# io.github.GarAlex/promoshot (oci · ghcr.io/garalex/promoshot-mcp)

Headless MCP: author and render PromoShot .promo video projects (stills, GIFs, video).

- Trust score: 45/100 (low)
- Change this week: +3
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-10-19

## Components

- oci · `ghcr.io/garalex/promoshot-mcp`: 45/100 (this document), [markdown](https://verifymcp.io/servers/garalex-promoshot/ghcr-io-garalex-promoshot-mcp.md), [page](https://verifymcp.io/servers/garalex-promoshot/ghcr-io-garalex-promoshot-mcp)

## Channel facts

- Registry: `oci`
- Package: `ghcr.io/garalex/promoshot-mcp`
- Version: `v0.3.10`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-10-19.

- **Supply Chain Security**: 0/100
  - No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.
  - Known CVEs could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.
  - Install-script risk not yet assessed.
  - Dependency health could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.
- **Provenance & Transparency**: 32/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - License check failed: no license is declared.
  - Actively maintained (last published 0 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 63/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 5275 tokens (~202/item across 26 items; 26 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 70/100
  - Stability observed for 21 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 95/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 84% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - We read all 26 captured tool definition(s), and no name or description among them implies an irreversible operation.
  - An AI judge read all 27 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

**Unverified: 1 category.** A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

## Install

### How do I install the io.github.GarAlex/promoshot MCP server?

io.github.GarAlex/promoshot runs locally as a container image, launched with docker run --rm -i ghcr.io/garalex/promoshot-mcp:v0.3.10. Ready-made configuration for Claude, Cursor, VS Code, Codex and 3 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add garalex-promoshot -- docker run --rm -i ghcr.io/garalex/promoshot-mcp:v0.3.10
```

### Cursor

```json
{
  "mcpServers": {
    "garalex-promoshot": {
      "command": "docker",
      "args": [
        "run",
        "--rm",
        "-i",
        "ghcr.io/garalex/promoshot-mcp:v0.3.10"
      ]
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "garalex-promoshot": {
      "command": "docker",
      "args": [
        "run",
        "--rm",
        "-i",
        "ghcr.io/garalex/promoshot-mcp:v0.3.10"
      ]
    }
  }
}
```

### Codex

```bash
codex mcp add garalex-promoshot -- docker run --rm -i ghcr.io/garalex/promoshot-mcp:v0.3.10
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "garalex-promoshot": {
      "type": "local",
      "command": [
        "docker",
        "run",
        "--rm",
        "-i",
        "ghcr.io/garalex/promoshot-mcp:v0.3.10"
      ],
      "enabled": true
    }
  }
}
```

### Hermes

```yaml
mcp_servers:
  garalex-promoshot:
    command: "docker"
    args: ["run", "--rm", "-i", "ghcr.io/garalex/promoshot-mcp:v0.3.10"]
```

### Netclaw

```json
{
  "McpServers": {
    "garalex-promoshot": {
      "Transport": "stdio",
      "Command": "docker",
      "Arguments": [
        "run",
        "--rm",
        "-i",
        "ghcr.io/garalex/promoshot-mcp:v0.3.10"
      ]
    }
  }
}
```

### Other

```json
{
  "mcpServers": {
    "garalex-promoshot": {
      "command": "docker",
      "args": [
        "run",
        "--rm",
        "-i",
        "ghcr.io/garalex/promoshot-mcp:v0.3.10"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-10-19 (score 45, 0)

- [security regression] Tool safety: pass → unverified
- [security regression] Stability: 0.67 → unverified
- [functional regression] Capabilities: pass → unverified
- [functional regression] Tool coverage: 100 → unverified
- [functional] First check of Schema quality: unverified
- [functional] Package version: v0.3.7 → v0.3.10

### 2026-10-18 (score 45, +1)

- [security regression] Tool safety: pass → unverified
- [security regression] Stability: 0.63 → unverified
- [functional regression] Capabilities: pass → unverified
- [functional regression] Tool coverage: 100 → unverified
- [functional] First check of Schema quality: unverified
- [functional] Schema quality: good → excellent
- [functional] Package version: v0.3.4 → v0.3.7
- [functional] Package version: v0.3.4 → v0.3.6
- [functional] Package version: v0.3.4 → v0.3.5

### 2026-10-15 (score 44, +1)

No change was recorded against any check on this day. Stability & Change Management went from 53 to 57. That category is still filling its 30-day observation window: 16 days of observed history at the previous scan, 17 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-13 (score 43, +1)

No change was recorded against any check on this day. Stability & Change Management went from 47 to 50. That category is still filling its 30-day observation window: 14 days of observed history at the previous scan, 15 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-12 (score 42, +1)

No change was recorded against any check on this day. Stability & Change Management went from 40 to 47. That category is still filling its 30-day observation window: 12 days of observed history at the previous scan, 14 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-09 (score 41, +2)

No change was recorded against any check on this day. Stability & Change Management went from 27 to 37. That category is still filling its 30-day observation window: 8 days of observed history at the previous scan, 11 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-06 (score 39, +1)

No change was recorded against any check on this day. Stability & Change Management went from 20 to 27. That category is still filling its 30-day observation window: 6 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-03 (score 38, +1)

No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.

## MCP tools (26)

### `promo_validate` (~154 tokens)

Decode a project with the renderer's own parser and say whether it renders as written. NOT OK leads with what will not render or has no effect — a field nothing reads (with the name that was meant), a value that does nothing where it is, missing media; ok means it renders, and any warnings name what the renderer adjusts. Validating costs nothing — do it before asking for a render. A mid-composition thumbnail comes attached — glance at it.

Input parameters:

- `preview` (boolean): Attach an inline thumbnail of the composition (default true); the same image lands at <Name> Exports/preview.png beside the project
- `project` (string, required): Path to the .promo project folder (metadata.json + Resources/)

### `promo_inspect` (~96 tokens)

What a project contains — canvas, duration, layers by kind with their ids, resources (a file found in Resources/ counted as undeclared) — then any layer whose media is missing or that cannot render, the resources nothing uses, and `@name` colours no palette defines. Confirm a composition matches what you meant before rendering it.

Input parameters:

- `project` (string, required): Path to the .promo project folder (metadata.json + Resources/)

### `promo_schema` (~39 tokens)

The authoring subset of the .promo format plus four complete, validated recipes. Read this once before authoring; promo_schema_full is the whole format.

### `promo_schema_types` (~101 tokens)

The format as a JSON Schema, types only, GENERATED from the parser's own structs — fill a structured object against this instead of freehanding JSON; the prose lives in promo_schema. 80 KB whole: pass `types` for just the definitions you need.

Input parameters:

- `types` (array): Type names — ProjectLayer, ProjectLayerKeyframe, CaptionStyle, … — for just those definitions and the names they reference; omit for the whole schema

### `promo_schema_full` (~166 tokens)

The whole .promo format, from the same single file the engine compiles in — sprites, masks, motion paths, duration rules, waits, gradients, palette roles and all. 73 KB whole: pass `topics` to take only what this piece needs, no section over 5 KB.

Input parameters:

- `topics` (array): "core" for the essentials, and any word a section's heading names: keyframe, placement, timing, transition, swap, motion, viewport, caption, tracking, reveal, background, palette, frame, look, mask,…

### `promo_render_still` (~176 tokens)

Render one PNG at a moment and return the path written, never the bytes — SEE the composition at one time before rendering the whole. Writes beside the project, in <Name> Exports/, unless `out` names a path.

Input parameters:

- `out` (string): Output file (default: <Name> Exports/still-<time>s.png beside the project)
- `project` (string, required): Path to the .promo project folder (metadata.json + Resources/)
- `proxy` (string): auto (default) reads a built tier-1 proxy when the output fits it; on builds missing proxies first; off never reads one. A full-size render never does.
- `size` (string): WxH, keeping the canvas's aspect (default: the canvas)
- `time` (number): Seconds (default 0)

### `promo_render_frames` (~358 tokens)

LOOK at the composition: moments rendered to PNGs and tiled into one contact sheet, attached to this reply as an image. Bare, it samples 12 moments across the whole piece — the fastest way to catch an off-centre card, an empty frame or a mis-aimed viewport. Name `times` for exact moments, `sample` for a count spread over a from/to range, or a from/to/fps range for every frame in it (240 at most). Frames from this tool's own previous call in the same folder are replaced, never mixed.

Input parameters:

- `fps` (number): Every frame at this rate over the range — an export, not a look (default: the project's rate when a range is given without `sample`)
- `from` (number): Range start (default 0)
- `outDir` (string): Output directory (default: <Name> Exports/frames beside the project)
- `preview` (boolean): Attach the contact sheet to the reply (default true)
- `project` (string, required): Path to the .promo project folder (metadata.json + Resources/)
- `proxy` (string): auto (default) reads a built tier-1 proxy when the output fits it; on builds missing proxies first; off never reads one. A full-size render never does.
- `sample` (integer): How many moments to spread across the range, both ends included (default 12 when neither times nor a range is given)
- `size` (string): WxH, keeping the canvas's aspect (default: the canvas)
- `times` (array): Exact seconds to render, inside the composition — rendered in time order
- `to` (number): Range end (default: the end)

### `promo_render_video` (~225 tokens)

Render the whole composition, audio mixed — needs ffmpeg on PATH. H.264 in an mp4 at the project's export size by default, ProRes for an edit-ready master. Returns the path written.

Input parameters:

- `alpha` (boolean): Render over nothing and keep the frames' alpha — ProRes 4444 in a .mov.
- `codec` (string): h264 in an mp4 (default); ProRes 422 HQ or 4444 want a .mov out path
- `fps` (number): Default: the project's own, else 30
- `out` (string): Output file (default: <Name> Exports/ beside the project)
- `project` (string, required): Path to the .promo project folder (metadata.json + Resources/)
- `proxy` (string): auto (default) reads a built tier-1 proxy when the output fits it; on builds missing proxies first; off never reads one. A full-size render never does.
- `size` (string): WxH (default: the project's export size, else the canvas)

### `promo_render_gif` (~164 tokens)

Render a looping GIF — cheaper to look at than an mp4, and the format for a README or a chat message. Returns the path written.

Input parameters:

- `fps` (number): Default: the project's GIF rate (gifExportFps, 10 unless set)
- `out` (string): Output file (default: <Name> Exports/ beside the project)
- `project` (string, required): Path to the .promo project folder (metadata.json + Resources/)
- `proxy` (string): auto (default) reads a built tier-1 proxy when the output fits it; on builds missing proxies first; off never reads one. A full-size render never does.
- `size` (string): WxH, keeping the canvas's aspect (default: the canvas)

### `promo_proxy` (~95 tokens)

Build tier-1 proxies (960 px long edge, every frame a keyframe) for every video resource in a project, in the proxy cache outside the package. Stills, frames and small renders then read them by default (proxy: auto) — what makes an hour-long 4K source scrub and render like a short one.

Input parameters:

- `project` (string, required): Path to the .promo project folder (metadata.json + Resources/)

### `promo_workspace` (~32 tokens)

The folder this machine keeps assistant-authored projects in, created if it is missing. Create new .promo folders here.

### `promo_media_probe` (~134 tokens)

The facts of one source file or SEVERAL, before composing with them: container, duration, streams — codec, size, fps, display rotation, channels — as distilled JSON; on a .glb, its material slots, clips and bounds. Each answer carries the `resource` entry that file becomes, ready to paste into `resources` with its pixel size already measured — which is what a `placement` rule needs to resolve against anything other than a square.

Input parameters:

- `file` (string): One path
- `files` (array): Several paths at once; the answer is keyed by the path asked for

### `promo_media_turntable` (~131 tokens)

Eyes on a model: a .glb rendered from N yaws round it, tiled into one PNG contact sheet with each cell's yaw. Look at this before choosing a camera for a model layer. (`promo_media_probe` on a .glb names its material slots, clips and bounds.)

Input parameters:

- `count` (integer): Yaws round it (default 6, at most 64)
- `file` (string, required): The .glb
- `out` (string): Output PNG (default: the workspace folder)
- `size` (integer): Cell size in px (default 320)

### `promo_media_filmstrip` (~86 tokens)

Eyes on the footage: N evenly spaced frames tiled into one PNG contact sheet, sampled times returned so a cell maps to a moment. Look at this before deciding what a clip shows.

Input parameters:

- `count` (number): Frames (default 12, max 48)
- `file` (string, required)
- `out` (string): Output PNG (default: the workspace folder)

### `promo_media_silences` (~76 tokens)

Ears on the footage: where the sound is NOT — silence spans and their inverse, the sound spans an edit actually wants. Cuts and captions land on these boundaries.

Input parameters:

- `file` (string, required)
- `minSeconds` (number): Default 0.35
- `thresholdDb` (number): Default -35

### `promo_media_scenes` (~89 tokens)

Eyes for CUTS: per-frame scene-change scores distilled to cut times and the shots between them — the footage-first answer when a clip has no silence gaps to cut on. Scores are ffmpeg's scene score (0..1, motion-suppressed); 0.4 catches hard cuts.

Input parameters:

- `file` (string, required)
- `threshold` (number): Default 0.4

### `promo_transcribe` (~65 tokens)

Ears for WORDS: a transcript with timings, the draft captions are cut from. Headless this needs whisper.cpp's whisper-cli on PATH and WHISPER_MODEL set; without them an agent cannot transcribe and the refusal says so.

Input parameters:

- `file` (string, required)

### `promo_init` (~210 tokens)

Create a project folder: metadata.json boilerplate, canvas, palette, a background layer, ids minted. The file it writes is ordinary metadata.json — hand-edit it freely afterwards; the schema stays the source of truth. Never overwrites. A thumbnail comes attached.

Input parameters:

- `canvas` (string, required): "1920x1080" (or {width, height})
- `id` (string): Your own short project id; unnamed mints a UUID. The background layer is always "bg".
- `name` (string)
- `palette` (object): Named colours: {"canvas": "10182B", "text": "F3F5FF"} (or [{name, colorHex}]). "canvas" becomes the background.
- `preview` (boolean): Attach an inline thumbnail of the composition (default true); the same image lands at <Name> Exports/preview.png beside the project
- `project` (string, required): Path to the .promo project folder (metadata.json + Resources/)

### `promo_upsert_layer` (~490 tokens)

SCAFFOLD one layer — image, video or caption — with a placement, a fadeIn, a device/border frame. Media is copied in, sizes and durations probed, the composition re-stretched every call. Pass an existing id to UPDATE: only the fields you pass change, placement merges into the first keyframe, hand-added keyframes survive. This is the scaffold, not the whole format: motion and viewport ride promo_upsert_keyframe; transitions beyond fadeIn, swaps, waits, deletes and reorders are promo_apply commands. A thumbnail sampled at the touched layer's midpoint comes attached — LOOK at it before the next edit.

Input parameters:

- `captionText` (string)
- `duration` (number): Seconds (default: a video's own length, else 3)
- `fadeIn` (number): Seconds
- `file` (string): Image/video to copy in — required to create, optional on update (a repoint)
- `fontSize` (number): Caption points
- `frame` (object): Resource dressing: {kind: "device"|"border", material, tiltY, borderWidth, cornerRadius} — define @edge in the palette when you frame
- `id` (string): An existing layer's id makes this an UPDATE; on create, your own short id ("card") is used verbatim
- `kind` (string, required)
- `lineHeight` (number): Line spacing as a multiple of font size (default 1.25); ~1.05 for a stacked headline
- `name` (string)
- `placement` (object): {height|width|mode, anchor, offset} — media sizes too; a caption takes anchor and offset only
- `preview` (boolean): Attach an inline thumbnail of the composition (default true); the same image lands at <Name> Exports/preview.png beside the project
- `project` (string, required): Path to the .promo project folder (metadata.json + Resources/)
- `resourceId` (string): Your own short id for the created resource; unnamed mints a UUID
- `startTime` (number)
- `tracking` (number): Letter spacing in points — open a small eyebrow out (+6), tighten a big headline (-1.4)
- `weight` (string): The face's weight; heavier than bold is where a store headline lives

### `promo_upsert_keyframe` (~356 tokens)

MOTION in the format's own language: create or merge ONE keyframe on a layer. A second placement keyframe is a push-in, viewport keyframes are a Ken Burns ride, colorHex ramps a background. Pass an existing keyframe id to UPDATE — only the fields you pass change. Creating without transitionDuration ramps from the previous keyframe (a stated 0 holds). Swaps, waits and motion paths: promo_apply's upsertKeyframe carries any keyframe field.

Input parameters:

- `colorHex` (string): Background layers only — ramps the colour
- `easing` (string)
- `fontSize` (number): Caption points
- `id` (string): An existing keyframe's id makes this an UPDATE; on create, your own short id ("k1") is used verbatim
- `layer` (string, required): The layer's id — promo_inspect lists them
- `opacity` (number)
- `placement` (object): {height|width|mode, anchor, offset} — a stored rule, re-resolved on every read
- `preview` (boolean): Attach an inline thumbnail of the composition (default true); the same image lands at <Name> Exports/preview.png beside the project
- `project` (string, required): Path to the .promo project folder (metadata.json + Resources/)
- `tiltX` (number)
- `tiltY` (number)
- `time` (number): Seconds, layer-local — required to create
- `transitionDuration` (number): Seconds of ramp INTO this keyframe
- `viewport` (array): [x, y, w, h] window onto the source, unit coordinates
- `zoom` (number)

### `promo_apply` (~348 tokens)

The whole vocabulary through one door: a batch of the editor's own commands applied as ONE atomic step — delete, move, rename, enable, retime; addLayer/addResource whole; updateLayer / patchResource / patchSettings as JSON merge patches (only the fields you pass change; null removes) — a wipe is {"transitionIn": {"kind": "wipe", "duration": 0.5}}, a swap is upsertKeyframe with resourceID and a transition, a trim is patchResource; cameraMove {layerID, move: pushIn|pullOut|reveal|orbit|rise, at, duration, degrees?, from?/to? framing} writes a camera move as two keyframes; autoZoom {layerID, amount?: subtle|normal|strong, pace?: calm|normal|brisk, skip?: [[start, end]] source seconds left wide, activity?: a measured activity track stored on the recording in the same step, remove?} plans a screen recording's zooms from its clicks and measured activity into tagged viewport keyframes (a re-plan keeps what a person edited); setMarkers replaces the timeline's markers and chapters whole. Every command succeeds or nothing is written. The schema of `commands` IS the editor's Command enum.

Input parameters:

- `commands` (array, required): Commands in order; ids are the file's own (promo_inspect lists layers, resources by promo_schema_full)
- `preview` (boolean): Attach an inline thumbnail of the composition (default true); the same image lands at <Name> Exports/preview.png beside the project
- `project` (string, required): Path to the .promo project folder (metadata.json + Resources/)

### `promo_slideshow` (~513 tokens)

The wizard, for agents: pictures and clips in, a complete show out — the apps' own wizard, one implementation. kind classic (one slide at a time, crossfade by default), carousel (cards fly in and settle), or appStore (a store listing: your shots on one device that moves between them, a headline per shot in the band it leaves, the canvas the store's own size — a 3D body by default, the drawn frame with body slab). narration adds a draft voice per slide, timed by rules so the show re-times when promo_speak lands the sound. Creates the project folder and copies the media in; refine with the other tools afterwards. Never overwrites.

Input parameters:

- `angle` (string): appStore body: the camera preset (default quarterLeft)
- `arrangement` (string): appStore: every shot in the middle (default), alternating sides, or alternating high and low — the words take the room each shot leaves
- `backgroundColorHex` (string)
- `body` (string): appStore: a 3D device body (default) or the drawn frame
- `canvas` (string): "1920x1080" (ignored for appStore — the store decides)
- `change` (string): appStore body: one device whose screen plays the shots (default), or a device per shot
- `device` (string): appStore: the frame and the store's canvas
- `direction` (string): Carousel
- `framing` (string): appStore slab: straight on, or turned into the light
- `kind` (string): Default classic
- `material` (string): appStore: the finish — naturalTitanium, spaceBlack, silver, gold, deepBlue, plasticWhite… (default the device's own)
- `name` (string)
- `narration` (boolean): A draft narration per slide: an audio resource with an empty script to fill, then promo_speak
- `preview` (boolean): Attach an inline thumbnail of the composition (default true); the same image lands at <Name> Exports/preview.png beside the project
- `project` (string, required): Folder to create, e.g. <workspace>/Show.promo
- `sizing` (string)
- `slides` (array, required)
- `transition` (string): Default crossfade
- `transitionEdge` (string)
- `turns` (boolean): appStore: turn the device a little further each shot

### `promo_explain` (~252 tokens)

The agent's debugger: why is this layer where it is — the renderer's OWN numbers at a moment. Per layer: visible and why not, the resource shown (swap-aware), the resolved transform and the rect on the canvas in pixels, opacity, rotation, tilt, viewport, gain, the keyframes bracketing the moment, transitions and fades. A model or stage adds its camera (after its 1.05-radii floor) and light, and each slot's binding with where it lands on the canvas and how much of the frame it covers — measured by rendering, so no calibration renders are needed; a stage whose camera aims or flies says per member `inFrame` (whole, cut and which edges, fillsFrame, behindCamera) and its `framing` word; a layer showing a composition adds that composition's layers at the moment, mapped onto the canvas. Per project: timing problems and validate's warnings. Defaults to the composition's midpoint.

Input parameters:

- `layer` (string): One layer's id; absent = all
- `project` (string, required): Path to the .promo project folder (metadata.json + Resources/)
- `time` (number): Seconds (default: midpoint)

### `promo_diff` (~100 tokens)

What changed since you last looked, in the format's own terms: two projects compared by entity — settings by key, resources and layers by id, keyframes by id — as lines you can act on. Copy metadata.json aside before a person's turn, then diff against the copy.

Input parameters:

- `against` (string, required): The other project folder (or its metadata.json)
- `project` (string, required): Path to the .promo project folder (metadata.json + Resources/)

### `promo_voices` (~161 tokens)

A narration provider's voices — id, name and a line of detail per voice (openai's fixed roster; elevenlabs and google list live) — with the person's own key: the OS keyring (`promoshot-mcp key set <provider>`), else a secrets file (OPENAI_API_KEY_FILE, or /run/secrets/OPENAI_API_KEY) where there is no keyring. `local` needs NO key: voices synthesized on this machine from installed packages (ids like kokoro-en-q8/af_heart; ones not installed say so — the person runs `promoshot-mcp voices install <package>`). Use before promo_speak to pick a voiceID.

Input parameters:

- `provider` (string): Default openai

### `promo_speak` (~371 tokens)

Synthesize narration for every resource whose speech.text says something, spending the PERSON'S OWN provider key from the OS keyring (`promoshot-mcp key set <provider>`) or, where there is none, a secrets file (OPENAI_API_KEY_FILE or /run/secrets/OPENAI_API_KEY), matching each script's provider (default openai/alloy). Unchanged text is reused by receipt, never billed twice. Keys are checked for EVERY pending narration before anything is bought, and each bought receipt is written back at once. A provider with NO key gets a silent placeholder of the estimated length (speech.placeholder: true, no receipt): time the cut against it; the next call with a key voices it. It exports silent and promo_validate says so; `placeholder: false` refuses instead. Provider `local` (voiceID like kokoro-en-q8/af_heart) spends nothing and needs no key: English voices synthesized on this machine, Apache-2.0, safe to publish; takes are .wav. A word the dictionary lacks (a product name) fails with its name — spell it once in Resources/pronunciations.dict (CMU format: `PROMOSHOT  P R OW1 M OW0 SH AA2 T`) or write it as words.

Input parameters:

- `check` (boolean): Spend nothing: report where each needed provider's key comes from (never the key) and what a real call would synthesize — ready, blocked, or nothing to do. With no project, the keys alone.
- `placeholder` (boolean): Default true: a provider with no key gets a silent placeholder of the estimated length. false: refuse instead, writing nothing.
- `project` (string): Path to the .promo project folder (metadata.json + Resources/)

## Diagnostics

Captured diagnostic sections: Provenance. The full working is on the page: https://verifymcp.io/servers/garalex-promoshot/ghcr-io-garalex-promoshot-mcp#diagnostics

## Score history

- 2026-10-19: 45
- 2026-10-18: 45
- 2026-10-17: 44
- 2026-10-16: 44
- 2026-10-15: 44
- 2026-10-14: 43
- 2026-10-13: 43
- 2026-10-12: 42
- 2026-10-10: 41
- 2026-10-09: 41
- 2026-10-06: 39
- 2026-10-04: 38
- 2026-10-03: 38
- 2026-10-02: 37
- 2026-10-01: 37
- 2026-09-30: 36
- 2026-09-29: 36
- 2026-09-28: 36

## Common questions

### What is the io.github.GarAlex/promoshot MCP server?

io.github.GarAlex/promoshot is an MCP server listed in the public MCP registry as io.github.GarAlex/promoshot. Headless MCP: author and render PromoShot .promo video projects (stills, GIFs, video). This page covers its container image (ghcr.io/garalex/promoshot-mcp).

### Is the io.github.GarAlex/promoshot MCP server safe to use?

io.github.GarAlex/promoshot scores 45 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the io.github.GarAlex/promoshot MCP server expose?

io.github.GarAlex/promoshot exposes 26 tools: promo_validate, promo_inspect, promo_schema, promo_schema_types, promo_schema_full, and 21 more. Their descriptions and schemas cost roughly 4,988 tokens of context every time the server is loaded.

### Is the io.github.GarAlex/promoshot MCP server still maintained?

io.github.GarAlex/promoshot is still listed as active in the MCP registry. We last reached this channel on 19 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- GitHub Container Registry: https://ghcr.io/garalex/promoshot-mcp
- Repository: https://github.com/GarAlex/promoshot
- Website: https://promoshot.app/mcp
- Changelog RSS feed: https://verifymcp.io/servers/garalex-promoshot/ghcr-io-garalex-promoshot-mcp.xml
- Changelog JSON feed: https://verifymcp.io/servers/garalex-promoshot/ghcr-io-garalex-promoshot-mcp.json
- HTML version of this page: https://verifymcp.io/servers/garalex-promoshot/ghcr-io-garalex-promoshot-mcp