ComfyUI MCP

Item: ComfyUI MCP
Rating: 69
Author: M8ven

A universal MCP server that lets agents discover ComfyUI nodes, build/edit/run API workflows, manage queues, retrieve outputs, and optionally render graphs on a ComfyUI canvas.

→ yutianxiao6/comfyui-mcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for the top badge — read-only, revoke anytime. What we access →

⚡ Connect GitHub for Live Verified

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 3 credentials: COMFYUI_MCP_BRIDGE_TOKEN, COMFYUI_API_KEY, COMFYUI_ACCOUNT_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretCOMFYUI_MCP_BRIDGE_TOKEN— "replace-with-a-long-random-value" python main.py

configCOMFYUI_MCP_DATA_DIR— OS user data dir Workflow and output storage

configCOMFYUI_MCP_INPUT_ROOTS— data dir Allowed upload roots, separated by the OS path separator

configCOMFYUI_URL— "": "http://127.0.0.1:8188"

configCOMFYUI_API_PREFIX— empty Prefix native routes; use /api for compatible cloud endpoints

🔐 secretCOMFYUI_API_KEY— empty API key sent to ComfyUI

configCOMFYUI_API_KEY_HEADER— X-API-Key Header used for the API key

🔐 secretCOMFYUI_ACCOUNT_API_KEY— empty Key placed in extra_data for paid Comfy API nodes

configCOMFYUI_MCP_TRANSPORT— stdio stdio, streamable-http, or sse

configCOMFYUI_MCP_HOST— 127.0.0.1 HTTP bind host

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/yutianxiao6-comfyui-mcp-cdc29w)](https://m8ven.ai/mcp/yutianxiao6-comfyui-mcp-cdc29w)

commit: b288015f78f27f59b90bda563ca98bacb094bd14

code hash: 3918378783663ec264a4ca87196c3953f9720ee71d0100ed28088184b71a9abc

verified: 8/6/2026, 8:56:59 AM

view raw JSON →

Check MCPs from inside your assistant

Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check

check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern

How to add it →Free · no account needed · works in any MCP client