# Tinify image tools (npm · @tinify-dev/mcp)

Compress, resize, crop, and convert images with the Tinify.dev API from any MCP client.

- Trust score: 61/100 (medium)
- Change this week: +55
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `@tinify-dev/mcp`: 61/100 (this document), [markdown](https://verifymcp.io/servers/dev-tinify-mcp/tinify-dev-mcp.md), [page](https://verifymcp.io/servers/dev-tinify-mcp/tinify-dev-mcp)

## Channel facts

- Registry: `npm`
- Package: `@tinify-dev/mcp`
- Version: `0.1.5`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 87/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (96 of 100), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (96 of 100), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 7 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 56/100
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 902 tokens (~180/item across 5 items; 5 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 98/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 92% of tool parameters carry a description.
  - Structured output schemas are declared (100% of tools); any adoption earns full credit.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

**Unverified: 1 category.** A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

## Install

### Claude

```bash
claude mcp add dev-tinify-mcp -- npx -y @tinify-dev/mcp
```

### Codex

```bash
codex mcp add dev-tinify-mcp -- npx -y @tinify-dev/mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "dev-tinify-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@tinify-dev/mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add dev-tinify-mcp --command npx --arg -y --arg @tinify-dev/mcp
```

### Hermes

```yaml
mcp_servers:
  dev-tinify-mcp:
    command: "npx"
    args: ["-y", "@tinify-dev/mcp"]
```

### Other

```json
{
  "mcpServers": {
    "dev-tinify-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@tinify-dev/mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 61, +56)

- [security regression] Provenance: unverified → fail
- [security improvement] Install scripts: unverified → pass
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Malware scan: unverified → pass
- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [functional regression] Security disclosure: fail → unverified
- [functional improvement] Schema quality: unverified → good
- [functional improvement] MCP protocol: unverified → pass
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] License: unverified → pass
- [functional improvement] Tool coverage: unverified → 100
- [functional] Licence: MIT

### 2026-08-01 (score 5, −14)

- [functional regression] Tool coverage: 100 → unverified

### 2026-07-31 (score 19, −7)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-28 (score 26, +20)

- [functional improvement] Tool coverage: unverified → 100
- [functional] First check of Schema quality: unverified
- [functional] First check of Schema quality: fail
- [functional] First check of Tool coverage: 92
- [functional] First check of Schema quality: fail
- [functional] First check of Tool coverage: 100

### 2026-07-27 (score 6)

First indexed and scored.

## MCP tools (5)

### `compress_image` (~216 tokens)

Compress image

Compress a PNG, JPEG, WebP, or AVIF image with Tinify.dev and write the smaller file next to the original (or to output_path). The API never returns more bytes than it received; when it cannot shrink the file the tool says so honestly (optimized: false) instead of pretending.

Input parameters:

- `output_path` (string): Absolute path to write the result. Default: <name>.min.<ext> next to the input. The source image is never overwritten unless output_path points at it AND overwrite is true.
- `overwrite` (boolean): Allow replacing an existing file at the output path. Default false.
- `path` (string, required): Absolute path to the image (png, jpg, jpeg, webp, avif; max 40 MB).
- `quality_mode` (string): balanced (default), best_quality, or lossless. lossless is rejected for JPEG inputs.
- `target_size_kb` (integer): Aim for a result at or below this many kilobytes (beta; server rollout).

Output parameters:

- `change_percent` (number): Byte change in percent; negative means smaller.
- `height` (number|null)
- `optimized` (boolean|null): false when the API could not shrink the file and returned the original bytes; null when the concept does not apply (resize/crop).
- `original_bytes` (number): Input size in bytes.
- `output_path` (string|null): Where the result was written, or null when nothing was written.
- `request_id` (string): Quote this when contacting support.
- `result_bytes` (number): Result size in bytes.
- `saved_bytes` (number): original_bytes - result_bytes.
- `width` (number|null)
- `wrote` (boolean): Whether a file was written.

### `resize_image` (~213 tokens)

Resize image

Resize a PNG, JPEG, WebP, or AVIF image with Tinify.dev by width, height, or scale, and write the result next to the original (or to output_path). At least one of width, height, or scale is required. The source image is never overwritten silently.

Input parameters:

- `height` (integer): Target height in pixels.
- `keep_aspect_ratio` (boolean)
- `output_path` (string): Absolute path to write the result. Default: <name>.min.<ext> next to the input. The source image is never overwritten unless output_path points at it AND overwrite is true.
- `overwrite` (boolean): Allow replacing an existing file at the output path. Default false.
- `path` (string, required): Absolute path to the image (png, jpg, jpeg, webp, avif; max 40 MB).
- `scale` (number): Scale factor, e.g. 0.5 halves both dimensions.
- `width` (integer): Target width in pixels.

Output parameters:

- `change_percent` (number): Byte change in percent; negative means smaller.
- `height` (number|null)
- `optimized` (boolean|null): false when the API could not shrink the file and returned the original bytes; null when the concept does not apply (resize/crop).
- `original_bytes` (number): Input size in bytes.
- `output_path` (string|null): Where the result was written, or null when nothing was written.
- `request_id` (string): Quote this when contacting support.
- `result_bytes` (number): Result size in bytes.
- `saved_bytes` (number): original_bytes - result_bytes.
- `width` (number|null)
- `wrote` (boolean): Whether a file was written.

### `crop_image` (~196 tokens)

Crop image

Crop a PNG, JPEG, WebP, or AVIF image with Tinify.dev to the given rectangle and write the result next to the original (or to output_path). The source image is never overwritten silently.

Input parameters:

- `height` (integer, required): Crop height in pixels.
- `output_path` (string): Absolute path to write the result. Default: <name>.min.<ext> next to the input. The source image is never overwritten unless output_path points at it AND overwrite is true.
- `overwrite` (boolean): Allow replacing an existing file at the output path. Default false.
- `path` (string, required): Absolute path to the image (png, jpg, jpeg, webp, avif; max 40 MB).
- `width` (integer, required): Crop width in pixels.
- `x` (integer, required): Left edge of the crop rectangle in pixels.
- `y` (integer, required): Top edge of the crop rectangle in pixels.

Output parameters:

- `change_percent` (number): Byte change in percent; negative means smaller.
- `height` (number|null)
- `optimized` (boolean|null): false when the API could not shrink the file and returned the original bytes; null when the concept does not apply (resize/crop).
- `original_bytes` (number): Input size in bytes.
- `output_path` (string|null): Where the result was written, or null when nothing was written.
- `request_id` (string): Quote this when contacting support.
- `result_bytes` (number): Result size in bytes.
- `saved_bytes` (number): original_bytes - result_bytes.
- `width` (number|null)
- `wrote` (boolean): Whether a file was written.

### `convert_image` (~184 tokens)

Convert image format

Convert an image to AVIF, WebP, JPEG, or PNG with Tinify.dev (beta endpoint; may not be enabled on every account yet). Writes <name>.min.<new-ext> next to the original unless output_path is given. Converting to the same format is rejected by the API (same_format_conversion).

Input parameters:

- `format` (string, required): Target format.
- `output_path` (string): Absolute path to write the result. Default: <name>.min.<ext> next to the input. The source image is never overwritten unless output_path points at it AND overwrite is true.
- `overwrite` (boolean): Allow replacing an existing file at the output path. Default false.
- `path` (string, required): Absolute path to the image (png, jpg, jpeg, webp, avif; max 40 MB).
- `quality_mode` (string)

Output parameters:

- `change_percent` (number): Byte change in percent; negative means smaller.
- `height` (number|null)
- `optimized` (boolean|null): false when the API could not shrink the file and returned the original bytes; null when the concept does not apply (resize/crop).
- `original_bytes` (number): Input size in bytes.
- `output_path` (string|null): Where the result was written, or null when nothing was written.
- `request_id` (string): Quote this when contacting support.
- `result_bytes` (number): Result size in bytes.
- `saved_bytes` (number): original_bytes - result_bytes.
- `width` (number|null)
- `wrote` (boolean): Whether a file was written.

### `get_usage` (~32 tokens)

Get account usage

Show the Tinify.dev account's current billing-period usage: plan, period, operations included, used, and remaining.

Output parameters:

- `included` (number)
- `period_end` (string)
- `period_start` (string)
- `plan` (string)
- `remaining` (number)
- `request_id` (string)
- `reserved` (number)
- `used` (number)

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/dev-tinify-mcp/tinify-dev-mcp#diagnostics

## Score history

- 2026-08-03: 61
- 2026-08-02: 61
- 2026-08-01: 5
- 2026-07-31: 19
- 2026-07-30: 26
- 2026-07-28: 26
- 2026-07-27: 6

## Links

- npm package: https://www.npmjs.com/package/@tinify-dev/mcp
- Socket report: https://socket.dev/npm/package/@tinify-dev/mcp
- Repository: https://github.com/Stianlars1/tinify-mcp
- Website: https://tinify.dev/mcp
- Changelog RSS feed: https://verifymcp.io/servers/dev-tinify-mcp/tinify-dev-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/dev-tinify-mcp/tinify-dev-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/dev-tinify-mcp/tinify-dev-mcp