io.github.helloderekg/bytario
NPM · @BYTARIO/MCP
40 MCP tools for image, PDF, QR, barcode, data, text, color, and render operations.
Available components
Last scanned (8 hours ago)
Scores higher than 42% of npm servers
Category Documents and Files
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security81
- No malware found by supply-chain analysis.Pass
- CVE check failed: a known high-severity CVE affects zod 3.25.76, a direct dependency. A fixed version is available. View diagnostics → Fail
- No install/post-install scripts declared.Pass
- 30 of 93 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency19
- Repository check failed: no source repository is declared. See how to fix → View diagnostics → Fail
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 208 days ago).Pass
- Security-disclosure policy not yet verified: we couldn't inspect the source repository.Unverified
Schema Quality & AI Usability77
- AI-judged instruction clarity (excellent).Pass
- Tool/resource definitions use about 2320 tokens (~58/item across 40 items; 40 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "bytario_pdf_merge" implies "merge" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 40 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 5 Nov 26 0
- Stability: 0.97 → pass security
- 4 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 3 Nov 26 −1
- Stability: pass → 0.93 functional
- 28 Oct 26 0
- Stability: 0.97 → pass security
- 27 Oct 26 0
- Stability: pass → 0.97 functional
- 24 Oct 26 −6
- CVE-2023-54404 affects this package: high ▼ security
- Known CVEs: pass → fail ▼ security
- 21 Oct 26 +1
- Stability: 0.97 → pass security
- 20 Oct 26 −1
- Stability: pass → 0.97 functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Analysed npm/@bytario/mcp@1.0.1
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Vulnerabilities 1 finding
| ID | CVE | Severity | Vector | Fix available |
|---|---|---|---|---|
| GHSA-mrhx-c7xc-m3w5 | CVE-2023-54404 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | yes |
Background: What a vulnerability scan can and cannot prove →
Dependencies 93 packages
| Packages resolved | 93 |
|---|---|
| Stale | 30 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
bytario_barcode_generate ~137
Generate a 1D or 2D barcode as SVG. Supports EAN-13, EAN-8, UPC-A, UPC-E, Code 128, Code 39, ITF-14, ITF, DataMatrix, PDF417, Aztec.
| Name | Type | Req | Description |
|---|---|---|---|
| background | string | – | Background color |
| foreground | string | – | Foreground color |
| format | string | yes | Barcode format |
| height | number | – | Bar height |
| includeText | boolean | – | Include human-readable text |
| scale | number | – | Scale factor |
| text | string | yes | Data to encode in the barcode |
No output schema declared.
No examples provided.
bytario_barcode_read ~49
Decode 1D and 2D barcodes from an image. Returns an array of detected codes.
| Name | Type | Req | Description |
|---|---|---|---|
| image_base64 | string | yes | Base64-encoded image containing barcodes |
No output schema declared.
No examples provided.
bytario_color_convert ~66
Convert a color between hex, RGB, HSL, HSV, and CMYK formats.
| Name | Type | Req | Description |
|---|---|---|---|
| color | string | yes | Color to convert (e.g. "#ff6600", "rgb(255,102,0)", "hsl(24,100%,50%)") |
No output schema declared.
No examples provided.
bytario_data_base64_decode ~36
Decode a Base64 string back to raw bytes.
| Name | Type | Req | Description |
|---|---|---|---|
| base64_string | string | yes | Base64 string to decode |
No output schema declared.
No examples provided.
bytario_data_base64_encode ~61
Encode raw bytes to Base64. Send the data as a base64 string (will be decoded and re-encoded by the API — useful for verifying encoding).
| Name | Type | Req | Description |
|---|---|---|---|
| data_base64 | string | yes | Base64-encoded raw bytes to encode |
No output schema declared.
No examples provided.
bytario_data_csv_to_json ~37
Convert CSV text to a JSON array of objects.
| Name | Type | Req | Description |
|---|---|---|---|
| csv | string | yes | CSV text with headers in the first row |
No output schema declared.
No examples provided.
bytario_data_json_format ~30
Pretty-print a JSON string with indentation.
| Name | Type | Req | Description |
|---|---|---|---|
| json | string | yes | JSON string to format |
No output schema declared.
No examples provided.
bytario_data_json_minify ~34
Minify a JSON string by removing all whitespace.
| Name | Type | Req | Description |
|---|---|---|---|
| json | string | yes | JSON string to minify |
No output schema declared.
No examples provided.
bytario_data_json_to_csv ~35
Convert a JSON array of objects to CSV text.
| Name | Type | Req | Description |
|---|---|---|---|
| json | string | yes | JSON array of objects to convert |
No output schema declared.
No examples provided.
bytario_data_url_decode ~31
Decode a percent-encoded string.
| Name | Type | Req | Description |
|---|---|---|---|
| text | string | yes | Percent-encoded string to decode |
No output schema declared.
No examples provided.
bytario_data_url_encode ~36
Percent-encode a UTF-8 string for use in URLs.
| Name | Type | Req | Description |
|---|---|---|---|
| text | string | yes | String to percent-encode |
No output schema declared.
No examples provided.
bytario_file_detect ~45
Detect the file type of binary data using magic bytes. Returns MIME type, extension, and description.
| Name | Type | Req | Description |
|---|---|---|---|
| data_base64 | string | yes | Base64-encoded file data |
No output schema declared.
No examples provided.
bytario_file_hash ~68
Compute a cryptographic hash of a file. Supports MD5, SHA-1, SHA-256, SHA-384, SHA-512.
| Name | Type | Req | Description |
|---|---|---|---|
| algorithm | string | – | Hash algorithm (default: sha256) |
| data_base64 | string | yes | Base64-encoded file data |
No output schema declared.
No examples provided.
bytario_image_compress ~56
Recompress an image at target quality.
| Name | Type | Req | Description |
|---|---|---|---|
| format | string | – | Output format |
| image_base64 | string | yes | Base64-encoded image file |
| quality | number | yes | Target quality (1-100) |
No output schema declared.
No examples provided.
bytario_image_convert ~71
Convert an image between JPEG, PNG, WebP, and AVIF formats. Requires base64-encoded image input.
| Name | Type | Req | Description |
|---|---|---|---|
| image_base64 | string | yes | Base64-encoded image file |
| quality | number | – | Output quality (1-100) |
| to | string | yes | Target format |
No output schema declared.
No examples provided.
bytario_image_crop ~105
Crop an image to a rectangle defined by x, y, width, height.
| Name | Type | Req | Description |
|---|---|---|---|
| format | string | – | Output format |
| height | number | yes | Height of crop rectangle |
| image_base64 | string | yes | Base64-encoded image file |
| quality | number | – | Output quality |
| width | number | yes | Width of crop rectangle |
| x | number | yes | Left edge of crop rectangle |
| y | number | yes | Top edge of crop rectangle |
No output schema declared.
No examples provided.
bytario_image_favicon_set ~56
Generate a full favicon bundle (ICO + PNG sizes + manifest.json) from a source image.
| Name | Type | Req | Description |
|---|---|---|---|
| image_base64 | string | yes | Base64-encoded source image (ideally square, >= 512x512) |
No output schema declared.
No examples provided.
bytario_image_flip ~41
Flip an image horizontally or vertically.
| Name | Type | Req | Description |
|---|---|---|---|
| direction | string | yes | Flip direction |
| image_base64 | string | yes | Base64-encoded image file |
No output schema declared.
No examples provided.
bytario_image_read_metadata ~42
Extract EXIF, GPS, and camera info from an image as structured JSON.
| Name | Type | Req | Description |
|---|---|---|---|
| image_base64 | string | yes | Base64-encoded image file |
No output schema declared.
No examples provided.
bytario_image_resize ~91
Resize an image with optional fit mode. At least one of width or height required.
| Name | Type | Req | Description |
|---|---|---|---|
| fit | string | – | Fit mode |
| format | string | – | Output format |
| height | number | – | Target height in pixels |
| image_base64 | string | yes | Base64-encoded image file |
| quality | number | – | Output quality |
| width | number | – | Target width in pixels |
No output schema declared.
No examples provided.
bytario_image_rotate ~49
Rotate an image by 90, 180, or 270 degrees.
| Name | Type | Req | Description |
|---|---|---|---|
| degrees | string | yes | Rotation angle |
| image_base64 | string | yes | Base64-encoded image file |
No output schema declared.
No examples provided.
bytario_image_strip_metadata ~48
Remove EXIF, IPTC, XMP, and GPS metadata from an image without re-encoding pixels.
| Name | Type | Req | Description |
|---|---|---|---|
| image_base64 | string | yes | Base64-encoded image file |
No output schema declared.
No examples provided.
bytario_pdf_compress ~63
Compress a PDF. Returns JSON with the compressed bytes (base64), original size, compressed size, and savings percentage.
| Name | Type | Req | Description |
|---|---|---|---|
| pdf_base64 | string | yes | Base64-encoded PDF file |
| stripMetadata | boolean | – | Strip document metadata during compression |
No output schema declared.
No examples provided.
bytario_pdf_extract_text ~65
Extract text from a PDF using vector text extraction (no OCR).
| Name | Type | Req | Description |
|---|---|---|---|
| pages | string | – | Pages to extract (e.g. "1-3" or "1,3,5") |
| pdf_base64 | string | yes | Base64-encoded PDF file |
No output schema declared.
No examples provided.
bytario_pdf_fill_form ~63
Fill AcroForm fields in a PDF, optionally flatten afterwards.
| Name | Type | Req | Description |
|---|---|---|---|
| fields | object | yes | Object mapping field names to values |
| flatten | boolean | – | Flatten form after filling |
| pdf_base64 | string | yes | Base64-encoded PDF file |
No output schema declared.
No examples provided.
bytario_pdf_flatten ~39
Flatten PDF form fields — bake values in, remove editability.
| Name | Type | Req | Description |
|---|---|---|---|
| pdf_base64 | string | yes | Base64-encoded PDF file |
No output schema declared.
No examples provided.
bytario_pdf_info ~42
Get page count, page sizes, document metadata, and encryption status of a PDF.
| Name | Type | Req | Description |
|---|---|---|---|
| pdf_base64 | string | yes | Base64-encoded PDF file |
No output schema declared.
No examples provided.
bytario_pdf_merge ~44
Merge multiple PDFs into one. Provide an array of base64-encoded PDF files.
| Name | Type | Req | Description |
|---|---|---|---|
| files | array | yes | Array of base64-encoded PDF files to merge |
No output schema declared.
No examples provided.
bytario_pdf_protect ~61
Add password protection to a PDF.
| Name | Type | Req | Description |
|---|---|---|---|
| ownerPassword | string | – | Password required to edit/print |
| pdf_base64 | string | yes | Base64-encoded PDF file |
| userPassword | string | – | Password required to open the PDF |
No output schema declared.
No examples provided.
bytario_pdf_render_page ~83
Rasterize one or more PDF pages to PNG, JPEG, or WebP images.
| Name | Type | Req | Description |
|---|---|---|---|
| dpi | number | – | Resolution (72-300) |
| format | string | – | Output image format |
| pages | string | – | Pages to render (e.g. "1,3") |
| pdf_base64 | string | yes | Base64-encoded PDF file |
No output schema declared.
No examples provided.
bytario_pdf_rotate ~76
Rotate specified pages of a PDF by 90, 180, or 270 degrees.
| Name | Type | Req | Description |
|---|---|---|---|
| degrees | string | yes | Rotation angle |
| pages | string | – | Pages to rotate (e.g. "1,3,5" or "all") |
| pdf_base64 | string | yes | Base64-encoded PDF file |
No output schema declared.
No examples provided.
bytario_pdf_split ~61
Extract one or more page ranges from a PDF into separate PDFs.
| Name | Type | Req | Description |
|---|---|---|---|
| pdf_base64 | string | yes | Base64-encoded PDF file |
| ranges | string | yes | Page ranges to extract (e.g. "1-3,7-9") |
No output schema declared.
No examples provided.
bytario_pdf_watermark ~105
Stamp a text watermark on one or more pages of a PDF.
| Name | Type | Req | Description |
|---|---|---|---|
| fontSize | number | – | Font size |
| opacity | number | – | Opacity (0-1) |
| pages | string | – | Pages to watermark (e.g. "1,3" or "all") |
| pdf_base64 | string | yes | Base64-encoded PDF file |
| rotation | number | – | Rotation angle in degrees |
| text | string | yes | Watermark text |
No output schema declared.
No examples provided.
bytario_qr_generate ~113
Generate a QR code as PNG or SVG from text or a URL.
| Name | Type | Req | Description |
|---|---|---|---|
| background | string | – | Background color (e.g. "#ffffff") |
| errorCorrection | string | – | Error correction level |
| foreground | string | – | Foreground color (e.g. "#000000") |
| format | string | – | Output format (default: png) |
| margin | number | – | Quiet zone margin |
| size | number | – | Size in pixels |
| text | string | yes | Text or URL to encode |
No output schema declared.
No examples provided.
bytario_qr_read ~42
Decode a QR code from an image. Returns the decoded text.
| Name | Type | Req | Description |
|---|---|---|---|
| image_base64 | string | yes | Base64-encoded image containing a QR code |
No output schema declared.
No examples provided.
bytario_render_svg_to_png ~68
Render an SVG to a PNG image via resvg-wasm.
| Name | Type | Req | Description |
|---|---|---|---|
| height | number | – | Target height in pixels |
| scale | number | – | Scale factor |
| svg | string | yes | SVG markup as a string |
| width | number | – | Target width in pixels |
No output schema declared.
No examples provided.
bytario_text_diff ~76
Compare two texts and return a diff with change hunks.
| Name | Type | Req | Description |
|---|---|---|---|
| a | string | yes | First text |
| b | string | yes | Second text |
| context | number | – | Lines of context around changes |
| labelA | string | – | Label for first text |
| labelB | string | – | Label for second text |
No output schema declared.
No examples provided.
bytario_text_markdown_to_html ~30
Convert Markdown text to HTML.
| Name | Type | Req | Description |
|---|---|---|---|
| markdown | string | yes | Markdown text to convert |
No output schema declared.
No examples provided.
bytario_text_word_count ~38
Count words, characters, sentences, paragraphs, and estimate reading time for a text.
| Name | Type | Req | Description |
|---|---|---|---|
| text | string | yes | Text to analyze |
No output schema declared.
No examples provided.
bytario_usage ~27
Check your current Bytario API plan, quota, and usage for this billing period.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
How do I install the io.github.helloderekg/bytario MCP server?
io.github.helloderekg/bytario runs locally as an npm package, launched with npx -y @bytario/mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · @bytario/mcp
claude mcp add helloderekg-bytario -- npx -y @bytario/mcp
What is the io.github.helloderekg/bytario MCP server?
io.github.helloderekg/bytario is an MCP server listed in the public MCP registry as io.github.helloderekg/bytario. 40 MCP tools for image, PDF, QR, barcode, data, text, color, and render operations. This page covers its npm package (@bytario/mcp).
Is the io.github.helloderekg/bytario MCP server safe to use?
io.github.helloderekg/bytario scores 72 out of 100 on VerifyMCP. We recorded 1 known advisory against it as of 5 November 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.helloderekg/bytario MCP server expose?
io.github.helloderekg/bytario exposes 40 tools: bytario_image_convert, bytario_image_resize, bytario_image_compress, bytario_image_strip_metadata, bytario_image_read_metadata, and 35 more. Their descriptions and schemas cost roughly 2,320 tokens of context every time the server is loaded.
Is the io.github.helloderekg/bytario MCP server still maintained?
io.github.helloderekg/bytario is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the io.github.helloderekg/bytario MCP server under?
io.github.helloderekg/bytario declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.