# io.github.img-src-io/mcp (npm · @img-src/mcp-server)

MCP server for img-src.io Image CDN - upload, transform, and deliver images through AI assistants

- Trust score: 71/100 (medium)
- Change this week: +18
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `@img-src/mcp-server`: 71/100 (this document), [markdown](https://verifymcp.io/servers/img-src-io-mcp/img-src-mcp-server.md), [page](https://verifymcp.io/servers/img-src-io-mcp/img-src-mcp-server)

## Channel facts

- Registry: `npm`
- Package: `@img-src/mcp-server`
- Version: `0.2.5`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 86/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 79 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 85/100
  - 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).
  - AI-judged instruction clarity (excellent).
  - Tool/resource definitions use about 767 tokens (~95/item across 8 items; 8 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add img-src-io-mcp -- npx -y @img-src/mcp-server
```

### Codex

```bash
codex mcp add img-src-io-mcp -- npx -y @img-src/mcp-server
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "img-src-io-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@img-src/mcp-server"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add img-src-io-mcp --command npx --arg -y --arg @img-src/mcp-server
```

### Hermes

```yaml
mcp_servers:
  img-src-io-mcp:
    command: "npx"
    args: ["-y", "@img-src/mcp-server"]
```

### Other

```json
{
  "mcpServers": {
    "img-src-io-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@img-src/mcp-server"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 71, +51)

- [security regression] Provenance: unverified → fail
- [security improvement] Install scripts: unverified → pass
- [security improvement] Known CVEs: unverified → partial
- [functional regression] Security disclosure: unverified → fail
- [functional improvement] Schema quality: unverified → excellent
- [functional improvement] Tool coverage: unverified → 100
- [functional improvement] License: unverified → pass
- [functional improvement] Schema quality: unverified → 100
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] Stability: unverified → 0.27
- [functional improvement] MCP protocol: unverified → pass
- [functional] Licence: MIT

### 2026-08-02 (score 20, −21)

- [functional regression] Security disclosure: fail → unverified
- [functional regression] Schema quality: 100 → unverified
- [functional regression] Tool coverage: 100 → unverified

### 2026-08-01 (score 41, +36)

- [security improvement] Malware scan: unverified → pass
- [functional improvement] Tool coverage: unverified → 100
- [functional improvement] Schema quality: unverified → 100

### 2026-07-31 (score 5, −1)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 6, −47)

- [security regression] Malware scan: pass → unverified
- [functional regression] Tool coverage: 100 → unverified
- [functional regression] Schema quality: 100 → unverified

### 2026-07-27 (score 53)

First indexed and scored.

## MCP tools (8)

### `upload_image` (~229 tokens)

Upload an image to img-src.io. IMPORTANT: Always prefer 'file_path' (absolute path like /Users/name/image.png) over base64 'data' to avoid context length limits. Use 'url' for web images. Only use 'data' as last resort for small images. Supports JPEG, PNG, WebP, GIF, AVIF, HEIC, and more. Max 5MB. Returns CDN URLs for the uploaded image.

Input parameters:

- `data` (string): Base64-encoded image data. AVOID: causes context length issues. Use file_path instead.
- `file_path` (string): PREFERRED: Absolute path to local image file (e.g., /Users/name/photo.png). Use this instead of base64 data.
- `mimeType` (string): MIME type (required only when using data, e.g., image/png)
- `target_path` (string): Optional: Folder path to store the image (e.g., 'photos/2024'). Filename is determined from source.
- `url` (string): URL of image to download and upload (for web images)

### `list_images` (~100 tokens)

List images in your img-src.io account. Supports pagination and folder browsing. Returns images and subfolders in the specified path.

Input parameters:

- `folder` (string): Folder path to filter images (e.g., 'blog/2024'). Omit to list root level.
- `limit` (integer): Max images to return (1-100, default: 50)
- `offset` (integer): Number of images to skip for pagination (default: 0)

### `search_images` (~94 tokens)

Search for images by filename or path. Performs a fuzzy search across all your images. Returns matching images with their metadata and CDN URLs.

Input parameters:

- `limit` (integer): Max results to return (1-100, default: 20)
- `offset` (integer): Number of results to skip for pagination (default: 0)
- `query` (string, required): Search term to match against filenames and paths (1-100 chars)

### `get_image` (~60 tokens)

Get detailed metadata for a specific image by its ID. Returns full image information including dimensions, format, all associated paths, and CDN URLs.

Input parameters:

- `id` (string, required): Image ID (16-character hash prefix, e.g., 'abcdef1234567890')

### `delete_image` (~65 tokens)

Delete an image by its ID. This permanently removes the image and all its paths from your account. The image will no longer be accessible via CDN URLs.

Input parameters:

- `id` (string, required): Image ID to delete (16-character hash prefix). This permanently removes the image and all its paths.

### `get_usage` (~35 tokens)

Get current usage statistics for your img-src.io account. Shows uploads, storage, bandwidth, and API request usage against your plan limits.

### `get_settings` (~29 tokens)

Get your img-src.io account settings. Returns username, plan, default image settings, and account statistics.

### `get_cdn_url` (~155 tokens)

Generate a CDN URL for an image with optional transformations. Supports resizing, format conversion, and quality adjustment.

Input parameters:

- `filepath` (string, required): Image path without extension (e.g., 'blog/photo' for blog/photo.webp)
- `fit` (string): Resize fit mode: cover (crop), contain (fit), fill (stretch), scale-down (shrink only)
- `format` (string): Output format (default: webp)
- `height` (integer): Resize height in pixels
- `quality` (integer): Image quality 1-100 (default: 80)
- `username` (string, required): img-src.io username (appears in CDN URL path)
- `width` (integer): Resize width in pixels

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/img-src-io-mcp/img-src-mcp-server#diagnostics

## Score history

- 2026-08-03: 71
- 2026-08-02: 20
- 2026-08-01: 41
- 2026-07-31: 5
- 2026-07-30: 6
- 2026-07-28: 53
- 2026-07-27: 53

## Links

- npm package: https://www.npmjs.com/package/@img-src/mcp-server
- Socket report: https://socket.dev/npm/package/@img-src/mcp-server
- Repository: https://github.com/img-src-io/mcp
- Changelog RSS feed: https://verifymcp.io/servers/img-src-io-mcp/img-src-mcp-server/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/img-src-io-mcp/img-src-mcp-server/changelog.json
- HTML version of this page: https://verifymcp.io/servers/img-src-io-mcp/img-src-mcp-server