Back to Browse

Imgkits MCP Server

Developer ToolsModerate5.3MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

ImgKits MCP: translate, blind watermark, audio, PDF→MD→translate, text utils, colorize.

About

ImgKits MCP: translate, blind watermark, audio, PDF→MD→translate, text utils, colorize.

Remote endpoints: streamable-http: https://mcp.imgkits.com/mcp

Security Report

5.3
Moderate5.3Moderate Risk

This is a multi-worker MCP gateway for ImgKits that enforces Bearer-token auth on tools/call, charges credits before upstream jobs, and keeps upstream secrets in Worker secrets. The main concerns are the charge-before-job model with no automatic refunds, the reliance on a shared gateway secret forwarded to upstream workers, and the truncated tools.ts file that prevents a full review of URL validation and SSRF protections. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 2 high severity).

12 files analyzed · 7 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

database

Check that this permission is expected for this type of plugin.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

mcp-imgkits

Public monorepo for ImgKits MCP Workers. The production server is Streamable HTTP and aggregates translation, blind watermark embed and decode, photo colorize, audio tools, PDF→Markdown→translate, and text utilities. The same endpoint also serves document OCR already mounted on the gateway (convert_to_markdown, ocr_image, extract_tables).

PathRole
transmonkey/Translation (text / document / image / subtitle + language detect)
markany/Blind watermark embed and decode (embed_blind_watermark, decode_blind_watermark)
imgkits-core/Photo colorize (colorize_photo)
audio/Audio tools (stem separation, text-to-speech, voice clone, sound effects)
doc-translate/PDF→Markdown→translate (pdf_to_markdown_then_translate)
text-utils/convert_text_style, count_text
gateway/Credit gateway (auth, metering, aggregation)

Use the MCP

  • Endpoint: https://mcp.imgkits.com/mcp (Streamable HTTP)
  • Privacy / get API key / balance: https://mcp.imgkits.com
  • Clients should prefer the gateway URL, not individual *.workers.dev hosts.

initialize / tools/list / ping are public; tools/call requires Authorization: Bearer sk_live_… issued by the gateway.

Layout notes

  • Business product repos are not modified here.
  • Secrets (UPSTREAM_API_TOKEN, etc.) stay in Cloudflare Worker secrets — never commit .dev.vars or real keys.
  • Grey-release Workers may still appear on workers.dev; production entry is the gateway domain above.
  • License: MIT (LICENSE).

Reviews

No reviews yet

Be the first to review this server!