> ## Documentation Index
> Fetch the complete documentation index at: https://docs.plantengineer.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Security and IT review

> What runs where, who approves changes, and what is logged.

## Runs on your machine

The server is a local AutoCAD plugin on the designer's workstation. It opens no network port: your MCP client starts it as a local program, and only the Windows user running AutoCAD can connect to it. Drawing files are never uploaded; with reading and edit tools, the agent only sees the results it asks for.

## What leaves the workstation

AutoCAD signs each designer in to your company's PlantEngineer address once, then checks every 30 seconds that they still hold a seat. That check sends the machine name, the Windows version, and the plugin versions; it never sends drawings or tool results. If the check cannot reach PlantEngineer for about a minute and a half, agent tools stop until it can. Your administrator assigns and removes seats in PlantEngineer, and removing one takes effect at the next check.

## Your client asks before changes

Every tool tells the MCP client whether it only reads, changes the drawing, or can erase or run code. Claude, Cursor, and VS Code use this to run reads straight away and ask the designer before anything else.

## Read-only in one click

A designer can set AutoCAD to read-only for AI agents with the **AI** button on the PlantEngineer ribbon tab, or with the `PLNT.AGENT` command. Agents can then read drawings but not change them or run code. The setting is per Windows user, stays until it is changed again, and the MCP client cannot change it.

## Code runs with the designer's permissions

The server can also run AutoLISP and C# that the agent writes, for requests no built-in tool covers. Your MCP client shows each script and asks before it runs, and read-only turns code off along with edits.

Code runs inside AutoCAD with the designer's Windows permissions. It can read and change anything the designer can, including files on disk and network shares, and the server does not sandbox it. If your IT review requires that agents cannot change anything, set AutoCAD to read-only.

## Every change on record

Each tool call is logged on the workstation, under `%LOCALAPPDATA%\PlantEngineer\agent\audit`, with the MCP client, the Windows user, the drawing, the tool, and the outcome. For edits, the log also records which objects the agent asked to change, and for code, the full script. AutoCAD's undo works as usual.

## Your model, your choice

Bring the AI provider your company has already approved, including private and on-premise models.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.