ImgKits MCP
REMOTE · MCP.IMGKITS.COM
ImgKits gateway MCP: translation (text/doc/image/subtitle) and watermark add/remove tools.
Available components
Last scanned (21 hours ago)
Scores higher than 58% of remote servers
Reachable. Last reached 4 Nov 2026.
Category Documents and Files
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security83
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation is enforced on tool calls, but the challenge carries no valid RFC 9728 metadata, so a client cannot discover where to get a token. See how to fix → View diagnostics → Fail
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability61
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 3654 tokens (~304/item across 12 items; 12 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management10
- Stability observed for 3 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 13 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities60
- Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 3 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.
- 2 Nov 26 0
- Stability: unverified → 0.03 ▲ functional
- 1 Nov 26 71
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 4 Nov 2026 · Probed https://mcp.imgkits.com/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=imgkits.com | CN=WE1,O=Google Trust Services,C=US | 1 Nov 2026 | 30 Jan 2027 | ECDSA 256 | ECDSA-SHA256 | 90340e907900c9e30e4508ca95f359e3 |
| SANs: imgkits.com, mcp.imgkits.com, *.mcp.imgkits.com | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of mcp.imgkits.com. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| imgkits.com. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication Challenged, unverified
The endpoint asked for a token, but we could not retrieve and validate the RFC 9728 metadata that tells a client how to obtain one.
| Result | Challenged, unverified |
|---|---|
| Enforced | On tool calls |
| HTTP status | 200 |
WWW-Authenticate challenge Bearer
Bearer| Header | Value |
|---|---|
| x-content-type-options | nosniff |
Protected resource metadata
| Retrieved | No |
|---|---|
| Problem | no_resource_metadata |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://mcp.imgkits.com/mcp | Verified | 200 | |
| http (plaintext) | http://mcp.imgkits.com/mcp | HTTPS enforced | 301 | https://mcp.imgkits.com/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
add_watermark Add watermark ~532
Add a visible text or image watermark to an image or PDF supplied as a public URL. Formats: JPG/PNG/WebP images up to 10 MB; PDF up to 30 MB. watermark_type=text requires `text` (<= 500 chars); watermark_type=image requires `watermark_image_url` (PNG/JPG/WebP, <= 5 MB, transparency supported). Position: top-left/top-center/top-right/center/bottom-left/bottom-center/bottom-right/tile. opacity 0.05-1, optional scale/font_size/color/rotation. For PDF, pass `pages` (e.g. "1-3,5") to limit pages. Synchronous. Cost: 2 credits per call; mcp-credit-gateway charges before forwarding the request. Requires Authorization: Bearer sk_live_... on the MCP endpoint.
| Name | Type | Req | Description |
|---|---|---|---|
| color | string | – | Text colour as #RRGGBB. Defaults to upstream choice (usually white). |
| font_size | integer | – | Text watermark font size in pixels (images) or points (PDF), 8–256. |
| idempotency_key | string | – | Optional caller correlation key, echoed in the result. Billing is handled by mcp-credit-gateway. |
| opacity | number | – | Watermark opacity, 0.05–1 (default 0.35). |
| pages | string | – | PDF only. 1-based page selection such as "1", "1-3" or "1-3,5,8-10". |
| position | string | – | Anchor for the watermark, or `tile` to repeat it across the page/image. |
| rotation | number | – | Clockwise rotation in degrees, -180 to 180 (e.g. 45 for a diagonal stamp). |
| scale | number | – | Image watermark width as a fraction of the source width, 0.02–0.95. |
| source_type | string | – | Optional. Defaults to PDF when source_url ends in .pdf, otherwise image. |
| source_url | string | yes | Public http(s) URL of the source image (JPG/PNG/WebP, <= 10 MB) or PDF (<= 30 MB). |
| text | string | – | Watermark text, required when watermark_type=text (<= 500 chars). |
| watermark_image_url | string | – | Public PNG/JPG/WebP watermark image URL, required when watermark_type=image (<= 5 MB; transparency supported). |
| watermark_type | string | yes | `text` stamps words; `image` overlays a logo/PNG watermark. |
No output schema declared.
No examples provided.
convert_to_markdown Convert PDF or image to Markdown ~234
Convert PDF and image files to clean Markdown for RAG, LLM ingestion, and knowledge bases. Optionally include MinerU layout JSON (content list with blocks and bounding boxes). Input: 1-5 public https file URLs, each ≤20 MiB. Supported: pdf, png, jpeg, webp, bmp, tiff. DOCX is not supported in this release. Private, local, and metadata hosts are rejected. Processing is asynchronous upstream; this call polls until done or times out after about 75 seconds. This Worker does not store uploaded files or results. Upstream MinerU task data is temporary (≤24h). Billing: charged before the MinerU job is created (default 1 credit per tool call). No automatic refunds. Powered by MinerU (opendatalab/MinerU). License: https://github.com/opendatalab/MinerU/blob/master/LICENSE.md
| Name | Type | Req | Description |
|---|---|---|---|
| files | array | yes | 1-5 public https file URLs. |
| include_layout_json | boolean | – | When true, also return MinerU layout JSON (content_list) for each file. |
No output schema declared.
No examples provided.
decode_blind_watermark Decode blind watermark ~248
Read a blind watermark from an image (public http(s) URL). Uses the AiController CreateDecodeBlindWatermarkTask + GetDecodeBlindWatermarkResult async path. Start with `source_url`; the call waits up to `wait_seconds` (default 15, max 60) and returns a `job_id` if still running. Poll by calling again with only `job_id`; polling never creates a new upstream decode task. Returns `content` when readable. Cost: 2 credits per call, charged by mcp-credit-gateway before forwarding.
| Name | Type | Req | Description |
|---|---|---|---|
| idempotency_key | string | – | Optional caller correlation key, echoed in the result. Billing is handled by mcp-credit-gateway. |
| job_id | string | – | Existing upstream task id returned by a previous call. Polling never creates a new decode task. |
| source_url | string | – | Public http(s) URL of the watermarked image. Start a new decode job with this, or poll with `job_id`. |
| wait_seconds | number | – | How long to wait for a result, 0–60 seconds (default 15). On timeout the call returns a job_id to poll. |
No output schema declared.
No examples provided.
detect_language Detect language ~115
Detect the language of up to 20,000 characters. Uses a local Unicode-script + stopword/diacritic heuristic; no upstream call. Returns a language code, confidence, reliability flag and alternatives. Billing: free by default (COST_DETECT_LANGUAGE=0).
| Name | Type | Req | Description |
|---|---|---|---|
| idempotency_key | string | – | Optional per-job key; relevant when COST_DETECT_LANGUAGE is above 0 (gateway billing). |
| text | string | yes | Text to identify. Up to 20,000 characters; longer samples improve accuracy. |
No output schema declared.
No examples provided.
embed_blind_watermark Embed blind watermark ~328
Embed an invisible/blind watermark into an image supplied as a public URL (JPG/PNG/WebP/BMP, <= 10 MB; at least 64x64 px recommended). Uses the AiController EncodeBlindWatermark / Alibaba Cloud IMM path. Pass `watermark_text` (<= 512 chars, e.g. an order id), or omit it to use the server-held BLIND_WATERMARK_KEY secret; the embedded content is never echoed back. `model` is DWT (default, more robust) or DCT; optional `strength` 1-10. Synchronous. Cost: 2 credits per call, charged by mcp-credit-gateway before forwarding.
| Name | Type | Req | Description |
|---|---|---|---|
| idempotency_key | string | – | Optional caller correlation key, echoed in the result. Billing is handled by mcp-credit-gateway. |
| model | string | – | Blind-watermark algorithm. DWT is more robust to scaling; DCT is faster. |
| source_url | string | yes | Public http(s) URL of the source image (JPG/PNG/WebP/BMP, <= 10 MB). Recommended at least 64x64 px so the blind watermark survives compression. |
| strength | integer | – | Optional embedding strength, 1–10. Higher survives more editing but is slightly more visible. |
| watermark_text | string | – | Content to embed invisibly (<= 512 chars), e.g. an order id or user id. Omit to use the server-held BLIND_WATERMARK_KEY. The content is never echoed back in the result. |
No output schema declared.
No examples provided.
extract_tables Extract tables from PDF or image ~243
Extract tables from PDFs and images as HTML plus a row/column matrix. Merged cells are expanded; only the top-left cell carries content and other covered cells are empty strings. Returns row_count, column_count, page_idx, and bbox for each table. Input: 1-5 public https file URLs, each ≤20 MiB. Supported: pdf, png, jpeg, webp, bmp, tiff. DOCX is not supported in this release. Private, local, and metadata hosts are rejected. Table structure is model-recognized, so complex, borderless, or handwritten tables may contain errors. Processing is asynchronous and this call polls until done or times out after about 75 seconds. This Worker does not store uploaded files or results. Upstream MinerU task data is temporary (≤24h). Billing: charged before the MinerU job is created (default 1 credit per tool call). No automatic refunds. Powered by MinerU (opendatalab/MinerU). License: https://github.com/opendatalab/MinerU/blob/master/LICENSE.md
| Name | Type | Req | Description |
|---|---|---|---|
| files | array | yes | 1-5 public https file URLs. |
No output schema declared.
No examples provided.
ocr_image Image OCR with bounding boxes ~239
Extract text from images, screenshots, and scanned PDF pages. Returns text blocks with block-level bounding boxes [x0, y0, x1, y1] and page indexes. Coordinates are MinerU content-list coordinates, not character-level boxes and not rescaled to pixels. Input: 1-5 public https file URLs, each ≤20 MiB. Supported: pdf, png, jpeg, webp, bmp, tiff. DOCX is not supported in this release. Private, local, and metadata hosts are rejected. Tables inside an image are returned as positioned table_cell blocks. Processing is asynchronous and this call polls until done or times out after about 75 seconds. This Worker does not store uploaded files or results. Upstream MinerU task data is temporary (≤24h). Billing: charged before the MinerU job is created (default 1 credit per tool call). No automatic refunds. Powered by MinerU (opendatalab/MinerU). License: https://github.com/opendatalab/MinerU/blob/master/LICENSE.md
| Name | Type | Req | Description |
|---|---|---|---|
| files | array | yes | 1-5 public https file URLs. |
No output schema declared.
No examples provided.
remove_watermark Remove watermark (authorized material only) ~442
AI watermark removal / inpainting for ONE image (JPG/PNG/WebP, <= 10 MB) supplied as a public URL. Optional `mask_image_url` (white = remove) or normalized `mask_rect` {x,y,width,height} in 0-1; with neither, the upstream auto-detect mode is used (support depends on the upstream). COPYRIGHT / ABUSE GATE: Use only on images you own or are explicitly licensed/authorized to edit. Do not remove copyright, ownership, attribution or license watermarks from third-party material, and do not bulk-strip watermarks from other people's content. Calls are rate-limited/metered by mcp-credit-gateway, require a valid sk_live_ key, and every attempt (including failures) is logged with an audit id for review. （仅处理自有或已获授权素材；禁止批量剥离他人版权水印；调用限频；失败可审计。） This tool is metered per call, accepts a single image per request, and returns an audit_id; bulk/automated third-party stripping is prohibited and may be blocked or reported. Cost: 3 credits per call; mcp-credit-gateway charges before forwarding the request.
| Name | Type | Req | Description |
|---|---|---|---|
| bucket | string | – | Upstream storage bucket for the result (default imgkits). |
| idempotency_key | string | – | Optional caller correlation key, echoed in the result. Billing is handled by mcp-credit-gateway. |
| mask_image_url | string | – | Optional public URL of a mask image (white/opaque = watermark area to remove, black or transparent = keep). Mutually exclusive with mask_rect. |
| mask_rect | object | – | Optional rectangular mask in normalized coordinates (0–1). For /api/inpaint this is forwarded as `mask_rect`; if the upstream requires a bitmap mask, pass mask_image_url instead. Mutually exclusive w… |
| source_url | string | yes | Public http(s) URL of the image to clean (JPG/PNG/WebP, <= 10 MB). Only use material you own or are explicitly authorized to edit. |
No output schema declared.
No examples provided.
translate_document Translate document ~377
Translate a document from a public URL. Supported formats include PDF, DOCX/DOC, XLSX/XLS, PPTX/PPT, EPUB, TXT, HTML, MD and CSV. Upstream size limits: PDF <= 30 MB, other formats <= 80 MB. This is an async job: the call waits up to wait_seconds (default 30, max 120) and returns a job_id if still running. Call again with the same job_id to poll; polling does not start a new translation job. Upstream deletes temporary/original files after processing and result URLs expire (about 24 hours), so download promptly. Cost: 5 credits per new job, charged by mcp-credit-gateway before forwarding the request.
| Name | Type | Req | Description |
|---|---|---|---|
| doc_url | string | – | Publicly reachable document URL (signed URLs are fine). Supported: PDF, DOCX/DOC, XLSX/XLS, PPTX/PPT, EPUB, TXT, HTML, MD, CSV, SRT and more. Upstream size limits: PDF <= 30 MB, other formats <= 80 M… |
| file_name | string | – | Optional original file name, used by the upstream for the output file name. |
| from | string | – | Source language code or name. Defaults to 'auto'. |
| idempotency_key | string | – | Optional per-job key for upstream job isolation. Billing is handled by mcp-credit-gateway. |
| job_id | string | – | Resume polling an existing job. Polling does not create a new upstream job. |
| to | string | – | Target language code or name, e.g. en, zh, cht, ja, ko, fr, de, es. |
| wait_seconds | integer | – | How long to wait for the async job in this call (0-120 seconds, default 30). |
No output schema declared.
No examples provided.
translate_image Translate image text ~322
Translate text inside 1-10 images supplied as public URLs (JPG/PNG/WebP recommended; keep each image <= 10 MB). This is an async job: the call waits up to wait_seconds (default 30, max 120) and returns a job_id if still running. Call again with the same job_id to poll; polling does not start a new translation job. Upstream result URLs expire (about 24 hours), so download promptly. Cost: 2 credits per new job, charged by mcp-credit-gateway before forwarding the request.
| Name | Type | Req | Description |
|---|---|---|---|
| font | string | – | Overlay font. Defaults to 'noto'. |
| from | string | – | Source language code or name. Defaults to 'auto'. |
| idempotency_key | string | – | Optional per-job key for upstream job isolation. Billing is handled by mcp-credit-gateway. |
| image_urls | array | – | 1-10 public image URLs (JPG/PNG/WebP recommended). Keep each image <= 10 MB; larger files may be rejected by the upstream downloader. |
| job_id | string | – | Resume polling an existing job. Polling does not create a new upstream job. |
| paste | – | – | Paste mode: 0 = no text overlay, 1 = whole-image overlay (default), 2 = block overlay. |
| to | string | – | Target language code or name. Required for a new job. |
| wait_seconds | integer | – | How long to wait for the async job in this call (0-120 seconds, default 30). |
No output schema declared.
No examples provided.
translate_subtitle Translate subtitle ~210
Translate SRT, WebVTT or ASS/SSA subtitle content (up to 1,000,000 characters). Timestamps, cue order, SRT/VTT indices and ASS event fields are preserved exactly; only cue text is translated. Synchronous. Cost: 3 credits per call, charged by mcp-credit-gateway before forwarding the request.
| Name | Type | Req | Description |
|---|---|---|---|
| format | string | – | Subtitle format. Defaults to auto-detection. |
| from | string | – | Source language code or name. Defaults to 'auto'. |
| idempotency_key | string | – | Optional per-job key for upstream job isolation. Billing is handled by mcp-credit-gateway. |
| subtitle_content | string | yes | Raw subtitle text (SRT, WebVTT or ASS/SSA). Up to 1,000,000 characters. Timestamps are preserved exactly. |
| to | string | yes | Target language code or name, e.g. en, zh, cht, ja, ko, fr, de, es. |
No output schema declared.
No examples provided.
translate_text Translate text ~202
Translate up to 50,000 characters of plain text (up to 50 strings). Long inputs are split into <=1,900-character chunks automatically. Synchronous. Cost: 1 credit per call; mcp-credit-gateway charges before forwarding the request. Requires Authorization: Bearer sk_live_... on the MCP endpoint.
| Name | Type | Req | Description |
|---|---|---|---|
| from | string | – | Source language code or English name. Defaults to 'auto'. |
| idempotency_key | string | – | Optional per-job key for upstream job isolation. Billing is handled by mcp-credit-gateway. |
| text | string | – | A single string to translate. Provide this or `texts`, not both. |
| texts | array | – | Up to 50 strings to translate in one call. Total length must be <= 50,000 characters. |
| to | string | yes | Target language code or English name, e.g. en, zh, cht, ja, ko, fr, de, es. |
No output schema declared.
No examples provided.
How do I install the ImgKits MCP server?
ImgKits MCP is a hosted endpoint at https://mcp.imgkits.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · mcp.imgkits.com
claude mcp add --transport http yichong1-mcp-imgkits 'https://mcp.imgkits.com/mcp'
What is the ImgKits MCP server?
ImgKits MCP is listed in the public MCP registry as io.github.yichong1/mcp-imgkits. ImgKits gateway MCP: translation (text/doc/image/subtitle) and watermark add/remove tools. This page covers its hosted endpoint (https://mcp.imgkits.com/mcp).
Is the ImgKits MCP server safe to use?
ImgKits MCP scores 72 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the ImgKits MCP server expose?
ImgKits MCP exposes 12 tools: convert_to_markdown, ocr_image, extract_tables, translate_text, translate_document, and 7 more. Their descriptions and schemas cost roughly 3,492 tokens of context every time the server is loaded.
Does the ImgKits MCP server require authentication?
Yes. ImgKits MCP asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.
Is the ImgKits MCP server still maintained?
ImgKits MCP is still listed as active in the MCP registry. We last reached this channel on 4 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.