Kof Stitch Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Kof Stitch Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Part of [KOF Agentic Workflow](https://github.com/keeponfirst/keeponfirst-agentic-workflow-starter) - A complete agentic workflow for building modern applications. Check out the full workflow if you're interested in how this tool fits into the bigger picture.
If this project helps you, you can support development here:
👉 https://buymeacoffee.com/keeponfirst
<a href="https://www.buymeacoffee.com/keeponfirst" target="_blank"> <img src="https://cdn.buymeacoffee.com/buttons/v2/default-yellow.png" height="45" /> </a>
MCP (Model Context Protocol) Server for Google Stitch - AI-powered UI/UX design tool.
Works with Claude Code, Cursor, and any MCP-compatible client.
Google Stitch provides an official MCP endpoint at stitch.googleapis.com/mcp, but it requires:
Most MCP clients (Claude Code, Cursor) don't support Google's google_credentials auth type natively. This package wraps the official API as a stdio MCP server that handles authentication automatically.
Your MCP Client → kof-stitch-mcp → Google Stitch API
(stdio) (handles auth) (HTTP)list_projects - List all your Stitch projectsget_project - Get project detailscreate_project - Create a new projectlist_screens - List screens in a projectget_screen - Get screen detailsgenerate_screen_from_text - Generate UI design from text promptfetch_screen_code - Download screen HTML code directlyfetch_screen_image - Download screen screenshot as PNGexport_project - Batch export all screens (HTML + PNG) with manifestfetch_design_md - Download project's DESIGN.md design system spec (supports Stitch Vibe Design)init_stitch_project - NEW Initialize .stitch/ directory for stitch-skills compatibility # Install gcloud: https://cloud.google.com/sdk/docs/install
# Login
gcloud auth application-default login
# Set project
gcloud config set project YOUR_PROJECT_ID gcloud beta services mcp enable stitch.googleapis.com --project=YOUR_PROJECT_IDNo installation needed. Configure directly in your MCP client.
npm install -g @keeponfirst/kof-stitch-mcpnpm install @keeponfirst/kof-stitch-mcpCreate .mcp.json in your project root:
{
"mcpServers": {
"stitch": {
"command": "npx",
"args": ["-y", "@keeponfirst/kof-stitch-mcp"],
"env": {
"GOOGLE_CLOUD_PROJECT": "your-project-id"
}
}
}
}Or add via CLI:
claude mcp add stitch --command "npx" --args "-y" "@keeponfirst/kof-stitch-mcp" \
--env GOOGLE_CLOUD_PROJECT=your-project-idAdd to Cursor MCP settings:
{
"mcpServers": {
"stitch": {
"command": "npx",
"args": ["-y", "@keeponfirst/kof-stitch-mcp"],
"env": {
"GOOGLE_CLOUD_PROJECT": "your-project-id"
}
}
}
}Any client supporting stdio MCP servers can use:
GOOGLE_CLOUD_PROJECT=your-project-id npx @keeponfirst/kof-stitch-mcpAfter configuration, you can use natural language in your MCP client:
"List my Stitch projects"
→ Uses list_projects tool
"Generate a mobile login screen with email and social login"
→ Uses generate_screen_from_text tool
"Download the HTML code for screen abc123 in project xyz789"
→ Uses fetch_screen_code tool
"Download the DESIGN.md from my Stitch project xyz789"
→ Uses fetch_design_md tool
→ Saves DESIGN.md to your working directory
→ AI coding agents can now follow your design system when generating UIGoogle Stitch's new DESIGN.md feature (launched 2026-03-18) lets you define your design system in a portable Markdown file — colors, typography, spacing, and component patterns — that AI agents can read and follow.
1. Design in Stitch → export DESIGN.md from project settings
2. fetch_design_md → saves DESIGN.md to your repo
3. Claude Code reads DESIGN.md → generates consistent UI componentsstitch-skills is Google's official Agent Skills library that adds advanced workflows on top of Stitch — multi-page loops, React component conversion, Remotion video walkthroughs, and more.
kof-stitch-mcp is the authentication layer that makes stitch-skills work in Claude Code and Cursor, where Google OAuth is not natively supported.
| Without stitch-skills | With stitch-skills |
|---|---|
| Manual prompt for each screen | stitch-loop auto-generates all pages in sequence |
| AI guesses design rules | Every screen enforced against DESIGN.md |
| Raw HTML output | react-components converts to modular React/Vite components |
| Static designs | remotion generates interactive video walkthroughs |
Step 1 — Configure kof-stitch-mcp (authentication bridge)
Add to your .mcp.json:
{
"mcpServers": {
"stitch": {
"command": "npx",
"args": ["-y", "@keeponfirst/kof-stitch-mcp"],
"env": { "GOOGLE_CLOUD_PROJECT": "your-project-id" }
}
}
}Step 2 — Install stitch-skills
# Install the skills you need
npx skills add google-labs-code/stitch-skills --skill stitch-design
npx skills add google-labs-code/stitch-skills --skill stitch-loop
npx skills add google-labs-code/stitch-skills --skill design-md
npx skills add google-labs-code/stitch-skills --skill react-componentsStep 3 — Initialize your project
In Claude Code, run:
Initialize my Stitch project <projectId> with init_stitch_projectThis creates:
.stitch/
├── metadata.json ← screens map + project config (stitch-skills format)
├── DESIGN.md ← design system template pre-filled from your Stitch theme
├── SITE.md ← site vision and page checklist
└── designs/ ← output directory for HTML + PNG exportsStep 4 — Fill in the templates
Edit .stitch/DESIGN.md to complete your color palette, typography, and component rules. Edit .stitch/SITE.md to describe your site goals and pages.
Or let the design-md skill analyze your existing screens and fill in DESIGN.md automatically.
Step 5 — Run advanced workflows
Run stitch-loop to generate all pages in my siteConvert my Stitch screens to React components| Variable | Required | Description |
|---|---|---|
GOOGLE_CLOUD_PROJECT | Yes | Your Google Cloud Project ID |
GCLOUD_PROJECT | Alt | Alternative to GOOGLE_CLOUD_PROJECT |
Install Google Cloud SDK: https://cloud.google.com/sdk/docs/install
gcloud auth application-default loginEnable the MCP API:
gcloud beta services mcp enable stitch.googleapis.com --project=YOUR_PROJECT_IDEnsure your account has the required role:
gcloud projects add-iam-policy-binding YOUR_PROJECT_ID \
--member="user:[email protected]" \
--role="roles/serviceusage.serviceUsageConsumer"gcloud auth application-default print-access-tokenhttps://stitch.googleapis.com/mcp with proper headersMIT © KeepOnFirst
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.