com.puppetry/mcp-server

NPM · @PUPPETRY.COM/MCP-SERVER · SCANNED AUG 3

Turn a portrait photo and a script into a talking-head AI video via the Puppetry API.

Available components

+17 this week 57 57 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security87

No malware found by supply-chain analysis.Pass
Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.Partial
No install/post-install scripts declared.Pass
Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree. View diagnostics → Partial

Provenance & Transparency19

Repository check failed: no source repository is declared. See how to fix → View diagnostics → Fail
Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
Clear OSI-approved license (MIT).Pass
Actively maintained (last published 20 days ago).Pass
Security-disclosure policy not yet verified: we couldn't inspect the source repository.Unverified

Schema Quality & AI Usability41

AI-judged instruction clarity (poor).Fail
Context-footprint check failed: tool/resource definitions use about 1264 tokens (~114/item across 11 items; 11 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management27

Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial

Tool Coverage100

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
100% of tool parameters carry a description.Pass

Capabilities100

Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · @puppetry.com/mcp-server

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add com-puppetry-mcp-server -- npx -y @puppetry.com/mcp-server

# add to Codex CLI

codex mcp add com-puppetry-mcp-server -- npx -y @puppetry.com/mcp-server

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-puppetry-mcp-server": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@puppetry.com/mcp-server"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add com-puppetry-mcp-server --command npx --arg -y --arg @puppetry.com/mcp-server

# ~/.hermes/config.yaml

mcp_servers:
  com-puppetry-mcp-server:
    command: "npx"
    args: ["-y", "@puppetry.com/mcp-server"]

// mcp.json

{
  "mcpServers": {
    "com-puppetry-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@puppetry.com/mcp-server"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

2 Aug 26 +42
- Provenance: unverified → fail ▼ security
- Install scripts: unverified → pass ▲ security
- Known CVEs: unverified → partial ▲ security
- Malware scan: unverified → pass ▲ security
- Dependency health: unverified → partial ▲ functional
- Maintenance: unverified → pass ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Stability: unverified → 0.23 ▲ functional
- Schema quality: unverified → poor ▲ functional
- License: unverified → pass ▲ functional
- Licence: MIT functional
31 Jul 26 −7
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
30 Jul 26 −18
- Malware scan: pass → unverified ▼ security
27 Jul 26 40

First indexed and scored.

Show 2 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/@puppetry.com/[email protected]

Provenance none

Ecosystem: npm · Outcome: none

Dependencies 95 packages

95 packages in the resolved dependency tree · 95 deprecated · 29 stale.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 11 exposed · ~1,264 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

animate_audio ~339

Animate a portrait photo with your own audio file. The puppet will lip-sync to the provided audio. Returns a task_id — use get_video_status to check when the video is ready.

Input Output Examples

Name	Type	Req	Description
audio	string	—	Hosted audio URL alias for agent callers.
audioUrl	string	—	Hosted audio URL alias.
audio_url	string	—	URL of the audio file (.mp3, .wav) to lip-sync against.
avatar	string	—	Hosted avatar image URL alias for agent callers.
avatarUrl	string	—	Hosted avatar image URL alias for agent callers.
avatar_url	string	—	Hosted avatar image URL snake_case alias.
expressiveness	number	—	Expression intensity 0.0–2.0. Default: 1.0.
idempotencyKey	string	—	Optional retry key sent as Idempotency-Key.
idempotency_key	string	—	Optional retry key alias sent as Idempotency-Key.
image	string	—	Hosted portrait image URL alias for agent callers.
imageUrl	string	—	Hosted portrait image URL alias.
image_url	string	—	URL of a portrait/face photo to animate.
photo	string	—	Hosted photo image URL alias for agent callers.
photoUrl	string	—	Hosted photo image URL alias for agent callers.
photo_url	string	—	Hosted photo image URL snake_case alias.
portrait	string	—	Deprecated alias for image_url.
portraitUrl	string	—	Hosted portrait image URL alias for agent callers.
portrait_url	string	—	Hosted portrait image URL snake_case alias.

No output schema declared.

No examples provided.

create_puppet ~457

Turn a portrait photo into a realistic talking-head video. Provide an image URL, a text script, and a voice ID. The puppet will speak the script with lip-synced animation. Returns a task_id — use get_video_status to check when the video is ready.

Input Output Examples

Name	Type	Req	Description
avatar	string	—	Hosted avatar image URL alias for agent callers.
avatarUrl	string	—	Hosted avatar image URL alias for agent callers.
avatar_url	string	—	Hosted avatar image URL snake_case alias.
expressiveness	number	—	Expression intensity 0.0–2.0. Higher = more animated facial movements. Default: 1.0.
idempotencyKey	string	—	Optional retry key sent as Idempotency-Key.
idempotency_key	string	—	Optional retry key alias sent as Idempotency-Key.
image	string	—	Hosted portrait image URL alias for agent callers.
imageUrl	string	—	Hosted portrait image URL alias.
image_url	string	—	URL of a portrait/face photo to animate. Must be a clear, front-facing image.
language	string	—	Language code (e.g. "en", "es", "fr"). Default: "en".
photo	string	—	Hosted photo image URL alias for agent callers.
photoUrl	string	—	Hosted photo image URL alias for agent callers.
photo_url	string	—	Hosted photo image URL snake_case alias.
portrait	string	—	Deprecated alias for image_url.
portraitUrl	string	—	Hosted portrait image URL alias for agent callers.
portrait_url	string	—	Hosted portrait image URL snake_case alias.
prompt	string	—	Alias for the text script, useful for prompt-oriented agents.
script	string	—	The text script for the puppet to speak (max 5000 chars).
text	string	—	Alias for the text script to synthesize and animate.
voice	string	—	Voice ID alias for SDK and agent callers.
voiceId	string	—	Voice ID alias.
voice_id	string	—	Voice ID from list_voices. Use list_voices first to find a suitable voice.

No output schema declared.

No examples provided.

get_video_status ~112

Check the status of a Puppetry video generation job. Returns status (queued/processing/completed/failed), progress percentage, and the download URL when complete.

Input Output Examples

Name	Type	Req	Description
id	string	—	Generated video ID alias.
jobId	string	—	Generated video job ID.
job_id	string	—	Generated video job ID alias.
taskId	string	—	Generated video task ID alias from submit responses.
task_id	string	—	The task ID returned by create_puppet or animate_audio.

No output schema declared.

No examples provided.

list_voices ~97

List available AI voices for Puppetry. Returns voice ID, name, language, gender, and preview URL. Over 500 voices across 29 languages. Filter by language or gender.

Input Output Examples

Name	Type	Req	Description
gender	string	—	Filter by gender: "male" or "female". Omit for all.
language	string	—	Filter voices by language code (e.g. "en", "es", "ja"). Omit for all.

No output schema declared.

No examples provided.

puppetry_create_audio_upload_url ~43

Reserve a signed Puppetry-hosted audio upload URL. PUT the audio bytes to uploadUrl, then pass readUrl to puppetry_create_video_from_audio.

Input Output Examples