# `io.github.codex-curator/studiomcphub` on anlyon.dev > Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX]. > No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour. - Page: https://anlyon.dev/servers/io.github.codex-curator/studiomcphub - JSON: https://anlyon.dev/api/v1/servers/io.github.codex-curator/studiomcphub - Version: 0.5.0 (active) - Publisher: io.github.codex-curator (GitHub account) - Runs: remote (streamable-http) - Sign-in to list tools: none - Repository: https://github.com/codex-curator/studiomcphub - Metadata from the official MCP Registry, synced 2026-10-21T18:27:49.897Z Title and description, as the publisher wrote them: ```untrusted-server-text 32 creative AI tools (18 free) for agents: generate, upscale, mockup, print, watermark. ``` Scanned 2026-10-21T19:07:17.256Z over streamable-http. **27 tools: 2 can delete or cancel things, 17 change things and 8 only read.** | Group | Class | Tools | Claude Code | | --- | --- | --- | --- | | Deletes or cancels | destructive | 2 | deny | | Can't be undone | irreversible | 0 | ask | | Changes things | write | 17 | ask | | Only reads | read | 8 | allow | ## Exfil surface No private-data -> untrusted-input -> outbound path in this server alone: no tool is tagged private-data or outbound. | Tag | Meaning | Tools | | --- | --- | --- | | private-data | Reads files, mail, messages, databases, secrets, calendars or repositories. | none | | untrusted-input | Brings in text someone else can write: web pages, inbound email, messages, issues and comments. | `mcp__studiomcphub__batch_download` `mcp__studiomcphub__enrich_metadata` `mcp__studiomcphub__get_artwork` `mcp__studiomcphub__get_artwork_oracle` `mcp__studiomcphub__register_hash` `mcp__studiomcphub__search_artworks` `mcp__studiomcphub__upscale_image` `mcp__studiomcphub__verify_provenance` | | outbound | Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL. | none | ## Findings - **warn** Annotations that disagree with the tool in `resize_image` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict)) ```untrusted-server-text The server marks "resize_image" read-only (readOnlyHint: true), and its own name, description or input give the class "write". annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "resize_image" says "resize": a word for a change. ``` - **warn** Annotations that disagree with the tool in `remove_background` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict)) ```untrusted-server-text The server marks "remove_background" read-only (readOnlyHint: true), and its own name, description or input give the class "destructive". annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "remove_background" says "remove": a word for removing or ending something. ``` - **warn** Annotations that disagree with the tool in `remove_background` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict)) ```untrusted-server-text The server marks "remove_background" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive". annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "remove_background" says "remove": a word for removing or ending something. ``` - **warn** Annotations that disagree with the tool in `convert_color_profile` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict)) ```untrusted-server-text The server marks "convert_color_profile" read-only (readOnlyHint: true), and its own name, description or input give the class "write". annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "convert_color_profile" says "convert": a word for a change. ``` - **warn** Annotations that disagree with the tool in `vectorize_image` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict)) ```untrusted-server-text The server marks "vectorize_image" read-only (readOnlyHint: true), and its own name, description or input give the class "write". annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "convert": a word for a change. ``` ## Deletes or cancels (2) Removes, cancels or revokes something. Claude Code: deny. ### `delete_asset` - The name "delete_asset" says "delete": a word for removing or ending something. - The server marks it destructive (destructiveHint: true). Description, as the server wrote it: ```untrusted-server-text Delete an asset from your wallet storage. FREE. (FREE) ``` ### `remove_background` - The name "remove_background" says "remove": a word for removing or ending something. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class. - Findings: warn annotation-conflict, warn annotation-conflict Description, as the server wrote it: ```untrusted-server-text Remove image background using AI (U2-Net). Returns RGBA PNG/WebP with transparent background. Perfect for product photos, portraits, and design assets. FREE. (FREE) ``` ## Changes things (17) Creates or changes something that can be changed back. Claude Code: ask. ### `batch_download` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Bulk download metadata + images from Alexandria Aeternum (min 100 artworks). ($5.00 / 50 GCX) ``` ### `check_balance` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text Check your GCX credit balance, loyalty rewards, and volume tier. FREE. (FREE) ``` ### `convert_color_profile` - The name "convert_color_profile" says "convert": a word for a change. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Findings: warn annotation-conflict Description, as the server wrote it: ```untrusted-server-text Convert between sRGB and CMYK color profiles. Essential for print production. CMYK output as TIFF with embedded DPI. FREE. (FREE) ``` ### `enrich_metadata` - Nothing in its name or description says what it does, so it is counted as a write. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text AI-powered artwork analysis. Two tiers: 'standard' (1 GCX) = SEO-optimized title, description, keywords, alt_text via Nova-Lite. 'premium' (2 GCX, default) = full 8-section Golden Codex museum-grade analysis via Nova/Gemini 2.5 Pro. Optionally customize metadata fields and add a Soul Whisper personal message. ($0.20 / 2 GCX) ``` ### `extract_palette` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text Extract dominant color palette from an image. Returns hex/RGB/HSL colors with percentages, CSS names, and complementary colors. Great for design systems, mood boards, and color matching. FREE. (FREE) ``` ### `infuse_metadata` - Nothing in its name or description says what it does, so it is counted as a write. Description, as the server wrote it: ```untrusted-server-text Embed metadata into image via ExifTool. Two modes: 'standard' (XMP/IPTC only — title, description, keywords, copyright) or 'full_gcx' (default — full Golden Codex XMP-gc namespace + IPTC + C2PA + soulmark + hash registration). ($0.10 / 1 GCX) ``` ### `mockup_image` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text Place your design onto product mockups (t-shirt, poster, canvas, phone case, mug, tote bag). Instant product visualization for e-commerce and print-on-demand. FREE. ($0.10 / 1 GCX) ``` ### `print_ready` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text Prepare images for professional printing with DPI, bleed margins, crop marks. Supports A4, A3, Letter, poster (24x36), custom sizes. Output as TIFF or PDF. FREE. (FREE) ``` ### `register_hash` - Nothing in its name or description says what it does, so it is counted as a write. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Register 256-bit perceptual hash with LSH band indexing for strip-proof provenance. ($0.10 / 1 GCX) ``` ### `register_wallet` - Nothing in its name or description says what it does, so it is counted as a write. Description, as the server wrote it: ```untrusted-server-text Register your wallet to get 10 FREE GCX credits ($1 value). New wallets only — enough to try upscale + enrich. Purchase more via GCX packs. FREE. (FREE) ``` ### `resize_image` - The name "resize_image" says "resize": a word for a change. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Findings: warn annotation-conflict Description, as the server wrote it: ```untrusted-server-text Resize an image to target dimensions. Supports fit modes: 'cover' (crop to fill), 'contain' (fit within, letterbox), 'stretch' (exact size). Useful for preparing images for specific platforms, thumbnails, or social media. FREE. (FREE) ``` ### `save_asset` - The name "save_asset" says "save": a word for a change. Description, as the server wrote it: ```untrusted-server-text Save an image or data to your personal wallet storage. 100MB free per wallet, 500 assets max. ($0.10 / 1 GCX) ``` ### `upscale_image` - Nothing in its name or description says what it does, so it is counted as a write. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Super-resolution using Real-ESRGAN on NVIDIA L4 GPU. 5 models for different content types. Default: 2x general upscale. ($0.20 / 2 GCX) ``` ### `vectorize_image` - The description's first verb is "convert": a word for a change. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Findings: warn annotation-conflict Description, as the server wrote it: ```untrusted-server-text Convert raster images to SVG vector format. Supports color and binary modes with precision controls. Returns raw SVG XML string. FREE. (FREE) ``` ### `verify_provenance` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Strip-proof provenance verification via Aegis hash index. FREE - no payment required. (FREE) ``` ### `watermark_detect` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text Detect and extract invisible DCT watermark from an image. Returns the embedded text payload if found. FREE. (FREE) ``` ### `watermark_embed` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text Embed invisible DCT-domain watermark into an image. Encodes a text payload into luminance channel frequency coefficients. Survives light compression. FREE. (FREE) ``` ## Only reads (8) Looks things up and changes nothing. Claude Code: allow. ### `compliance_manifest` - The description's first verb is "get": a word for reading. Description, as the server wrote it: ```untrusted-server-text Get AB 2013 (California) + EU AI Act Article 53 compliance manifests for dataset usage. FREE. (FREE) ``` ### `get_artwork` - The name "get_artwork" says "get": a word for reading. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. The description's first sentence says "get" and "url": it reads web pages, which anyone can write. Description, as the server wrote it: ```untrusted-server-text Get Human_Standard metadata (500-1200 tokens) + signed image URL for a museum artwork. ($0.10 / 1 GCX) ``` ### `get_artwork_oracle` - The name "get_artwork_oracle" says "get": a word for reading. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Get Hybrid_Premium 111-field NEST analysis (2K-6K tokens) + image. Deep AI visual analysis with color palette, composition, symbolism, emotional mapping. ($0.20 / 2 GCX) ``` ### `get_asset` - The name "get_asset" says "get": a word for reading. Description, as the server wrote it: ```untrusted-server-text Retrieve a stored asset from your wallet storage by key. FREE. (FREE) ``` ### `get_tool_schema` - The name "get_tool_schema" says "get": a word for reading. Description, as the server wrote it: ```untrusted-server-text Get the full JSON Schema and usage examples for a specific tool. Use after search_tools to load only what you need. (FREE) ``` ### `list_assets` - The name "list_assets" says "list": a word for reading. Description, as the server wrote it: ```untrusted-server-text List all assets in your wallet storage with sizes and metadata. FREE. (FREE) ``` ### `search_artworks` - The name "search_artworks" says "search": a word for reading. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Search 53K+ museum artworks from Alexandria Aeternum (MET, Chicago, NGA, Rijksmuseum, Smithsonian, Cleveland, Paris). FREE. (FREE) ``` ### `search_tools` - The name "search_tools" says "search": a word for reading. Description, as the server wrote it: ```untrusted-server-text Discover available tools by category or price without loading all schemas. Start here to save tokens. (FREE) ``` ## Claude Code permissions For `.claude/settings.json`, assuming the server is installed as `studiomcphub`: ```json { "permissions": { "allow": [ "mcp__studiomcphub__search_artworks", "mcp__studiomcphub__get_artwork", "mcp__studiomcphub__get_artwork_oracle", "mcp__studiomcphub__compliance_manifest", "mcp__studiomcphub__get_asset", "mcp__studiomcphub__list_assets", "mcp__studiomcphub__search_tools", "mcp__studiomcphub__get_tool_schema" ], "ask": [ "mcp__studiomcphub__upscale_image", "mcp__studiomcphub__enrich_metadata", "mcp__studiomcphub__infuse_metadata", "mcp__studiomcphub__register_hash", "mcp__studiomcphub__verify_provenance", "mcp__studiomcphub__batch_download", "mcp__studiomcphub__resize_image", "mcp__studiomcphub__extract_palette", "mcp__studiomcphub__mockup_image", "mcp__studiomcphub__convert_color_profile", "mcp__studiomcphub__print_ready", "mcp__studiomcphub__vectorize_image", "mcp__studiomcphub__watermark_embed", "mcp__studiomcphub__watermark_detect", "mcp__studiomcphub__save_asset", "mcp__studiomcphub__register_wallet", "mcp__studiomcphub__check_balance" ], "deny": [ "mcp__studiomcphub__remove_background", "mcp__studiomcphub__delete_asset" ] } } ``` Capability tags behind the rules (a read tagged outbound is asked about): - `mcp__studiomcphub__upscale_image`: untrusted-input - `mcp__studiomcphub__enrich_metadata`: untrusted-input - `mcp__studiomcphub__register_hash`: untrusted-input - `mcp__studiomcphub__verify_provenance`: untrusted-input - `mcp__studiomcphub__search_artworks`: untrusted-input - `mcp__studiomcphub__get_artwork`: untrusted-input - `mcp__studiomcphub__get_artwork_oracle`: untrusted-input - `mcp__studiomcphub__batch_download`: untrusted-input ## Remote posture What an anonymous client saw at the remote endpoint, last 2026-10-22T14:57:49.304Z, unchanged since 2026-10-22T14:57:49.304Z. No credentials were sent and no tool was called. Values are shown as the endpoint returned them. Method: https://anlyon.dev/methodology#remote-posture | Fact | Observed | | --- | --- | | Reachable | `yes` | | HTTP status of an anonymous initialize | `200` | | tools/list served without credentials | `yes` | | Tools that change things, listed without credentials | `19` | | Protocol version | `2025-03-26` | | WWW-Authenticate on 401 | `not observed` | | resource_metadata in WWW-Authenticate | `none` | | RFC 9728 protected resource metadata | `https://studiomcphub.com/.well-known/oauth-protected-resource/mcp` | | Authorization servers | `https://studiomcphub.com` | | Legacy HTTP+SSE transport | `no` | | Dynamic client registration | `yes` | | Client ID metadata documents | `no` | - **high** Tools that change things, listed to anyone ([unauth-remote-writes](https://anlyon.dev/methodology#unauth-remote-writes)) ```untrusted-server-text The endpoint served tools/list without credentials, and the list has 19 tools that change things (2 destructive, 17 write). Whether a call also works without credentials was not tested: tools are never called. https://studiomcphub.com/mcp: tools/list returned 27 tools to an anonymous client, including remove_background (destructive), delete_asset (destructive), upscale_image (write), enrich_metadata (write), infuse_metadata (write) and 14 more ```