spline-assets

spline-assets is a command for Claude Code from lesleslie/spline-mcp. It costs 23 tokens per session (537 once invoked), scanned A, original, BSD-3-Clause.

A command for downloading Spline 3D scene files into a local cache, checking that they are valid, and reporting cache contents. It accepts a Spline scene URL or ID.

In plain words
What is it for?
Downloading and validating scenes, viewing cache statistics and stored scenes, skipping validation when requested, or clearing the cache after confirmation.
Why use it?
It prepares scene files for local development and helps detect invalid downloads or unnecessary cached data.

Command for Claude Code

Written for Claude Code: allowed-tools in frontmatter.

Part of the spline plugin — 3 commands shipped together

Good fit Downloading and validating scenes, viewing cache statistics and stored scenes, skipping validation when requested, or clearing the cache after confirmation.

Compare 6 commands from other repositories ↓
Install with agentmods
npx agentmods add commands/lesleslie/spline-mcp/spline-assets
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Clone the repo
git clone --depth 1 https://github.com/lesleslie/spline-mcp

Made for: Claude Code.

Or install spline, the plugin that ships this one along with the rest of its 3 commands.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for spline-assets

README.md
[![agentmods](https://agentmods.dev/badge/commands/lesleslie/spline-mcp/spline-assets/github.svg)](https://agentmods.dev/commands/lesleslie/spline-mcp/spline-assets)
Your own site
<a href="https://agentmods.dev/commands/lesleslie/spline-mcp/spline-assets"><img src="https://agentmods.dev/badge/commands/lesleslie/spline-mcp/spline-assets/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for spline-assets

Your own site · 80×15
<a href="https://agentmods.dev/commands/lesleslie/spline-mcp/spline-assets"><img src="https://agentmods.dev/badge/commands/lesleslie/spline-mcp/spline-assets.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 23 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 537 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00023 $0.00537
Opus 5 $0.00012 $0.00269
Sonnet 5 $0.00005 $0.00107
Haiku 4.5 $0.00002 $0.00054

Measured 9d ago against content hash 78e7e5629b87, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-09, from the pricing page.

Security

Grade A, and why

spline-assets scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

commands/spline-assets.md · 34 lines

What it actually says

/spline-assets

Manage Spline scene assets: download .splinecode payloads into the local cache, validate them, and inspect or clear the cache.

Usage

/spline-assets <scene-url-or-id> [--no-validate] [--clear] [--stats-only]

Arguments:

  • <scene-url-or-id>: full Spline export URL or bare scene ID. Used by the download and validate steps.
  • --no-validate: optional flag. Skip the post-download validation step (not recommended for production use).
  • --clear: optional flag. After reporting the result, call mcp__spline__clear_cache to wipe the local cache. Asks for confirmation before destructive action.
  • --stats-only: optional flag. Skip the download entirely and just report the current cache contents and size.

Workflow

  1. If --stats-only is set: call mcp__spline__get_cache_stats followed by mcp__spline__list_cached_scenes and stop.
  2. Otherwise call mcp__spline__parse_scene_url to resolve the input to a canonical scene ID.
  3. Call mcp__spline__download_scene with the resolved URL to fetch and cache the .splinecode payload.
  4. Unless --no-validate was supplied, call mcp__spline__validate_scene to confirm the cached file is a well-formed Spline payload.
  5. Call mcp__spline__get_cache_stats to report the cache size before/after and mcp__spline__list_cached_scenes to confirm the new scene is present.
  6. If --clear was supplied and the user confirmed destructive intent, call mcp__spline__clear_cache and report the new (empty) stats.

Example

/spline-assets https://prod.spline.design/6Wq1Q7YGyM-iab9i/scene.splinecode

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 9d ago First seen · 34 lines · 23 tokens per session scan A 78e7e5629b87

Subscribe to this mod's changes

spline-assets is a command published in the GitHub repository lesleslie/spline-mcp (4 stars, last pushed 8d ago), licensed BSD-3-Clause. It adds 23 tokens to every session and 537 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.