
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
image-sister
Advanced tools
基于 BFL Flux 2 Pro 的 MCP 图片生成服务器,提供文生图和图像编辑两大核心功能。
npm install
npm run build
在 Claude Desktop 的配置文件中添加服务器配置:
Windows: %APPDATA%\Claude\claude_desktop_config.json
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"image-sister": {
"command": "npx",
"args": ["-y", "image-sister"],
"env": {
"BFL_API_KEY": "你的BFL_API_KEY"
}
}
}
}
或者使用本地路径(开发模式):
{
"mcpServers": {
"image-sister": {
"command": "node",
"args": ["C:\\Users\\DELL\\Desktop\\image-sister\\dist\\index.js"],
"env": {
"BFL_API_KEY": "46f3b7d4-32ad-41f4-aba0-3bd6430550de"
}
}
}
}
访问 BFL Dashboard 注册并获取 API Key。
根据文本描述生成AI图片。
| 参数名 | 类型 | 必填 | 默认值 | 说明 |
|---|---|---|---|---|
prompt | string | ✓ | - | 图片描述提示词,详细描述想要生成的图片内容、风格、色彩、构图等 |
width | number | ✗ | 1024 | 图片宽度,必须是16的倍数 |
height | number | ✗ | 1024 | 图片高度,必须是16的倍数 |
safety_tolerance | number | ✗ | 2 | 安全容忍度(0-5),值越高限制越少 |
seed | number | ✗ | - | 随机种子,用于生成可复现的结果 |
请生成一只可爱的猫咪坐在窗台上看外面的图片
生成一幅赛博朋克风格的未来城市,霓虹灯闪烁,下着雨,夜景
基于输入图片和文本提示生成新图片,支持风格转换、对象替换、场景修改等。
| 参数名 | 类型 | 必填 | 默认值 | 说明 |
|---|---|---|---|---|
prompt | string | ✓ | - | 编辑指令提示词,描述如何修改输入图片 |
input_image | string | ✓ | - | 输入图片URL,需要编辑的原始图片地址 |
width | number | ✗ | 1024 | 输出图片宽度,必须是16的倍数 |
height | number | ✗ | 1024 | 输出图片高度,必须是16的倍数 |
safety_tolerance | number | ✗ | 2 | 安全容忍度(0-5),值越高限制越少 |
seed | number | ✗ | - | 随机种子,用于生成可复现的结果 |
将这张图片 https://example.com/photo.jpg 转换成赛博朋克风格
把图片 https://example.com/cat.jpg 中的猫咪替换成一只小狗
# 开发模式(watch模式)
npm run dev
# 构建
npm run build
MIT
FAQs
BFL Flux 2 Pro MCP Server - AI图片生成服务,支持文生图和图像编辑
We found that image-sister demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.