ModelsAtlas
Explore
Atlas / MCP servers / jonthebeef / Superdesign

SuperdesignBLOCK

mcp/jonthebeef/superdesign
MCP server by jonthebeef · Audited 2026-10-07
⚑ Report / re-scanSource ↗
Verdict
BLOCK
Grade
F
Trust score
41 /100
Exposed tools
12 10r · 1w · 1d
Transport
sse · stdio
License
—
Stars
76
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

An MCP (Model Context Protocol) server that brings Superdesign - an open source AI design agent by @jasonzhou1993 and @jackjack_eth - to Claude Code as native tools. This server operates as a "design orchestrator" that provides structured specifications for your IDE's LLM to execute, enabling Superdesign's sophisticated design capabilities without requiring Anthropic API keys.

Key Benefits

  • No API Keys Required: Works directly with Claude Code's built-in LLM connection
  • Local Execution: Runs entirely on your machine as an MCP server
  • IDE Integration: Seamlessly integrates with Claude Code (and potentially Cursor, Windsurf, or other MCP-compatible IDEs - untested)
  • Based on Open Source: Built on top of Superdesign.dev, an open source AI design system

Installation

  1. Install dependencies:
npm install
  1. Build the server:
npm run build

Claude Code Integration

  1. Add the MCP server to your Claude Code configuration:
# Create or edit your Claude Code MCP settings file
# On macOS:
mkdir -p ~/.claude-code
cp claude-mcp-config.json ~/.claude-code/mcp-settings.json

# Or add manually to your existing mcp-settings.json:

Example ~/.claude-code/mcp-settings.json:

{
"mcpServers": {
"superdesign": {
"command": "node",
"args": ["/path/to/superdesign/dist/index.js"],
"env": {}
}
}
}
  1. Restart Claude Code
  1. The MCP server will provide these Superdesign orchestrator tools in Claude Code:
  2. superdesign_generate - Returns specifications for Claude to generate designs
  3. superdesign_iterate - Returns instructions for Claude to iterate on existing designs
  4. superdesign_extract_system - Returns instructions for design system extraction
  5. superdesign_list - Lists all created d
Read from source at commit 12791e89173cOBSERVED · 2026-10-07
Advertisement
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code
claude mcp add superdesign-mcp-server -- npx -y [email protected]
claude-desktop
{
  "mcpServers": {
    "superdesign-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}
03

Exposed tools (12)

10 read · 1 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

ToolRiskDescription
helloreadworld
numberreadnumber
superdesign_check_filesreadCheck for file changes by comparing current files with a manifest (for gallery refresh integration)
superdesign_cleanupreadClean up old design files based on age and count limits
superdesign_deletedestructiveDelete a design file and update metadata
superdesign_extract_systemreadReturns instructions for extracting design system from screenshot or image
superdesign_galleryreadGenerate an HTML gallery to view all designs in a browser
superdesign_generatereadReturns design specifications for Claude Code to generate UI designs, wireframes, components, logos, or icons
superdesign_iteratereadReturns iteration instructions based on existing design and feedback
superdesign_listreadList all created designs in the workspace
superdesign_live_gallerywriteStart a live gallery server with real-time updates and file watching
testreadtest
04

Trust audit

BLOCKgrade F · trust 41/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

LayerWhat it checksResult
L0Provenance & inventoryWARN
L1Static analysis of the codeFAIL
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfaceWARN
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (5 observation(s))
Network
declared (5 observation(s))
Shell
declared (10 observation(s))
Dependencies
not all pinned
Secrets in source
none-found

Findings (25)

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
node_modules/depd/index.js:425
var deprecatedfn = new Function('fn', 'log', 'deprecate', 'message', 'site',
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
node_modules/depd/index.js:427
'return function (' + args + ') {' +
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
node_modules/typescript/lib/lib.es5.d.ts:998
exec(string: string): RegExpExecArray | null;
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
node_modules/wrap-ansi-cjs/index.js:214
.map(line => exec(line, columns, options))
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
node_modules/wrap-ansi/index.js:212
.map(line => exec(line, columns, options))
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
HIGHSupply chain · supply.typosquat · CWE-829, CWE-1357
node_modules/iconv-lite/package.json
request ~ requests
Why it matters. dependency name one edit from a popular package
Fix. verify the package; likely typosquat
MEDIUMInventory / provenance · inv.binary · CWE-1104
node_modules/fsevents/fsevents.node
fsevents.node
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.symlink · CWE-1104
node_modules/.bin/esbuild
node_modules/.bin/esbuild
Why it matters. link not followed
MEDIUMInventory / provenance · inv.symlink · CWE-1104
node_modules/.bin/glob
node_modules/.bin/glob
Why it matters. link not followed
MEDIUMInventory / provenance · inv.symlink · CWE-1104
node_modules/.bin/node-which
node_modules/.bin/node-which
Why it matters. link not followed
MEDIUMInventory / provenance · inv.symlink · CWE-1104
node_modules/.bin/tsc
node_modules/.bin/tsc
Why it matters. link not followed
MEDIUMInventory / provenance · inv.symlink · CWE-1104
node_modules/.bin/tsserver
node_modules/.bin/tsserver
Why it matters. link not followed
MEDIUMInformation disclosure · disclose.log_secret · CWE-209, CWE-532
node_modules/@types/node/url.d.ts:552
* console.log(myURL.password);
MEDIUMObfuscation / stealth · obf.base64_blob · CWE-506, CWE-94
node_modules/tsx/dist/lexer-DQCqS3nf.mjs:3
`,Q.e()-1)}`),{idx:Q.e()});const U=[],t=[];for(;Q.ri();){const C=Q.is(),I=Q.ie(),D=Q.it(),i=Q.ai(),w=Q.id(),J=Q.ss(),K=Q.se();let o;Q.ip()&&(o=N(A.slice(w===-1?C-1:C,w===-1?I+1:I))),U.push({n:o,t:D,s:
MEDIUMObfuscation / stealth · obf.base64_blob · CWE-506, CWE-94
node_modules/tsx/dist/lexer-DgIbo0BU.cjs:3
`,Q.e()-1)}`),{idx:Q.e()});const a=[],t=[];for(;Q.ri();){const C=Q.is(),I=Q.ie(),D=Q.it(),s=Q.ai(),w=Q.id(),J=Q.ss(),K=Q.se();let o;Q.ip()&&(o=N(A.slice(w===-1?C-1:C,w===-1?I+1:I))),a.push({n:o,t:D,s:
MEDIUMObfuscation / stealth · obf.zero_width · CWE-506, CWE-94
node_modules/iconv-lite/encodings/sbcs-data-generated.js:100
"chars": "€پ‚ƒ„...†‡ˆ‰ٹ‹Œچژڈگ‘’“”•–—کTMڑ›œں ،¢£¤¥¦§ ̈©ھ«¬® ̄°±23 ́μ¶· ̧1؛»1⁄41⁄23⁄4؟ہءآأؤإئابةتثجحخدذرزسشصض×طظعغـفقكàلâمنهوçèéêëىيîïًٌٍَôُِ÷ّùْûüے"
MEDIUMObfuscation / stealth · obf.zero_width · CWE-506, CWE-94
node_modules/iconv-lite/encodings/sbcs-data-generated.js:373
"chars": "«»...“”�•‘’� กขฃคฅฆงจฉชซฌญฎฏฐฑฒณดตถทธนบปผฝพฟภมยรฤลฦวศษสหฬอฮฯะัาําิีึืฺุู–—฿เแโใไๅๆ็่้๊๋์ํTM๏๐๑๒๓๔๕๖๗๘๙®©����"
MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59
superdesign_delete
Why it matters. 1 tool(s) can delete or overwrite
Fix. prefer a read-only mode or scoped tokens; the page states the blast radius
LOWInventory / provenance · inv.hidden_file · CWE-1104
node_modules/.package-lock.json
.package-lock.json
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
node_modules/tsx/dist/index-7AaEi15b.mjs:1
var Pt=Object.defineProperty;var f=(s,e)=>Pt(s,"name",{value:e,configurable:!0});import{fileURLToPath as Jt,pathToFileURL as Gt}from"node:url";import{version as Ae,transformSync as qt,transform as zt}
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
node_modules/tsx/dist/index-gckBtVBf.cjs:1
"use strict";var Bt=Object.defineProperty;var f=(s,e)=>Bt(s,"name",{value:e,configurable:!0});var Ne=require("node:url"),ne=require("esbuild"),Jt=require("node:crypto"),j=require("node:fs"),X=require(
LOWInformation disclosure · disclose.log_secret · CWE-209, CWE-532
node_modules/zod/src/v4/classic/tests/refine.test.ts:436
console.log(data.password);
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
node_modules/tsx/dist/cjs/api/index.cjs:1
"use strict";require("../../get-pipe-path-BoR10qr8.cjs");var r=require("../../register-D46fvsV_.cjs"),e=require("../../require-D4F1Lv60.cjs");require("module"),require("node:path"),require("../../temp
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
node_modules/tsx/dist/cjs/api/index.mjs:1
import"../../get-pipe-path-BHW2eJdv.mjs";import{r as j}from"../../register-CFH5oNdT.mjs";import{t as l}from"../../require-DQxpCAr4.mjs";import"module";import"node:path";import"../../temporary-director
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
node_modules/tsx/dist/esm/api/index.cjs:1
"use strict";var m=Object.defineProperty;var a=(r,e)=>m(r,"name",{value:e,configurable:!0});var q=require("../../register-2sWVXuRQ.cjs");require("../../get-pipe-path-BoR10qr8.cjs");var t=require("../.

Gates applied: no_behavioural_pass.

Audited 2026-10-07 · audit v0.4.1 · source sha 12791e89173cfull audit observations/trust-audit/mcp-server/jonthebeef__superdesign.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-0712791e89173cBLOCKF41first audit
06

Questions

What tools does Superdesign expose?

12 in total: 10 read-only, 1 that write, and 1 that can delete or overwrite (superdesign_delete). Every one is listed on this page with its risk.

Is Superdesign safe to connect to an agent?

No — not without reading the findings first. The audit graded it F (41/100) and found 6 critical or high issues in the source. Each one is listed on this page with the file and line it is on. Separately from the audit: 1 of its tools can destroy data, so scope the token you give it to what you actually need.

What credentials does Superdesign need?

No credential environment variables were found in its source, so it appears to need none.

How does Superdesign run?

It speaks sse and stdio, so it runs as a local process your client starts. It is published on npm as superdesign-mcp-server at 1.0.0.

How current is this page?

The grade is for one exact copy of the source (12791e89173c), read on 2026-10-07. The repository is watched and re-audited when it changes.

Advertisement