fastcar-vision
Provides vision understanding capabilities such as image analysis, OCR, object localization, and video frame analysis, plus optional image generation and editing, to coding agents via OpenAI-compatible multimodal models. Runs as a local MCP server with HTTP and stdio transports, configurable for clients like Codex, Claude Code, Kimi, and Cursor.
Emerging. No concerning findings. Grades remain capped until the project builds reputation through adoption. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
williamDazhangyu
Source: Glama
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.
These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.
analyze_image提交图片理解、OCR、摘要或主体定位任务并立即返回 taskId；随后调用 wait_vision_task 等待结果。
analyze_video提交视频抽帧与结构化理解任务并立即返回 taskId；随后调用 wait_vision_task 等待结果。
list_vision_models列出已配置的视觉模型 profiles 及当前默认项，不返回 API key。
get_vision_task立即查询视觉任务，供断线恢复或人工检查使用；任务未完成时改用 wait_vision_task，禁止循环调用本工具。
wait_vision_task事件驱动等待任务终态，完成后立即返回；默认等待 20 秒、最多 25 秒，超时仅返回精简心跳。若 waitTimedOut=true，立即用同一 taskId 再次调用本工具，不要重提原任务，也不要轮询 get_vision_task。取消本次等待不会取消后台任务。
cancel_vision_task幂等取消 queued/running 视觉任务；已进入终态的任务保持原状态。
list_image_models列出已配置的生图模型、生成/编辑能力及默认项，不返回 API key。
generate_image提交 1-4 张图片的生成任务并立即返回 taskId；随后调用 wait_vision_task。成功后直接向用户报告 result.images 路径；除非用户明确要求执行检查、比较、质量验证或迭代验收，否则不要调用 analyze_image 或其他看图工具。提示词中的风格、质量和布局要求不构成复查授权；意图不明确时直接交付。
edit_image提交参考图编辑任务并立即返回 taskId；随后调用 wait_vision_task。成功后直接向用户报告 result.images 路径；除非用户明确要求执行检查、比较、质量验证或迭代验收，否则不要调用 analyze_image 或其他看图工具。提示词中的风格、质量和布局要求不构成复查授权；意图不明确时直接交付。
MCP_VISION_CONFIG~/.mcp-vision-tools.json 视觉配置文件MCP_VISION_IMAGE_CONFIG~/.mcp-vision-tools.images.json 生图配置文件TERMAll four hints declared on every tool
6/9 tools missing one or more hints — analyze_image (missing: destructiveHint, idempotentHint); analyze_video (missing: destructiveHint, idempotentHint); list_vision_models (missing: destructiveHint, idempotentHint), +3 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
Tool inputs are validated
Only 2/9 tool handlers declare input schemas (22%)
Declare an inputSchema with zod/joi/yup on every tool definition.
Tool handlers catch errors
Only 2/9 tool handlers wrap calls in try/catch (22%)
Wrap each tool handler body in try/catch and return a structured error response.
License file
No license file
Add a LICENSE file (MIT, Apache-2.0, etc.).
Tests exist
No test files found
Add tests that exercise each declared tool.
Shell command execution
2 child_process/subprocess calls in production code — runs shell commands (src/daemon.ts:242, src/media/video.ts:54)
Prefer library functions over shell-outs. If you must shell out, ensure all inputs are properly escaped.
No arbitrary install scripts
Has postinstall/preinstall script — runs arbitrary code on npm install
Remove postinstall/preinstall hooks unless they’re essential.
Domain consistency
npm scope @fastcar doesn't match GitHub owner williamdazhangyu
Use the same org name across GitHub, npm, and your homepage so users can verify the publisher.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/williamdazhangyu/-fastcar-mcp-vision-tools)?variant=verified to the badge URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check