Atlas / MCP servers / longsleevedanaid991 / pixelpanda-mcp

pixelpanda-mcpCAUTION

mcp/longsleevedanaid991/pixelpanda-mcp

Run AI image tools for Claude, Cursor, and VS Code with PixelPanda MCP Server for local edits and product photo generation

Verdict
CAUTION
Grade
B
Trust score
89 /100
Exposed tools
32 24r · 6w · 2d
Transport
stdio
License
—
Stars
0
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

AI image processing tools for Claude Desktop, Cursor, VS Code, and other MCP-compatible clients.

33 tools across three tiers — from free local image editing to AI-powered product photography.

Install

# Using uv (recommended)
uvx pixelpanda-mcp

# Or pip
pip install pixelpanda-mcp

Setup

Claude Desktop

Add to your claude_desktop_config.json:

{
"mcpServers": {
"pixelpanda": {
"command": "uvx",
"args": ["pixelpanda-mcp"],
"env": {
"PIXELPANDA_API_TOKEN": "pk_live_your_token_here"
}
}
}
}

Cursor

Add to your MCP settings (Settings > MCP Servers):

{
"pixelpanda": {
"command": "uvx",
"args": ["pixelpanda-mcp"],
"env": {
"PIXELPANDA_API_TOKEN": "pk_live_your_token_here"
}
}
}
The API token is optional — all local and free AI tools work without it. You only need a token for paid generation tools.

Tools

Local Tools (free, no account needed, runs offline)

Read from source at commit 9cea95c18785OBSERVED · 2026-10-11
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code (pypi)
claude mcp add pixelpanda-mcp --env PIXELPANDA_API_TOKEN=${PIXELPANDA_API_TOKEN} -- None pixelpanda-mcp==0.1.2
03

Exposed tools (32)

24 read · 6 write · 2 destructive. Blast radius: 2 tools can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

ToolRiskDescription
add_borderwriteAdd a solid color border around an image.
add_watermarkwriteAdd a text watermark to an image. Position: center, bottom-right, or tiled.
adjust_imagereadAdjust brightness, contrast, sharpness, and saturation. 1.0 = no change, >1 = increase, <1 = decrease.
analyze_imagereadAnalyze an image with AI — detect objects, colors, text, composition, quality, and mood.
blur_imagewriteApply Gaussian blur to an image.
check_creditsreadCheck your PixelPanda credit balance and account info.
check_job_statusreadCheck the status of an AI generation job. Returns progress and result URLs when complete.
compress_imagereadCompress an image by reducing quality. Output format: jpeg, webp, or png.
convert_formatreadConvert an image to a different format: png, jpeg, webp, bmp, tiff.
create_profile_picturewriteCreate a profile picture from an image. Shape: circle, square, or rounded.
crop_imagereadCrop an image to the specified rectangle (left, top, right, bottom in pixels).
enhance_imagereadEnhance, sharpen, and restore an image using multiple AI methods.
flip_imagereadFlip an image horizontally or vertically.
generate_product_photoreadGenerate AI product photos with an avatar holding/using your product. 1 credit per image.
generate_scenesreadGenerate AI product scene photos (lifestyle, studio, detail shots). No avatar needed. 1 credit per scene.
generate_tryonreadGenerate AI try-on photos with an avatar wearing your product (clothing). 1 credit per image.
get_image_inforeadGet detailed information about an image: dimensions, format, file size, color mode, DPI.
grayscale_imagereadConvert an image to grayscale.
invert_imagereadInvert the colors of an image (negative).
list_avatarsreadList your saved AI avatars (for use in product photo generation).
list_jobsreadList your recent AI generation jobs.
list_productsreadList your saved products in PixelPanda.
make_transparentreadAdjust the opacity/transparency of an image. 0.0 = fully transparent, 1.0 = fully opaque.
merge_imageswriteMerge multiple images into one. Direction: horizontal, vertical, or grid.
pixelate_imagereadPixelate an image with a given pixel block size.
remove_backgrounddestructiveRemove the background from an image using AI. Returns a transparent PNG.
remove_textdestructiveRemove text and watermarks from an image using AI (OCR + inpainting).
resize_imagereadResize an image. Specify width, height, or both. Maintains aspect ratio by default.
rotate_imagereadRotate an image by the specified degrees (counter-clockwise). Expands canvas by default.
round_cornersreadRound the corners of an image with a specified radius.
upload_productwriteUpload a product image to PixelPanda for use in AI photo generation.
upscale_imagereadUpscale an image 2x or 4x using AI (Real-ESRGAN). Enhances resolution and sharpness.
04

Trust audit

CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.

LayerWhat it checksResult
L0Provenance & inventoryWARN
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfaceWARN
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (1 observation(s))
Network
declared (4 observation(s))
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (6)

MEDIUMInventory / provenance · inv.binary · CWE-1104
src/pixelpanda_mcp/mcp-pixelpanda-v3.1.zip
mcp-pixelpanda-v3.1.zip
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59
remove_background, remove_text
Why it matters. 2 tool(s) can delete or overwrite
Fix. prefer a read-only mode or scoped tokens; the page states the blast radius
LOWInventory / provenance · inv.no_license · CWE-1104
Why it matters. no LICENSE file and no repo licence
Fix. add a licence
LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94
src/pixelpanda_mcp/tools/api_free.py:37
f.write(base64.b64decode(b64_data))
LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94
src/pixelpanda_mcp/tools/api_free.py:76
f.write(base64.b64decode(b64_data))
LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94
src/pixelpanda_mcp/tools/api_free.py:108
f.write(base64.b64decode(b64_data))

Gates applied: no_behavioural_pass, no_license.

Audited 2026-10-11 · audit v0.4.1 · source sha 9cea95c18785full audit observations/trust-audit/mcp-server/longsleevedanaid991__pixelpanda-mcp.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-119cea95c18785CAUTIONB89first audit
06

Questions

What is the pixelpanda-mcp MCP server?

Run AI image tools for Claude, Cursor, and VS Code with PixelPanda MCP Server for local edits and product photo generation

What tools does pixelpanda-mcp expose?

32 in total: 24 read-only, 6 that write, and 2 that can delete or overwrite (remove_background, remove_text). Every one is listed on this page with its risk.

Is pixelpanda-mcp safe to connect to an agent?

With care. The audit graded it B (89/100) and found 6 things worth knowing before you trust this server, listed below with the exact line each was found on. Separately from the audit: 2 of its tools can destroy data, so scope the token you give it to what you actually need.

What credentials does pixelpanda-mcp need?

It reads PIXELPANDA_API_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How does pixelpanda-mcp run?

It speaks stdio, so it runs as a local process your client starts. It is published on PyPI as pixelpanda-mcp.

How current is this page?

The grade is for one exact copy of the source (9cea95c18785), read on 2026-10-11. The repository is watched and re-audited when it changes.

Advertisement