Gpt Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Gpt Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A tiny local MCP server that lets Claude generate images with the OpenAI API.
It runs on your machine, so it reaches OpenAI over your network — which is why it works even though Claude's own sandbox can't call api.openai.com directly.
Both generate an image the same way; they differ only in how the result comes back, so you can compare:
| Tool | Returns | Best for | Tradeoff |
|---|---|---|---|
generate_image_to_file | A file path (writes the PNG to disk) | Real, full-res assets | Lossless, cheap on context. Claude reads the file from disk. |
generate_image_bytes | The image inline (base64 image block) | Small previews / icons | Claude sees it immediately, but can't perfectly re-save large images, and big files are heavy to pass. |
Rule of thumb: use generate_image_to_file for anything you want to keep; use generate_image_bytes to eyeball a quick result.
cd gpt-mcp
npm installGet an API key from https://platform.openai.com/api-keys. For local testing you can copy .env.example → .env and paste it in. In Cowork / Claude Code you instead pass it via the server config (below).
The MCP Inspector gives you a UI to call the tools directly:
OPENAI_API_KEY=sk-... npm run inspectClaude Code (CLI):
claude mcp add gpt-mcp \
-e OPENAI_API_KEY=sk-your-key \
-e GPT_MCP_OUTPUT_DIR="/Users/kavindu/Documents/Claude/Projects/personal finance tracker/financial-app/src/assets" \
-- node "/Users/kavindu/Documents/Claude/Projects/personal finance tracker/gpt-mcp/src/index.js"Config file (Cowork / Claude Desktop / any MCP client) — add under mcpServers:
{
"mcpServers": {
"gpt-mcp": {
"command": "node",
"args": [
"/Users/kavindu/Documents/Claude/Projects/personal finance tracker/gpt-mcp/src/index.js"
],
"env": {
"OPENAI_API_KEY": "sk-your-key",
"GPT_MCP_OUTPUT_DIR": "/Users/kavindu/Documents/Claude/Projects/personal finance tracker/financial-app/src/assets"
}
}
}
}After it's connected, Claude can call generate_image_to_file / generate_image_bytes.
Both tools accept:
prompt (required) — what to draw.size — 1024x1024 · 1536x1024 · 1024x1536 · auto (default auto).quality — low · medium · high · auto (default auto; higher = more cost).background — transparent · opaque · auto. Use transparent for logos/icons.output_format — png · webp · jpeg (default png).generate_image_to_file additionally accepts:
filename — name without extension (default: a slug of the prompt + timestamp).output_dir — where to save (default: GPT_MCP_OUTPUT_DIR, else ./generated-images).| Var | Required | Purpose |
|---|---|---|
OPENAI_API_KEY | yes | Your OpenAI key. |
OPENAI_IMAGE_MODEL | no | Defaults to gpt-image-1. |
GPT_MCP_OUTPUT_DIR | no | Default save folder for generate_image_to_file. |
node 18+ required (uses built-in fetch).~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.