QuickchartSAFE
A Model Context Protocol server for generating charts using QuickChart.io . It allows you to create various types of charts through MCP tools.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
A Model Context Protocol server for generating charts using QuickChart.io
This is a TypeScript-based MCP server that provides chart generation capabilities. It allows you to create various types of charts through MCP tools.
Overview
This server integrates with QuickChart.io's URL-based chart generation service to create chart images using Chart.js configurations. Users can generate various types of charts by providing data and styling parameters, which the server converts into chart URLs or downloadable images.
Features
Tools
generate_chart- Generate a chart URL using QuickChart.io- Supports multiple chart types: bar, line, pie, doughnut, radar, polarArea, scatter, bubble, radialGauge, speedometer
- Customizable with labels, datasets, colors, and additional options
- Returns a URL to the generated chart
download_chart- Download a chart image to a local file- Takes chart configuration and output path as parameters
- Saves the chart image to the specified location
Supported Chart Types
- Bar charts: For comparing values across categories
- Line charts: For showing trends over time
- Pie charts: For displaying proportional data
- Doughnut charts: Similar to pie charts with a hollow center
- Radar charts: For showing multivariate data
0d43b0c07516OBSERVED · 2026-10-06Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add quickchart-mcp-server -- npx -y @gongrzhe/[email protected]
{
"mcpServers": {
"quickchart-mcp-server": {
"command": "npx",
"args": [
"-y",
"@gongrzhe/[email protected]"
]
}
}
}Exposed tools (2)
2 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
download_chart | read | Download a chart image to a local file |
generate_chart | read | Generate a chart using QuickChart |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (1 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (1)
@modelcontextprotocol/sdk, @types/getenv, axios, getenv, @types/node, typescript
Gates applied: no_behavioural_pass.
0d43b0c07516full audit observations/trust-audit/mcp-server/gongrzhe__quickchart.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-06 | 0d43b0c07516 | SAFE | B | 89 | first audit |
Questions
What is the Quickchart MCP server?
A Model Context Protocol server for generating charts using QuickChart.io . It allows you to create various types of charts through MCP tools.
What tools does Quickchart expose?
2 in total: 2 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Quickchart safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does Quickchart need?
No credential environment variables were found in its source, so it appears to need none.
How does Quickchart run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as @gongrzhe/quickchart-mcp-server at 1.0.6.
How current is this page?
The grade is for one exact copy of the source (0d43b0c07516), read on 2026-10-06. The repository is watched and re-audited when it changes.