YOLOSAFE
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
A powerful YOLO (You Only Look Once) computer vision service that integrates with Claude AI through Model Context Protocol (MCP). This service enables Claude to perform object detection, segmentation, classification, and real-time camera analysis using state-of-the-art YOLO models.
Features
- Object detection, segmentation, classification, and pose estimation
- Real-time camera integration for live object detection
- Support for model training, validation, and export
- Comprehensive image analysis combining multiple models
- Support for both file paths and base64-encoded images
- Seamless integration with Claude AI
Setup Instructions
Prerequisites
- Python 3.10 or higher
- Git (optional, for cloning the repository)
Environment Setup
- Create a directory for the project and navigate to it:
mkdir yolo-mcp-service cd yolo-mcp-service
- Download the project files or clone from repository:
# If you have the files, copy them to this directory # If using git: git clone https://github.com/GongRzhe/YOLO-MCP-Server.git .
- Create a virtual environment:
# On Windows python -m venv .venv # On macOS/Linux python3 -m venv .venv
- Activate the virtual environment:
# On Windows .venv\Scripts\activate # On macOS/Linux source .venv/bin/activate
- Run the setup script:
python setup.py
The setup script will:
- Check your Python version
- Create a virtual environment (if not already created)
- Install required dependencies
- Generate an MCP configuration file (mcp-config.json)
- Output configuration information for different MCP clients including Claude
- Note the output from the setup script, which will look similar to:
MCP configuration has been written to: /path/to/mcp-config.json MCP configuration for
e53b46b797e6OBSERVED · 2026-10-08Exposed tools (15)
13 read · 2 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
analyze_image_from_path | read | |
classify_image | read | |
comprehensive_image_analysis | read | |
detect_objects | read | |
export_model | read | |
get_camera_detections | read | |
get_model_directories | read | Get information about configured model directories and available models |
list_available_models | read | List available YOLO models that actually exist on disk in any configured directory |
segment_objects | read | |
start_camera_detection | write | |
stop_camera_detection | write | |
test_connection | read | |
track_objects | read | |
train_model | read | |
validate_model | read |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (4 observation(s))
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (6)
image_bytes = base64.b64decode(image_source)
image_bytes = base64.b64decode(image_data)
image_bytes = base64.b64decode(image_source)
image_data = base64.b64decode(base64_data)
image_bytes = base64.b64decode(image_source)
mcp, ultralytics, opencv-python, numpy, pillow
Gates applied: no_behavioural_pass.
e53b46b797e6full audit observations/trust-audit/mcp-server/gongrzhe__yolo.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | e53b46b797e6 | SAFE | B | 89 | first audit |
Questions
What tools does YOLO expose?
15 in total: 13 read-only, 2 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is YOLO safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does YOLO need?
No credential environment variables were found in its source, so it appears to need none.
How does YOLO run?
It speaks stdio, so it runs as a local process your client starts.
How current is this page?
The grade is for one exact copy of the source (e53b46b797e6), read on 2026-10-08. The repository is watched and re-audited when it changes.