# oJo — HTML to image (npm · @ojodotso/mcp-server)

Render HTML or templates to a hosted image, in one response. Free previews need no API key.

- Trust score: 72/100 (medium)
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-17

## Components

- npm · `@ojodotso/mcp-server`: 72/100 (this document), [markdown](https://verifymcp.io/servers/so-ojo-mcp-server/ojodotso-mcp-server.md), [page](https://verifymcp.io/servers/so-ojo-mcp-server/ojodotso-mcp-server)

## Channel facts

- Registry: `npm`
- Package: `@ojodotso/mcp-server`
- Version: `0.4.0`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-17.

- **Supply Chain Security**: 99/100
  - No malware found by supply-chain analysis.
  - No known CVEs affecting this package version or its production dependencies.
  - No install/post-install scripts declared.
  - 30 of 129 dependencies flagged as unhealthy.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 2 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 80/100
  - 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 328 tokens (~328/item across 1 items; 1 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 17/100
  - Stability observed for 5 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add so-ojo-mcp-server -- npx -y @ojodotso/mcp-server
```

### Codex

```bash
codex mcp add so-ojo-mcp-server -- npx -y @ojodotso/mcp-server
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "so-ojo-mcp-server": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@ojodotso/mcp-server"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add so-ojo-mcp-server --command npx --arg -y --arg @ojodotso/mcp-server
```

### Hermes

```yaml
mcp_servers:
  so-ojo-mcp-server:
    command: "npx"
    args: ["-y", "@ojodotso/mcp-server"]
```

### Other

```json
{
  "mcpServers": {
    "so-ojo-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@ojodotso/mcp-server"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-17 (score 72, 0)

- [functional regression] Security disclosure: unverified → fail

### 2026-08-16 (score 72, +1)

- [functional regression] Security disclosure: fail → unverified

### 2026-08-14 (score 71, +5)

- [security improvement] GHSA-f88m-g3jw-g9cj no longer affects this package
- [security improvement] Known CVEs: fail → pass
- [functional regression] Schema quality: 221 → 328
- [functional improvement] Stability: unverified → 0.07
- [functional] Package version: 0.3.1 → 0.4.0

### 2026-08-13 (score 66, +6)

- [security regression] Known CVEs: unverified → fail
- [functional improvement] Dependency health: unverified → 0.90

### 2026-08-12 (score 60, +47)

- [security regression] Known CVEs: fail → unverified
- [security improvement] Malware scan: unverified → pass
- [security improvement] Source repository: fail → pass
- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [security] Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.
- [functional regression] Security disclosure: unverified → fail
- [functional regression] Dependency health: 0.90 → unverified
- [functional improvement] Tool coverage: unverified → 100
- [functional improvement] MCP protocol: unverified → pass
- [functional improvement] Schema quality: unverified → 100
- [functional] First check of Schema quality: fail
- [functional] First check of Schema quality: excellent
- [functional] First check of Schema quality: fail
- [functional] First check of Tool coverage: 100
- [functional] Capabilities: Protocol version not yet verified: we do not have a sandbox capture of the MCP handshake this version of the package performs yet.
- [functional] Tool coverage: Tool coverage not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.
- [functional] Schema quality: Schema quality not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.
- [functional] Package version: 0.2.1 → 0.3.1
- [functional] Package version: 0.2.1 → 0.3.0

### 2026-08-11 (score 13)

First indexed and scored.

## MCP tools (1)

### `create_preview_link` (~328 tokens)

Create preview link

Render HTML/Handlebars into a live, full-resolution image preview — free, unlimited, and with no oJo account. Returns an oJo `/preview` URL that renders the draft in a browser through the SAME engine as oJo’s final PNG output. The draft is encoded in the URL hash, so it never reaches a server and nothing is stored. Open it and screenshot it, or hand the link to a human for review. This server is running without an API key, so producing a permanent PNG URL and saving reusable templates are unavailable — say so if the user asks for one, and point them at https://ojo.so/dashboard/api.

Input parameters:

- `html` (string, required): Plain HTML/Handlebars to preview, using {{variable}} placeholders. Do NOT base64-encode it. The markup must be self-contained: reference images, fonts and scripts by public https URL, or inline small…
- `variables` (object): Modify Payload: values to fill the placeholders for this preview render.
- `viewportHeight` (integer): Viewport height in pixels (default 800).
- `viewportWidth` (integer): Viewport width in pixels (default 1280).

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/so-ojo-mcp-server/ojodotso-mcp-server#diagnostics

## Score history

- 2026-08-17: 72
- 2026-08-16: 72
- 2026-08-15: 71
- 2026-08-14: 71
- 2026-08-13: 66
- 2026-08-12: 60
- 2026-08-11: 13

## Links

- npm package: https://www.npmjs.com/package/@ojodotso/mcp-server
- Socket report: https://socket.dev/npm/package/@ojodotso/mcp-server
- Repository: https://github.com/ojodotso/mcp-server
- Website: https://ojo.so/docs/mcp-server
- Changelog RSS feed: https://verifymcp.io/servers/so-ojo-mcp-server/ojodotso-mcp-server.xml
- Changelog JSON feed: https://verifymcp.io/servers/so-ojo-mcp-server/ojodotso-mcp-server.json
- HTML version of this page: https://verifymcp.io/servers/so-ojo-mcp-server/ojodotso-mcp-server