@imgly/codesign-mcp
ly.img/codesign · version 0.5.1 · 54,597 weekly npm downloads · audited 2026-11-05
Notes
Version 0.6.0 (released after this audit) could not be started in our isolated environment on 2026-11-05, so this report still shows the last successful audit, of version 0.5.1.
Findings
No hidden-instruction or invisible-character findings in any tool, prompt, or resource description.
Claude Connectors Directory readiness
- ❌ Every tool has a title Missing on 17 of 17: edit, preview, import, open and 13 more
- ❌ Every tool declares readOnlyHint or destructiveHint Missing on 17 of 17: edit, preview, import, open and 13 more
- ✅ Tool names are 64 characters or fewer All within limit
- ❌ Descriptions avoid instructions about model behavior or other tools 15 of 17 descriptions reference other tools or tell the model what it must do: edit, preview, import, open and 11 more
- ✅ No hidden instructions or invisible characters in tool metadata None found
Checks the directory's published tool requirements that are visible from tools/list. Passing them does not guarantee acceptance.
Supply chain
- Install scripts: none
- npm provenance: no
- Source repository linked: no
- License: SEE LICENSE IN LICENSE.md
- Direct dependencies: 20
Tools (17)
| Name | Title | Hint | Description |
|---|---|---|---|
edit | none | Edit the CE.SDK canvas by running JavaScript against the live CreativeEngine. The result becomes the session’s current state. ⚠ BEFORE your first `edit`, load the installed `handbook` skill; if it isn't installed, read … | |
preview | none | Render blocks (almost always pages) to inline images so you can see the result. `blockIds` is a LIST, rendered in the order you give it: `[pageId]` for one page, `[a, b]` for a subset, or OMIT it entirely to preview eve… | |
import | none | Import a design FILE as a NEW design — a CE.SDK `.imgly` design file; a Photoshop (`.psd`/`.psb`), InDesign (`.idml`), PowerPoint (`.pptx`) or PDF file; or a plain image or SVG, which becomes a one-page design sized to t… | |
open | none | Work on a saved design itself: every later edit is part of it once you export `imgly`. Pass the `uri` an `import`, an `export` or `designs` gave you, verbatim. To start from a copy instead, `import` its `uri`. Returns `{… | |
export | none | Export the design you are working on — `format` picks the deliverable: `pdf` (print PDF), `png`/`jpeg`/`webp` (image), `svg` (vector SVG), `pdfx` (print-ready PDF/X), `html` (responsive HTML5), `idml` (Adobe InDesign), `… | |
designs | none | The saved designs you can `open` or `import` a copy of, newest first. The one you are working on is marked `current`. A row marked `unsaved` is work an earlier session left without saving: `open` it to continue, then sav… | |
scorecard | none | Record the verdict of a judge loop you have COMPLETED for the design you are working on — the final step of the `judge` skill. Recording is a claim about work already done: never call this without having scored the axes … | |
rename | none | Give a design its title — the name `designs` lists it by. Without `uri`, renames the design you are working on: its next `export({ format: 'imgly' })` saves under the title, and if it is saved already, the saved design … | |
checklist | none | Register the brief's ACCEPTANCE CHECKLIST — the machine-checkable claims that must hold before the work counts as done. Do this right after intake, before the first edit: extract from the brief every required output file… | |
view | none | Get a URL the human can open to view and edit the SAVED design in CE.SDK. Returns the design's stable URL — it survives re-saving, so print it ONCE and don't re-emit a fresh URL every turn. The page is a full editor; whe… | |
asset_search | none | Search every asset source of this server's engine, live; earlier sources rank first. Read-only — never creates a revision. Returns JSON `{ sources: [{ source, description, total, nextPage, failed, assets }] }`; each ass… | |
asset_add | none | Add a local media file (image, font, video, or audio) to the workspace so it can be used in a design. Copies the file bytes into the content-addressed asset store at `assets/<sha>.<ext>`. The bring-your-own arm of the as… | |
asset_generate | none | Generate images, video, speech, music and sound effects — and transcribe speech — via the AI gateway. Call with NO arguments first: returns the curated model catalog, every entry tagged with its `capability` (text2image… | |
diagnostics | none | Inspect this codesign MCP server: `status` (default) reports what is running (build id, CE.SDK engine version, non-secret config); `summary` returns a bounded digest of recent activity (counts, recent errors, slowest cal… | |
login | none | Sign in with your IMG.LY account (opens the system browser). The session saves automatically once the user finishes in the browser; call login again anytime to confirm — safe to repeat, it does not restart the flow or in… | |
logout | none | Sign out of your IMG.LY account (revokes the session and clears local credentials). | |
read_skill_resource | none | Read a CoDesign skill file by its `skill://codesign/<name>/<path>` URI; returns the same text as the MCP resource. Use it only when your host can't read MCP resources — otherwise read the resource directly. |
Check your own setup
npx mcpvetter scan --liveBadge
Add this to a README:
[](https://mcpvetter.com/servers/imgly-codesign-mcp)Publish this server?
Get the MCPVetter verified badge, a re-audit within 24 hours of every npm release, and an email whenever tools, findings, or Claude directory readiness change. $29 per server per month. You prove ownership first, free.