io.github.strato-space/media-gen-mcp

NPM · @STRATO-SPACE/MEDIA-GEN-MCP · SCANNED AUG 8

MCP server for OpenAI Images/Videos and Google GenAI (Veo) media generation.

Available components

+52 this week 57 57 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security81

No malware found by supply-chain analysis.Pass
CVE check failed: a known high-severity CVE affects sharp 0.34.5, a direct dependency. A fixed version is available. View diagnostics → Fail
No install/post-install scripts declared.Pass
47 of 168 dependencies flagged as unhealthy (1 deprecated). View diagnostics → Partial

Provenance & Transparency45

Source repository is publicly reachable at the declared URL. View diagnostics → Pass
Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
Clear OSI-approved license (MIT).Pass
Actively maintained (last published 223 days ago).Pass
Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail

Schema Quality & AI Usability46

AI-judged instruction clarity (fair).Partial
Context-footprint check failed: tool/resource definitions use about 2681 tokens (~206/item across 13 items; 13 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management0

Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified

Tool Coverage96

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
87% of tool parameters carry a description.Partial

Capabilities100

Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Unverified: 1 category

A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · @strato-space/media-gen-mcp

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add strato-space-media-gen-mcp -- npx -y @strato-space/media-gen-mcp

# add to Codex CLI

codex mcp add strato-space-media-gen-mcp -- npx -y @strato-space/media-gen-mcp

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "strato-space-media-gen-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@strato-space/media-gen-mcp"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add strato-space-media-gen-mcp --command npx --arg -y --arg @strato-space/media-gen-mcp

# ~/.hermes/config.yaml

mcp_servers:
  strato-space-media-gen-mcp:
    command: "npx"
    args: ["-y", "@strato-space/media-gen-mcp"]

// mcp.json

{
  "mcpServers": {
    "strato-space-media-gen-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@strato-space/media-gen-mcp"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

7 Aug 26 +3
- Dependency health: partial → 0.89 functional
6 Aug 26 +24
- Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
- MCP protocol: unverified → pass ▲ functional
- Tool coverage: unverified → 100 ▲ functional
- First check of Tool coverage: 87 functional
- First check of Schema quality: fair functional
- First check of Schema quality: fail functional
- First check of Schema quality: fail functional
5 Aug 26 0
- CVE-2026-69207 no longer affects this package ▲ security
4 Aug 26 0
- CVE-2026-69207 affects this package: high ▼ security
2 Aug 26 +25
- GHSA-f88m-g3jw-g9cj affects this package: high ▼ security
- Provenance: unverified → fail ▼ security
- Known CVEs: unverified → fail ▼ security
- Install scripts: unverified → pass ▲ security
- Malware scan: unverified → pass ▲ security
- Maintenance: unverified → pass ▲ functional
- License: unverified → pass ▲ functional
- Dependency health: unverified → partial ▲ functional
- Licence: MIT functional
31 Jul 26 −19
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
30 Jul 26 0
- Schema quality: Schema quality not yet verified: our sandbox run of this package did not complete, so we have no schema to assess. functional
- Tool coverage: Tool coverage not yet verified: our sandbox run of this package did not complete, so we have no tool definitions to assess. functional
28 Jul 26 0
- Tool coverage: Tool coverage not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet. functional
- Schema quality: Schema quality not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. functional

Show 3 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 8 Aug 2026 · Analysed npm/@strato-space/[email protected]

Provenance No attestation

The registry publishes no build provenance for this version, so there is nothing to verify.

Result	No attestation
Ecosystem	npm

Vulnerabilities 1 finding

ID	CVE	Severity	Vector	Fix available
GHSA-f88m-g3jw-g9cj		high		yes

Dependencies 168 packages

Packages resolved	168
Deprecated	1
Stale	46
Tree resolution	Complete

MCP tools · 13 exposed · ~2,681 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

fetch-images Fetch Images ~317

Fetch and process images from URLs or local file paths. Returns MCP CallToolResult with content[] (ResourceLink or ImageContent based on tool_result param) and structuredContent (OpenAI ImagesResponse format with data[].url or data[].b64_json based on response_format param).

Input Output Examples

Name	Type	Req	Description
compression	object	–	Compression options. If omitted, no compression is applied.
file	string	–	Base path for output files, absolute or relative to the first MEDIA_GEN_DIRS entry. If multiple images, index suffix is added.
ids	array	–	Array of image IDs to fetch by filename match (looks for filenames containing _{id}_ or _{id}. under the primary MEDIA_GEN_DIRS[0] directory). Mutually exclusive with 'sources' and 'n'.
n	integer	–	When set, returns the last N image files from the primary MEDIA_GEN_DIRS[0] directory (most recently modified first). Mutually exclusive with 'sources'.
response_format	string	–	Controls structuredContent shape: 'url' (default) emits data[].url, 'b64_json' emits data[].b64_json.
sources	array	–	Array of image sources: HTTP(S) URLs or file paths (absolute or relative to the first MEDIA_GEN_DIRS entry). Max 20 images. Mutually exclusive with 'n'.
tool_result	string	–	Controls content[] shape: 'resource_link' (default) emits ResourceLink items, 'image' emits base64 ImageContent blocks.

No output schema declared.

No examples provided.

fetch-videos Fetch Videos ~255

Fetch videos from URLs or local file paths. Returns MCP CallToolResult with content blocks (tool_result=resource_link|resource) and structuredContent listing resolved files/URLs.

Input Output Examples

Name	Type	Req	Description
file	string	–	Base path for output files (when downloading from URLs), absolute or relative to the first MEDIA_GEN_DIRS entry. If multiple videos are downloaded, an index suffix is added.
ids	array	–	Array of video IDs to fetch by filename match (looks for filenames containing _{id}_ or _{id}. under the primary MEDIA_GEN_DIRS[0] directory). Mutually exclusive with 'sources' and 'n'.
n	integer	–	When set, returns the last N video files from the primary MEDIA_GEN_DIRS[0] directory (most recently modified first). Mutually exclusive with 'sources'.
sources	array	–	Array of video sources: HTTP(S) URLs or file paths (absolute or relative to the first MEDIA_GEN_DIRS entry). Max 20 videos. Mutually exclusive with 'n'.
tool_result	string	–	Controls content[] shape: 'resource_link' (default) emits ResourceLink items, 'resource' emits EmbeddedResource blocks with base64 blob.

No output schema declared.

No examples provided.

google-videos-generate Google Videos Generate ~447

Generate videos using Google GenAI (Veo). Can optionally wait for completion and download generated videos to MEDIA_GEN_DIRS.

Input Output Examples

Name	Type	Req	Description
aspect_ratio	string	–	Aspect ratio for the generated video.
download_when_done	boolean	–	When waiting, whether to download generated videos to MEDIA_GEN_DIRS[0]. Defaults to true when wait_for_completion=true, otherwise false.
duration_seconds	integer	–	Video duration in seconds (provider/model-dependent).
input_reference	string	–	Optional image reference (image-to-video): HTTP(S) URL, base64 / data URL, or file path under MEDIA_GEN_DIRS.
input_reference_mime_type	string	–	Optional override for input image MIME type (e.g. image/jpeg). Useful when input_reference is raw base64 without a data URL header.
input_video_reference	string	–	Optional input video reference (video extension): HTTP(S) URL or file path under MEDIA_GEN_DIRS. Mutually exclusive with input_reference.
model	string	–	Google video model id (default: veo-3.1-generate-001).
number_of_videos	integer	–	Number of videos to generate (default: 1).
person_generation	string	–	Controls whether people are allowed in the generated video.
poll_interval_ms	integer	–	Polling interval when wait_for_completion is true (default: 10000).
prompt	string	–	Text prompt that describes the video to generate (max 32K chars). Required unless an input image/video is provided.
response_format	string	–	Controls structuredContent video fields: 'url' (default) prefers video.uri, 'b64_json' prefers video.videoBytes.
timeout_ms	integer	–	Max time to wait for completion when wait_for_completion is true (default: 900000).
tool_result	string	–	Controls content[] shape when downloading: 'resource_link' (default) emits ResourceLink items, 'resource' emits EmbeddedResource blocks with base64 blob.
wait_for_completion	boolean	–	If true, poll the operation until done (then optionally download). Default: true.

No output schema declared.

No examples provided.

google-videos-retrieve-content Google Videos Retrieve Content ~145

Download generated video content for a completed Google video operation, write it under MEDIA_GEN_DIRS, and return content blocks (tool_result=resource_link|resource).

Input Output Examples

Name	Type	Req	Description
index	integer	–	Which generatedVideos[index] to download (default: 0).
operation_name	string	yes	Google video operation name/id.
response_format	string	–	Controls structuredContent video fields: 'url' (default) prefers video.uri, 'b64_json' prefers video.videoBytes.
tool_result	string	–	Controls content[] shape: 'resource_link' (default) emits ResourceLink items, 'resource' emits EmbeddedResource blocks with base64 blob.

No output schema declared.

No examples provided.

google-videos-retrieve-operation Google Videos Retrieve Operation ~85

Retrieve the status/result of a Google video generation operation (response_format=url|b64_json controls uri vs videoBytes in structuredContent).

Input Output Examples

Name	Type	Req	Description
operation_name	string	yes	Google video operation name/id.
response_format	string	–	Controls structuredContent video fields: 'url' (default) prefers video.uri, 'b64_json' prefers video.videoBytes.

No output schema declared.

No examples provided.

openai-images-edit OpenAI Images Edit ~336

Edit images (inpainting, outpainting, compositing) from 1 to 16 inputs using OpenAI gpt-image-1.5 (default) or gpt-image-1. Returns MCP CallToolResult with content[] (ResourceLink or ImageContent based on tool_result param) and structuredContent (OpenAI ImagesResponse format with data[].url or data[].b64_json based on response_format param).

Input Output Examples

Name	Type	Req	Description
image	–	yes	Absolute image path, base64 string, or HTTP(S) URL to edit, or an array of such values (1-16 images).
mask	string	–	Optional absolute path, base64 string, or HTTP(S) URL for a mask image (png < 4MB, same dimensions as the first image). Fully transparent areas indicate where to edit.
model	string	–	–
n	integer	–	Number of images to generate (1-10).
prompt	string	yes	A text description of the desired edit. Max 32000 chars.
quality	string	–	Quality (high, medium, low). Default: high.
response_format	string	–	Controls structuredContent shape: 'url' (default) emits data[].url, 'b64_json' emits data[].b64_json.
size	string	–	Size of the generated images. Default: 1024x1536.
tool_result	string	–	Controls content[] shape: 'resource_link' (default) emits ResourceLink items, 'image' emits base64 ImageContent blocks.
user	string	–	Optional user identifier for OpenAI monitoring.

No output schema declared.

No examples provided.

openai-images-generate OpenAI Images Generate ~223

Generate images from text prompts using OpenAI gpt-image-1.5 (default) or gpt-image-1. Returns MCP CallToolResult with content[] (ResourceLink or ImageContent based on tool_result param) and structuredContent (OpenAI ImagesResponse format with data[].url or data[].b64_json based on response_format param).

Input Output Examples

Name	Type	Req	Description
background	string	–	–
model	string	–	–
moderation	string	–	–
n	integer	–	–
output_compression	integer	–	–
output_format	string	–	–
prompt	string	yes	–
quality	string	–	–
response_format	string	–	Controls structuredContent shape: 'url' (default) emits data[].url, 'b64_json' emits data[].b64_json.
size	string	–	–
tool_result	string	–	Controls content[] shape: 'resource_link' (default) emits ResourceLink items, 'image' emits base64 ImageContent blocks.
user	string	–	–

No output schema declared.

No examples provided.

openai-videos-create OpenAI Videos Create ~385

Create a video generation job using the OpenAI Videos API. Returns structuredContent with the OpenAI Video job object, and (optionally) downloaded assets as MCP content blocks (tool_result=resource_link|resource).

Input Output Examples

Name	Type	Req	Description
download_variants	array	–	Which downloadable assets to fetch when completed (default: ['video']).
input_reference	string	–	Optional image reference: HTTP(S) URL, base64 / data URL, or file path.
input_reference_background	–	–	Padding background when input_reference_fit=contain: blur (default), black, white, or hex color (#RRGGBB/#RRGGBBAA).
input_reference_fit	string	–	How to fit input_reference to the requested video size: match (require exact), cover (crop), contain (pad), stretch (distort). Default: contain.
model	string	–	Video model to use (default: sora-2-pro).
poll_interval_ms	integer	–	Polling interval when wait_for_completion is true (default: 2000).
prompt	string	yes	Text prompt that describes the video to generate (max 32K chars).
seconds	string	–	Clip duration in seconds (default: 4 seconds).
size	string	–	Output resolution formatted as width x height. Sizes 1024x1792 and 1792x1024 require sora-2-pro.
timeout_ms	integer	–	Max time to wait for completion when wait_for_completion is true (default: 900000).
tool_result	string	–	Controls content[] shape: 'resource_link' (default) emits ResourceLink items, 'resource' emits EmbeddedResource blocks with base64 blob.
wait_for_completion	boolean	–	If true, poll the job until completed/failed (then optionally download assets). Default: true.

No output schema declared.

No examples provided.

openai-videos-delete OpenAI Videos Delete ~37

Delete a video job by id using the OpenAI Videos API.

Input Output Examples

Name	Type	Req	Description
video_id	string	yes	Video job id to delete.

No output schema declared.

No examples provided.

openai-videos-list OpenAI Videos List ~78

List video jobs using the OpenAI Videos API. Returns structuredContent with the OpenAI list response shape { data, has_more, last_id }.

Input Output Examples

Name	Type	Req	Description
after	string	–	Cursor (video id) to list after.
limit	integer	–	Page size.
order	string	–	Sort order of results by timestamp.

No output schema declared.

No examples provided.

openai-videos-remix OpenAI Videos Remix ~223

Create a remix video job from an existing video_id. Returns structuredContent with the OpenAI Video job object, and (optionally) downloaded assets as MCP content blocks (tool_result=resource_link|resource).

Input Output Examples

Name	Type	Req	Description
download_variants	array	–	Which downloadable assets to fetch when completed (default: ['video']).
poll_interval_ms	integer	–	Polling interval when wait_for_completion is true (default: 2000).
prompt	string	yes	Updated prompt that directs the remix (max 32K chars).
timeout_ms	integer	–	Max time to wait for completion when wait_for_completion is true (default: 900000).
tool_result	string	–	Controls content[] shape: 'resource_link' (default) emits ResourceLink items, 'resource' emits EmbeddedResource blocks with base64 blob.
video_id	string	yes	Source video job id to remix.
wait_for_completion	boolean	–	If true, poll the job until completed/failed (then optionally download assets). Default: true.

No output schema declared.

No examples provided.

openai-videos-retrieve OpenAI Videos Retrieve ~36

Retrieve a video job by id using the OpenAI Videos API.

Input Output Examples

Name	Type	Req	Description
video_id	string	yes	Video job id.

No output schema declared.

No examples provided.

openai-videos-retrieve-content OpenAI Videos Retrieve Content ~114

Retrieve a video asset (video/thumbnail/spritesheet) for a completed job, write it under MEDIA_GEN_DIRS, and return content blocks (tool_result=resource_link|resource).

Input Output Examples

Name	Type	Req	Description
tool_result	string	–	Controls content[] shape: 'resource_link' (default) emits ResourceLink items, 'resource' emits EmbeddedResource blocks with base64 blob.
variant	string	–	Which downloadable asset to return (default: video).
video_id	string	yes	Video job id.

No output schema declared.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

27 Jul 8 Aug

Day	Score
27 Jul	24
28 Jul	24
30 Jul	24
31 Jul	5
1 Aug	5
2 Aug	30
3 Aug	30
4 Aug	30
5 Aug	30
6 Aug	54
7 Aug	57
8 Aug	57