MCP server + Claude Code plugin for ComfyUI — execute workflows, generate images, visualize pipelines, manage models, control VRAM, and explore custom nodes, all from your AI coding assistant.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default
process.env. You'll be asked to provide them before it can run.ANTHROPIC_API_KEYARENA_APIARENA_API_KEYARENA_BASE_URLARENA_MAX_ROUNDSARENA_MODELSARENA_OUTARENA_SCENARIO_TIMEOUT_MSARENA_TIERAWS_ACCESS_KEY_IDAWS_REGIONAWS_S3_ENDPOINTAWS_SECRET_ACCESS_KEYAWS_SESSION_TOKENAZURE_STORAGE_ACCOUNTAZURE_STORAGE_CONNECTION_STRINGAZURE_STORAGE_KEYBRIDGE_URLCAP_MSCOMFYUI_ALWAYS_RESTART— false Auto-restart a crashed local ComfyUI (bounded by COMFYUI_RESTART_MAX_ATTEMPTS / COMFYUI_RESTART_WINDOW_S)COMFYUI_API_KEY— Cloud is set (targets [Comfy Cloud](https://cloud.comfy.org)) no — HTTP primitives route via cloud.comfy.org over X-API-Key; WebSocket and local-only tools throw CLOUD_UNSUPPORTEDCOMFYUI_ASSET_TTL_HOURSCOMFYUI_AUTH_HEADER— Authorization Header name for COMFYUI_AUTH_TOKEN (e.g. X-API-Key).COMFYUI_AUTH_SCHEME— Bearer for Authorization, else none Scheme prefix on the token value (e.g. Bearer, Token).COMFYUI_AUTH_TOKEN— Generic auth token for a self-hosted ComfyUI behind a reverse proxy / API gateway (distinct from Comfy Cloud). When set, attached to every ComfyUI request. Never logged.COMFYUI_CLOUD_URLCOMFYUI_DOWNLOAD_CACHE_DIR— ~/.comfyui-mcp/cache Content-addressed model-download cache (dedup + concurrent coalescing)COMFYUI_HOST— 127.0.0.1 ComfyUI server addressCOMFYUI_JOB_POLL_INTERVAL_SCOMFYUI_JOB_TIMEOUT_SCOMFYUI_LRU_CACHE_SIZE_GB— 0 Cap the download cache in GB; 0 disables LRU evictionCOMFYUI_MCP_AGENT_ALLOWED_MODELSCOMFYUI_MCP_AGENT_MODELCOMFYUI_MCP_AGENT_POCCOMFYUI_MCP_AGENT_PORTCOMFYUI_MCP_AGENT_TOKENCOMFYUI_MCP_AGENT_TUNNELCOMFYUI_MCP_BRIDGE_HOSTCOMFYUI_MCP_BRIDGE_PORTCOMFYUI_MCP_BRIDGE_TOKENCOMFYUI_MCP_CLAUDE_JSONCOMFYUI_MCP_CODEX_MODELCOMFYUI_MCP_CODEX_SANDBOXCOMFYUI_MCP_DATA_DIRCOMFYUI_MCP_FORCE_REMOTE— 1) alongside --comfyui-url/COMFYUI_URL to forceCOMFYUI_MCP_GEMINI_MODELCOMFYUI_MCP_INSECURE_BRIDGECOMFYUI_MCP_INTERRUPT_RELEASE_MSCOMFYUI_MCP_INTERRUPT_S— 30 Seconds cancel_job waits for an interrupt to actually stop a job before escalating to /free and reporting it wedgedCOMFYUI_MCP_OLLAMA_APICOMFYUI_MCP_OLLAMA_API_KEYCOMFYUI_MCP_OLLAMA_BASE_URLCOMFYUI_MCP_OLLAMA_MAX_TOKENSCOMFYUI_MCP_OLLAMA_MODELCOMFYUI_MCP_OPENROUTER_MODELCOMFYUI_MCP_PANEL_EFFORTCOMFYUI_MCP_PANEL_MCP_PORTCOMFYUI_MCP_PANEL_MODELCOMFYUI_MCP_PANEL_SECRETSCOMFYUI_MCP_PANEL_SETTINGSCOMFYUI_MCP_PARENT_PIDCOMFYUI_MCP_PARENT_STARTED_AT_MSCOMFYUI_MCP_PROGRESS_DIRCOMFYUI_MCP_RELAY_KEYCOMFYUI_MCP_RELAY_URLCOMFYUI_MCP_STALL_S— 180 Render-wedge watchdog: seconds a sampler step can re-emit the same progress before a STALL/BACKLOG note is prepended to the agent's next turn (clamped 15–3600s; live-tunable from the panel)COMFYUI_MCP_TEST_ATTEMPTSCOMFYUI_MCP_TOOL_TRACECOMFYUI_MCP_TRANSCRIPT_DIRCOMFYUI_MCP_TUNNEL_BACKENDCOMFYUI_MCP_TURN_IDLE_MSCOMFYUI_PATH— Remote --comfyui-url / COMFYUI_URL points at a non-loopback host, or --force-remote is set no — server skips auto-detection so stale local installs can't silently absorb uploadsCOMFYUI_PORT— (auto-detect) ComfyUI server port (tries 8188, then 8000)COMFYUI_PYTHONCOMFYUI_SKILL_CACHE_DIRCOMFYUI_SSLCOMFYUI_URL— This is sugar for --panel-orchestrator with set from the URL: theCOMFYUI_WORKFLOWS_DIRCOMFY_API_KEYCOMFY_HOSTCOMFY_PORTDURATION_MSGEMINI_CLI_HOMEGITHUB_TOKEN— GitHub token for skill generation (avoids rate limits)HF_TOKENHUGGINGFACE_TOKEN— HuggingFace token for higher API rate limitsLOG_ORCHOLLAMA_HOSTOLLAMA_MODELOPENROUTER_API_KEYPANEL_AGENT_BACKENDREGISTRY_ACCESS_TOKEN— Comfy Registry API key for publish_custom_node (env-only, never logged)RUNPOD_API_KEYRUNPOD_DONORRUNPOD_TEMPLATE_IDSCENARIO_CAP_MSSCENARIO_FILTERSEED_NODESSKIP_TEMPLATESMOKE_BASE_URLSMOKE_BRIDGE_PORTSMOKE_MODELSSMOKE_TURN_TIMEOUT_MSTASKTEST_PORTXDG_CONFIG_HOME[](https://m8ven.ai/mcp/sandyup-comfyui-mcp-1tkchn)