Fal Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Fal Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A Model Context Protocol (MCP) server for discovering and documenting Fal.ai models. This server provides tools for coding agents to learn about available models, their schemas, capabilities, and usage patterns.
list_modelsList all available Fal.ai models with comprehensive filtering and sorting options.
Filtering Parameters:
category? (optional): Filter by API category from metadata.category (e.g., "text-to-image", "image-to-video", "training") or array of categories - models must match ANY specified category (e.g., ["text-to-image", "image-to-video"])status? (optional): Filter by status - "active" or "deprecated"tags? (optional): Array of tags - models must have ALL specified tags (e.g., ["new", "beta"])owner? (optional): Filter by model owner/organization (e.g., "fal-ai", "clarityai")highlighted? (optional): Filter to only highlighted models (boolean)pinned? (optional): Filter to only pinned models (boolean)kind? (optional): Filter by model kind - "inference" or "training"search? (optional): Free-text search across name, description, ID, and tagslimit? (optional): Maximum number of results (1-100, default: 20)sortBy? (optional): Sort field - "updated_at" (most recent first), "name" (alphabetical), "category" (grouped), or "owner" (grouped)Common API Categories:
"text-to-image", "image-to-image", "text-to-video", "image-to-video", "video-to-video", "image-to-3d", "text-to-audio", "audio", "audio-to-audio", "speech-to-text", "text-to-speech", "training"Examples:
// Basic search
{
"category": "text-to-image",
"search": "flux",
"limit": 10
}
// Advanced filtering
{
"category": ["text-to-image", "image-to-image"],
"status": "active",
"tags": ["new"],
"sortBy": "updated_at",
"limit": 20
}
// Find models from specific owner
{
"owner": "fal-ai",
"highlighted": true,
"sortBy": "name"
}get_model_infoGet detailed information about a specific model including metadata, capabilities, description, and pricing (when API key is provided).
Parameters:
model_id (required): Model endpoint ID (e.g., "fal-ai/flux-pro") or alias (e.g., "flux_pro")Returns:
Example:
{
"model_id": "fal-ai/flux-pro"
}Note: Pricing information is only included when an API key is provided in the Authorization header. Without an API key, all other model information is still available.
get_model_schemaGet the OpenAPI/JSON schema for a model's input and output parameters.
Parameters:
model_id (required): Model endpoint ID or aliasExample:
{
"model_id": "fal-ai/flux/dev"
}get_model_documentationGet comprehensive documentation including usage examples and best practices.
Parameters:
model_id (required): Model endpoint ID or aliasExample:
{
"model_id": "fal-ai/flux-pro"
}npm install -g wrangler# Clone the repository
git clone <repository-url>
cd fal-mcp
# Install dependencies
npm installCreate a KV namespace for model caching:
npx wrangler kv namespace create MODEL_CACHEThis will output a namespace ID. Update wrangler.jsonc with the actual namespace ID:
{
"kv_namespaces": [
{
"binding": "MODEL_CACHE",
"id": "your_actual_namespace_id_here"
}
]
} npx wrangler loginnpm run deployThis will deploy your MCP server to: fal-mcp.<your-account>.workers.dev/mcp
npm run devThe server will be available at http://localhost:8787/mcp
API keys are optional but recommended to avoid rate limits. The server works without authentication, but authenticated requests have higher rate limits.
The server extracts API keys from the Authorization header in MCP client requests:
Authorization: Key <your-fal-api-key>#### Claude Desktop
Add custom headers in your Claude Desktop configuration:
{
"mcpServers": {
"fal-ai": {
"command": "npx",
"args": [
"mcp-remote",
"https://fal-mcp.your-account.workers.dev/mcp"
],
"env": {
"FAL_API_KEY": "your-fal-api-key-here"
}
}
}
}Note: The exact method for passing headers depends on your MCP client. Some clients may require using a proxy or wrapper to inject headers.
#### Other MCP Clients
Check your MCP client's documentation for how to pass custom headers. The server expects:
AuthorizationKey <your-api-key>Authorization header format: Key <your-api-key>For local MCP clients like Claude Desktop, use the mcp-remote package:
npm install -g mcp-remoteThen configure your MCP client to use:
npx mcp-remote https://fal-mcp.your-account.workers.dev/mcpIf your MCP client supports streamable HTTP transport, connect directly to:
https://fal-mcp.your-account.workers.dev/mcpsrc/index.ts): Main entry point, handles HTTP requests and routes to MCP agentsrc/registry/model-registry.ts): Manages model cache with KV storage and alias resolutionsrc/utils/fal-api.ts): Handles all Fal.ai Platform API callssrc/tools/fal-ai.tools.ts): MCP tool implementationssrc/types/fal-model.ts): TypeScript interfaces and Zod schemasThe server uses the Fal.ai Platform API for:
GET /v1/models)expand=openapi-3.0)GET /v1/models/pricing) - requires authenticationAll API calls are made server-side, so MCP clients don't need direct API access.
npm run typechecknpm run lint:fixnpm run formatnpm run cf-typegenfal-mcp/
├── src/
│ ├── index.ts # Main entry point, MCP agent
│ ├── registry/
│ │ └── model-registry.ts # Model cache and registry
│ ├── tools/
│ │ └── fal-ai.tools.ts # MCP tool implementations
│ ├── types/
│ │ └── fal-model.ts # TypeScript types and Zod schemas
│ └── utils/
│ └── fal-api.ts # Fal.ai API client
├── wrangler.jsonc # Cloudflare Workers configuration
├── package.json
└── README.mdThe server handles errors gracefully:
list_models to find available modelsThis project is licensed under the MIT License - see the LICENSE file for details.
Contributions are welcome! Please read our Contributing Guidelines for details on our code of conduct and the process for submitting pull requests.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.