Labelixa

by labelixa.com · remote · local (npm) · no sign-in to list tools · v0.5.0 · published by com.labelixa

Thermal label MCP server: render, validate, debug and convert ZPL, EPL, TSPL and CPCL labels.

Changes · 9

Compare Registry entry

22 tools: 9 change things and 13 only read.

Scanned Oct 21, 2026

Deletes or cancels0Claude Code: deny
Can't be undone0Claude Code: ask
Changes things9Claude Code: ask: see these tools
Only reads13Claude Code: allow: see these tools

5 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http zpl https://api.labelixa.com/mcp

Findings

Matches of fixed checks, with the text they matched.

5 warn

Warnzpl_command_help
The server marks "zpl_command_help" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "explain": a word for reading.
What this check looks for
Warnbarcode_png
The server marks "barcode_png" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "generate": a word for a change.
What this check looks for
Warnlanguage_detect
The server marks "language_detect" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The input takes a statement or command to run (input.code), which can change anything it can reach.
What this check looks for
Warnconvert_zpl_dpi
The server marks "convert_zpl_dpi" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "convert_zpl_dpi" says "convert": a word for a change.
What this check looks for
Warnimage_to_zpl
The server marks "image_to_zpl" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "convert": a word for a change.
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

22 tools

Changes things 9Creates or changes something that can be changed back.Claude Code: ask

barcode_pngGenerate a single barcode as a PNG image (Code 128, QR, DataMatrix, EAN-13, UPC-A, PDF417 and more).1 finding
Why it is in this group
- The description's first verb is "generate": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "barcode_png" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "generate": a word for a change.
  What this check looks for
Description, as the server wrote it
Generate a single barcode as a PNG image (Code 128, QR, DataMatrix, EAN-13, UPC-A, PDF417 and more). For a full label with text and layout, write ZPL and use zpl_preview instead.
Annotations the server declares
- title: Generate barcode PNG
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
barcode_verifyDecode barcodes from a photo or scan of a PRINTED label (PNG, JPEG, BMP or GIF) and report what a software decoder reads back.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Decode barcodes from a photo or scan of a PRINTED label (PNG, JPEG, BMP or GIF) and report what a software decoder reads back. Honest by design: 'read' does not guarantee every handheld scanner will read it, and 'not read' does not condemn the label (photo angle/focus matter) — the response says so.
Annotations the server declares
- title: Read back barcodes from an image
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
bulk_submitSubmit a bulk label production job: one ZPL template with {{variable}} placeholders plus data rows (one object per label).No findings
Why it is in this group
- The name "bulk_submit" says "submit": a word for a change.
Description, as the server wrote it
Submit a bulk label production job: one ZPL template with {{variable}} placeholders plus data rows (one object per label). Requires an API key whose plan includes bulk jobs. Quota is charged UPFRONT, one operation per row, and failed rows are not refunded; rows per job are capped by plan. Returns the job id — check bulk_status (small jobs usually finish within seconds).
Annotations the server declares
- title: Submit bulk label job
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
convert_zpl_dpiRescale ZPL between printer resolutions (203/300/600 DPI): coordinates, fonts, barcode module width and label size are scaled.1 finding
Why it is in this group
- The name "convert_zpl_dpi" says "convert": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "convert_zpl_dpi" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "convert_zpl_dpi" says "convert": a word for a change.
  What this check looks for
Description, as the server wrote it
Rescale ZPL between printer resolutions (203/300/600 DPI): coordinates, fonts, barcode module width and label size are scaled. Embedded ^GF/~DG image data is NOT scaled; the response says so instead of silently passing it through.
Annotations the server declares
- title: Convert ZPL DPI
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
image_to_zplConvert an image (PNG, JPEG, BMP or GIF, max 200 KB) to a ZPL ^GF graphic command.1 finding
Why it is in this group
- The description's first verb is "convert": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "image_to_zpl" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "convert": a word for a change.
  What this check looks for
Description, as the server wrote it
Convert an image (PNG, JPEG, BMP or GIF, max 200 KB) to a ZPL ^GF graphic command. Returns the ZPL plus measured dimensions and the physical print size at the chosen density. PDF input is REST-only (/v1/graphics).
Annotations the server declares
- title: Convert image to ZPL
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
language_detectDetect which printer language raw label code is written in (ZPL, EPL, TSPL or CPCL).1 finding
Why it is in this group
- The input takes a statement or command to run (input.code), which can change anything it can reach.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "language_detect" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The input takes a statement or command to run (input.code), which can change anything it can reach.
  What this check looks for
Description, as the server wrote it
Detect which printer language raw label code is written in (ZPL, EPL, TSPL or CPCL). Heuristic: returns the language plus a confidence TIER (high/medium/low) and signal codes — not a probability.
Annotations the server declares
- title: Detect printer language
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
save_labelSave a ZPL label to a Labelixa account so it can be edited, versioned and printed later.No findings
Why it is in this group
- The name "save_label" says "save": a word for a change.
Description, as the server wrote it
Save a ZPL label to a Labelixa account so it can be edited, versioned and printed later. With an API key the label is saved immediately and the saved label id is returned. Without a key the label is held for 24 hours and a one-time link is returned: the user opens it, signs in (free account is enough) and the label lands in their account. Nothing else is stored for anonymous calls.
Annotations the server declares
- title: Save label to account
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
zpl_command_helpExplain a single ZPL command: syntax, parameters with types/ranges/options, a fragment example and whether the Labelixa renderer draws it.1 finding
Why it is in this group
- The description's first verb is "explain": a word for reading.
- The input takes a statement or command to run (input.command), which can change anything it can reach.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "zpl_command_help" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "explain": a word for reading.
  What this check looks for
Description, as the server wrote it
Explain a single ZPL command: syntax, parameters with types/ranges/options, a fragment example and whether the Labelixa renderer draws it. Data comes from the same catalog that powers the public command reference pages.
Annotations the server declares
- title: ZPL command help
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
zpl_compatibilityCompatibility RISK analysis of ZPL code against a specific printer model, given as manufacturer/model (e.g.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Compatibility RISK analysis of ZPL code against a specific printer model, given as manufacturer/model (e.g. 'zebra/zd421'). NOT an emulator and never says 'it works': reports the model's language posture with evidence level and size-rule findings.
Annotations the server declares
- title: Check printer compatibility
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

Only reads 13Looks things up and changes nothing.Claude Code: allow

bulk_listList your recent bulk jobs (id, state, error class, timestamps), newest first.No findings
Why it is in this group
- The name "bulk_list" says "list": a word for reading.
Description, as the server wrote it
List your recent bulk jobs (id, state, error class, timestamps), newest first. Useful to recover a lost job id; details via bulk_status.
Annotations the server declares
- title: List bulk jobs
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
bulk_statusStatus of one bulk job you own: state, attempt count and — when finished — the summary with produced count and per-row failures (row number + reason; failed rows never block the re…No findings
Why it is in this group
- The name "bulk_status" says "status": a word for reading.
Description, as the server wrote it
Status of one bulk job you own: state, attempt count and — when finished — the summary with produced count and per-row failures (row number + reason; failed rows never block the rest). Finished outputs stay downloadable for 7 days via the REST endpoint the response names.
Annotations the server declares
- title: Bulk job status
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
cpcl_previewRender CPCL label code and return a PNG preview.No findings
Why it is in this group
- The name "cpcl_preview" says "preview": a word for reading.
Description, as the server wrote it
Render CPCL label code and return a PNG preview. The preview assumes 203 dpi and is an interpretation of the CPCL manual covering a core command subset — no physical printer validation. `labels` in the response is the TOTAL number of labels the stream prints (a stream may contain several, each ended by `PRINT`); pass `index` to render a different one.
Annotations the server declares
- title: Render CPCL label
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
cpcl_validateLint CPCL label code and return positioned findings with severity as JSON.No findings
Why it is in this group
- The name "cpcl_validate" says "validate": a word for reading.
Description, as the server wrote it
Lint CPCL label code and return positioned findings with severity as JSON. Checks the command set Labelixa implements from the CPCL manual — a clean result is not a guarantee that a specific printer accepts the job. Run this before cpcl_preview; if you are not sure which language the code is, call language_detect first.
Annotations the server declares
- title: Validate CPCL
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
epl_previewRender EPL/EPL2 label code and return a PNG preview.No findings
Why it is in this group
- The name "epl_preview" says "preview": a word for reading.
Description, as the server wrote it
Render EPL/EPL2 label code and return a PNG preview. The preview assumes 203 dpi and is an interpretation of the EPL2 manual covering a core command subset — no physical printer validation. `labels` in the response is the TOTAL number of labels the stream prints (a stream may contain several, each ended by `P`); pass `index` to render a different one.
Annotations the server declares
- title: Render EPL label
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
epl_validateLint EPL/EPL2 label code and return positioned findings with severity as JSON.No findings
Why it is in this group
- The name "epl_validate" says "validate": a word for reading.
Description, as the server wrote it
Lint EPL/EPL2 label code and return positioned findings with severity as JSON. Checks the command set Labelixa implements from the EPL2 manual — a clean result is not a guarantee that a specific printer accepts the job. Run this before epl_preview; if you are not sure which language the code is, call language_detect first.
Annotations the server declares
- title: Validate EPL
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
explain_zplHuman-readable health REPORT for a finished ZPL label, with a 0-100 score: sectioned findings (syntax, size/DPI, orientation, barcodes, fonts, graphics memory, job behaviour); sect…No findings
Why it is in this group
- The name "explain_zpl" says "explain": a word for reading.
Description, as the server wrote it
Human-readable health REPORT for a finished ZPL label, with a 0-100 score: sectioned findings (syntax, size/DPI, orientation, barcodes, fonts, graphics memory, job behaviour); sections that cannot be assessed say so and are excluded from the score. Use it to review or explain a label to a person; for a quick pass/fail check while editing, use zpl_validate instead.
Annotations the server declares
- title: Explain ZPL health report
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
template_getFetch one catalog template: metadata, preview image URL and — for non-premium templates — the ZPL source, ready for zpl_preview.Reads text others writeNo findings
Why it is in this group
- The name "template_get" says "get": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "fetch" and "url": it reads web pages, which anyone can write.
Description, as the server wrote it
Fetch one catalog template: metadata, preview image URL and — for non-premium templates — the ZPL source, ready for zpl_preview. Premium templates return metadata for everyone; their ZPL source requires an API key whose plan includes the premium-template feature (same rule as the website).
Annotations the server declares
- title: Get label template
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
template_listList Labelixa's first-party label template catalog: id, English name, category, size/density and tags.No findings
Why it is in this group
- The name "template_list" says "list": a word for reading.
Description, as the server wrote it
List Labelixa's first-party label template catalog: id, English name, category, size/density and tags. Read-only product content (no tenant data). Fetch one with template_get; render its ZPL with zpl_preview.
Annotations the server declares
- title: List label templates
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
tspl_previewRender TSPL/TSPL2 label code and return a PNG preview.No findings
Why it is in this group
- The name "tspl_preview" says "preview": a word for reading.
Description, as the server wrote it
Render TSPL/TSPL2 label code and return a PNG preview. The preview assumes 203 dpi and is an interpretation of the TSPL manual covering a core command subset — no physical printer validation. `labels` in the response is the TOTAL number of labels the stream prints (a stream may contain several, each ended by `PRINT`); pass `index` to render a different one.
Annotations the server declares
- title: Render TSPL label
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
tspl_validateLint TSPL/TSPL2 label code and return positioned findings with severity as JSON.No findings
Why it is in this group
- The name "tspl_validate" says "validate": a word for reading.
Description, as the server wrote it
Lint TSPL/TSPL2 label code and return positioned findings with severity as JSON. Checks the command set Labelixa implements from the TSPL2 manual — a clean result is not a guarantee that a specific printer accepts the job. Run this before tspl_preview; if you are not sure which language the code is, call language_detect first.
Annotations the server declares
- title: Validate TSPL
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
zpl_previewRender ZPL label code and return the label as a PNG image.No findings
Why it is in this group
- The name "zpl_preview" says "preview": a word for reading.
Description, as the server wrote it
Render ZPL label code and return the label as a PNG image. Use this to SEE what ZPL output looks like — LLMs can write ZPL but cannot otherwise verify the visual result. One call renders one label (use `index` to pick a label from a multi-label stream). The result also carries an 'Open this label in the Labelixa editor' link the user can click to edit, save or share the label.
Annotations the server declares
- title: Render ZPL label
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
zpl_validatePass/fail lint for ZPL — machine-readable diagnostics with line/column, code and severity: unknown commands, missing ^FS, out-of-range parameters, fields outside the label.No findings
Why it is in this group
- The name "zpl_validate" says "validate": a word for reading.
Description, as the server wrote it
Pass/fail lint for ZPL — machine-readable diagnostics with line/column, code and severity: unknown commands, missing ^FS, out-of-range parameters, fields outside the label. Fast; run it before zpl_preview whenever you generate or edit ZPL. For a human-readable report with a score, use explain_zpl instead.
Annotations the server declares
- title: Validate ZPL
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or outbound.

Reads private data0: Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write1: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; template_get
Can send data out0: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Looked at Oct 22, 2026, 14:35 UTC, unchanged since Oct 22, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable: yes
HTTP status of an anonymous initialize: 200
tools/list served without credentials: yes
Tools that change things, listed without credentials: 9
Protocol version: 2025-06-18
WWW-Authenticate on 401: not observed
resource_metadata in WWW-Authenticate: none
RFC 9728 protected resource metadata: none
Authorization servers: none
Legacy HTTP+SSE transport: no
Dynamic client registration: not observed
Client ID metadata documents: not observed

WarnThe whole server
The endpoint served tools/list without credentials, and the list has 9 tools that change things (9 write). Whether a call also works without credentials was not tested: tools are never called.
Matched text
https://api.labelixa.com/mcp: tools/list returned 22 tools to an anonymous client, including zpl_command_help (write), barcode_png (write), language_detect (write), convert_zpl_dpi (write), save_label (write) and 4 more
What this check looks for

Install

Pinned to version 0.5.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http zpl https://api.labelixa.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__zpl__zpl_preview",
      "mcp__zpl__zpl_validate",
      "mcp__zpl__epl_validate",
      "mcp__zpl__tspl_validate",
      "mcp__zpl__cpcl_validate",
      "mcp__zpl__explain_zpl",
      "mcp__zpl__template_list",
      "mcp__zpl__template_get",
      "mcp__zpl__epl_preview",
      "mcp__zpl__tspl_preview",
      "mcp__zpl__cpcl_preview",
      "mcp__zpl__bulk_status",
      "mcp__zpl__bulk_list"
    ],
    "ask": [
      "mcp__zpl__zpl_command_help",
      "mcp__zpl__barcode_png",
      "mcp__zpl__language_detect",
      "mcp__zpl__convert_zpl_dpi",
      "mcp__zpl__save_label",
      "mcp__zpl__image_to_zpl",
      "mcp__zpl__barcode_verify",
      "mcp__zpl__zpl_compatibility",
      "mcp__zpl__bulk_submit"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as zpl. Review it before you use it.

Capability tags behind 1 rule

mcp__zpl__template_get untrusted-input

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.labelixa/zpl/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

9 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 21, 2026, 17:58 UTC.

For agents: Markdown · JSON · report this listing