Back to Home
skyinv icon

Seedream_MCP

by skyinv

Overview

Generate, transform, merge, and group images from text or other images, with local storage, cloud storage integration, and prompt templating.

Installation

Run Command
python main.py

Environment Variables

  • ARK_API_KEY
  • ARK_BASE_URL
  • SEEDREAM_MODEL_ID
  • SEEDREAM_DEFAULT_SIZE
  • SEEDREAM_DEFAULT_WATERMARK
  • SEEDREAM_TIMEOUT
  • SEEDREAM_API_TIMEOUT
  • SEEDREAM_MAX_RETRIES
  • LOG_LEVEL
  • LOG_FILE
  • SEEDREAM_AUTO_SAVE_ENABLED
  • SEEDREAM_AUTO_SAVE_BASE_DIR
  • SEEDREAM_AUTO_SAVE_DOWNLOAD_TIMEOUT
  • SEEDREAM_AUTO_SAVE_MAX_RETRIES
  • SEEDREAM_AUTO_SAVE_MAX_FILE_SIZE
  • SEEDREAM_AUTO_SAVE_MAX_CONCURRENT
  • SEEDREAM_AUTO_SAVE_DATE_FOLDER
  • SEEDREAM_AUTO_SAVE_CLEANUP_DAYS
  • QINIU_ACCESS_KEY
  • QINIU_SECRET_KEY
  • QINIU_BUCKET_NAME
  • QINIU_DOMAIN

Security Notes

CRITICAL: Qiniu cloud storage credentials (Access Key and Secret Key: p5en81L6k53PkgCQywYK9vX9BJLnJqrtmvBXkFaW, qV4m6r47s9okI7PEjCyrG6xMKtr9hmJM1z4ZHEk) are hardcoded directly in `QINIU_INTEGRATION_COMPLETE.md` and `QINIU_INTEGRATION_SUMMARY.md` instead of being exclusively managed via environment variables. This is a severe security risk exposing cloud storage access. While the Python code (`config.py`) correctly loads credentials from environment variables, the presence of actual, non-placeholder keys in the repository's markdown documentation is a critical operational security failure. Additionally, tools allow direct local file path input for images, which, despite implemented validation (`path_utils.py`, `file_manager.py`), expands the attack surface for potential local file inclusion (LFI) or other file system abuses.

Similar Servers

Stats

Interest Score0
Security Score2
Cost ClassHigh
Avg Tokens5000
Stars0
Forks0
Last Update2025-12-13

Tags

Image GenerationAIText-to-ImageCloud StoragePrompt Engineering