MCP.Market

Shotpipe — Screenshots & OG Images MCP server

by podop29·io.github.podop29/shotpipe-mcp·v0.1.1

Screenshot any URL and see it, or mint a social card — hosted, SSRF-safe, cached. No Chrome to run.

B78/100grade B
What users say
No reviews yet
Be the first
Safety scan
B78/100

full report

Adoption
New

0 stars18 downloads/wk

Reviews

Write one

Nobody has reviewed Shotpipe — Screenshots & OG Images yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Shotpipe — Screenshots & OG Images tools (2)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • og_image

    Build a signed Open Graph (social card) image URL from a hosted template. By default returns the URL only and

  • screenshot

    Screenshot any URL (including untrusted / user-submitted ones) and return the image so you can see it.

Public scan report

scanner v0.1.9 · 2026-09-25 · same rubric, same numbers if you re-run it

no findings
  • Code scan4 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 64 days ago12/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 78/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Shotpipe — Screenshots & OG Images compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
78/100
higher than 57% of 48,255 servers
Tools
2
the typical server has 7
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
18
more than 5% of 12,191 servers with a package

What its tools let an agent do: 2 read

Install Shotpipe — Screenshots & OG Images in Claude Code, Cursor or VS Code

Runs npx -y shotpipe-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add shotpipe-mcp -- npx -y shotpipe-mcp
Add to Cursor

What the publisher says

From the Shotpipe — Screenshots & OG Images repository's README, as published. We do not edit it. Read it on GitHub

shotpipe-mcp

Hosted, SSRF-safe, cached screenshots and Open Graph images for AI agents — no headless Chrome to run.

An MCP server that lets an agent screenshot any URL and see the result, or mint a social-card image, by calling Shotpipe. It's the thing a local browser tool can't be:

  • No Chrome in your agent's sandbox. Rendering happens on Shotpipe's infrastructure. Nothing to install, no memory to babysit, no OOM at 2am.
  • Safe on untrusted URLs. Agents point at URLs their users typed. Shotpipe resolves DNS itself, pins the IP, re-checks every redirect, and refuses private / loopback / cloud-metadata hosts — so a hostile link can't turn your renderer into an SSRF hole.
  • Cached. The first capture renders; every identical one after is served from the edge in milliseconds and costs nothing.

Ad and cookie-consent banners are stripped by default.

Install

// Claude Desktop (claude_desktop_config.json), Claude Code (.mcp.json),
// Cursor, Cline, or any MCP client:
{
  "mcpServers": {
    "shotpipe": {
      "command": "npx",
      "args": ["-y", "shotpipe-mcp"],
      "env": {
        "SHOTPIPE_KEY": "k_your_key",
        "SHOTPIPE_SECRET": "your_signing_secret"
      }
    }
  }
}

Get a free key at shotpipe.io/signup (no card) or run npx shotpipe-init. Self-hosting Shotpipe? Set SHOTPIPEBASEURL.

Tools

screenshot

Screenshot a URL and return the image (so the model can see it) plus a permanent, shareable signed URL.

url (required) · format png\|jpeg\|pdf · width · height · dpr · fullpage · selector · dark · omitbackground · blockads · blockbanners · wait_for · delay · quality · fresh

og_image

Build a signed social-card URL from a hosted template. Returns the URL only by default and renders nothing — the image renders lazily on the first crawler hit, so agent/build time stays fast. Drop it into . Pass render: true to also get a preview image.

title (required) · template · author · tag · accent · logo · width · height · dpr · render

How it works

The signing secret never leaves the process — every request is HMAC-signed locally, exactly like Shotpipe's other clients. The server just builds a signed URL and (for screenshot) fetches the bytes.

MIT · shotpipe.io

Nothing above is checked by us. What we check is on the safety report.

Shotpipe — Screenshots & OG Images: common questions

Is Shotpipe — Screenshots & OG Images MCP server safe?
Mostly: it is graded B (78/100). Read the Shotpipe — Screenshots & OG Images safety report
How do I install Shotpipe — Screenshots & OG Images?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Shotpipe — Screenshots & OG Images need an API key?
Yes. The registry entry asks for SHOTPIPE_SECRET.
Is Shotpipe — Screenshots & OG Images maintained?
The last commit was 104 days ago (2026-07-23). The latest release is v0.1.1.
How does Shotpipe — Screenshots & OG Images compare with other MCP servers?
safety score 78/100 (higher than 57% of 48,255 servers); tools 2 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.