0
grade F
10 days ago
glama
iconfont-mcp
Enables searching, downloading, and managing SVG icons from iconfont.cn, China's largest icon library. It supports filtering by style, downloading assets to local files, and listing user projects with authentication.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
⚠️
Tool descriptions don’t match what handlers do
1 tool describes read intent but its handler mutates — iconfont_download_icon (line 224: writeFileSync(filePath, icon.svg || icon.show_svg))
🚨
Known vulnerabilities in dependencies: 2 critical, 5 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.config
ICONFONT_COOKIE— For features requiring authentication (like listing projects), set the environment variable:// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/guochen-thlg-iconfont-mcp-zmb4nr)commit: 0838d2fc31b6597d1f50a31029b87b783fe5683c
code hash: 68f8a2f636c41819d8367c32f81188d1b71b4818a225d639d065a9e62f89bdcd
verified: 4/11/2026, 3:03:58 PM