Icon ComposerSAFE
Apple Icon Composer CLI & MCP server: create and manipulate .icon bundles and images with Liquid Glass rendering
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Icon Composer MCP
CLI and MCP server for creating images, icons, and logos with Liquid Glass effects (iOS 26+). Not affiliated with Apple .
Demo
Key Features
- Create `.icon` bundles programmatically from PNG or SVG glyphs
- Full Liquid Glass support: specular highlights, blur material, shadows, translucency
- Dark mode + appearance variants with per-appearance fill specializations
- AI-agent ready: 12 MCP tools + 3 workflow prompts with built-in instructions
Installation
Claude Code
claude mcp add icon-composer -- npx -y icon-composer-mcp
Claude Desktop
A
09ba300a0fbfOBSERVED · 2026-10-08Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add icon-composer-mcp -- npx -y [email protected]
{
"mcpServers": {
"icon-composer-mcp": {
"command": "npx",
"args": [
"-y",
"[email protected]"
]
}
}
}Exposed tools (12)
4 read · 7 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.
| Tool | Risk | Description |
|---|---|---|
add_layer_to_icon | write | Add a new layer to an existing .icon bundle. Creates a new group or adds to an existing one. |
create_icon | write | Create an Apple Icon Composer .icon bundle from a foreground image and background color. Outputs a ready-to-use .icon bundle for Xcode 26. |
export_marketing | read | Export a flat marketing PNG for App Store Connect. No Liquid Glass effects, no alpha channel. Produces a 1024x1024 (default) opaque PNG ready for upload. |
export_preview | read | Render a preview of an .icon bundle. Uses Apple\ |
read_icon | read | Read and inspect an existing .icon bundle. Returns the manifest JSON and list of assets. |
remove_layer | destructive | Remove a layer or entire group from an .icon bundle. Optionally cleans up orphaned asset files. |
render_liquid_glass | read | Render a pixel-perfect Liquid Glass preview using Apple\ |
set_appearances | write | Set dark mode or tinted mode appearance overrides for the icon background fill, layer group, or individual layer properties. |
set_fill | write | Set the background fill of an .icon bundle. Supports solid colors and gradients. |
set_glass_effects | write | Configure Liquid Glass effects (specular, blur, shadow, translucency) on a layer group in an existing .icon bundle. |
set_layer_position | write | Set the scale (zoom) and offset of a layer or group within the .icon bundle. Use to zoom the glyph in/out or reposition it. |
toggle_fx | write | Enable or disable all Liquid Glass effects (specular, shadow, blur, translucency) on every group in the .icon bundle at once. |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (1 observation(s))
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (8)
remove_layer
import type { IconManifest, FillValue } from '../../types';const { createManifest, addGroup, addLayer, writeIconBundle } = await import('../../icon-builder');import { readIconBundle, writeIconBundle, saveManifest, DEFAULT_MAX_ASSET_BYTES } from '../../lib/bundle';import type { IconManifest } from '../../types';import { _resetCache, ictoolAvailable, getIctoolVersion, CLEAR_RENDITIONS } from '../../lib/ictool';@commander-js/extra-typings, @modelcontextprotocol/sdk, commander, sharp, zod, @types/bun, @types/sharp, tsup
assets/demo.gif
Gates applied: no_behavioural_pass.
09ba300a0fbffull audit observations/trust-audit/mcp-server/ethbak__icon-composer.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | 09ba300a0fbf | SAFE | B | 89 | first audit |
Questions
What is the Icon Composer MCP server?
Apple Icon Composer CLI & MCP server: create and manipulate .icon bundles and images with Liquid Glass rendering
What tools does Icon Composer expose?
12 in total: 4 read-only, 7 that write, and 1 that can delete or overwrite (remove_layer). Every one is listed on this page with its risk.
Is Icon Composer safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B. Separately from the audit: 1 of its tools can destroy data, so scope the token you give it to what you actually need.
What credentials does Icon Composer need?
No credential environment variables were found in its source, so it appears to need none.
How does Icon Composer run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as icon-composer-mcp at 1.1.1.
How current is this page?
The grade is for one exact copy of the source (09ba300a0fbf), read on 2026-10-08. The repository is watched and re-audited when it changes.