
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
colorblind-mcp
Advanced tools
MCP server that lets an LLM (Claude, Cursor, etc.) see a color or an image the way a colorblind person does — recolors PNG/JPEG for protan/deutan/tritan. Built on the published OpticQuiz engine (Machado 2009).
An MCP server that lets an LLM see a color or an image the way
a colorblind person does — it recolors PNG/JPEG for protanopia, deuteranopia, and tritanopia, and
hands the recolored image back. The showing counterpart to
cvdsafe-mcp, which judges whether colors are
safe. Built on opticquiz-cvd (Machado, Oliveira & Fernandes 2009). Runs locally over stdio;
nothing leaves your machine.
{ color, type, severity? } → how one hex color appears under a deficiency.{ color, severity? } → that color under protan, deutan, and tritan at once.{ path?, dataUri?, type?, severity? } → the image recolored the way the
chosen deficiency renders it, returned as an image. Reads PNG and JPEG.Edit claude_desktop_config.json (Settings → Developer → Edit Config) and add:
{
"mcpServers": {
"colorblind": {
"command": "npx",
"args": ["-y", "colorblind-mcp"]
}
}
}
Restart Claude Desktop. Then ask, e.g., "Show me ./dashboard.png the way a deuteranope sees it," or "What does #d7191c look like to someone with each kind of colorblindness?" — and it calls the tools. Same config shape works in Cursor and other MCP clients.
A simulation for design and communication, not a clinical diagnosis, and no on-screen rendering is exact for a given individual. Method: Machado, Oliveira & Fernandes (2009) — https://doi.org/10.5281/zenodo.21310578
FAQs
MCP server that lets an LLM (Claude, Cursor, etc.) see a color or an image the way a colorblind person does — recolors PNG/JPEG for protan/deutan/tritan. Built on the published OpticQuiz engine (Machado 2009).
We found that colorblind-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.