@bachstudio/comfyui-mcp-server
npm
v2.7.1
Published by @bachstudio — no publish provenance and no public repository, so the publisher could not be verified and the source cannot be independently located.
Simple Model Context Protocol (MCP) server for ComfyUI: give it a prompt, get an image back. Works with a local or remote ComfyUI instance.
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 2 = 98. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −2 | publisher verification (unlinked) — no provenance/repo link, but the shipped source was fully read |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Each tool and what it can reach — statically extracted from the published source.
dressup_flux2kleinno sensitive capabilityedit_imageno sensitive capabilitygenerate_imageno sensitive capabilitygenerate_walkway_videono sensitive capabilitygenerate_wan22_videono sensitive capabilityget_resultno sensitive capabilityScan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v2.7.1 latest |
A 98/100 | 0 | 1.13.0 | 2026-09-07 |
v2.7.0 |
A 98/100 | 0 | 1.12.1 | 2026-08-17 |
v2.6.8 |
A 98/100 | 0 | 1.12.1 | 2026-08-16 |
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan @bachstudio/comfyui-mcp-server --online
Independent packages implementing the same tool, scanned with the same engine. Compare all 5 side by side →
Security scan results for the Comfyui (ModdingFox) MCP server.
MCP server for ComfyUI — text-to-image generation via the Model Context Protocol.
40-tool MCP server for ComfyUI: image generation, ControlNet, IP-Adapter, inpainting, TTS voice cloning, lip-sync video, and AnimateDiff — with smart prompt optimization across 6 model families (Flux, SDXL, SD1.5, Illustrious, Pony, Realistic).
Local-first, agent-native control plane for ComfyUI — MCP server + autonomous sidebar agent that drives your live graph in natural language on ANY LLM: Claude/ChatGPT/Gemini on your subscription (no API key), free local models via Ollama (fully offline),
Turn designs into shipped parts: quote 3D printing, CNC, and decals, then check out.
Aleph's official SiliconFlow media-generation MCP server (image / video / TTS)
MCP server for image generation using Google Gemini AI
Ambience AI MCP Server - Generate images, videos, and audio through Model Context Protocol
MCP server exposing every endpoint of the AstroWay Calculation API as tools — natal, synastry, transits, Vedic dashas, Tarot, Numerology, Human Design, AI horoscopes — for Claude Desktop, Cursor and any MCP-compatible AI agent.
Audio-guide and trip-planning tools for 1,100+ cities from Audiala. Free, no API key.