37
/ 100
1 month ago
github_topic

comfyui-mcp

The local-first, agent-native control plane for ComfyUI — MCP server + Claude Code plugin. 108 tools, 29 AI skills (Flux · WAN · LT2.3 · Qwen · Ideogram4 · Krea2). Author & run workflows, edit your live graph in natural language, manage models & custom nodes. Local, LAN, VPS, or Comfy Cloud.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
⚠️
Known vulnerabilities in dependencies: 3 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 9 credentials: AWS_SECRET_ACCESS_KEY, AWS_SESSION_TOKEN, AZURE_STORAGE_KEY, COMFYUI_API_KEY, COMFYUI_MCP_AGENT_TOKEN, COMFY_API_KEY, GITHUB_TOKEN, HUGGINGFACE_TOKEN, REGISTRY_ACCESS_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies3 high

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

high@modelcontextprotocol/sdk@1.12.1GHSA-345p-7cg4-v4c7

@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse

high@modelcontextprotocol/sdk@1.12.1GHSA-8r9q-7v3j-jr4g

Anthropic's MCP TypeScript SDK has a ReDoS vulnerability

high@modelcontextprotocol/sdk@1.12.1GHSA-w48q-cv73-mx4w

Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configAWS_ACCESS_KEY_ID
configAWS_REGION
configAWS_S3_ENDPOINT
🔐 secretAWS_SECRET_ACCESS_KEY
🔐 secretAWS_SESSION_TOKEN
configAZURE_STORAGE_ACCOUNT
configAZURE_STORAGE_CONNECTION_STRING
🔐 secretAZURE_STORAGE_KEY
configCOMFYUI_ALWAYS_RESTARTfalse Auto-restart a crashed local ComfyUI (bounded by COMFYUI_RESTART_MAX_ATTEMPTS / COMFYUI_RESTART_WINDOW_S)
🔐 secretCOMFYUI_API_KEYCloud is set (targets [Comfy Cloud](https://cloud.comfy.org)) no — HTTP primitives route via cloud.comfy.org over X-API-Key; WebSocket and local-only tools throw CLOUD_UNSUPPORTED
configCOMFYUI_ASSET_TTL_HOURS
configCOMFYUI_CLOUD_URL
configCOMFYUI_CONVERT_IMAGE_MAX_SOURCE_BYTES
configCOMFYUI_DOWNLOAD_CACHE_DIR~/.comfyui-mcp/cache Content-addressed model-download cache (dedup + concurrent coalescing)
configCOMFYUI_HOSTCOMFYUI_URL Full ComfyUI URL, e.g. https://comfy.example.com:8443 — overrides /PORT/SSL and skips auto-detection. Non-loopback hosts opt into remote mode.
configCOMFYUI_JOB_POLL_INTERVAL_S
configCOMFYUI_JOB_TIMEOUT_S
configCOMFYUI_LRU_CACHE_SIZE_GB0 Cap the download cache in GB; 0 disables LRU eviction
configCOMFYUI_MCP_AGENT_ALLOWED_MODELS
configCOMFYUI_MCP_AGENT_MODEL
configCOMFYUI_MCP_AGENT_POC
configCOMFYUI_MCP_AGENT_PORT
🔐 secretCOMFYUI_MCP_AGENT_TOKEN
configCOMFYUI_MCP_AGENT_TUNNEL
configCOMFYUI_MCP_BRIDGE_PORT
configCOMFYUI_PATHRemote --comfyui-url / COMFYUI_URL points at a non-loopback host no — server skips auto-detection so stale local installs can't silently absorb uploads
configCOMFYUI_PORT(auto-detect) ComfyUI server port (tries 8188, then 8000)
configCOMFYUI_PYTHON
configCOMFYUI_RESTART_MAX_ATTEMPTSCOMFYUI_ALWAYS_RESTART false Auto-restart a crashed local ComfyUI (bounded by / COMFYUI_RESTART_WINDOW_S)
configCOMFYUI_RESTART_WINDOW_SCOMFYUI_ALWAYS_RESTART false Auto-restart a crashed local ComfyUI (bounded by COMFYUI_RESTART_MAX_ATTEMPTS / )
configCOMFYUI_SKILL_CACHE_DIR
configCOMFYUI_SSL
configCOMFYUI_STARTUP_CHECK_INTERVAL_S/ …_MAX_TRIES 1 / 20 Readiness-probe interval + max tries when starting a local ComfyUI
configCOMFYUI_STARTUP_CHECK_MAX_TRIES
configCOMFYUI_URLRemote --comfyui-url / points at a non-loopback host no — server skips COMFYUI_PATH auto-detection so stale local installs can't silently absorb uploads
configCOMFYUI_WORKFLOWS_DIR
🔐 secretCOMFY_API_KEY
configCOMFY_HOST
configCOMFY_PORT
🔐 secretGITHUB_TOKENGitHub token for skill generation (avoids rate limits)
🔐 secretHUGGINGFACE_TOKENHuggingFace token for higher API rate limits
🔐 secretREGISTRY_ACCESS_TOKENComfy Registry API key for publish_custom_node (env-only, never logged)
configXDG_CONFIG_HOME
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 9 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/artokun-comfyui-mcp-6sczyl)](https://m8ven.ai/mcp/artokun-comfyui-mcp-6sczyl)
commit: db4dae8fbc3fa84fc4105b18f2b8ed1c65e5adec
code hash: e477f8745d75f791157d2b43166d0d641682d5dc613dadd00afbb532873b5a2f
verified: 6/13/2026, 9:39:50 AM
view raw JSON →