MCP server · Audited from source
Chart Generator MCP server
by antvis/mcp-server-chartMIT licenceAudited 21 Sep 2026 · source dbc79fcf773b
npm @antv/mcp-server-chart 0.9.11ssestdiostreamable-http★ 4,377
Is it safe? Yes — SAFE, grade B (89/100). It exposes 26 tools: 26 read, 0 write and 0 destructive. The audit recorded 8 findings (0 critical, 0 high, 1 medium, 7 low). Maintainer's description: 🤖 A visualization mcp & skills contains 25+ visual charts using @antvis. Using for chart generation and data analysis.
Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
Cite
Cite this page
ModelsAtlas. “Chart Generator MCP server (antvis/mcp-server-chart)”. Retrieved 21 Sep 2026. https://modelsatlas.com/mcp/antvis/chart-generator
Trust audit
Audit 0.4.1 · full source read 21 Sep 2026
Trust score89/100✓SAFE B
0 critical0 high1 medium7 low0 info
8 findings, listed below with the file and line each was found on. Grade A needs a sandboxed behavioural run too; this audit read the source only.
What the source does
- FilesystemNone observedNothing seen in the source
- NetworkDeclared2 observations
- ShellNone observedNothing seen in the source
- DependenciesNot pinnedSome ranges float
- SecretsNone foundNo keys in source
“Declared” means the server says it does this and the source agrees. Browser, file and shell access are expected of some kinds of server.
Five audit layers
| Layer | What we check | Result |
|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS 2 findings |
L1 Static source | Secrets, path traversal, supply chain | WARN 6 findings |
L2 Instructions | Prompt injection and authority framing in docs and tool descriptions | PASS |
L3 Inventory | Declared tools match the source | PASS |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED |
Provenance & runtime
Who published it, and what the audit could and could not run
Provenance
- Repository owner
antvisOrganizationAccount type recorded when we read the repository. - PackagePublished on npm
@antv/mcp-server-chartat version 0.9.11 - LicenceMITFrom the repository, as read at the audited commit.
- Last push25 days agoActivity of the repository when we read it.
- Source commit readdbc79fcf773bThe audit covers exactly this commit, read on 21 Sep 2026.
Runtime
- Sandbox runNot run yetThis audit read the source only; it did not execute the server.
- Tool inventory26 declaredRead from the source and classed read, write or destructive.
Every value here is read from the record's own repository and audit.Suggest a correction
Findings (8)
Sorted by severity
MEDIUMNetwork egressnet.raw_ip · docker-compose.yaml:9
F-04 Network egressCWE-200 · CWE-319Layer L1
# - VIS_REQUEST_SERVER=http://127.0.0.1:3000/render # Notice: You can use AntV's project GPT-Vis-SSR to deploy an HTTP service in a private environment, and then pass the URL address through env VI
- Why
- No further detail recorded for this rule.
- Fix
- —
LOWFilesystem / pathfs.traversal · __tests__/charts/charts.spec.ts:3
F-05 Filesystem / pathCWE-22 · CWE-59Layer L1
import * as actualCharts from "../../src/charts";
- Why
- No further detail recorded for this rule.
- Fix
- —
LOWFilesystem / pathfs.traversal · __tests__/utils/env.spec.ts:2
F-05 Filesystem / pathCWE-22 · CWE-59Layer L1
import { getDisabledTools, getVisRequestServer } from "../../src/utils/env";- Why
- No further detail recorded for this rule.
- Fix
- —
LOWFilesystem / pathfs.traversal · __tests__/utils/schema.spec.ts:3
F-05 Filesystem / pathCWE-22 · CWE-59Layer L1
import { zodToJsonSchema } from "../../src/utils/schema";- Why
- No further detail recorded for this rule.
- Fix
- —
LOWFilesystem / pathfs.traversal · __tests__/utils/validator.spec.ts:3
F-05 Filesystem / pathCWE-22 · CWE-59Layer L1
import * as Charts from "../../src/charts";
- Why
- No further detail recorded for this rule.
- Fix
- —
LOWSupply chainsupply.unpinned · package.json
F-08 Supply chainCWE-829 · CWE-1357Layer L1
@modelcontextprotocol/sdk, axios, cors, express, zod, @modelcontextprotocol/inspector, @types/cors, @types/express
- Why
- 15 dependency range(s) float
- Fix
- pin exact versions or ship a lockfile
Tools it exposes
26 declared in source · 0 destructive
26 read0 write0 destructive
| Tool | Risk | What it does |
|---|---|---|
CEO | read | Chief Executive Officer |
CTO | read | Chief Technology Officer |
generate_bar_chart | read | Generate a horizontal bar chart to show data for numerical comparisons among different categories, such as, comparing categorical data and for horizontal comparisons. |
generate_boxplot_chart | read | Generate a boxplot chart to show data for statistical summaries among different categories, such as, comparing the distribution of data points across categories. |
generate_column_chart | read | Generate a column chart, which are best for comparing categorical data, such as, when values are close, column charts are preferable because our eyes are better at judging height than other visual elements like area or angles. |
generate_dual_axes_chart | read | Generate a dual axes chart which is a combination chart that integrates two different chart types, typically combining a bar chart with a line chart to display both the trend and comparison of data, such as, the trend of sales and profit over time. |
generate_fishbone_diagram | read | Generate a fishbone diagram chart to uses a fish skeleton, like structure to display the causes or effects of a core problem, with the problem as the fish head and the causes/effects as the fish bones. It suits problems that can be split into multiple related factors. |
generate_flow_diagram | read | Generate a flow diagram chart to show the steps and decision points of a process or system, such as, scenarios requiring linear process presentation. |
generate_funnel_chart | read | Generate a funnel chart to visualize the progressive reduction of data as it passes through stages, such as, the conversion rates of users from visiting a website to completing a purchase. |
generate_histogram_chart | read | Generate a histogram chart to show the frequency of data points within a certain range. It can observe data distribution, such as, normal and skewed distributions, and identify data concentration areas and extreme points. |
generate_line_chart | read | Generate a line chart to show trends over time, such as, the ratio of Apple computer sales to Apple |
generate_liquid_chart | read | Generate a liquid chart to visualize a single value as a percentage, such as, the current occupancy rate of a reservoir or the completion percentage of a project. |
generate_mind_map | read | Generate a mind map chart to organizes and presents information in a hierarchical structure with branches radiating from a central topic, such as, a diagram showing the relationship between a main topic and its subtopics. |
generate_network_graph | read | Generate a network graph chart to show relationships (edges) between entities (nodes), such as, relationships between people in social networks. |
generate_organization_chart | read | Generate an organization chart to visualize the hierarchical structure of an organization, such as, a diagram showing the relationship between a CEO and their direct reports. |
generate_path_map | read | Generate a route map to display the user |
generate_pie_chart | read | Generate a pie chart to show the proportion of parts, such as, market share and budget allocation. |
generate_pin_map | read | Generate a point map to display the location and distribution of point data on the map, such as the location distribution of attractions, hospitals, supermarkets, etc. |
generate_radar_chart | read | Generate a radar chart to display multidimensional data (four dimensions or more), such as, evaluate Huawei and Apple phones in terms of five dimensions: ease of use, functionality, camera, benchmark scores, and battery life. |
generate_sankey_chart | read | Generate a sankey chart to visualize the flow of data between different stages or categories, such as, the user journey from landing on a page to completing a purchase. |
generate_scatter_chart | read | Generate a scatter chart to show the relationship between two variables, helps discover their relationship or trends, such as, the strength of correlation, data distribution patterns. |
generate_spreadsheet | read | Generate a spreadsheet or pivot table for displaying tabular data. When |
generate_treemap_chart | read | Generate a treemap chart to display hierarchical data and can intuitively show comparisons between items at the same level, such as, show disk space usage with treemap. |
generate_venn_chart | read | Generate a Venn diagram to visualize the relationships between different sets, showing how they intersect and overlap, such as the commonalities and differences between various groups. |
generate_violin_chart | read | Generate a violin chart to show data for statistical summaries among different categories, such as, comparing the distribution of data points across categories. |
generate_word_cloud_chart | read | Generate a word cloud chart to show word frequency or weight through text size variation, such as, analyzing common words in social media, reviews, or feedback. |
Install
Package version 0.9.11 · audited commit dbc79fc
claude mcp add mcp-server-chart --env SERVICE_ID=${SERVICE_ID} -- npx -y @antv/mcp-server-chart@{{VERSION}}The command pins the package version recorded in the source (0.9.11); the audit covers commit dbc79fcf773b. Transport: sse · stdio · streamable-http. Reads this environment variable: SERVICE_ID. Give it the narrowest token it needs.
Audit history
- ✓SAFE B 89 / 100
Source changed, verdict held ·
dbc79fcf773b
README badge
For maintainers · updates on every re-audit
[](https://modelsatlas.com/mcp/antvis/chart-generator/)
The badge always shows the latest audit; a maintainer cannot pin an old verdict.
Other ratings
Cited, never blended into our score
No third-party security ratings are recorded for this server yet. When they exist they appear here with their source and date, beside, not inside, our grade.
Questions about Chart Generator MCP server
What is the Chart Generator MCP server?
🤖 A visualization mcp & skills contains 25+ visual charts using @antvis. Using for chart generation and data analysis.
What tools does Chart Generator expose?
26 in total: 26 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Chart Generator safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does Chart Generator need?
It reads SERVICE_ID from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does Chart Generator run?
It speaks sse, stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as @antv/mcp-server-chart at 0.9.11.
How current is this page?
The grade is for one exact copy of the source (dbc79fcf773b), read on 2026-09-21. The repository is watched and re-audited when it changes.
Sources
- antvis/mcp-server-chart on GitHub — the source we read, its licence, stars and activityObserved · 21 Sep 2026
- ModelsAtlas trust audit — SAFE verdict for commit dbc79fcf773bObserved · 21 Sep 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What is the Chart Generator MCP server?
- What tools does Chart Generator expose?
- Is Chart Generator safe to connect to an agent?