
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
MCP server for AI-powered image and video analysis - supports OpenAI, Claude, and multimodal vision APIs with local file and URL processing
A powerful MCP server that brings AI vision capabilities to Claude Desktop. Analyze images and videos using OpenAI GPT-4o, Claude, or any compatible vision API.
中文版本: See README_CN.md for the full Chinese documentation.
Option A: npx (Recommended - No Installation)
# Just add to Claude Desktop config below - nothing to install!
Option B: Global Install
npm install -g sight-mcp
# Or: bun install -g sight-mcp
Add this to your Claude Desktop config (~/Library/Application Support/Claude/claude_desktop_config.json):
{
"mcpServers": {
"sight-mcp": {
"type": "stdio",
"command": "npx",
"args": ["-y", "sight-mcp"],
"env": {
"OPENAI_API_KEY": "your-openai-api-key",
"API_URL": "https://api.openai.com/v1/chat/completions",
"MODEL": "gpt-4o"
}
}
}
}
Required Environment Variables:
OPENAI_API_KEY (required): Your API keyAPI_URL (required): API endpoint URLMODEL (required): Model name"env": {
"OPENAI_API_KEY": "sk-your-openai-key",
"API_URL": "https://api.openai.com/v1/chat/completions",
"MODEL": "gpt-4o"
}
"env": {
"OPENAI_API_KEY": "sk-ant-your-claude-key",
"API_URL": "https://api.anthropic.com/v1/messages",
"MODEL": "claude-3-5-sonnet-20241022"
}
"env": {
"OPENAI_API_KEY": "your-zhipu-api-key",
"API_URL": "https://open.bigmodel.cn/api/paas/v4/chat/completions",
"MODEL": "glm-4v"
}
Any API that follows the OpenAI vision format will work. Just update the API_URL and MODEL accordingly.
After updating the config, restart Claude Desktop and you'll see the vision tools available!
Once configured, you can use these tools in Claude:
Analyze this image: /path/to/photo.jpg
What do you see in this screenshot? /Users/desktop/screen.png
Analyze the video at https://example.com/demo.mp4 and describe what happens
What's in this video file? /path/to/recordings.mov
When using Claude Code, add this MCP server with:
claude mcp add sight-mcp --env OPENAI_API_KEY=your_api_key --env API_URL=https://api.openai.com/v1/chat/completions --env MODEL=gpt-4o -- npx -y sight-mcp
Or for different providers:
# Anthropic Claude
claude mcp add sight-mcp --env OPENAI_API_KEY=your_claude_key --env API_URL=https://api.anthropic.com/v1/messages --env MODEL=claude-3-5-sonnet-20241022 -- npx -y sight-mcp
# Zhipu AI
claude mcp add sight-mcp --env OPENAI_API_KEY=your_zhipu_key --env API_URL=https://open.bigmodel.cn/api/paas/v4/chat/completions --env MODEL=glm-4v -- npx -y sight-mcp
After adding, the tools are available directly in Claude Code conversations as:
mcp__sight-mcp__analyze_imagemcp__sight-mcp__analyze_videoanalyze_imageAnalyzes images using AI vision models.
Parameters:
image (string): Local file path or remote URL to the imageprompt (string): What you want to know about the imageanalyze_videoAnalyzes videos using AI vision models.
Parameters:
video (string): Local file path or remote URL to the videoprompt (string): What you want to know about the video"Server not found" error:
API_URL is correct for your provider"File too large" error:
"Unsupported format" error:
API authentication errors:
OPENAI_API_KEYAPI_URL matches your providerAdd "DEBUG": "true" to your environment variables to see detailed logs:
"env": {
"OPENAI_API_KEY": "your-key",
"API_URL": "https://api.openai.com/v1/chat/completions",
"MODEL": "gpt-4o",
"DEBUG": "true"
}
git checkout -b feature/amazing-feature)git commit -m 'Add amazing feature')git push origin feature/amazing-feature)This project is licensed under the MIT License - see the LICENSE file for details.
FAQs
MCP server for AI-powered image and video analysis - supports OpenAI, Claude, and multimodal vision APIs with local file and URL processing
The npm package sight-mcp receives a total of 18 weekly downloads. As such, sight-mcp popularity was classified as not popular.
We found that sight-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.