
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
@alttext_ai/alttext-mcp
Advanced tools
Generate alt text, translate descriptions, and manage your AltText.ai image library.
An MCP server that lets AI assistants generate alt text, manage image libraries, and queue alt text generation for web page images using the AltText.ai API.
Works with Claude Desktop, Claude Code, Cursor, Windsurf, and any MCP-compatible client.
This server runs npx -y @alttext_ai/alttext-mcp, which downloads and executes code with your API key in its environment. That's worth a moment of verification before you install — by you or by an AI agent doing the setup. Everything below should match:
| Signal | Value |
|---|---|
| npm package | @alttext_ai/alttext-mcp |
| Source repository | github.com/alttextai/alttext-mcp |
| Publisher | AltText.ai |
| Provenance | Published from this repo's CI with npm provenance — npm shows a verified build badge linking the package to this exact commit |
The npm scope is @alttext_ai (with an underscore), while the GitHub org is alttextai (no underscore). This is intentional, not a typosquat: the @alttextai npm scope was already taken, so we publish under @alttext_ai. The two names refer to the same official AltText.ai package.
To cryptographically verify the published package was built by this repo's CI — not just trust the metadata — run:
npm audit signatures
from a project where the package is installed. This validates the registry signature and the npm provenance attestation, which links the tarball to a specific commit and GitHub Actions build. A counterfeit package can forge repository.url and other metadata, but it cannot forge the provenance attestation — so this is the check that actually matters.
(For a quick, weaker cross-reference of the claimed source you can run npm view @alttext_ai/alttext-mcp repository.url, but note that field is publisher-controlled metadata and proves nothing on its own.)
The setup snippet uses npx -y @alttext_ai/alttext-mcp, which always resolves to the latest published version and re-runs it on every launch. That keeps you current, but it also means a future release runs automatically without review. If you want a reproducible, audited install, pin a specific version:
"args": ["-y", "@alttext_ai/alttext-mcp@1.0.5"]
Run npm audit signatures against the pinned version, and bump it deliberately when you're ready to take a new release.
Requirements: Node.js 18+ and an AltText.ai API key
Add the server to your MCP client configuration:
{
"mcpServers": {
"alttext-ai": {
"command": "npx",
"args": ["-y", "@alttext_ai/alttext-mcp"],
"env": {
"ALTTEXT_API_KEY": "your-api-key"
}
}
}
}
Where to add this:
| Client | Config file |
|---|---|
| Claude Desktop | claude_desktop_config.json |
| Claude Code | .mcp.json in your project root |
| Cursor | MCP settings in the Cursor preferences |
| Windsurf | MCP settings in the Windsurf preferences |
| Tool | Description |
|---|---|
get_account | Check your credit balance, usage, and account settings. |
update_account | Update account name, webhook URL, or notification email. |
| Tool | Description |
|---|---|
generate_alt_text | Generate alt text for an image URL. Supports multilingual output, custom prompts, keywords, and character limits. Uses account credits. |
generate_alt_text_from_file | Generate alt text from a local image file. Automatically base64-encodes and uploads. Uses account credits. |
translate_image | Add alt text in a new language for an existing image (by asset_id). Uses account credits. |
| Tool | Description |
|---|---|
list_images | List images in your library with pagination. |
search_images | Search your image library by alt text content. |
get_image | Get details for a specific image by asset ID. |
update_image | Update alt text, tags, or metadata for an image. |
delete_image | Delete an image from your library. |
| Tool | Description |
|---|---|
bulk_create | Bulk generate alt text from a CSV file with image URLs and optional metadata. |
scrape_page | Scan a web page, find images missing alt text, and queue generation. Results are async -- use list_images to check progress. |
This package uses stdio and runs on the machine launching the MCP client. Image and CSV paths refer to that machine; selected file contents are uploaded to AltText.ai.
Generation and translation use your account credits. Additional languages and image conversion can increase the total. Check get_account before paid work. Generation can overwrite existing alt text when requested; updates replace supplied fields and deletion removes the image from the library.
CSV imports and page scraping queue background processing. An accepted request does not mean generation has finished; inspect the image library and any configured completion notifications. Tool annotations describe effects for clients; they do not enforce confirmation.
Once configured, just ask your AI assistant:
| Variable | Required | Description |
|---|---|---|
ALTTEXT_API_KEY | Yes | Your AltText.ai API key |
ALTTEXT_API_BASE_URL | No | Override the API base URL (default: https://alttext.ai/api/v1) |
npm install
npm run build
npm test
npm run lint
Tests use mocked fetch calls -- no API key or network access needed.
MIT
server.json describes the stdio npm package. Its name matches mcpName in package.json; both versions must match the release being submitted. Publish and verify that exact npm version before running mcp-publisher publish. Registry acceptance and directory approval are separate from an npm release.
FAQs
Generate alt text, translate descriptions, and manage your AltText.ai image library.
The npm package @alttext_ai/alttext-mcp receives a total of 0 weekly downloads. As such, @alttext_ai/alttext-mcp popularity was classified as not popular.
We found that @alttext_ai/alttext-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.