Comfyui MCP server

by artokun·io.github.artokun/comfyui-mcp·v0.52.203

MCP server + Claude Code plugin for ComfyUI: run workflows, generate images, manage models & VRAM.

B74/100grade B

What users say

No reviews yet

Safety scan

B74/100

Adoption

Established

758 stars30k downloads/wk

Reviews

Nobody has reviewed Comfyui yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

get_image
Fetch, browse and inspect ComfyUI images and registered assets. Driven by the `action` parameter:
panel_call_toolwrite action
Run a panel tool by name with args matching its panel_describe_tool schema.
panel_describe_tool
Full description and JSON Schema for one panel tool.
panel_list_tools
List the live-canvas panel tools (the user's open ComfyUI graph): names + one-line summaries. Use panel_describe_tool then panel_call_tool to run one.
upload_imagewrite action
Put a file where ComfyUI (or cloud storage) can read it. Driven by the `action` parameter:

scanner v0.1.9 · 2026-09-19 · same rubric, same numbers if you re-run it

1 high

Code scan641 source files scanned13/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 6 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

highShell command built from a string (injection risk)exec.shell-concat

dist/services/port-owner.js: …runLsofListenerQuery(port) { return execSync(`lsof -V -nP -iTCP:${port} -sTCP:LISTEN -Fpn 2>&1`, { …

Overall 74/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

2026-09-19restoreD → Bscore 74: Shell command built from a string (injection risk)

Runs npx -y comfyui-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add comfyui-mcp -- npx -y comfyui-mcp

Is Comfyui MCP server safe?: Mostly: it is graded B (74/100). Read the Comfyui safety report
How do I install Comfyui?: It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Comfyui need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Comfyui maintained?: The last commit was 6 days ago (2026-09-14). The latest release is v0.52.203.