image_studio_mcp

An MCP server that lets any MCP client generate and edit images using Image Studio API, returning results inline and saving PNGs to disk.

→ ross-sec/image_studio_mcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Tool descriptions don’t match what handlers do

1 tool describes read intent but its handler mutates — get_job (line 49: mkdir(dir, { recursive: true }))

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configIMAGE_OUTPUT_DIR— every image as an inline base64 block and write it to /<job_id>/<n>.png. Call

configIMAGE_STUDIO_URL

configMCP_MAX_WAIT_S— generate_image / edit_image submit the job, poll to completion (up to ), return

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/ross-sec-image-studio-mcp-17ayfc)](https://m8ven.ai/mcp/ross-sec-image-studio-mcp-17ayfc)

commit: 1841524843a0a706e72b679a8cc93002e0b4613d

code hash: a8b1838833a6e9df31a4eab1e4d574d0c445612e17a72d1b21eb07f7df48527e

verified: 7/22/2026, 8:40:09 AM

view raw JSON →