic FTP has Path Traversal Vulnerability in its downloadToDir() method

highbasic-ftp@5.0.5GHSA-6v7q-wjvx-w8wg

basic-ftp: Incomplete CRLF Injection Protection Allows Arbitrary FTP Command Execution via Credentials and MKD Commands

highbasic-ftp@5.0.5GHSA-rp42-5vxx-qpwr

basic-ftp vulnerable to denial of service via unbounded memory consumption in Client.list()

highbasic-ftp@5.0.5GHSA-rpmf-866q-6p89

basic-ftp allows a malicious FTP server to cause client-side denial of service via unbounded multiline control response buffering

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configBAMBU_CLIENT_CERT
🔐 secretBAMBU_CLIENT_KEY
configBAMBU_CLI_FLATTENBambuStudio CLI auto-flatten (=true) — works around upstream profile inheritance bugs.
configBAMBU_MODELp1s # Your printer model: p1s, p1p, x1c, x1e, a1, a1mini, h2d, h2s
🔐 secretBAMBU_PRINTER_ACCESS_TOKENBAMBU_PRINTER_HOST / BAMBU_PRINTER_SERIAL /
configBAMBU_PRINTER_HOST/ BAMBU_PRINTER_SERIAL / BAMBU_PRINTER_ACCESS_TOKEN
configBAMBU_PRINTER_MODELAlias also accepted:
configBAMBU_PRINTER_SERIALBAMBU_PRINTER_HOST / / BAMBU_PRINTER_ACCESS_TOKEN
configBAMBU_PROFILES_ROOTderived from SLICER_PATH No Override path to the BambuStudio Resources/profiles directory used by the CLI flattener. Useful for non-standard installs or dev environments.
configBAMBU_SERIAL01P00A123456789 # Printer serial number (see Finding Your Serial Number below)
configBAMBU_SLICER_PROFILE
configBAMBU_STUDIO_PATHAlias also accepted:
configBAMBU_TEMPLATE_3MF_PATH
configBAMBU_TEMPLATE_DIRList saved templates from the local registry directory. You can override the registry root with .
🔐 secretBAMBU_TOKENyour_access_token # LAN access token from printer touchscreen
configBED_TYPEtextured_plate # Bed plate type: textured_plate, cool_plate, engineering_plate, hot_plate, supertack_plate
configBLENDER_MCP_BRIDGE_COMMANDShell command to invoke your Blender MCP bridge executable
configCAPTURE_BYTES
configMCP_HTTP_ALLOWED_ORIGINSNo Comma-separated list of allowed CORS origins
configMCP_HTTP_HOST127.0.0.1 No HTTP bind address (HTTP transport only)
configMCP_HTTP_JSON_RESPONSEtrue No Return structured JSON alongside text responses
configMCP_HTTP_PATH/mcp No HTTP endpoint path (HTTP transport only)
configMCP_HTTP_PORT3000 No HTTP port (HTTP transport only)
configMCP_HTTP_STATEFULtrue No Enable stateful HTTP sessions
configMCP_TRANSPORTstdio # Options: stdio (default), streamable-http
configNOZZLE_DIAMETER0.4 # Nozzle diameter in mm (default: 0.4)
configPRINTER_HOST192.168.1.100 # IP address of your Bambu printer on the local network
configSLICER_PATH/Applications/BambuStudio.app/Contents/MacOS/BambuStudio
configSLICER_PROFILEOptional: path to a slicer profile/config file
configSLICER_TYPEbambustudio # Options: bambustudio, prusaslicer, orcaslicer, cura, slic3r
configTIMEOUT_MS
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/rowbotik-bambu-printer-mcp-a4ngfb)](https://m8ven.ai/mcp/rowbotik-bambu-printer-mcp-a4ngfb)
commit: 0e6ae619c899351a533dcf98c09a4cbf1299d5b7
code hash: 1e7287a9a258d7632d88c5b9a21152d6848253807c22676c59d6f602e1d82326
verified: 6/11/2026, 12:14:32 PM
view raw JSON →