Mcp Server — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Server (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Generate photorealistic product mockups from Claude, Cursor, Windsurf, and VS Code.
Model Context Protocol server for the SudoMock mockup generation API. Upload PSD templates, place artwork onto smart objects, and get CDN-hosted renders -- all through natural language.
This is a local stdio server: your MCP client launches it as a child process via npx and authenticates with your SUDOMOCK_API_KEY.
claude mcp add sudomock \
-e SUDOMOCK_API_KEY=sm_your_key_here \
-- npx -y @sudomock/mcpGet your API key at sudomock.com/dashboard/api-keys.
<details> <summary>JSON config for other clients (Cursor, Windsurf, VS Code)</summary>
{
"mcpServers": {
"sudomock": {
"command": "npx",
"args": ["-y", "@sudomock/mcp"],
"env": {
"SUDOMOCK_API_KEY": "sm_your_key_here"
}
}
}
}</details>
Note: A hosted remote (HTTP/OAuth) transport is not available yet. This package only ships the local stdio server shown above.
| Tool | Description | Credits |
|---|---|---|
list_mockups | List your uploaded mockup templates | 0 |
get_mockup_details | Get smart object UUIDs, dimensions, blend modes | 0 |
render_mockup | Render a mockup with your artwork | 1 |
render_2d_mockup | Render artwork onto a saved 2D mockup template (no PSD) | 5 |
render_video | Animate a mockup into an AI video clip (always async) | cost-based (free: 1/lifetime) |
upload_psd | Upload a Photoshop PSD/PSB template (sync or async) | 0 |
list_2d_mockups | List your saved SudoAI 2D mockup templates | 0 |
get_2d_mockup | Get one 2D mockup's details + print-area UUIDs | 0 |
delete_2d_mockup | Delete a 2D mockup template | 0 |
get_job | Check the status of an async job by job_id | 0 |
wait_for_job | Poll an async job until it succeeds or fails | 0 |
list_jobs | List your async jobs (renders, videos, uploads) | 0 |
get_account | Check plan, credits, and usage | 0 |
update_mockup | Rename a mockup template | 0 |
delete_mockup | Delete a mockup template | 0 |
create_studio_session | Create an embedded editor session | 0 |
create_webhook_endpoint | Register a webhook for async job completion | 0 |
list_webhook_endpoints | List your webhook endpoints | 0 |
update_webhook_endpoint | Edit or enable/disable a webhook endpoint | 0 |
delete_webhook_endpoint | Delete a webhook endpoint | 0 |
rotate_webhook_secret | Rotate a webhook signing secret | 0 |
test_webhook_endpoint | Send a signed webhook.test event | 0 |
list_webhook_deliveries | List delivery attempts for an endpoint | 0 |
replay_webhook_delivery | Replay a single failed delivery | 0 |
render_mockup and upload_psd accept is_async: true, and render_video is always async. These return a job_id immediately (HTTP 202) instead of a final result. Poll it with get_job, or let wait_for_job block until the job reaches a terminal status and hands back result_url, mockup_uuid, model, credits_charged, and payg ({credits, unit_price, cost} for pay-as-you-go jobs, otherwise null).
Register an endpoint with create_webhook_endpoint to be notified when async jobs finish. Deliveries are signed with TWO headers: X-SudoMock-Signature (a hex HMAC-SHA256 over ${timestamp}.${rawBody} using the secret returned at creation/rotation) and X-SudoMock-Timestamp (unix seconds). Verify in constant time and reject if |now - timestamp| > 300s. The delivery body is {event, job_id, kind, status, result_url, error, created_at}. Event types: render.succeeded, render.failed, upload.succeeded, video.succeeded, video.failed, webhook.test.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.