
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
mcp-pix-tools
Advanced tools
Programmatic image generation MCP tools — barcodes, word clouds, palettes, charts & more. Zero AI cost.
Programmatic image generation MCP tools — barcodes, word clouds, palettes, charts & more. Zero AI cost.
An MCP (Model Context Protocol) server that provides programmatic image generation tools to any LLM. No AI image generation — just fast, deterministic, code-driven visuals.
canvas module required| Tool | Description |
|---|---|
generate_barcode | QR Code, Code128, EAN-13, EAN-8, DataMatrix, PDF417, and more |
generate_isbn | ISBN-10/13 barcode with validation and format conversion |
generate_wordcloud | Word cloud from weighted word lists |
generate_palette | Color palettes using color theory (complementary, analogous, triadic, etc.) |
generate_placeholder | Placeholder images for wireframes and mockups |
generate_identicon | Unique geometric avatars from hash strings |
generate_chart | Bar, pie, and line charts from data |
npx mcp-pix-tools
npm install -g mcp-pix-tools
mcp-pix-tools
mcp-pix-tools --transport http --port 3100
Add the following JSON to your client's MCP config file:
{
"mcpServers": {
"pix-tools": {
"command": "npx",
"args": ["-y", "mcp-pix-tools"]
}
}
}
| Client | Config file |
|---|---|
| Claude Desktop | ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) · %APPDATA%\Claude\claude_desktop_config.json (Windows) |
| Cursor | ~/.cursor/mcp.json |
| Windsurf | ~/.codeium/windsurf/mcp_config.json |
| Cline (VS Code) | Cline panel → MCP Servers → cline_mcp_settings.json |
Claude Code:
claude mcp add pix-tools -- npx -y mcp-pix-tools
HTTP (remote/Docker):
{
"url": "http://localhost:3100/mcp",
"transport": "streamable-http"
}
docker pull ghcr.io/supra126/mcp-pix-tools:latest
docker run -p 3100:3100 ghcr.io/supra126/mcp-pix-tools:latest
docker compose up -d
docker build -t mcp-pix-tools .
docker run -p 3100:3100 mcp-pix-tools
{
"type": "qrcode",
"text": "https://example.com",
"format": "png",
"scale": 5
}
{
"isbn": "9780134685991",
"format": "png"
}
{
"words": [
{ "text": "TypeScript", "weight": 100 },
{ "text": "JavaScript", "weight": 80 },
{ "text": "Node.js", "weight": 60 },
{ "text": "MCP", "weight": 90 }
],
"colorScheme": "ocean",
"format": "png"
}
{
"baseColor": "#3498db",
"scheme": "triadic",
"count": 6,
"format": "png"
}
{
"width": 800,
"height": 600,
"bgColor": "e0e0e0",
"text": "Hero Image",
"format": "png"
}
{
"value": "user@example.com",
"size": 256,
"format": "png"
}
{
"type": "pie",
"data": [
{ "label": "Chrome", "value": 65 },
{ "label": "Firefox", "value": 15 },
{ "label": "Safari", "value": 12 },
{ "label": "Other", "value": 8 }
],
"title": "Browser Market Share",
"format": "png"
}
git clone https://github.com/supra126/mcp-pix-tools.git
cd mcp-pix-tools
npm install
npm run build
npm test
npm run lint
MIT
FAQs
Programmatic image generation MCP tools — barcodes, word clouds, palettes, charts & more. Zero AI cost.
We found that mcp-pix-tools demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.