{ "slug": "io-github-pvliesdonk-image-generation-mcp", "name": "io.github.pvliesdonk/image-generation-mcp", "title": "Image Generation MCP Server", "description": "MCP server for AI image generation via OpenAI, Stable Diffusion (SD WebUI), or placeholders.", "version": "1.12.1", "publishedAt": "2026-08-25T11:52:03.966236Z", "updatedAt": "2026-08-25T11:52:03.966236Z", "repoUrl": "https://github.com/pvliesdonk/image-generation-mcp", "websiteUrl": "https://pvliesdonk.github.io/image-generation-mcp/", "namespace": { "type": "github", "owner": "pvliesdonk" }, "kind": "local", "packages": [ { "registryType": "pypi", "identifier": "image-generation-mcp", "version": "1.12.1", "transport": "stdio", "runtimeHint": "uvx" }, { "registryType": "oci", "identifier": "ghcr.io/pvliesdonk/image-generation-mcp:v1.12.1", "version": null, "transport": "streamable-http", "runtimeHint": null } ], "remotes": [], "envVars": [ { "name": "IMAGE_GENERATION_MCP_KV_STORE_URL", "isSecret": false, "isRequired": false, "description": "Persistent-state backend URL shared by every pvl-core subsystem that needs state. `memory://` is in-process and lost on restart; `file:///path` persists on one server; `redis://`, `dynamodb://` and `mongodb://` each need their matching extra. When unset, defaults to `file:///data/state` (the volume family Docker images mount), or to `memory://` — with a warning — on a host where that directory is not usable." }, { "name": "IMAGE_GENERATION_MCP_TOOLS_ALLOW", "isSecret": false, "isRequired": false, "description": "Comma-separated explicit tool names this instance exposes; every other tool is hidden from listings and cannot be invoked. Names matching no registered tool are inert. Mutually exclusive with `tools_deny`. Takes effect through `apply_tool_visibility`." }, { "name": "IMAGE_GENERATION_MCP_TOOLS_DENY", "isSecret": false, "isRequired": false, "description": "Comma-separated explicit tool names hidden from this instance (absent from listings, cannot be invoked). Names matching no registered tool are inert. Mutually exclusive with `tools_allow`. Takes effect through `apply_tool_visibility`." }, { "name": "IMAGE_GENERATION_MCP_SERVER_NAME", "isSecret": false, "isRequired": false, "description": "Rename this server instance; defaults to the project name." }, { "name": "IMAGE_GENERATION_MCP_INSTRUCTIONS", "isSecret": false, "isRequired": false, "description": "Replaces the default MCP instructions text sent to clients." }, { "name": "FASTMCP_LOG_LEVEL", "isSecret": false, "isRequired": false, "description": "Log level for FastMCP internals and app loggers (DEBUG / INFO / WARNING / ERROR / CRITICAL). The -v CLI flag overrides to DEBUG." }, { "name": "FASTMCP_ENABLE_RICH_LOGGING", "isSecret": false, "isRequired": false, "description": "Set false for plain or structured JSON log output." }, { "name": "IMAGE_GENERATION_MCP_A1111_HOST", "isSecret": false, "isRequired": false, "description": "Deprecated alias for IMAGE_GENERATION_MCP_SD_WEBUI_HOST; logs a warning when used." }, { "name": "IMAGE_GENERATION_MCP_A1111_MODEL", "isSecret": false, "isRequired": false, "description": "Deprecated alias for IMAGE_GENERATION_MCP_SD_WEBUI_MODEL; logs a warning when used." }, { "name": "IMAGE_GENERATION_MCP_READ_ONLY", "isSecret": false, "isRequired": false, "description": "When true, write-tagged tools (image generation, transforms, uploads) are hidden from clients. Set false to enable them." }, { "name": "IMAGE_GENERATION_MCP_SCRATCH_DIR", "isSecret": false, "isRequired": false, "description": "Directory where generated images are saved. Created automatically on first use." }, { "name": "IMAGE_GENERATION_MCP_OPENAI_API_KEY", "isSecret": true, "isRequired": false, "description": "OpenAI API key. Enables the OpenAI provider (gpt-image-2, gpt-image-1.5, dall-e-3) when set." }, { "name": "IMAGE_GENERATION_MCP_GOOGLE_API_KEY", "isSecret": true, "isRequired": false, "description": "Google API key. Enables the Gemini provider (gemini-3.1-flash-image and others) when set. Get a key at https://aistudio.google.com/apikey." }, { "name": "IMAGE_GENERATION_MCP_SD_WEBUI_HOST", "isSecret": false, "isRequired": false, "description": "SD WebUI base URL (such as http://localhost:7860). Enables the SD WebUI provider when set. Compatible with AUTOMATIC1111, Forge, reForge, and Forge-neo." }, { "name": "IMAGE_GENERATION_MCP_SD_WEBUI_MODEL", "isSecret": false, "isRequired": false, "description": "SD WebUI checkpoint name, used for model-aware preset detection (SD 1.5 / SDXL / Lightning) and checkpoint override. Unset uses the instance's current model." }, { "name": "IMAGE_GENERATION_MCP_DEFAULT_PROVIDER", "isSecret": false, "isRequired": false, "description": "Provider used when no keyword triggers auto-selection: auto, openai, gemini, sd_webui, or placeholder. auto picks the first configured provider." }, { "name": "IMAGE_GENERATION_MCP_TRANSFORM_CACHE_SIZE", "isSecret": false, "isRequired": false, "description": "Maximum number of transformed image results (resize, crop, convert) kept in memory. Set 0 to disable caching." }, { "name": "IMAGE_GENERATION_MCP_PAID_PROVIDERS", "isSecret": false, "isRequired": false, "description": "Comma-separated provider names that cost money; generate_image asks for confirmation (client elicitation) before using them. An empty value falls back to this default; to disable confirmation, set a value that names no provider (such as none)." }, { "name": "IMAGE_GENERATION_MCP_STYLES_DIR", "isSecret": false, "isRequired": false, "description": "Directory for style preset files (Markdown with YAML front matter). Created automatically if it does not exist." }, { "name": "IMAGE_GENERATION_MCP_ALLOW_LOCAL_FILE_INPUT", "isSecret": false, "isRequired": false, "description": "Allow reading input images from local filesystem paths. Off by default: only URLs and uploads are accepted." }, { "name": "IMAGE_GENERATION_MCP_MAX_INPUT_IMAGE_BYTES", "isSecret": false, "isRequired": false, "description": "Maximum accepted input image size in bytes." }, { "name": "IMAGE_GENERATION_MCP_FETCH_TIMEOUT_S", "isSecret": false, "isRequired": false, "description": "HTTP timeout in seconds when fetching remote image URLs (fetch_image and URL inputs)." }, { "name": "IMAGE_GENERATION_MCP_TRANSFER_TTL_DEFAULT_S", "isSecret": false, "isRequired": false, "description": "Link lifetime in seconds when the caller requests no explicit TTL." }, { "name": "IMAGE_GENERATION_MCP_TRANSFER_TTL_MAX_S", "isSecret": false, "isRequired": false, "description": "Ceiling in seconds a caller-requested link TTL is clamped to." }, { "name": "IMAGE_GENERATION_MCP_TRANSFER_GRACE_TTL_S", "isSecret": false, "isRequired": false, "description": "Post-success grace window in seconds: a served token's TTL shrinks to this so a stalled transfer can retry within it." }, { "name": "IMAGE_GENERATION_MCP_TRANSFER_LEASE_S", "isSecret": false, "isRequired": false, "description": "Crashed-handler reclaim window in seconds for an in-flight reservation." }, { "name": "IMAGE_GENERATION_MCP_TRANSFER_MAX_UPLOAD_BYTES", "isSecret": false, "isRequired": false, "description": "Maximum size in bytes of a single upload." }, { "name": "IMAGE_GENERATION_MCP_BASE_URL", "isSecret": false, "isRequired": false, "description": "Public base URL of the deployed server, e.g. `https://mcp.example.com`. Required for OIDC. Also the fallback source of the MCP Apps domain when `app_domain` is unset." }, { "name": "IMAGE_GENERATION_MCP_BEARER_TOKEN", "isSecret": true, "isRequired": false, "description": "Single shared bearer token; enables bearer auth unless `bearer_tokens_file` is set, which takes precedence." }, { "name": "IMAGE_GENERATION_MCP_OIDC_CONFIG_URL", "isSecret": false, "isRequired": false, "description": "OIDC discovery document URL, e.g. `https://auth.example.com/.well-known/openid-configuration`." }, { "name": "IMAGE_GENERATION_MCP_OIDC_CLIENT_ID", "isSecret": false, "isRequired": false, "description": "OIDC client identifier registered with the provider." }, { "name": "IMAGE_GENERATION_MCP_OIDC_CLIENT_SECRET", "isSecret": true, "isRequired": false, "description": "OIDC client secret registered with the provider." }, { "name": "IMAGE_GENERATION_MCP_OIDC_AUDIENCE", "isSecret": false, "isRequired": false, "description": "Expected `aud` claim; tokens issued for another audience are rejected." }, { "name": "IMAGE_GENERATION_MCP_OIDC_REQUIRED_SCOPES", "isSecret": false, "isRequired": false, "description": "Scopes a caller must present, space- or comma-separated. Defaults to `openid` in oidc-proxy mode." }, { "name": "IMAGE_GENERATION_MCP_OIDC_ADVERTISED_SCOPES", "isSecret": false, "isRequired": false, "description": "Scopes advertised to MCP clients in protected-resource metadata, space- or comma-separated. Overrides the default `openid offline_access`; `oidc_required_scopes` is always added on top. Set this when the registered client is not permitted `offline_access`, or to have clients request extra claim scopes (e.g. `groups`) without also requiring them in every token." }, { "name": "IMAGE_GENERATION_MCP_OIDC_JWT_SIGNING_KEY", "isSecret": true, "isRequired": false, "description": "Signing key for issued JWTs; used in oidc-proxy mode only. When unset, the key is derived deterministically from `oidc_client_secret`, so tokens survive a restart — but rotating that secret invalidates every issued token. Set this explicitly to decouple token validity from secret rotation. Generate with `openssl rand -hex 32`." }, { "name": "IMAGE_GENERATION_MCP_OIDC_VERIFY_ACCESS_TOKEN", "isSecret": false, "isRequired": false, "description": "Validate the access token instead of the id token." }, { "name": "IMAGE_GENERATION_MCP_APP_DOMAIN", "isSecret": false, "isRequired": false, "description": "MCP Apps iframe domain, used for CSP sandboxing. Overrides the host derived from `base_url`." }, { "name": "IMAGE_GENERATION_MCP_AUTH_MODE", "isSecret": false, "isRequired": false, "description": "Explicit auth-mode override, accepting `remote` or `oidc-proxy` (case- and whitespace-insensitive). When unset the mode is auto-detected from which auth variables are set; the override exists because having all four OIDC variables set is ambiguous between those two modes. Other values are ignored with a warning." }, { "name": "IMAGE_GENERATION_MCP_BEARER_TOKENS_FILE", "isSecret": false, "isRequired": false, "description": "Path to a TOML file mapping bearer tokens to subjects; overrides the single-token `bearer_token` mode." }, { "name": "IMAGE_GENERATION_MCP_BEARER_DEFAULT_SUBJECT", "isSecret": false, "isRequired": false, "description": "Subject assigned to the single-token bearer mode; ignored when `bearer_tokens_file` is set, since mapped mode carries per-token subjects." }, { "name": "IMAGE_GENERATION_MCP_HTTP_PATH", "isSecret": false, "isRequired": false, "description": "Mount path for the MCP endpoint." }, { "name": "PUID", "isSecret": false, "isRequired": false, "description": "Run the server process as this UID; the container entrypoint chowns writable paths to match." }, { "name": "PGID", "isSecret": false, "isRequired": false, "description": "Run the server process as this GID; pair with PUID to match the owner of a mounted volume." } ], "category": "ai-media", "subcategory": "image", "company": "", "categoryAuto": true, "checks": [ { "id": "source-linked", "label": "Source repository linked", "result": "pass", "detail": "https://github.com/pvliesdonk/image-generation-mcp" }, { "id": "version-pinned", "label": "Version pinned", "result": "pass", "detail": "Every package has an explicit version" }, { "id": "secrets-requested", "label": "Secrets requested", "result": "warn", "detail": "Asks for 5 secrets: IMAGE_GENERATION_MCP_OPENAI_API_KEY, IMAGE_GENERATION_MCP_GOOGLE_API_KEY, IMAGE_GENERATION_MCP_BEARER_TOKEN, IMAGE_GENERATION_MCP_OIDC_CLIENT_SECRET, IMAGE_GENERATION_MCP_OIDC_JWT_SIGNING_KEY" }, { "id": "known-registry", "label": "Known package registry", "result": "pass", "detail": "All packages come from npm, PyPI, OCI, NuGet or MCPB" }, { "id": "namespace", "label": "Namespace ownership", "result": "info", "detail": "Name verified via GitHub account pvliesdonk" }, { "id": "meta-text", "label": "Registry text aimed at the AI", "result": "pass", "detail": "Description and settings contain no hidden characters or instructions to the AI" }, { "id": "install-scripts", "label": "Install scripts", "result": "pass", "detail": "image-generation-mcp 1.12.1 has no setup.py; nothing runs at install" }, { "id": "code-flags", "label": "Code red flags", "result": "warn", "detail": "Very long encoded blob in code (image_generation_mcp-1.12.1/src/image_generation_mcp/_vendored_sdk.py:14: \"\"dmFyIF9fPU9iamVjdC5kZWZpbmVQcm9wZXJ0eTt2YXIgSV89KHIpPT5yO2Z1bmN0aW9uIFVfKHIsaSl7dGhpc1tyXT1JXy5iaW5\")" }, { "id": "ai-text", "label": "Text aimed at the AI", "result": "pass", "detail": "No hidden characters or instructions to the AI in 205 files, including comments and the README" } ], "scannedAt": "2026-10-29", "level": "Scanned", "install": [ { "label": "Claude Desktop (pypi)", "kind": "claude_desktop_json", "text": "{\n \"mcpServers\": {\n \"image-generation-mcp\": {\n \"command\": \"uvx\",\n \"args\": [\n \"image-generation-mcp==1.12.1\"\n ]\n }\n }\n}" }, { "label": "Claude Desktop (oci)", "kind": "claude_desktop_json", "text": "{\n \"mcpServers\": {\n \"image-generation-mcp\": {\n \"command\": \"docker\",\n \"args\": [\n \"run\",\n \"-i\",\n \"--rm\",\n \"ghcr.io/pvliesdonk/image-generation-mcp:v1.12.1\"\n ]\n }\n }\n}" } ], "curated": true, "stars": 1, "archived": false, "pushedAt": "2026-10-26T12:01:21Z", "health": { "score": 55, "parts": { "popularity": 0.2072325934517701, "activity": 0.8914934753568682, "issues": 0.8606060606060606, "security": 0.6 }, "fail": 0, "warn": 2, "raw": { "stars": 1, "forks": 0, "downloads": 66, "hn": null, "issuesOpen": 23, "issuesClosed": 142, "prsMerged": 160, "commits90": 19, "release": "2026-08-25T11:48:22Z", "pushed": "2026-10-26T12:01:21Z", "growth": null, "growthDays": null, "archived": false }, "at": "2026-10-31T07:42:38.200Z" } }