ai. pictomancer/ image-processing
by pictomancer.ai · remote · no sign-in to list tools · v0.4.0 · published by ai.pictomancer
Image processing for AI agents: resize, convert, compress, crop, and web-ready AI-generated images.
10 tools: 8 change things and 2 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things8Claude Code: ask: see these tools
- Only reads2Claude Code: allow: see these tools
15 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http image-processing https://api.pictomancer.ai/mcpFindings
Matches of fixed checks, with the text they matched.
- Infoanalyze_image
The description mentions "Credentials".
What this check looks forMatched text
description: "...ether the input carries a C2PA (Content Credentials) manifest and in which container; the m..."
- Inforesize_image
The input schema at properties.delivery.oneOf[1].properties.put_url.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.delivery.oneOf[1].properties.put_url.description: "...ill be written. Must be https://. Cloud credentials never reach our infrastructure; only th..."
- Inforesize_image
The input schema at properties.delivery.oneOf[2].properties.callback_url.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.delivery.oneOf[2].properties.callback_url.description: "...o the receiver can verify integrity. No credentials are stored on our side; secure the endp..."
- Infocompress_image
The input schema at properties.delivery.oneOf[1].properties.put_url.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.delivery.oneOf[1].properties.put_url.description: "...ill be written. Must be https://. Cloud credentials never reach our infrastructure; only th..."
- Infocompress_image
The input schema at properties.delivery.oneOf[2].properties.callback_url.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.delivery.oneOf[2].properties.callback_url.description: "...o the receiver can verify integrity. No credentials are stored on our side; secure the endp..."
- Infoconvert_image
The input schema at properties.delivery.oneOf[1].properties.put_url.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.delivery.oneOf[1].properties.put_url.description: "...ill be written. Must be https://. Cloud credentials never reach our infrastructure; only th..."
Show 9 more findingsShow fewer
- Infoconvert_image
The input schema at properties.delivery.oneOf[2].properties.callback_url.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.delivery.oneOf[2].properties.callback_url.description: "...o the receiver can verify integrity. No credentials are stored on our side; secure the endp..."
- Infocrop_image
The input schema at properties.delivery.oneOf[1].properties.put_url.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.delivery.oneOf[1].properties.put_url.description: "...ill be written. Must be https://. Cloud credentials never reach our infrastructure; only th..."
- Infocrop_image
The input schema at properties.delivery.oneOf[2].properties.callback_url.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.delivery.oneOf[2].properties.callback_url.description: "...o the receiver can verify integrity. No credentials are stored on our side; secure the endp..."
The input schema at properties.delivery.oneOf[1].properties.put_url.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.delivery.oneOf[1].properties.put_url.description: "...ill be written. Must be https://. Cloud credentials never reach our infrastructure; only th..."
The input schema at properties.delivery.oneOf[2].properties.callback_url.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.delivery.oneOf[2].properties.callback_url.description: "...o the receiver can verify integrity. No credentials are stored on our side; secure the endp..."
The input schema at properties.delivery.oneOf[1].properties.put_url.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.delivery.oneOf[1].properties.put_url.description: "...ill be written. Must be https://. Cloud credentials never reach our infrastructure; only th..."
The input schema at properties.delivery.oneOf[2].properties.callback_url.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.delivery.oneOf[2].properties.callback_url.description: "...o the receiver can verify integrity. No credentials are stored on our side; secure the endp..."
- Infoimage_pipeline
The input schema at properties.delivery.oneOf[1].properties.put_url.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.delivery.oneOf[1].properties.put_url.description: "...ill be written. Must be https://. Cloud credentials never reach our infrastructure; only th..."
- Infoimage_pipeline
The input schema at properties.delivery.oneOf[2].properties.callback_url.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.delivery.oneOf[2].properties.callback_url.description: "...o the receiver can verify integrity. No credentials are stored on our side; secure the endp..."
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
10 tools
Changes things 8Claude Code: ask
compress_imageCompress an image Re-encode an image with quality/format options to reduce file size.2 findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
The input schema at properties.delivery.oneOf[1].properties.put_url.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.delivery.oneOf[1].properties.put_url.description: "...ill be written. Must be https://. Cloud credentials never reach our infrastructure; only th..."
- Info
The input schema at properties.delivery.oneOf[2].properties.callback_url.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.delivery.oneOf[2].properties.callback_url.description: "...o the receiver can verify integrity. No credentials are stored on our side; secure the endp..."
Description, as the server wrote it Compress an image Re-encode an image with quality/format options to reduce file size. Supports jpeg, png, webp, tiff, gif. Instead of a q number you can set quality_target (0-1]: the smallest file with SSIM at or above the target, searched on the worker (jpeg, webp, avif; flat surcharge; outcome reported in X-Pictomancer-Quality-* headers). If the output is not smaller than the input, the request is free (X-Pig-Billed: 0) and does not consume free-tier quota. Optional enhancement modifiers: denoise (1-3), equalize, sharpen (applied denoise -> equalize -> op -> sharpen). ### Responses: **200**: Processed image binary (Success Response) Content-Type: application/json Content-Type: image/jpeg **Example Response:** ```json "string" ``` Content-Type: image/png **Example Response:** ```json "string" ``` Content-Type: image/webp **Example Response:** ```json "string" ```
convert_imageConvert image format Convert an image to a different format (jpeg, png, webp, tiff, gif, avif).2 findings
Why it is in this group
- The name "convert_image" says "convert": a word for a change.
Findings
- Info
The input schema at properties.delivery.oneOf[1].properties.put_url.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.delivery.oneOf[1].properties.put_url.description: "...ill be written. Must be https://. Cloud credentials never reach our infrastructure; only th..."
- Info
The input schema at properties.delivery.oneOf[2].properties.callback_url.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.delivery.oneOf[2].properties.callback_url.description: "...o the receiver can verify integrity. No credentials are stored on our side; secure the endp..."
Description, as the server wrote it Convert image format Convert an image to a different format (jpeg, png, webp, tiff, gif, avif). Optionally set quality, strip metadata, enable lossless mode (webp, avif), or tune encoder effort (avif). Instead of a q number you can set quality_target (0-1]: the smallest file with SSIM at or above the target, searched on the worker (jpeg, webp, avif; flat surcharge; outcome reported in X-Pictomancer-Quality-* headers). Optional enhancement modifiers: denoise (1-3), equalize, sharpen (applied denoise -> equalize -> op -> sharpen). ### Responses: **200**: Processed image binary (Success Response) Content-Type: application/json Content-Type: image/jpeg **Example Response:** ```json "string" ``` Content-Type: image/png **Example Response:** ```json "string" ``` Content-Type: image/webp **Example Response:** ```json "string" ```
crop_imageCrop an image Extract a rectangular region from an image, in one of three mutually exclusive modes.2 findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
The input schema at properties.delivery.oneOf[1].properties.put_url.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.delivery.oneOf[1].properties.put_url.description: "...ill be written. Must be https://. Cloud credentials never reach our infrastructure; only th..."
- Info
The input schema at properties.delivery.oneOf[2].properties.callback_url.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.delivery.oneOf[2].properties.callback_url.description: "...o the receiver can verify integrity. No credentials are stored on our side; secure the endp..."
Description, as the server wrote it Crop an image Extract a rectangular region from an image, in one of three mutually exclusive modes. Manual: give the top-left corner (x, y) and dimensions (width, height) in pixels. Smart crop: give 'gravity' (attention, entropy, centre) plus width and height; the window is picked automatically, clamped to the source if the target is larger. Trim: set 'trim: true' (optional 'threshold') to remove a uniform background border via content detection; the applied rect is reported in X-Pictomancer-Trim-* headers. Optional enhancement modifiers: denoise (1-3), equalize, sharpen (applied denoise -> equalize -> op -> sharpen). ### Responses: **200**: Processed image binary (Success Response) Content-Type: application/json Content-Type: image/jpeg **Example Response:** ```json "string" ``` Content-Type: image/png **Example Response:** ```json "string" ``` Content-Type: image/webp **Example Response:** ```json "string" ```
estimate_costEstimate the price of an operation Returns the exact USD price this API would charge for an operation on an input of the given size, without fetching or processing anything.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Estimate the price of an operation Returns the exact USD price this API would charge for an operation on an input of the given size, without fetching or processing anything. Free. Use it before paying: send X-Max-Cost-USD on the real request to have the API refuse (412) instead of charging more than you allowed. The list price is returned even when the request could end up free (free tier, or a compress that does not shrink the file). ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "operation": "Operation", "price_usd": 1.0, "base_usd": 1.0, "surcharges_usd": {}, "size_multiplier": 1.0, "within_free_tier": true, "free_tier_remaining": 1, "currency": "Currency", "network": "Network" } ```
image_pipelineRun a multi-step image pipeline Chain multiple operations (resize, compress, convert, crop) in sequence.2 findings
Why it is in this group
- The description's first verb is "run": a word for a change.
Findings
- Info
The input schema at properties.delivery.oneOf[1].properties.put_url.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.delivery.oneOf[1].properties.put_url.description: "...ill be written. Must be https://. Cloud credentials never reach our infrastructure; only th..."
- Info
The input schema at properties.delivery.oneOf[2].properties.callback_url.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.delivery.oneOf[2].properties.callback_url.description: "...o the receiver can verify integrity. No credentials are stored on our side; secure the endp..."
Description, as the server wrote it Run a multi-step image pipeline Chain multiple operations (resize, compress, convert, crop) in sequence. The image is fetched once, then each operation is applied to the output of the previous one. Max 10 operations per pipeline. ### Responses: **200**: Processed image binary (Success Response) Content-Type: application/json Content-Type: image/jpeg **Example Response:** ```json "string" ``` Content-Type: image/png **Example Response:** ```json "string" ``` Content-Type: image/webp **Example Response:** ```json "string" ```
optimize_for_visionResize an image for a vision model Resize an image to the largest size a given vision model still benefits from, and report what it costs that model in tokens before and after.2 findings
Why it is in this group
- The description's first verb is "resize": a word for a change.
Findings
- Info
The input schema at properties.delivery.oneOf[1].properties.put_url.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.delivery.oneOf[1].properties.put_url.description: "...ill be written. Must be https://. Cloud credentials never reach our infrastructure; only th..."
- Info
The input schema at properties.delivery.oneOf[2].properties.callback_url.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.delivery.oneOf[2].properties.callback_url.description: "...o the receiver can verify integrity. No credentials are stored on our side; secure the endp..."
Description, as the server wrote it Resize an image for a vision model Resize an image to the largest size a given vision model still benefits from, and report what it costs that model in tokens before and after. Every provider downscales oversized input before counting tokens, so this alone saves bytes and upload latency rather than tokens. Pass max_tokens to trade resolution for tokens: that lever is continuous on Claude, unavailable on OpenAI (cost follows the aspect ratio alone), and on Gemini reaches only a flat 258. An image already within budget is returned untouched and free (X-Pig-Billed: 0). ### Responses: **200**: Processed image binary (Success Response) Content-Type: application/json Content-Type: image/jpeg **Example Response:** ```json "string" ``` Content-Type: image/png **Example Response:** ```json "string" ``` Content-Type: image/webp **Example Response:** ```json "string" ```
optimize_generated_imageOptimize an AI-generated image for the web The step after image generation.2 findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
The input schema at properties.delivery.oneOf[1].properties.put_url.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.delivery.oneOf[1].properties.put_url.description: "...ill be written. Must be https://. Cloud credentials never reach our infrastructure; only th..."
- Info
The input schema at properties.delivery.oneOf[2].properties.callback_url.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.delivery.oneOf[2].properties.callback_url.description: "...o the receiver can verify integrity. No credentials are stored on our side; secure the endp..."
Description, as the server wrote it Optimize an AI-generated image for the web The step after image generation. gpt-image, DALL-E, Flux, Midjourney and Stable Diffusion hand back 2-8 MB PNGs; this returns the same picture as a web-ready webp (default), avif, jpeg or png, metadata stripped, transparency kept on webp/avif/png. Optional max_dimension caps the longest side (never upscales); optional q or quality_target (smallest file with SSIM >= target, flat surcharge) control quality. Same price as convert. If the result is not smaller than the input it is still returned but free (X-Pig-Billed: 0). X-Pictomancer-Bytes-Before/-After/-Saved-Percent report the saving. The input's C2PA manifest, if any, is reported in X-Pictomancer-C2PA-Input but is not carried over: re-encoding invalidates it. ### Responses: **200**: Processed image binary (Success Response) Content-Type: application/json Content-Type: image/jpeg **Example Response:** ```json "string" ``` Content-Type: image/png **Example Response:** ```json "string" ``` Content-Type: image/webp **Example Response:** ```json "string" ```
resize_imageResize an image Scale an image by a factor, or fill an exact box.2 findings
Why it is in this group
- The name "resize_image" says "resize": a word for a change.
Findings
- Info
The input schema at properties.delivery.oneOf[1].properties.put_url.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.delivery.oneOf[1].properties.put_url.description: "...ill be written. Must be https://. Cloud credentials never reach our infrastructure; only th..."
- Info
The input schema at properties.delivery.oneOf[2].properties.callback_url.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.delivery.oneOf[2].properties.callback_url.description: "...o the receiver can verify integrity. No credentials are stored on our side; secure the endp..."
Description, as the server wrote it Resize an image Scale an image by a factor, or fill an exact box. Use 'scale' for uniform scaling, or 'scale_x'/'scale_y' for independent axes (float factors, e.g. 0.5 = half size). Alternatively set 'width'+'height' for fill mode: resize and smart-crop to those exact dimensions in one call (optional 'gravity', default attention). The two modes are mutually exclusive. Optional enhancement modifiers: denoise (1-3), equalize, sharpen (applied denoise -> equalize -> op -> sharpen). ### Responses: **200**: Processed image binary (Success Response) Content-Type: application/json Content-Type: image/jpeg **Example Response:** ```json "string" ``` Content-Type: image/png **Example Response:** ```json "string" ``` Content-Type: image/webp **Example Response:** ```json "string" ```
Only reads 2Claude Code: allow
analyze_imageAnalyze an image Fetch an image from a URL or base64 and return its metadata: size in bytes, pixel dimensions, source format, and what it costs every supported vision model in toke…1 finding
Why it is in this group
- The name "analyze_image" says "analyze": a word for reading.
Findings
- Info
The description mentions "Credentials".
What this check looks forMatched text
description: "...ether the input carries a C2PA (Content Credentials) manifest and in which container; the m..."
Description, as the server wrote it Analyze an image Fetch an image from a URL or base64 and return its metadata: size in bytes, pixel dimensions, source format, and what it costs every supported vision model in tokens. Always free. Dimensions are omitted if the image header cannot be read. Also reports whether the input carries a C2PA (Content Credentials) manifest and in which container; the manifest is not validated. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "size_bytes": 1, "c2pa_manifest": true } ```
get_format_infoGet supported formats and options Returns supported output formats and their configurable options.No findings
Why it is in this group
- The name "get_format_info" says "get": a word for reading.
Description, as the server wrote it Get supported formats and options Returns supported output formats and their configurable options. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 0.4.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http image-processing https://api.pictomancer.ai/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__image-processing__get_format_info",
"mcp__image-processing__analyze_image"
],
"ask": [
"mcp__image-processing__estimate_cost",
"mcp__image-processing__resize_image",
"mcp__image-processing__compress_image",
"mcp__image-processing__convert_image",
"mcp__image-processing__crop_image",
"mcp__image-processing__optimize_for_vision",
"mcp__image-processing__optimize_generated_image",
"mcp__image-processing__image_pipeline"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as image-processing. Review it before you use it.