Llm Vision Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Llm Vision Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A TypeScript MCP server that gives text-only LLMs image understanding through StepFun vision models.
This is useful when the primary model, such as GLM5.2 or DeepSeek V4, does not support image input. The model can call these MCP tools, receive text or structured visual analysis, then continue reasoning with the result.
analyze_image: general image understandingextract_text_from_image: OCR for screenshots, logs, documents, code, and UI textdiagnose_error_screenshot: error screenshot and stack trace diagnosisunderstand_technical_diagram: architecture, flowchart, UML, ER, sequence, and network diagramsanalyze_data_visualization: charts, tables, dashboards, and metrics screenshotsui_to_artifact: UI screenshot to implementation notes or design specsui_diff_check: expected vs actual UI screenshot comparisonnpm install
cp .env.example .envSet STEPFUN_API_KEY in the MCP client environment. Injecting env vars through the MCP client config is usually the most explicit and reliable setup.
Required:
STEPFUN_API_KEY=your_stepfun_api_keyOptional:
# standard | step_plan
STEPFUN_API_MODE=standard
STEPFUN_BASE_URL=https://api.stepfun.com/v1
STEPFUN_VISION_MODEL=step-1o-turbo-vision
STEPFUN_DEFAULT_DETAIL=high
STEPFUN_TIMEOUT_MS=120000Step Plan uses the same API key style but a different Base URL:
STEPFUN_API_MODE=step_planWhen STEPFUN_API_MODE=step_plan is set, defaults change to:
STEPFUN_BASE_URL=https://api.stepfun.com/step_plan/v1
STEPFUN_VISION_MODEL=step-3.7-flashYou can still override either value explicitly:
STEPFUN_API_MODE=step_plan
STEPFUN_BASE_URL=https://api.stepfun.com/step_plan/v1
STEPFUN_VISION_MODEL=step-3.7-flashFor backward compatibility, STEPFUN_USE_STEP_PLAN=true also enables Step Plan mode when STEPFUN_API_MODE is not set.
npm run build
npm run startAfter this package is published to npm:
npx -y llm-vision-mcpThe published package runs on Node.js and does not require Bun on the user's machine.
Example:
{
"mcpServers": {
"llm-vision-mcp": {
"command": "node",
"args": ["/Users/shaoyun/workdir/llm-vision-mcp/dist/index.js"],
"env": {
"STEPFUN_API_KEY": "your_stepfun_api_key",
"STEPFUN_API_MODE": "step_plan",
"STEPFUN_DEFAULT_DETAIL": "high"
}
}
}
}npm package example after publishing:
{
"mcpServers": {
"llm-vision-mcp": {
"command": "npx",
"args": ["-y", "llm-vision-mcp"],
"env": {
"STEPFUN_API_KEY": "your_stepfun_api_key",
"STEPFUN_API_MODE": "step_plan",
"STEPFUN_DEFAULT_DETAIL": "high"
}
}
}
}Every single-image tool accepts:
{
"image": "/absolute/path/to/screenshot.png",
"question": "What does this error mean?",
"detail": "high"
}The image field supports:
file:// pathhttp:// or https:// URLdata:image/...;base64,... Data URLui_diff_check accepts two images:
{
"expected_image": "/absolute/path/to/expected.png",
"actual_image": "/absolute/path/to/actual.png",
"question": "Focus on layout and missing buttons.",
"detail": "high"
}detail: "high" for OCR, UI, diagrams, charts, and screenshots.detail: "low" for faster, cheaper coarse image understanding.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.