Annot

Retrieves and manages visual website feedback from Annot for applying design changes through AI assistants.

→ pkk-dev/annot-mcp · listed on pulsemcp

Install from

PulseMCP

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Secret credentials may flow to a network call

1 flow detected: ANNOT_API_KEY. We can’t prove the destination matches the brand the credential belongs to.

⚠️

Known vulnerabilities in dependencies: 3 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

🔐

You'll be asked for 1 credential: ANNOT_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretANNOT_API_KEY— "": "ak_your_api_key_here"

configANNOT_API_URL— No Override the API endpoint (defaults to Annot production)

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/pkk-dev-annot-mcp-13zbgi)](https://m8ven.ai/mcp/pkk-dev-annot-mcp-13zbgi)

commit: eeca5833d34e82c5ffa1bc43d3a0aad07cae422c

code hash: 2254578b2fbb6b85d18f27a3ce012af5504bf6e6fd8462d0627e8ac2fd76bd81

verified: 4/18/2026, 5:53:48 PM

view raw JSON →