betterimage.io

by betterimage.io · remote · no sign-in to list tools · v1.2.0 · published by io.betterimage

Social cards and OG images from designed templates: card from a URL, presets, meta tags, link checks

Changes · 6

Compare Registry entry

10 tools: 6 change things and 4 only read.

Scanned Oct 21, 2026

Deletes or cancels0Claude Code: deny
Can't be undone0Claude Code: ask
Changes things6Claude Code: ask: see these tools
Only reads4Claude Code: allow: see these tools

2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http betterimage https://betterimage.io/mcp

Findings

Matches of fixed checks, with the text they matched.

2 warn

Warncheck_link_preview
The server marks "check_link_preview" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"idempotentHint":true,"openWorldHint":true}; The name "check_link_preview" says "link": a word for a change.
What this check looks for
Warngenerate_meta_tags
The server marks "generate_meta_tags" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"idempotentHint":true,"openWorldHint":false}; The name "generate_meta_tags" says "generate": a word for a change.
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

10 tools

Changes things 6Creates or changes something that can be changed back.Claude Code: ask

card_from_urlMake a social card for a page that already exists, in one call: fetches the page like a crawler, takes its title, description, author, domain and site icon, picks the starter desig…Reads text others writeCan send data outNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Description, as the server wrote it
Make a social card for a page that already exists, in one call: fetches the page like a crawler, takes its title, description, author, domain and site icon, picks the starter design that fits the page (a Jev decision over every preset, about 100 ms) and returns the image (shown inline, watermarked, free). Use this first when the user gives a URL: "make an OG image for my latest post". Any field you pass overrides what the page says. Pass preset (see list_presets) to choose the design yourself, or a size. No API key needed; one page fetch plus one render per call.
Annotations the server declares
- title: Card from a page URL
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: true
check_link_previewFetch a public page the way X, Facebook, LinkedIn, Slack and Discord crawlers do and report what they will show: the effective title, description and image per platform, the og:ima…Reads text others writeCan send data out1 finding
Why it is in this group
- The name "check_link_preview" says "link": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Findings
- Warn
  The server marks "check_link_preview" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"idempotentHint":true,"openWorldHint":true}; The name "check_link_preview" says "link": a word for a change.
  What this check looks for
Description, as the server wrote it
Fetch a public page the way X, Facebook, LinkedIn, Slack and Discord crawlers do and report what they will show: the effective title, description and image per platform, the og:image's real format, dimensions and weight, and a list of concrete problems with fixes. Use when a user asks why their link looks wrong when shared, or before publishing. Only http(s) URLs on the public internet; one page fetch plus up to two image fetches per call. No API key needed.
Annotations the server declares
- title: Check how a link previews
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: true
generate_meta_tagsBuild the complete <head> block for a page: <title>, meta description, canonical, Open Graph and Twitter card tags, with og:image width/height.Can send data out1 finding
Why it is in this group
- The name "generate_meta_tags" says "generate": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Findings
- Warn
  The server marks "generate_meta_tags" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"idempotentHint":true,"openWorldHint":false}; The name "generate_meta_tags" says "generate": a word for a change.
  What this check looks for
Description, as the server wrote it
Build the complete <head> block for a page: <title>, meta description, canonical, Open Graph and Twitter card tags, with og:image width/height. Returns HTML to paste plus notes on anything worth fixing (title too long, image over http). Use after check_link_preview, or whenever a user needs the tags for a new page. No API key needed; nothing is fetched.
Annotations the server declares
- title: Generate meta tags
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
og_image_urlBuild a signed image URL for a saved template with the given text, ready to put in a page's <meta property="og:image"> tag.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Build a signed image URL for a saved template with the given text, ready to put in a page's <meta property="og:image"> tag. Nothing is rendered now: the image is generated when a crawler fetches the URL, cached at the edge for a day, and each uncached fetch spends one image of the monthly quota. Needs an API key. This is the zero-infrastructure way to give every page its own card; use it in page templates, CMS hooks and static site generators. Returns the URL and the ready meta tag.
Annotations the server declares
- title: Signed og:image URL
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
render_cardRender one of the user's saved templates with the given text and return the PNG (shown inline, at 1x).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Render one of the user's saved templates with the given text and return the PNG (shown inline, at 1x). Needs an API key. On a paid plan the image is clean (no watermark); on the free tier it is watermarked. Each call spends one image of the monthly quota. Use it when the user wants the actual file, e.g. to host it themselves. For an og:image tag that needs no hosting, or for a 2x retina file, prefer og_image_url.
Annotations the server declares
- title: Render a saved template
- idempotentHint: false
- openWorldHint: false
- readOnlyHint: false
- destructiveHint: false
save_templateCopy a preset (optionally with the user's text as its new defaults) into the user's account as a saved template, so render_card and og_image_url can use it.No findings
Why it is in this group
- The name "save_template" says "save": a word for a change.
Description, as the server wrote it
Copy a preset (optionally with the user's text as its new defaults) into the user's account as a saved template, so render_card and og_image_url can use it. Needs an API key. Do this once per design, not per image: afterwards every render only passes the text that changes. Returns the slug to use next and a link to fine-tune the design in the editor.
Annotations the server declares
- title: Save a preset as a template
- idempotentHint: false
- openWorldHint: false
- readOnlyHint: false
- destructiveHint: false

Only reads 4Looks things up and changes nothing.Claude Code: allow

get_usageThe API key's plan, whether renders are watermarked, and this month's image quota: used, remaining, and the reset date.No findings
Why it is in this group
- The name "get_usage" says "get": a word for reading.
Description, as the server wrote it
The API key's plan, whether renders are watermarked, and this month's image quota: used, remaining, and the reset date. Needs an API key. Check it before batch renders, or when a render came back watermarked unexpectedly.
Annotations the server declares
- title: Quota and plan
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
list_presetsBrowse the ready-made designs (presets) a card can start from: key, name, template kind, native size, use-case categories, a one-line look description and a preview image URL.Reads text others writeNo findings
Why it is in this group
- The name "list_presets" says "list": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "browse": it reads web pages, which anyone can write.
Description, as the server wrote it
Browse the ready-made designs (presets) a card can start from: key, name, template kind, native size, use-case categories, a one-line look description and a preview image URL. Start here when the user wants a social card and has no saved template. Then call preview_card with the chosen key. No API key needed.
Annotations the server declares
- title: List starter designs
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
list_templatesThe user's saved templates (their own designs, made in the editor or with save_template): slug, name, kind, the fields render_card and og_image_url can override, and when it was la…Reads text others writeNo findings
Why it is in this group
- The name "list_templates" says "list": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "url": it reads web pages, which anyone can write.
Description, as the server wrote it
The user's saved templates (their own designs, made in the editor or with save_template): slug, name, kind, the fields render_card and og_image_url can override, and when it was last edited. Needs an API key. Call this before render_card or og_image_url when you do not know the slug.
Annotations the server declares
- title: List saved templates
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
preview_cardRender a preset with the user's text and return the image (shown inline).No findings
Why it is in this group
- The name "preview_card" says "preview": a word for reading.
Description, as the server wrote it
Render a preset with the user's text and return the image (shown inline). Free, no API key; the preview carries a small betterimage.io watermark and does not touch any quota. Use it to show the user what their card will look like before they commit. For a clean image: save_template + render_card on a paid API plan, or the one-off clean download in the editor.
Annotations the server declares
- title: Preview a card from a preset
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data.

Reads private data0: Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write4: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; card_from_url
check_link_preview
list_presets
list_templates
Can send data out3: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.; card_from_url
check_link_preview
generate_meta_tags

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Looked at Oct 22, 2026, 14:49 UTC, unchanged since Oct 22, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable: yes
HTTP status of an anonymous initialize: 200
tools/list served without credentials: yes
Tools that change things, listed without credentials: 6
Protocol version: 2025-06-18
WWW-Authenticate on 401: not observed
resource_metadata in WWW-Authenticate: none
RFC 9728 protected resource metadata: none
Authorization servers: none
Legacy HTTP+SSE transport: no
Dynamic client registration: not observed
Client ID metadata documents: not observed

WarnThe whole server
The endpoint served tools/list without credentials, and the list has 6 tools that change things (6 write). Whether a call also works without credentials was not tested: tools are never called.
Matched text
https://betterimage.io/mcp: tools/list returned 10 tools to an anonymous client, including card_from_url (write), check_link_preview (write), generate_meta_tags (write), save_template (write), render_card (write) and 1 more
What this check looks for

Install

Pinned to version 1.2.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http betterimage https://betterimage.io/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__betterimage__list_presets",
      "mcp__betterimage__preview_card",
      "mcp__betterimage__list_templates",
      "mcp__betterimage__get_usage"
    ],
    "ask": [
      "mcp__betterimage__card_from_url",
      "mcp__betterimage__check_link_preview",
      "mcp__betterimage__generate_meta_tags",
      "mcp__betterimage__save_template",
      "mcp__betterimage__render_card",
      "mcp__betterimage__og_image_url"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as betterimage. Review it before you use it.

Capability tags behind 5 rules

mcp__betterimage__card_from_url untrusted-input, outbound
mcp__betterimage__list_presets untrusted-input
mcp__betterimage__check_link_preview untrusted-input, outbound
mcp__betterimage__generate_meta_tags outbound
mcp__betterimage__list_templates untrusted-input

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.betterimage/betterimage/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

6 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 21, 2026, 18:13 UTC.

For agents: Markdown · JSON · report this listing