Barvinca MCP connects authorized AI assistants to Autodesk Forma (Formerly Autodesk Construction Cloud®, ACC) through a fixed catalog of task-oriented tools and a deterministic execution layer.

Teams can inspect authorized accounts and projects, review operational membership data, query bounded Forma (ACC) Issues, RFIs, Assets, Submittals, Forms, and Form-template metadata, capture verifiable evidence, and review bulk-operation history. Write workflows support adding project users, removing project users, and updating project roles.

The server is designed for consequential administration work rather than one-shot raw API calls. Every write begins with a non-mutating, human-reviewable preflight. Execution is bound to the reviewed plan, and replay protection prevents the same approved intention from being silently dispatched twice.

Operational safety and accountability include:

• OAuth authorization discovery, consent, scoped access, PKCE S256, refresh-token rotation, revocation, and audience-bound access tokens.
• Fixed tools with bounded schemas and pagination; no arbitrary URL/method tool and no generic Autodesk API passthrough.
• Server-side user, account, project, ownership, and scope authorization on every tool path.
• Separate read, review, execution, recovery, and evidence capabilities.
• Durable operation tracking with explicit handling for partial and uncertain upstream outcomes.
• Predictable CREDS estimates and accounting for actionable mutations; read-only discovery and preflight do not charge CREDS.
• Bounded, authenticated evidence for operational review and support.

The primary production execution path runs on Cloudflare Workers and Cloudflare Workflows rather than long-lived application containers. Its execution core is written in Rust, compiled to WebAssembly, and isolated behind a private service boundary. A microkernel-style separation keeps domain and safety semantics in a focused core while the Cloudflare runtime provides orchestration and managed platform capabilities. Containers are reserved for exceptional workloads that genuinely require an operating-system environment; they are not the default MCP or administration executor.

The production server exposes 30 fixed tools. It does not dynamically generate tools from OpenAPI and does not call an AI or LLM provider. Autodesk data is returned only to the user's authorized MCP client; use of that data by the user's chosen client or model is governed by the user's client/provider configuration.

Barvinca is not an Autodesk product. Autodesk, Autodesk Platform Services, Autodesk Forma (ACC), and Autodesk® BIM 360® are trademarks of Autodesk, Inc. Users must have the Autodesk permissions required for the data and operations they request.