← Index

Image Generation MCP Server

io.github.pvliesdonk/image-generation-mcpv1.11.0AI & LLMs

MCP server for AI image generation via OpenAI, Stable Diffusion (SD WebUI), or placeholders.

In-path gate · all MCP tools

Using Image Generation MCP Server in Claude, Cursor, Gemini CLI, Cline, or Zed?

MCP tool contracts can change remotely with no version bump. The mcpindex gate pins each contract and HOLDs the call when it drifts-before your agent acts. Zero credentials. This is not the package install for this server itself (use Install this server for that).

Install the mcpindex gate (one command)

Rewrites your MCP host config so each server launches behind the gate. Inspect first: curl -fsSL https://mcpindex.ai/install.sh | less

uv tool install mcpindex-gate && mcpindex-config-wire
Trust verdict · v1 advisory · method
REVIEWstatus: PARTIALfresh until 2026-08-03 01:01 UTC
screened 2026-07-04tier: scannedgranularity: description-levelsource: registry

Semantic screen found no manipulation pattern in the description. Conformance probe not yet run.

mcpindex.integrity.descriptionpassINFO

evidenceNo malicious instructions foundvia static_description

Limits of this verdict
  • - Semantic screen only - the deterministic conformance probe has not run on this server
  • - Confidence is reported but not yet calibrated (v1)
  • - Screen reads the tool description, not the live behavior
  • - advisory
  • - registry description only no input schema
  • - screen model 8b

Semantic screen: an LLM judge reads the tool description for hidden instructions (status PARTIAL). A pass means the description is not lying, not that the tool is safe: a high-capability tool with an honest description still warrants caution. The deterministic conformance probe has not been run on this server yet, so the screen here is semantic-only. Posture: advisory. Confidences are reported but not yet calibrated (calibrated=false at v1). Full verdict history is not shown on this page.

Own this server? Screen its description →

That verdict was true at screening time (snapshot 2026-07-31).

Contracts can change after screening, with no version bump. The gate pins Image Generation MCP Server’s tool contracts on first sight and holds any silent change before your agent acts - the check that keeps being true on Tuesday.

See your first HOLD in 2 minutes →

Related: how to trust an MCP server · screen before install · silent contract drift

Embed this badge

A live verdict badge for your README or listing. It reflects the current screen, links back here, and updates when the verdict does.

Markdown
[![mcpindex](https://mcpindex.ai/api/v1/badge/io-github-pvliesdonk-image-generation-mcp)](https://mcpindex.ai/server/io-github-pvliesdonk-image-generation-mcp)
HTML
<a href="https://mcpindex.ai/server/io-github-pvliesdonk-image-generation-mcp"><img src="https://mcpindex.ai/api/v1/badge/io-github-pvliesdonk-image-generation-mcp" alt="mcpindex verdict" height="20" /></a>
Environment variables
IMAGE_GENERATION_MCP_READ_ONLY

When true, write-tagged tools (generate_image) are hidden. Set to false to enable image generation.

IMAGE_GENERATION_MCP_SCRATCH_DIR

Directory for saved generated images. Created automatically on first use.

IMAGE_GENERATION_MCP_DEFAULT_PROVIDER

Default provider selection: auto (keyword-based), openai, sd_webui, or placeholder. Deprecated alias 'a1111' is also accepted.

IMAGE_GENERATION_MCP_OPENAI_API_KEY
secret

OpenAI API key. Enables the OpenAI provider (gpt-image-1, dall-e-3) when set.

IMAGE_GENERATION_MCP_SD_WEBUI_HOST

SD WebUI base URL (e.g. http://localhost:7860). Enables the SD WebUI provider when set.

IMAGE_GENERATION_MCP_SD_WEBUI_MODEL

SD WebUI checkpoint name for model-aware preset detection (SD 1.5 vs SDXL vs Lightning vs Flux).

IMAGE_GENERATION_MCP_A1111_HOST

Deprecated — use SD_WEBUI_HOST instead. Accepted as fallback.

IMAGE_GENERATION_MCP_A1111_MODEL

Deprecated — use SD_WEBUI_MODEL instead. Accepted as fallback.

FASTMCP_LOG_LEVEL

Log level for FastMCP internals; app loggers default to INFO, -v overrides both to DEBUG.

IMAGE_GENERATION_MCP_SERVER_NAME

Server name shown to MCP clients in the initialization response.

IMAGE_GENERATION_MCP_INSTRUCTIONS

System-level instructions injected into LLM context.

IMAGE_GENERATION_MCP_BEARER_TOKEN
secret

Static bearer token for HTTP authentication.

IMAGE_GENERATION_MCP_AUTH_MODE

OIDC auth mode: 'remote' (JWKS validation) or 'oidc-proxy' (OAuth proxy). Auto-detected if not set.

IMAGE_GENERATION_MCP_BASE_URL

Public base URL for OIDC redirects (e.g. https://mcp.example.com). Required for OIDC.

IMAGE_GENERATION_MCP_OIDC_CONFIG_URL

OIDC discovery endpoint URL. Required for OIDC.

IMAGE_GENERATION_MCP_OIDC_CLIENT_ID

OIDC client ID. Required for OIDC.

IMAGE_GENERATION_MCP_OIDC_CLIENT_SECRET
secret

OIDC client secret. Required for OIDC.

IMAGE_GENERATION_MCP_OIDC_JWT_SIGNING_KEY
secret

Signing key for OIDC session JWTs (critical on Linux/Docker).

IMAGE_GENERATION_MCP_OIDC_AUDIENCE

Expected JWT audience claim. Leave unset if your provider does not set one.

IMAGE_GENERATION_MCP_OIDC_REQUIRED_SCOPES

Comma-separated required OIDC scopes (default: openid for oidc-proxy mode, none for remote mode).

IMAGE_GENERATION_MCP_OIDC_VERIFY_ACCESS_TOKEN

Verify access token JWT instead of id_token.

IMAGE_GENERATION_MCP_READ_ONLY

When true, write-tagged tools (generate_image) are hidden. Set to false to enable image generation.

IMAGE_GENERATION_MCP_SCRATCH_DIR

Directory for saved generated images inside the container.

IMAGE_GENERATION_MCP_DEFAULT_PROVIDER

Default provider selection: auto (keyword-based), openai, sd_webui, or placeholder. Deprecated alias 'a1111' is also accepted.

IMAGE_GENERATION_MCP_OPENAI_API_KEY
secret

OpenAI API key. Enables the OpenAI provider (gpt-image-1, dall-e-3) when set.

IMAGE_GENERATION_MCP_SD_WEBUI_HOST

SD WebUI base URL (e.g. http://localhost:7860). Enables the SD WebUI provider when set.

IMAGE_GENERATION_MCP_SD_WEBUI_MODEL

SD WebUI checkpoint name for model-aware preset detection (SD 1.5 vs SDXL vs Lightning vs Flux).

IMAGE_GENERATION_MCP_A1111_HOST

Deprecated — use SD_WEBUI_HOST instead. Accepted as fallback.

IMAGE_GENERATION_MCP_A1111_MODEL

Deprecated — use SD_WEBUI_MODEL instead. Accepted as fallback.

FASTMCP_LOG_LEVEL

Log level for FastMCP internals; app loggers default to INFO, -v overrides both to DEBUG.

IMAGE_GENERATION_MCP_KV_STORE_URL

Persistent-state backend URL for pvl-core subsystems. Schemes: file:///path (survives restarts), memory:// (dev/ephemeral).

IMAGE_GENERATION_MCP_SERVER_NAME

Server name shown to MCP clients in the initialization response.

IMAGE_GENERATION_MCP_INSTRUCTIONS

System-level instructions injected into LLM context.

IMAGE_GENERATION_MCP_HTTP_PATH

HTTP endpoint mount path for streamable-HTTP transport.

IMAGE_GENERATION_MCP_EVENT_STORE_URL

EventStore backend for SSE session resumability. file:///path (file-backed, survives restarts) or memory:// (in-process only, dev mode).

PUID

Run as this UID (Docker entrypoint).

PGID

Run as this GID (Docker entrypoint).

IMAGE_GENERATION_MCP_BEARER_TOKEN
secret

Static bearer token for HTTP authentication.

IMAGE_GENERATION_MCP_AUTH_MODE

OIDC auth mode: 'remote' (JWKS validation) or 'oidc-proxy' (OAuth proxy). Auto-detected if not set.

IMAGE_GENERATION_MCP_BASE_URL

Public base URL for OIDC redirects (e.g. https://mcp.example.com). Required for OIDC.

IMAGE_GENERATION_MCP_OIDC_CONFIG_URL

OIDC discovery endpoint URL. Required for OIDC.

IMAGE_GENERATION_MCP_OIDC_CLIENT_ID

OIDC client ID. Required for OIDC.

IMAGE_GENERATION_MCP_OIDC_CLIENT_SECRET
secret

OIDC client secret. Required for OIDC.

IMAGE_GENERATION_MCP_OIDC_JWT_SIGNING_KEY
secret

Signing key for OIDC session JWTs (critical on Linux/Docker).

IMAGE_GENERATION_MCP_OIDC_AUDIENCE

Expected JWT audience claim. Leave unset if your provider does not set one.

IMAGE_GENERATION_MCP_OIDC_REQUIRED_SCOPES

Comma-separated required OIDC scopes (default: openid for oidc-proxy mode, none for remote mode).

IMAGE_GENERATION_MCP_OIDC_VERIFY_ACCESS_TOKEN

Verify access token JWT instead of id_token.

MCP quality score · maturity, not trust · methodology
freshness
25
completeness
20
installability
25
documentation
15
stability
10
Alternatives in AI & LLMs