0
/ 100
1 day ago
glama

ComfyUI MCP Skills

MCP server that dynamically exposes each enabled ComfyUI workflow as a tool with JSON Schema, supports job submission with wait and idempotency, file uploads, and resource metadata, with both stdio and authenticated Streamable HTTP transports.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Reads files from sensitive locations
Touches: Remote assets require an HTTPS URL without credentials
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configXDG_CACHE_HOME
configCOMFYUI_MCP_UPLOAD_ROOTS$env: = "D:/media;E:/shared-assets"
configCOMFYUI_MCP_LOG_LEVEL服务写入 JSON 结构化日志到 stderr。通过 设置级别;日志只记录白名单上下文字段,不记录 Token 或请求正文。HTTP 进程维护请求总数、错误数、429 数和累计耗时的进程内指标快照。
configCOMFYUI_MCP_DIR"": "D:/path/to/project"
configCOMFYUI_MCP_ENABLE_ADMIN$env: = "1"
configCOMFYUI_MCP_ADMIN_ACTOR
configCOMFYUI_MCP_WORKERS$env: = "4"
configCOMFYUI_MCP_LIMIT_MODE$env: = "external"
configCOMFYUI_MCP_HOST$env: = "0.0.0.0"
configCOMFYUI_MCP_PORT
configCOMFYUI_MCP_TOKENS$env: = '{"replace-with-secret":{"principal_id":"agent-prod","scopes":["comfyui:execute"]}}'
configCOMFYUI_MCP_ALLOWED_ORIGINS$env: = "https://agent.example.com"
configCOMFYUI_MCP_PUBLIC_URL$env: = "https://mcp.example.com/mcp"
configCOMFYUI_MCP_UPLOAD_ROOT
configCOMFYUI_MCP_MAX_UPLOAD_BYTES
configCOMFYUI_MCP_MAX_JSON_BYTES
configCOMFYUI_MCP_MAX_FETCH_JSON_BYTES
configCOMFYUI_MCP_REQUESTS_PER_MINUTE
configCOMFYUI_MCP_MAX_CONCURRENT_REQUESTS
configCOMFYUI_MCP_MAX_SUBSCRIPTION_STREAMS
configCOMFYUI_MCP_MAX_SUBSCRIPTIONS_PER_PRINCIPAL
configCOMFYUI_MCP_AUTH_MODE远程模式拒绝匿名启动。当前只实现部署方配置的预共享静态 Bearer Token。 只接受 static;OAuth 2.1、JWT/JWKS 和 Token Introspection 尚未实现,服务不会发布 OAuth Protected Resource Metadata。
configCOMFYUI_MCP_FETCH_HOSTS$env: = "cdn.example.com,objects.example.com"
configCOMFYUI_MCP_RUN_RETENTION_DAYS$env: = "30"
configCOMFYUI_MCP_ASSET_RETENTION_DAYS$env: = "30"
configCOMFYUI_MCP_MAX_HISTORY_RECORDS$env: = "10000"
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/shiroeirin-comfyui-mcp-skills-9v1pu7)](https://m8ven.ai/mcp/shiroeirin-comfyui-mcp-skills-9v1pu7)
commit: a9a073180c92b962b53186b50dbf8901106e936b
code hash: 7296e020bea73437185a8edaecd038393666ad9aebc83174890d4866bd891880
verified: 7/30/2026, 9:03:42 AM
view raw JSON →