Atlas / MCP servers / haltakov / Meme Generator

Meme GeneratorSAFE

mcp/haltakov/meme-generator

A simple Model Context Protocol (MCP) server for generating memes using the ImgFlip API

Verdict
SAFE
Grade
B
Trust score
89 /100
Exposed tools
1 1r · 0w · 0d
Transport
stdio
License
Apache-2.0
Stars
58
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

A simple Model Context Protocol (MCP) server for generating memes using the ImgFlip API. This server enables AI models and tools to generate meme images from user prompts.

Tools

The server implements the following a single tool called generateMeme.

The tool accepts the following parameters:

  • templateNumericId: The numeric ID of the meme template to use.
  • text0: The text for the first placeholder.
  • text1: The text for the second placeholder.

Usage

You can configure the meme generator server in your client using the `meme-mcp` NPM package. Here is an example configuration for Claude Desktop (Settings -> Developer -> Edit Config):

{
"mcpServers": {
"meme": {
"command": "npx",
"args": ["-y", "meme-mcp"],
"env": {
"IMGFLIP_USERNAME": "",
"IMGFLIP_PASSWORD": ""
}
}
}
}
Note: you need to create a free account on ImgFlip to get your username and password.

Troubleshooting

Sometimes Claude Desktop fails to find the right version of npx (especially if you are using NVM, see this Issue for details). In this case, you can manually install meme-mcp globally and then use it directly.

npm install -g meme-mcp

You can find the path of your node executable by running which node in your terminal. After that your configuration should look like this:

{
"mcpServers": {
"meme": {
"command": "/Users//.nvm/versions/node/v20.18.2/bin/node",
"args": ["/Users//.nvm/versions/node/v20.18.2/lib/node_modules/meme-mcp/dist/index.js"],
"env": {
"IMGFLIP_USERNAME": "
Read from source at commit e34971560e3aOBSERVED · 2026-10-08
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code
claude mcp add meme-mcp --env IMGFLIP_PASSWORD=${IMGFLIP_PASSWORD} -- npx -y [email protected]
claude-desktop
{
  "mcpServers": {
    "meme-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "IMGFLIP_PASSWORD": "${IMGFLIP_PASSWORD}"
      }
    }
  }
}
03

Exposed tools (1)

1 read · 0 write · 0 destructive.

ToolRiskDescription
generateMemereadGenerate a meme image from Imgflip using the numeric template id and text
04

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
declared (2 observation(s))
Shell
none-observed
Dependencies
not all pinned
Secrets in source
none-found

Findings (2)

LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
package.json
@modelcontextprotocol/sdk, axios, zod, @types/node, typescript
Why it matters. 5 dependency range(s) float
Fix. pin exact versions or ship a lockfile
INFOInventory / provenance · inv.oversize · CWE-1104
docs/claude-desktop-meme-example.png
docs/claude-desktop-meme-example.png
Why it matters. 1388358 bytes not read

Gates applied: no_behavioural_pass.

Audited 2026-10-08 · audit v0.4.1 · source sha e34971560e3afull audit observations/trust-audit/mcp-server/haltakov__meme-generator.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-08e34971560e3aSAFEB89first audit
06

Questions

What is the Meme Generator MCP server?

A simple Model Context Protocol (MCP) server for generating memes using the ImgFlip API

What tools does Meme Generator expose?

1 in total: 1 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is Meme Generator safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does Meme Generator need?

It reads IMGFLIP_PASSWORD from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How does Meme Generator run?

It speaks stdio, so it runs as a local process your client starts. It is published on npm as meme-mcp at 1.0.1.

How current is this page?

The grade is for one exact copy of the source (e34971560e3a), read on 2026-10-08. The repository is watched and re-audited when it changes.

Advertisement