Back to Browse

Ogmake MCP Server

by Ogmake
Developer ToolsModerate5.3MCP RegistryLocal
Free

Server data from the Official MCP Registry

Generate og:image social cards and signed ogmake.com image URLs from your AI assistant.

About

Generate og:image social cards and signed ogmake.com image URLs from your AI assistant.

Security Report

5.3
Moderate5.3Moderate Risk

The ogmake-mcp server requires OGMAKE_API_KEY only for authenticated operations, keeps secrets in environment variables, and its tests verify that secrets are never echoed in tool results. The visible tests and README show network access scoped to the ogmake.com API, which matches the server's image-generation purpose. The main limitation is that the core source (src/server.ts, src/env.ts) and the vendored SDK (vendor/, @ogmake/sdk) were not included, so their implementation could not be verified. Supply chain analysis found 4 known vulnerabilities in dependencies (2 critical, 1 high severity). Package verification found 1 issue.

4 files analyzed · 9 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

ogmake.com API key. Optional: without it render_image uses the free watermarked endpoint.Required

Environment variable: OGMAKE_API_KEY

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "com-ogmake-mcp": {
      "env": {
        "OGMAKE_API_KEY": "your-ogmake-api-key-here"
      },
      "args": [
        "-y",
        "ogmake-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

ogmake-mcp

Local stdio MCP server for ogmake.com og:image generation. Run it with npx -y ogmake-mcp.

Tools

  • list_templates — lists every registered og:image template id, version, and its params JSON Schema. No API key required.
  • render_html — renders raw HTML/CSS to a stored PNG/JPG/WebP/PDF (2 credits; needs OGMAKE_API_KEY).
  • render_image — renders an og:image.
    • With OGMAKE_API_KEY set: renders template (+ optional params, format, preset, scale, v, bg, font — a Google Fonts family) via the authenticated API and returns its hosted URL plus the image bytes.
    • With no OGMAKE_API_KEY: renders a watermarked free image from title (+ optional description, site) and returns image bytes only — no hosted URL (the free endpoint never stores one).
  • create_batch — starts an async batch of up to 500 renders (POST /v1/batch); returns a batch_id immediately. Optional webhookUrl (https) gets a signed batch.completed event. Needs OGMAKE_API_KEY.
  • get_batch — a batch's status plus each item's stored URL or error. Needs OGMAKE_API_KEY.
  • build_image_url — builds an image URL for template without rendering it.
    • With OGMAKE_SIGNING_SECRET + OGMAKE_SIGNING_KEY_ID set: signs the URL locally (HMAC-SHA256) — the signing secret never leaves your machine and is never sent to the model.
    • Else with OGMAKE_PUBLIC_KEY_ID set: builds an unsigned /p/:keyId/:template URL (the key must be marked public and allow-list that template on ogmake.com).
  • og_snippet — renders the og:image/twitter:image meta tag snippet for a given framework (html, hugo, jekyll, rails, laravel, django, wordpress, ghost) and image URL.
  • get_usage — current billing period's render usage/quota for the OGMAKE_API_KEY account. Requires OGMAKE_API_KEY.

Every secret (OGMAKE_API_KEY, OGMAKE_SIGNING_SECRET) stays local: it is read from the environment once at startup and is never echoed back in a tool result, error message, or log line.

Environment variables

VariableRequired for
OGMAKE_API_KEYauthenticated render_image, render_html, create_batch, get_batch, get_usage
OGMAKE_BASE_URLoptional — override the API origin (defaults to https://ogmake.com)
OGMAKE_SIGNING_SECRETlocal signing in build_image_url (base64url)
OGMAKE_SIGNING_KEY_IDlocal signing in build_image_url (paired with the secret above)
OGMAKE_PUBLIC_KEY_IDunsigned /p URLs in build_image_url

Install

Claude Code

claude mcp add ogmake --env OGMAKE_API_KEY=og_live_... -- npx -y ogmake-mcp

Or add to .mcp.json (project scope) / ~/.claude.json (user scope); Cursor takes the same block in ~/.cursor/mcp.json:

{
  "mcpServers": {
    "ogmake": {
      "command": "npx",
      "args": ["-y", "ogmake-mcp"],
      "env": { "OGMAKE_API_KEY": "og_live_..." }
    }
  }
}

Without OGMAKE_API_KEY only list_templates, watermarked free render_image, build_image_url and og_snippet work.

Support: support@ogmake.com · License: MIT

Development

pnpm --filter ogmake-mcp run test        # unit tests, 100% coverage
pnpm --filter ogmake-mcp run test:e2e    # spawns the packed CLI over stdio against a local wrangler dev
pnpm --filter ogmake-mcp run build       # tsup bundle -> dist/index.js
pnpm --filter ogmake-mcp run pack        # build + npm pack -> pack-out/*.tgz

Development

vendor/ holds the SDK and request-signing helper this server bundles, so the repository builds standalone: npm install && npm run build && npm test.

Reviews

No reviews yet

Be the first to review this server!