
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
charmshots-mcp
Advanced tools
Read-only MCP connector for Charmshots photoshoots, photo metadata and owner-authenticated links.
AI portraits for dating profiles and everyday introductions.
Charmshots creates portraits from your own selfies, with settings and styles for dating profiles, headshots and everyday introductions. Choose scenes that fit your life, review each result closely, and keep the frames that feel like you. The photo collection, practical guides and free image tools help you plan a more considered profile.
Website · MCP repository · Agent skill · npm package
This package connects a local stdio MCP client to the hosted Charmshots MCP server. Hosted tools run on Cloudflare; the local package bridges the connection and opens browser-based OAuth. You do not need to deploy a Worker or paste a product password into your assistant.
| Tool | What it does |
|---|---|
get_profile | Read the signed-in account context. |
list_photoshoots | Browse existing owned photoshoots, newest first. |
get_photoshoot | Read the selected shoot’s metadata and status. |
list_photos | List existing photo labels, styles, statuses and owner-authenticated download links. |
The MCP does not generate or analyze images and does not spend credits. Photo metadata is not a visual quality assessment, and download links require the owner’s product sign-in. The website currently says purchases are temporarily paused; browse the current collection and availability before planning a new shoot. AI portraits cannot guarantee dating matches.
Find my most recent photoshoot and list the photos that are ready to download.
Show the labels and styles in this shoot, with the available download links.
Summarize the status of my saved photoshoots without generating new images.
https://mcp.charmshots.com/mcp as the remote server URL.Use a client that supports Streamable HTTP MCP and OAuth. Custom-connector availability depends on the client and your account. A public repository or npm release does not mean the integration has been approved for a client’s marketplace.
Requires Node.js 22 or newer and an existing Charmshots account. Add this entry to your client’s MCP configuration:
{
"mcpServers": {
"charmshots": {
"command": "npx",
"args": [
"-y",
"charmshots-mcp"
]
}
}
}
You can also run npx -y charmshots-mcp from a terminal to start the bridge. It speaks MCP over stdio; it is not an interactive chat interface. For desktop clients that support MCPB extensions, download the .mcpb file from Charmshots releases.
Requested scopes: profile:read photos:read. Older profile-only connections need to reconnect and explicitly approve the additional permissions before content tools are available.
Only approve a connection you intended to start. If sign-in opens a new tab, finish it, return to the consent screen and refresh. Manage or revoke connected apps.
The package uses pinned mcp-remote for OAuth, PKCE and local token storage. Tokens on your computer are credentials. The connector uses the fixed endpoint above and rejects command-line endpoint overrides. Product passwords and underlying provider credentials are not requested by this package.
The Charmshots agent skill explains how to select the right records, interpret results and respect the workflow’s limits:
npx skills add charmshots/agent-skill
npm ci
npm test
npm run bundle
Report a connector issue with your client, Node.js version and a redacted error. Keep package.json, manifest.json, server/config.json, server.json and the lockfile version aligned for releases. GitHub Actions publishes versioned npm packages and MCPB assets. See LICENSE for the MIT license.
FAQs
Read-only MCP connector for Charmshots photoshoots, photo metadata and owner-authenticated links.
The npm package charmshots-mcp receives a total of 338 weekly downloads. As such, charmshots-mcp popularity was classified as not popular.
We found that charmshots-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.