Atlas / MCP servers / manavarya09 / Designlang

DesignlangBLOCK

Name: Designlang
Author: manavarya09

mcp/manavarya09/designlang

MCP server by manavarya09 · accessibility · agent skill · ai · Audited 2026-09-22

Extract any website's complete design system with one command. DTCG tokens, semantic+primitive+composite, MCP server for Claude Code/Cursor/Windsurf, multi-platform emitters (iOS SwiftUI, Android Compose, Flutter, WordPress), Tailwind v4, Figma variables, shadcn/ui, CSS health audit, WCAG remediatio

Verdict

BLOCK

Grade

Trust score

69 /100

Exposed tools

16 15r · 1w · 0d

Transport

stdio

License

MIT

Stars

4,132

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Built by Manav Arya Singh (@Manavarya09)

Read from source at commit f27906d699a8OBSERVED · 2026-09-22

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add website --env ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY} --env ATLASCLOUD_API_KEY=${ATLASCLOUD_API_KEY} --env ATLAS_CLOUD_API_KEY=${ATLAS_CLOUD_API_KEY} --env BLOB_READ_WRITE_TOKEN=${BLOB_READ_WRITE_TOKEN} -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "website": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "ANTHROPIC_API_KEY": "${ANTHROPIC_API_KEY}",
        "ATLASCLOUD_API_KEY": "${ATLASCLOUD_API_KEY}",
        "ATLAS_CLOUD_API_KEY": "${ATLAS_CLOUD_API_KEY}",
        "BLOB_READ_WRITE_TOKEN": "${BLOB_READ_WRITE_TOKEN}"
      }
    }
  }
}

Exposed tools (16)

15 read · 1 write · 0 destructive.

Tool	Risk	Description
`cancel_job`	read	Cancel a running extraction job; its result is discarded.
`compute_drift`	write	Compare two finished jobs (e.g. production vs a preview deploy): colours, typography, spacing, accessibility and components that changed.
`export`	read	Render a finished job in a target format.
`extract_design`	read	Extract the design system of a live URL in a real browser. Returns a job_id immediately; poll get_job_status, then pass the job_id to get_tokens, get_colors, get_typography, get_components, get_findings, compute_drift or export.
`find_nearest_color`	read	Find the nearest palette color that passes the requested WCAG contrast rule against the given hex.
`get_colors`	read	Colour system for a finished job: primary/secondary/accent, backgrounds, text, full palette with usage.
`get_component`	read	Return the component cluster with matching kind, optionally narrowed to a variant index.
`get_components`	read	Component styles for a finished job: buttons, inputs, cards, links and their variants.
`get_findings`	read	Design-system quality findings for a finished job: token lint (colour sprawl, scale consistency) and WCAG contrast summary.
`get_job_status`	read	Status of an extraction job (running, done, failed, cancelled). A done job includes a short summary: primary colour, font families, counts.
`get_region`	read	Return the region with the given role (e.g. hero, nav, footer).
`get_tokens`	read	W3C DTCG design tokens (primitive + semantic tiers) for a finished job.
`get_typography`	read	Typography for a finished job: families, type scale, weights, line heights.
`list_failing_contrast_pairs`	read	Return the accessibility remediation array (failing fg/bg pairs with suggestions).
`list_jobs`	read	All extraction jobs in this session.
`search_tokens`	read	Case-insensitive substring match over all token dot-paths.

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	WARN
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (2 observation(s))
Network: declared (5 observation(s))
Shell: declared (4 observation(s))
Dependencies: not all pinned
Secrets in source: none-found

Findings (25)

HIGHNetwork egress · net.tls_off · CWE-200, CWE-319

bin/design-extract.js:128

.option('--insecure', 'ignore HTTPS/SSL certificate errors (self-signed, dev, proxies)')

Why it matters. certificate verification is disabled

Fix. leave verification on

MEDIUMInventory / provenance · inv.binary · CWE-1104

vscode-extension/designlang-vscode-0.1.0.vsix

designlang-vscode-0.1.0.vsix

Why it matters. a compiled or binary member cannot be reviewed from source

Fix. ship source, or explain the binary in the README

MEDIUMInformation disclosure · disclose.log_secret · CWE-209, CWE-532

github-action/diff-tokens.cjs:65

console.log(`**${total} token changes** vs baseline (${changed.length} changed, ${added.length} added, ${removed.length} removed).`);

MEDIUMObfuscation / stealth · obf.homoglyph · CWE-506, CWE-94

bench/run.mjs:154

`A colour counts when it is within ΔE ${COLOR_TOLERANCE} (CIE76) of the site's brand colour; a font counts when it names the body-text family.`,

LOWInventory / provenance · inv.hidden_file · CWE-1104

vscode-extension/.vscodeignore

.vscodeignore

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

tests/motion-emitters.test.js:127

new Function('module', out)(mod);

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

LOWCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

tests/motion-emitters.test.js:138

new Function('module', out)(mod);

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

LOWCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

tests/motion-emitters.test.js:146

new Function('module', out)(mod);

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/formatters/design-md.js:352

const url = new URL('../../package.json', import.meta.url);

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/mcp/server.js:75

const { version } = JSON.parse(readFileSync(new URL('../../package.json', import.meta.url), 'utf-8'));

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

website/app/api/badge/[host]/route.js:11

import { extractDesignLanguage } from '../../../../../src/index.js';

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

website/app/api/badge/[host]/route.js:12

import { formatScoreBadge } from '../../../../../src/formatters/badge.js';

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

website/app/api/badge/[host]/route.js:13

import { validateTargetUrl } from '../../../../lib/url-safety.js';

LOWNetwork egress · net.metadata_ip · CWE-200, CWE-319

website/lib/url-safety.test.js:119

test('rejects IPv4-mapped IPv6 cloud metadata ::ffff:169.254.169.254', () => {

Why it matters. cloud metadata endpoint: the classic SSRF credential grab

LOWNetwork egress · net.metadata_ip · CWE-200, CWE-319

website/lib/url-safety.test.js:120

const r = validateTargetUrl('http://[::ffff:169.254.169.254]');

Why it matters. cloud metadata endpoint: the classic SSRF credential grab

LOWNetwork egress · net.metadata_ip · CWE-200, CWE-319

website/lib/url-safety.test.js:135

const r = validateTargetUrl('http://[64:ff9b::169.254.169.254]');

Why it matters. cloud metadata endpoint: the classic SSRF credential grab