Pollinations

Overview

From the repository's own README, as read at the audited commit.

<div align="center">  <picture>    <source media="(prefers-color-scheme: dark)" srcset="packages/ui/src/brand/lockup-horizontal-white.svg" />    <img src="packages/ui/src/brand/lockup-horizontal-black.svg" alt="pollinations.ai" width="100%" />  </picture>    <p><strong>Open-source AI for people who make things.</strong></p>[![Stars](https://img.shields.io/github/stars/pollinations/pollinations?style=for-the-badge&logo=github)](https://github.com/pollinations/pollinations/stargazers)[![License](https://img.shields.io/github/license/pollinations/pollinations?style=for-the-badge)](LICENSE)[![Discord](https://img.shields.io/discord/885844321461485618?style=for-the-badge&logo=discord&label=Discord&color=5865F2)](https://discord.gg/pollinations-ai-885844321461485618)[Website](https://pollinations.ai) · [Dashboard](https://enter.pollinations.ai) · [Playground](https://pollinations.ai/play) · [API Docs](APIDOCS.md) · [Discord](https://discord.gg/pollinations-ai-885844321461485618)</div>> [!IMPORTANT]> **Model IDs are now standardized**>> Model IDs now follow `publisher/model`—for example, `flux` → `black-forest-labs/flux.1-schnell`. The model catalog uses the new IDs. Existing IDs remain supported as aliases in API requests.>> [Browse models and their aliases →](https://enter.pollinations.ai/models)<p align="center"><img src="https://media.pollinations.ai/eb3be88cf66d7491" alt="Pixel art cozy hackerspace — robot at terminal, nomnom creature eating code, bee with glasses" width="800" /></p><!-- recent-apps:start -->## 🆕 Recent Apps| Name | Description | Author ||------|-------------|--------|| [🛠️ ApiScribe](https://fadyabohamza-netizen.github.io/apiscribe) | Describe an API in plain English, get organized REST or GraphQL endpoint blueprints with params and responses. BYOP Pollinations-powered. | [@fadyabohamza-netizen](https://github.com/fadyabohamza-netizen) || [🛠️ TestMine](https://fadyabohamza-netizen.github.io/testmine) | Paste source code, pick a framework, get unit te

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude mcp add shared --env AWS_ACCESS_KEY_ID=${AWS_ACCESS_KEY_ID} --env AWS_SECRET_ACCESS_KEY=${AWS_SECRET_ACCESS_KEY} --env AZURE_MYCELI_PROD_API_KEY=${AZURE_MYCELI_PROD_API_KEY} --env AZURE_MYCELI_PROD_SWEDEN_API_KEY=${AZURE_MYCELI_PROD_SWEDEN_API_KEY} -- npx -y shared

{
  "mcpServers": {
    "shared": {
      "command": "npx",
      "args": [
        "-y",
        "shared"
      ],
      "env": {
        "AWS_ACCESS_KEY_ID": "${AWS_ACCESS_KEY_ID}",
        "AWS_SECRET_ACCESS_KEY": "${AWS_SECRET_ACCESS_KEY}",
        "AZURE_MYCELI_PROD_API_KEY": "${AZURE_MYCELI_PROD_API_KEY}",
        "AZURE_MYCELI_PROD_SWEDEN_API_KEY": "${AZURE_MYCELI_PROD_SWEDEN_API_KEY}"
      }
    }
  }
}

Exposed tools (23) 22 read · 1 write · 0 destructive

Details

Source

pollinations/pollinations

npm

shared

PyPI

llm-pollinations

Transports

streamable-http

Credentials it reads

AWS_ACCESS_KEY_IDAWS_SECRET_ACCESS_KEYAZURE_MYCELI_PROD_API_KEYAZURE_MYCELI_PROD_SWEDEN_API_KEYBOT_TOKEN_CATGPTBOT_TOKEN_OPPOSITE_PROMPTCLOUDFLARE_API_TOKENCLOUDFLARE_API_TOKEN_MYCELIDASHSCOPE_API_KEYDEEPINFRA_API_KEYDISCORD_TOKENGH_TOKEN

License

MIT

Stars

5,085 · pushed 0d ago

Trust audit

Do not install this without reading the findings. The audit found something that could harm you or your machine.

What the source does

Filesystem

declared (14 observation(s))

Network

declared (2 observation(s))

Shell

declared (2 observation(s))

Dependencies

not all pinned

Secrets in source

found

Findings (25)

exec(input?: (string | URLPatternInit), baseURL?: string): URLPatternResult | null;

exec(query: string): Promise<D1ExecResult>;

SSH_KEY="${SSH_KEY:-$HOME/.ssh/thomashkey}"

- **403 errors**: Users denied access to specific models (API key restrictions)

models ignore text inputs — any text prompt passed to the Trellis 2/Asset Harvester family will

models ignore text inputs — any text prompt passed to the Trellis 2/Asset Harvester family will

.claude/skills/polli/SKILL.md

console.log(`Skipping non-Worker secret ${name}`);

callback_url: callbackUrl,

curl -s --connect-timeout 5 --max-time 10 http://192.222.51.105:8765/health

curl -s --connect-timeout 5 --max-time 10 http://192.222.51.105:8189/health

'data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iODgiIGhlaWdodD0iODgiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjMDAwIiBzdHJva2UtbGluZWpvaW49InJvdW5kIiBvcGFjaXR5PSIuMyIgZmlsbD0ibm9uZSIgc3Ryb

"GITHUB_APP_PRIVATE_KEY": "ENC[AES256_GCM,data:8B9WeHKttha0jbRDpL0ehHCbcJZSxps6tVHt0eNrxCaEDysfmbB2xKiKgLJPe0gu0TEHHUdwLSxmLOmzbbMPPcZ6UrgkwRhleZPidJ7yuWgGUqC39jnvAOpqRS+6PG1C9DiLNylupVvXYhjqCNWatCdjs

"SSH_RUNPOD_KLEIN": "ENC[AES256_GCM,data:wnWlFH7oUX0qPWZ9/OMEkzV5MTlubVdD+/ZvHT4wXG9B5rU+LP4xsQdRms6vpsUT9byS7QaRPse3B+WBq+nM+Xu5ck8dEETSGSDrSnewSi1oKCwwHPVGz9KACknVTH11d0OJLuAkBPGQAdopLmilWL60ZJCNg28

"GITHUB_APP_PRIVATE_KEY": "ENC[AES256_GCM,data:zyTCGnoZfDyeoCBgQ3ix9kIVKBVzQ4zUWZi+UCl2vlrRcG8Kcs4EE5JHXISarkLpajNjgobyEJw7TKbKjdMRLFFOrU9Nv+z22j/xP9cIZFVW5Lt/F3oD3Od+0pEbRHVr+SRcf4F1qazQMjgg9AHqfbJKq

"SSH_RUNPOD_KLEIN": "ENC[AES256_GCM,data:z3u2POkOeuFFf8Hn4uiqLX4Lzz6z4kzwof+FbZo/8y8olfcfnq+mk9ufSa9SSWhLofKlPcE1w6+WdlxxSCVzXrM3MbGuiw2kswH8Wjvtzphs6xC7tqkWSuDo2bevKqSS2Qick4oCTeY2jqpX7G5m4omPlzbUemi

"🐈⬛",

emoji: "🧑💻",

"emoji": "🧑💻",

"emoji": "🧑🏫",

"emoji": "🧑💻",

const TOKEN = "sk_test_request_scoped";

token: "sk_00000000000000000000000000000000",

apiKey: "sk_minted_by_consent",

apiKey: "sk_minted_by_consent",

Gates applied: instruction_override, no_behavioural_pass.

Audited 2026-09-18 · audit v0.4.0 · source sha 4b9e15302921 · full audit: observations/trust-audit/mcp-server/pollinations__pollinations-2.json · Report an issue or request a re-scan

Audit history

Also audited

Servers with a similar trust profile.

Questions