
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
FATTLY from your terminal — generate AI images, video, voiceovers, avatars & UGC ads. Official CLI + MCP client for fattly.app.
Generate AI images, video, voiceovers, music and UGC-style ads from your terminal — or straight from AI assistants like Claude, Cursor and VS Code via MCP.
50+ AI models in one account (Veo 3.1, Kling 3, Seedance, Nano Banana, GPT Image, ElevenLabs…) · pay with fattly.app credits that never expire.
The package is an MCP server — it lets AI assistants generate media through your FATTLY account.
Connect your client to the hosted server. No npm, no key to paste — you approve access in the browser.
https://fattly.app/api/mcp
In Claude: Settings → Connectors → Add custom connector → paste the URL. Full setup guide: https://fattly.app/claude-mcp
{
"mcpServers": {
"fattly": {
"command": "npx",
"args": ["-y", "fattly", "mcp"],
"env": {
"FATTLY_API_KEY": "gpx_live_YOUR_KEY"
}
}
}
}
Installing with an AI agent (Cline, Claude Code, Cursor)? Point it at llms-install.md.
| Tool | What it does | Spends credits |
|---|---|---|
fattly_credits | Current credit balance | no (read-only) |
fattly_list_models | Models and their price in credits | no (read-only) |
fattly_upload_image | Upload a local photo → URL for edit / image-to-video models | no |
fattly_generate_image | Text-to-image and image editing (multi-image edits, face swap) | yes |
fattly_generate_video | Text-to-video and image-to-video; waits for the mp4 | yes |
fattly_generate_audio | Voiceover (text-to-speech) or music | yes |
Every tool carries MCP annotations (readOnlyHint, destructiveHint, idempotentHint), so clients can ask before paid calls. Failed generations are refunded automatically. Content must be safe-for-work.
npm install -g fattly # Node.js 18+
fattly login # paste your gpx_live_… key
fattly credits
fattly models video
fattly generate "astronaut cat on Mars" --model nano-banana-2 --out cat.png
fattly video "ocean waves at sunset" --model kling-3-standard --out waves.mp4
fattly audio "Welcome to FATTLY" --voice Rachel --out voice.mp3
fattly audio "calm ambient" --music --seconds 30 --out music.mp3
| Variable | Purpose |
|---|---|
FATTLY_API_KEY | API key (alternative to fattly login) |
FATTLY_API_URL | API address override (default https://fattly.app) |
The key saved by fattly login lives in ~/.fattly/config.json with owner-only permissions.
MIT © Fattly
FAQs
FATTLY from your terminal — generate AI images, video, voiceovers, avatars & UGC ads. Official CLI + MCP client for fattly.app.
We found that fattly demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.