MagicScreenshots
REMOTE · WWW.MAGICSCREENSHOTS.COM · SCANNED SEP 28
Search real App Store screenshots and preview videos; generate and localize your own.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security80
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability85
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (good).Pass
- Tool/resource definitions use about 3027 tokens (~28/item across 105 items; 19 tools + 86 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management3
- Stability observed for 1 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage85
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 56% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 19 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 21 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities20
- Spec-recency check failed: implements MCP spec 2024-11-05; the latest is 2026-07-28. See how to fix → Fail
How do I install the MagicScreenshots MCP server?
MagicScreenshots is a hosted endpoint at https://www.magicscreenshots.com/api/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · www.magicscreenshots.com
claude mcp add --transport http humanleap-magicscreenshots-mcp 'https://www.magicscreenshots.com/api/mcp'
{
"mcpServers": {
"humanleap-magicscreenshots-mcp": {
"url": "https://www.magicscreenshots.com/api/mcp"
}
}
} {
"servers": {
"humanleap-magicscreenshots-mcp": {
"type": "http",
"url": "https://www.magicscreenshots.com/api/mcp"
}
}
} [mcp_servers.humanleap-magicscreenshots-mcp] url = "https://www.magicscreenshots.com/api/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"humanleap-magicscreenshots-mcp": {
"type": "remote",
"url": "https://www.magicscreenshots.com/api/mcp",
"enabled": true
}
}
} openclaw mcp add humanleap-magicscreenshots-mcp --url 'https://www.magicscreenshots.com/api/mcp' --transport streamable-http
mcp_servers:
humanleap-magicscreenshots-mcp:
url: "https://www.magicscreenshots.com/api/mcp" {
"McpServers": {
"humanleap-magicscreenshots-mcp": {
"Transport": "http",
"Url": "https://www.magicscreenshots.com/api/mcp"
}
}
} assistant mcp add humanleap-magicscreenshots-mcp -t streamable-http -u 'https://www.magicscreenshots.com/api/mcp'
{
"mcpServers": {
"humanleap-magicscreenshots-mcp": {
"type": "http",
"url": "https://www.magicscreenshots.com/api/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 28 Sept 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 27 Sept 26 71
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 28 Sept 2026 · Probed https://www.magicscreenshots.com/api/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=www.magicscreenshots.com | CN=YR1,O=Let's Encrypt,C=US | 8 Aug 2026 | 6 Nov 2026 | RSA 2048 | SHA256-RSA | 556825fd71f08fed0094596692a6d87330f |
| SANs: www.magicscreenshots.com | ||||||
| CN=YR1,O=Let's Encrypt,C=US (CA) | CN=Root YR,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | RSA 2048 | SHA256-RSA | a20253f15f2691c05dc1ce13b9bcca4e |
| CN=Root YR,O=ISRG,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | RSA 4096 | SHA256-RSA | f24b6d17f9d9ad7cb1c9fea78782699f |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of www.magicscreenshots.com. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| magicscreenshots.com. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=31536000; includeSubDomains |
| content-security-policy | default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' https://*.supabase.co https://is1-ssl.mzstatic.com https://is2-ssl.mzstatic.com https://is3-ssl.mzstatic.com https://is4-ssl.mzstatic.com https://is5-ssl.mzstatic.com https://play-lh.googleusercontent.com data: blob:; connect-src 'self' https://*.supabase.co wss://*.supabase.co https://itunes.apple.com https://*.mzstatic.com https://generativelanguage.googleapis.com https://api.useautumn.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none' |
| x-content-type-options | nosniff |
| x-frame-options | DENY |
| referrer-policy | strict-origin-when-cross-origin |
| permissions-policy | camera=(), microphone=(), geolocation=(), tools=(self) |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://www.magicscreenshots.com/api/mcp | Verified | 200 | |
| http (plaintext) | http://www.magicscreenshots.com/api/mcp | HTTPS enforced | 308 | https://www.magicscreenshots.com/api/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
approve_restyle Approve restyle ~38
Approve a generated restyle overview and start final screenshot extraction.
| Name | Type | Req | Description |
|---|---|---|---|
| group_id | string | yes | – |
| overview_url | string | – | – |
No output schema declared.
No examples provided.
create_api_key Create API key ~72
Create an agent API key without an account. Directory browse works with no key. Screenshot lookup works immediately with the key. Restyle and localize require the human to open claim_url, sign in, and pay.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | – | Optional label for the key, such as the agent or chat name. |
No output schema declared.
No examples provided.
create_localize Create localize ~81
Create MagicScreenshots localization jobs for source App Store screenshots across one or more target locales.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
| source_app | object | yes | – |
| source_screenshot_urls | array | – | – |
| target_locales | array | yes | Locale IDs such as JPN, DEU, FRA, BRA, or objects with language/country. |
No output schema declared.
No examples provided.
create_restyle Create restyle ~148
Restyle the user's App Store screenshots to match a directory inspiration set. Prefer inspiration_slug from list_directory_apps (duolingo, monzo, doordash, …). Requires an API key; the human must claim the key and pay before generation runs.
| Name | Type | Req | Description |
|---|---|---|---|
| inspiration_app | object | – | – |
| inspiration_screenshot_urls | array | – | – |
| inspiration_slug | string | – | Directory slug from list_directory_apps / get_directory_app. Preferred over a free-text inspiration query. |
| limit | integer | – | – |
| source_app | object | yes | The user's app. Use query, app_url, or app_id from get_screenshots. |
| source_screenshot_urls | array | – | – |
No output schema declared.
No examples provided.
get_app_history Get listing history ~77
Every version of an app's App Store listing we have captured (screenshots and preview videos per date), newest first. Shows how top apps change their creative over time. Needs a Pro API key; without one it returns how many versions exist.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
| slug | string | yes | Library slug such as instagram. |
No output schema declared.
No examples provided.
get_app_videos Get App Store preview videos ~87
App Store preview videos for a library app: poster frames for everyone; with a Pro API key, 1-hour download links to the mp4 files (about 30 s each). Use them as reference when making your own app preview video. Pass slug from list_directory_apps (has_video=true finds apps that have them).
| Name | Type | Req | Description |
|---|---|---|---|
| slug | string | yes | Library slug such as instagram. |
No output schema declared.
No examples provided.
get_directory_app Get directory app ~98
Get one directory app: metadata, ordered listing screenshot URLs (as markdown images), related apps in the same genre, and the create_restyle arguments to copy that style. No API key required.
| Name | Type | Req | Description |
|---|---|---|---|
| app_id | string | – | Apple numeric app ID. |
| query | string | – | App name if you do not have a slug. |
| slug | string | – | Directory slug such as duolingo, monzo, or doordash. |
No output schema declared.
No examples provided.
get_directory_screens Get directory screens ~141
Get the ordered App Store listing screenshots for a library app, including markdown images a vision model can inspect. Pass country (jp, de, ...) for the localized listing in that storefront. Index is 1-based and matches /apps/:slug/screens/:index. No API key required.
| Name | Type | Req | Description |
|---|---|---|---|
| country | string | – | App Store country for the localized listing, e.g. jp, de, fr, kr, cn, br, es, it, sa. Default us. get_directory_app lists which storefronts exist. |
| index | integer | – | Optional 1-based screenshot index. |
| slug | string | yes | Directory slug such as duolingo. |
No output schema declared.
No examples provided.
get_job_group Get job group ~34
Check restyle job group status, overview URL, errors, and final output URLs.
| Name | Type | Req | Description |
|---|---|---|---|
| group_id | string | yes | – |
No output schema declared.
No examples provided.
get_magicscreenshots_discovery_document Get discovery document ~48
Fetch a known agent discovery document such as API catalog, Agent Skills, MCP, OAuth metadata, OpenAPI, or llms.txt.
| Name | Type | Req | Description |
|---|---|---|---|
| endpoint | string | yes | – |
No output schema declared.
No examples provided.
get_magicscreenshots_markdown Get page markdown ~33
Fetch a markdown representation of a known MagicScreenshots public page.
| Name | Type | Req | Description |
|---|---|---|---|
| route | string | yes | – |
No output schema declared.
No examples provided.
get_magicscreenshots_site_summary Get site summary ~36
Return a concise summary of MagicScreenshots, the screenshot directory, public routes, MCP tools, and auth requirements.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_screenshots Get screenshots ~170
Fetch high-resolution App Store screenshots. If the app is in the MagicScreenshots directory, returns those curated listing shots (with markdown images) with no API key. Otherwise looks up the live App Store listing (API key required). Pass live=true to skip the directory. Use this for the user's own app; use get_directory_app when you already have a catalog slug.
| Name | Type | Req | Description |
|---|---|---|---|
| app_id | string | – | Apple numeric app ID. |
| app_url | string | – | Apple App Store URL. |
| country | string | – | – |
| live | boolean | – | Skip the directory and fetch the current App Store listing. |
| query | string | – | App name to search in the directory, then the App Store. |
| slug | string | – | Directory slug. Returns catalog screens without a live App Store lookup. |
No output schema declared.
No examples provided.
list_directory_apps Search the screenshot library ~241
Search thousands of real App Store listings (the top 100 free and top-grossing apps in every Apple category, refreshed daily). Filter by text, Apple genre slug, listing look (tag), today's chart rank, or apps that have preview videos. Returns slugs for get_directory_app, get_app_videos, get_app_history and create_restyle. No API key required.
| Name | Type | Req | Description |
|---|---|---|---|
| category | string | – | Genre slug from list_directory_categories, such as finance or food-drink. |
| chart | string | – | With category: order by today's top free or top grossing chart for that category. |
| has_video | boolean | – | Only apps whose listing has an App Store preview video. |
| limit | integer | – | – |
| offset | integer | – | For paging; count in the response is the total match count. |
| platform | string | – | ios (App Store) or android (Google Play). Default: both. |
| query | string | – | App name, developer, slug or Apple ID. Example: "duolingo". |
| tag | string | – | Listing-look slug from list_directory_tags, such as headline, device-frame or dark. |
No output schema declared.
No examples provided.
list_directory_categories List directory categories ~46
List App Store screenshot directory categories (Finance, Food & Drink, Productivity, …) with app counts. Use this first when an agent wants inspiration by genre. No API key required.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
list_directory_tags List directory tags ~53
List listing-screenshot treatments (headline, device-frame, lifestyle, dark, character, social-proof, …) with app counts. These are App Store creative tags, not in-app UI patterns. No API key required.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
list_magicscreenshots_languages List languages ~29
Return supported screenshot localization languages and public guide routes.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
No output schema declared.
No examples provided.
list_magicscreenshots_markets List markets ~38
Return supported App Store market guides and public market routes.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
| region | string | – | – |
No output schema declared.
No examples provided.
list_results List results ~31
List recent MagicScreenshots restyle job groups and outputs for the authenticated account.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
No output schema declared.
No examples provided.
What is the MagicScreenshots MCP server?
MagicScreenshots is an MCP server listed in the public MCP registry as io.github.Humanleap/magicscreenshots-mcp. Search real App Store screenshots and preview videos; generate and localize your own. This page covers its hosted endpoint (https://www.magicscreenshots.com/api/mcp).
Is the MagicScreenshots MCP server safe to use?
MagicScreenshots scores 71 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the MagicScreenshots MCP server expose?
MagicScreenshots exposes 19 tools: create_api_key, list_directory_categories, list_directory_tags, list_directory_apps, get_directory_app, and 14 more. Their descriptions and schemas cost roughly 1,501 tokens of context every time the server is loaded.
Does the MagicScreenshots MCP server require authentication?
No. We connected to MagicScreenshots without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the MagicScreenshots MCP server still maintained?
MagicScreenshots is still listed as active in the MCP registry. We last reached this channel on 28 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.