MCP servers › com.ionelul › app
MCP server · registry snapshot 2026-10-23 · last tested 2026-10-23
com.ionelul/app
Local tools: PDF, Office, e-Factura, OCR, images, video, speech, translation and nutrition. — the publisher's description
Summary
com.ionelul/app is a local MCP server listed in the official MCP registry at version 0.12.0. On 2026-10-23 ProtocolProbe started its published package in an isolated sandbox in read-only mode and read its inventory: 63 tools, 0 resources and 0 prompts.
Record checks
4 of 6 record checks met · 3 do not apply
- met: Registry entry is active and says how to run it
- not met: Source repository link opens
- not applicable: Repository is not archived
- not applicable: Code pushed to the repository in the 90 days before our check
- not applicable: Repository publishes a security policy (SECURITY.md)
- met: Package names its licence with a standard (SPDX) identifier
- met: The version the registry lists can be installed and is not withdrawn
- not met: npm package carries build provenance (attestation)
- met: No known critical or high advisory in the package or its dependencies
- #3,434 of 15,115 packages by monthly downloads, tied with 2 others
- Not ranked by stars: no public GitHub repository
From public records, not a safety rating. Each check with its reason · Is it safe to install?
Key facts
- Runs
- local package
- Transport
- standard input/output
- Package
- npm · listed version current
- License
- MIT
- Dependencies
- no known high or critical advisories
- Tools
- 63
- Described as changing data
- 39 of 63 toolsAI-classified
- Mainly works on
- files and code on the machine it runs onAI-classified
- Topic
- productivity-and-docsAI-classified
- Pricing
- freeAI-classified
- Last tested
- 2026-10-23
Worth knowing before you connect it
- 39 tools are described as changing something (pdf_merge, pdf_split, pdf_organize, …): our AI model's reading of the descriptions, not something we tested. We did not call them.
Each line comes from a section below, with its source and date.
How fresh this is
- Live-tested
- yes, a real session (not a text-only review)
- Last tested
- 2026-10-23
- Mode
- read-only (no tool calls)
- Latest version
- 0.12.0, published 2026-10-22 (registry, as of the 2026-10-23 snapshot)
- First listed version
- 2026-10-22 (earliest version still in the registry; older removed versions would be earlier)
- Version history
- 2 versions listed, all on 2026-10-22; 2 in the 90 days before the 2026-10-23 snapshot.(versions still listed in the registry only)
Most recent 2 versions
0.12.0· 2026-10-220.11.0· 2026-10-22
- Registry data
- snapshot 2026-10-23
- Package and repository
- checked 2026-10-22
- Engine
- mcp-runtime-engine@0.1.0 · sdk@1.32.0
Changes since the last refresh
New in the registry: not in the list of 2026-10-04, listed on 2026-10-23 with version 0.12.0 (published 2026-10-22).
Source: the official MCP Registry list on 2026-10-04 and on 2026-10-23.
What it is
What does this server offer?
Observed inventoryWhat it mainly works on, as our AI model read its tool descriptions: files and code on the machine it runs on.
39 of 63 tools are described as changing something (creating, editing, deleting, sending or running). For 5 the reading was uncertain, so no mark is shown.
“Page count, page sizes, metadata, encryption and form fields of a PDF.”
Publisher declares: read-only yes
2 inputs, 1 required
filestringrequired“Path to the PDF”passwordstring“Password of an encrypted PDF”
“Joins PDFs into one, in the order given.”
3 inputs, 2 required
filesarrayrequiredoutputstringrequired“Path of the merged PDF”overwriteboolean“Replace the output file if it exists”
“Splits a PDF into several files: one per range ("1-3, 4-6") or every N pages.”
6 inputs, 1 required
filestringrequiredrangesstring“Comma-separated groups, each becomes a file, e.g.”everyinteger“Pages per file, when no ranges are given (default 1)”outputDirstring“Folder for the parts (default: next to the input)”passwordstring“Password of an encrypted PDF”overwriteboolean“Replace the output file if it exists”
“Builds a new PDF from the pages listed, in that order (pages left out are deleted), optionally rotating some of them.”
7 inputs, 1 required
filestringrequiredoutputstring“Default: <name>-organized.pdf next to the input”pagesstring“New page order, e.g.”rotatenumber“Clockwise rotation in degrees”rotatePagesstring“Original page numbers to rotate (default: all)”passwordstring“Password of an encrypted PDF”overwriteboolean“Replace the output file if it exists”
“Adds a text watermark and/or page numbers, sets metadata, and protects with a password.”
8 inputs, 1 required
filestringrequiredoutputstring“Default: <name>-edited.pdf next to the input”passwordstring“Password of an encrypted PDF”watermarkobjectpageNumbersobjectmetadataobject“Replaces the document info; fields left out are cleared”protectobjectoverwriteboolean“Replace the output file if it exists”
“Lists the fillable (AcroForm) fields of a PDF with their type, current value and options.”
Publisher declares: read-only yes
2 inputs, 1 required
filestringrequiredpasswordstring“Password of an encrypted PDF”
“Writes values into fillable fields (names from pdf_form_read).”
6 inputs, 2 required
filestringrequiredoutputstring“Default: <name>-filled.pdf next to the input”valuesobjectrequired“Field name -> value; checkboxes take true/false”flattenboolean“Make the values part of the page (default true)”passwordstring“Password of an encrypted PDF”overwriteboolean“Replace the output file if it exists”
“Finds tables in a PDF from its text layout and writes them to .xlsx (or .csv).”
7 inputs, 1 required
filestringrequiredoutputstring“.xlsx or .csv; default <name>.xlsx next to the input”layoutstring“One sheet per page (default) or per table”numbersstring“Number format: auto, 1.234,56 (comma), 1,234.56 (dot) or keep as text”includeTextboolean“Keep text outside tables (page layout only, default true)”passwordstring“Password of an encrypted PDF”overwriteboolean“Replace the output file if it exists”
“Rebuilds the text of a PDF as an editable .docx: paragraphs, headings, bold and italic.”
4 inputs, 1 required
filestringrequiredoutputstring“Default: <name>.docx next to the input”passwordstring“Password of an encrypted PDF”overwriteboolean“Replace the output file if it exists”
“Places a signature, stamp or logo image (a transparent PNG works best; JPEG, WebP, AVIF and JPEG XL too) on chosen pages, at a corner or at exact millimetres, keeping its proportions.”
11 inputs, 2 required
filestringrequired“Path to the PDF”imagestringrequired“Signature or stamp image”pagesstring“Page ranges, e.g.”positionstring“Default bottom-right”xMMnumber“Left edge from the page’s left, in mm (instead of position)”yMMnumber“Bottom edge from the page’s bottom, in mm”widthMMnumber“Default 50”marginMMnumber“Distance from the edges for `position` (default 15)”passwordstring“Password of an encrypted PDF”outputstring“Default: <name>-signed.pdf”overwriteboolean“Replace the output file if it exists”
“Converts .docx, .xlsx, .pptx or .odp to PDF without Office installed.”
6 inputs, 1 required
filestringrequiredoutputstring“Default: <name>.pdf next to the input”pageNumbersboolean“Word: number the pages (default false)”gridlinesboolean“Excel: draw cell gridlines (default true)”includeHiddenboolean“PowerPoint: include hidden slides (default false)”overwriteboolean
- document_anonymizecreates or changes datadescribed as changing data
“Finds personal data in a .docx or text file (or in `text`) and replaces it: names after titles and court roles (Mr., Frau, domnul, reclamantul…), addresses, national ID numbers checked by their contr…”
10 inputs
filestring“A .docx, .txt, .md, .csv or other text file”textstring“Or the text itself”stylestring“label: [Person 1] (default); initials: P.I.”hidearray“Kinds to hide; default all but organization and location”termsarray“Words or phrases to hide everywhere too (names, nicknames, case numbers)”keeparray“Found values to leave as they are (e.g.”languagestring“Language of the labels ([Persoana 1], [Person 1]...); default en”outputstring“Where to write the result; default <name>-anonymized next to the input”key_outputstring“Also write a CSV key (label -> original) here, to reverse it later.”overwriteboolean
Show 51 more tools
- legal_deadlinereads or searches
“The last day of a procedural or legal time limit, with each counting step explained.”
Publisher declares: read-only yes
9 inputs, 4 required
systemstringrequiredstartstringrequired“YYYY-MM-DD: the day the term runs from (service, judgment, event); for direction "before", the hearing date”amountintegerrequiredunitstringrequired“workingDays only for eu and generic; ro-custody counts days or months”directionstring“"before": at least N clear days before `start` (ro-civil and ro-criminal, days only)”countrystring“Holidays to skip: RO, BG, DE, AT, FR, BE, NL, ES, IT, PT, PL, CZ, SK, HU, GB, IE, US, or "" for weekends only; default RO for Romanian systems, none otherwise”days_offarray“Extra closed days (regional holidays, court closures)”extendboolean“generic only: move a closed last day to the next working day (default true)”languagestring“Language of the explanation; default en”
- legal_lettergenerates contentdescribed as changing data
“Writes a ready-to-send letter citing the right articles: GDPR requests (gdprAccess art.”
9 inputs, 2 required
documentstringrequiredlanguagestring“Language of the letter; default en”senderobjectrequired“Who writes (the principal, for a power of attorney)”recipientobject“Not used by powerOfAttorney”placestringdatestring“YYYY-MM-DD; default today”fieldsobject“Document fields: gdprAccess: reference, copy (check), details (textarea); gdprRectification: reference, incorrect (textarea), correct (textarea); gdprErasure: …”outputstring“.pdf, .docx or .txt path; without it the text is returned”overwriteboolean
- efactura_readreads or searches
“Reads a Romanian e-Factura (UBL 2.1 XML, or the .zip downloaded from ANAF SPV) and checks that its totals add up (EN 16931 BR-CO rules).”
Publisher declares: read-only yes
2 inputs, 1 required
filestringrequired“.xml or ANAF .zip”fullboolean“Return the whole parsed model instead of a summary”
- efactura_to_pdfcreates or changes datadescribed as changing data
“Turns an e-Factura XML (or every invoice in an ANAF .zip) into a readable A4 PDF.”
4 inputs, 1 required
filestringrequired“.xml or ANAF .zip”outputDirstring“Default: next to the input; files are named factura-<number>.pdf”languagestring“Labels and number format (default ro)”overwriteboolean
- cv_to_pdfgenerates contentdescribed as changing data
“Typesets a CV with XeLaTeX (TeX Live 2026) on this machine and writes the PDF.”
9 inputs
cvobjecttemplatestring“For `cv` (default classic)”accentstring“Modern template colour, hex without #”langstring“Language of the section titles (default en)”texstring“LaTeX source instead of `cv`”texFilestring“Path to a .tex file instead of `cv`”outputstring“PDF path.”saveTexboolean“Also write the .tex next to the PDF (default false)”overwriteboolean
“Removes EXIF (GPS, camera, dates), XMP, IPTC and comments from JPEG, PNG and WebP without re-encoding: pixels stay byte for byte.”
3 inputs, 1 required
filesarrayrequiredoutputDirstring“Default: <name>-clean.<ext> next to each input”inPlaceboolean“Overwrite the originals instead”
“Hashes files (streamed, so large files are fine) and optionally verifies them against an expected hash or a checksum file (sha256sum, md5sum or BSD format).”
Publisher declares: read-only yes
4 inputs, 1 required
filesarrayrequiredalgorithmsarray“Default: sha256, or guessed from `expected`”expectedstring“Hash every file should match”checksumFilestring“SHA256SUMS-style file to verify against, by file name”
- romanian_diacriticscreates or changes datadescribed as changing data
“Adds missing Romanian diacritics (ă â î ș ț) from a dictionary of ~70,000 words, fixes the old cedilla letters (ş ţ to ș ț), or removes diacritics.”
5 inputs, 1 required
textstringfilestring“Read the text from this file instead (UTF-8)”modestringrequired“add: put diacritics in; fix: ş ţ to ș ț; remove: strip them”outputstring“Write the result to this file instead of returning it”overwriteboolean
“Counts words, characters (with and without spaces), sentences, paragraphs, lines and unique words; reading and speaking time; top keywords with their density.”
Publisher declares: read-only yes
2 inputs
textstringfilestring“Read the text from this file instead (UTF-8)”
“Converts text to a case (upper, lower, sentence, title, capitalize, inverse, alternating, camel, pascal, snake, constant, kebab, dot) or cleans it up (trim spaces, collapse blank lines, join lines, u…”
7 inputs
textstringfilestring“Read the text from this file instead (UTF-8)”casestringcleanuparray“Applied in order, before `case`”langstring“BCP 47 language for case rules, e.g.”outputstring“Write the result to this file instead of returning it”overwriteboolean
“Line-by-line comparison of two texts or files, as a unified diff (like `diff -u`), with the number of lines added and removed.”
Publisher declares: read-only yes
7 inputs
leftstring“Original text”rightstring“Changed text”leftFilestringrightFilestringignoreWhitespaceboolean“Ignore spaces at the start and end of lines”ignoreCasebooleancontextinteger“Unchanged lines shown around each change (default 3)”
“Encodes text or any file to Base64 (optionally URL-safe or wrapped at 76 columns, e.g.”
8 inputs, 1 required
modestringrequiredtextstringfilestring“Read the text from this file instead (UTF-8)”urlSafeboolean“Base64url alphabet without padding”wrapboolean“Wrap Base64 at 76 characters”fullUrlboolean“URL modes: keep : / ?”outputstring“Write the result here; needed when decoded bytes are not text”overwriteboolean
“Generates passwords, passphrases (EFF long word list, 7,776 words) or PINs with a cryptographically secure random generator, without modulo bias, and reports their entropy and strength.”
13 inputs
kindstring“Default password”countintegerlengthinteger“Password (default 20) or PIN (default 6) length”upperbooleanlowerbooleandigitsbooleansymbolsboolean“All four default to true”noAmbiguousboolean“Leave out I l 1 | O 0 o and quotes”excludestring“Characters never to use”wordsinteger“Passphrase words (default 6)”separatorstring“Passphrase separator (default "-")”capitalizebooleannumberboolean“Add a digit to one passphrase word”
“Generates random UUIDs (v4) or time-ordered ones (v7, sortable by creation time), or inspects a UUID: its version, variant and, for v7, the time it was made.”
6 inputs
versionstring“Default 4”countintegerupperbooleanhyphensboolean“Default true”bracesbooleaninspectstring“A UUID to read instead of generating”
“Converts Markdown (GitHub flavour: tables, task lists, fenced code) to an HTML fragment, or to a complete styled HTML page titled after the first heading.”
5 inputs
textstringfilestring“Read the text from this file instead (UTF-8)”pageboolean“A full HTML document with styles (default true)”outputstring“Default: <file>.html next to a Markdown file; otherwise returned”overwriteboolean
- regex_teston 21 other servers
“Runs a JavaScript regular expression on a text: every match with its position and capture groups (numbered and named), and optionally the text with a replacement applied.”
Publisher declares: read-only yes
6 inputs, 1 required
patternstringrequired“Without slashes, e.g.”flagsstring“e.g.”textstringfilestring“Read the text from this file instead (UTF-8)”replacestring“Replacement, with $1, $<name> and $&”limitinteger“Matches listed (default 100)”
“Writes a JavaScript regular expression, without AI: from examples of what should (and optionally should not) match, worked out run by run and checked on every example; or from a description, picked f…”
Publisher declares: read-only yes
4 inputs
examplesarray“Values that must match”counterExamplesarray“Values that must not match”wholeboolean“Match whole values with ^...$ (default true); false finds the pattern inside text”descriptionstring“What to match, in words (any language) or as a format like DD.MM.YYYY”
“Extractive summary in any language: the sentences that best stand for the whole text (TextRank on TF-IDF), word for word and in their original order.”
5 inputs
textstringfilestring“Read the text from this file instead (UTF-8)”sharenumber“Share of the sentences to keep (default 0.25)”outputstring“Write the summary to this file instead of returning it”overwriteboolean
“Placeholder text: paragraphs, sentences or words, optionally starting with the classic "Lorem ipsum dolor sit amet" and wrapped in <p> tags.”
4 inputs
unitstring“Default paragraphs”countinteger“Default 3”classicboolean“Default true”htmlboolean
“Translates text or a text file (.txt, .md, .srt, .vtt, .csv) between en, ro, de, fr, es, it, pt, nl, pl, hu, cs, bg, uk, tr, ru with OPUS-MT and M2M100 AI models, on this machine.”
6 inputs, 1 required
textstring“Text to translate, instead of a file”filestringfromstring“Default: detected”tostringrequiredoutputstring“For a file, default <name>.<to><ext> next to it”overwriteboolean
“Converts a value between units of one category, including temperature and fuel economy.”
Publisher declares: read-only yes
3 inputs, 2 required
valuenumberrequiredfromstringrequired“Unit id, e.g.”tostring“Unit id; leave out to get every unit of the category”
“Converts an amount between currencies at the European Central Bank reference rates (published each working day, via the Frankfurter API).”
Publisher declares: read-only yes · open-world yes
3 inputs, 2 required
amountnumberrequiredfromstringrequired“ISO code, e.g.”toarray“ISO codes; leave out for RON, EUR, USD, GBP, CHF, HUF, PLN, CZK, SEK, NOK, DKK, TRY, JPY, CNY, CAD, AUD”
“Turns a Unix timestamp (seconds, ms, µs or ns, detected by length) or a wall-clock date and time in a zone into the instant in UTC, the time in other IANA zones (with daylight saving) and every times…”
Publisher declares: read-only yes
5 inputs
timestampstring“e.g.”unitstringdatestring“Wall time "YYYY-MM-DDTHH:mm[:ss]" in `zone`, instead of a timestamp”zonestring“IANA zone for `date` (default UTC)”zonesarray“Zones to show the instant in (default UTC and this machine’s zone)”
“Converts a colour (hex, rgb(), hsl(), hwb(), hsv(), cmyk(), lab(), lch(), oklab(), oklch(); not CSS names) to every format.”
Publisher declares: read-only yes
5 inputs, 1 required
colorstringrequiredbackgroundstring“Check contrast against this colour”targetnumber“Contrast ratio to fix towards (default 4.5, AA for normal text)”scaleboolean“Nine tints and shades, light to dark”harmoniesboolean
- nutrition_targetsreads or searches
“Daily calories, protein, carbohydrates, fat, fibre and water for an adult, from the Mifflin-St Jeor resting energy times an activity factor, with 250-750 kcal taken off to lose weight or added to gai…”
Publisher declares: read-only yes
6 inputs, 5 required
sexstringrequiredagenumberrequired“Years”heightnumberrequired“cm”weightnumberrequired“kg”activitystringrequired“sedentary (desk job), light (exercise 1-3 days/week), moderate (3-5), active (6-7), veryActive (physical job or twice a day)”goalstring“kcal a day: loseFast -750, lose -500, loseSlow -250, maintain (default), gainSlow +250, gain +500”
“Looks up everyday foods (fruit, vegetables, grains, dairy, meat, fish, legumes, nuts, fats, sweets, drinks, dishes) in a built-in list of about 170, with Romanian dishes, and gives their calories and…”
Publisher declares: read-only yes
4 inputs, 1 required
querystringrequired“e.g.”categorystringlanguagestring“Language of food and recipe names; default en”limitinteger“Default 10”
- meal_nutritionreads or searches
“Adds up the calories and macros of foods from food_search (by id) in grams or portions, item by item and in total.”
Publisher declares: read-only yes
2 inputs, 1 required
itemsarrayrequiredlanguagestring“Language of food and recipe names; default en”
- food_barcodereads or searches
“Calories and macros of a packaged product from its EAN/UPC barcode (8, 12, 13 or 14 digits), from Open Food Facts.”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
codestringrequired“Digits only, e.g.”gramsnumber“Also give the values for this amount”languagestring“Language of food and recipe names; default en”
- recipe_suggestreads or searches
“Suggests built-in recipes (breakfast, lunch, dinner, snack; Romanian dishes included) whose serving fits the calories left, preferring protein-rich ones, with nutrition per serving, ingredients and s…”
Publisher declares: read-only yes
5 inputs, 1 required
kcalnumberrequired“Calories left for the day”proteinnumber“Protein left, g”mealstringlanguagestring“Language of food and recipe names; default en”limitinteger“Default 3”
“Makes a QR code as SVG (styled dots and eyes, any size) or PNG (square modules) from text, a link, Wi-Fi login, e-mail, phone, SMS, contact card, location or calendar event.”
13 inputs, 1 required
typestring“Default text”fieldsobject“Fields of the type, e.g.”textstring“Shortcut for type text / the url of type url”outputstringrequired“.svg or .png file”levelstring“Error correction (default M)”sizeinteger“PNG width in pixels (default 1024)”margininteger“Quiet zone in modules (default 4)”colorstring“Hex, default #000000”backgroundstring“Hex or "transparent", default #ffffff”dotStylestring“SVG only”eyeFrameStylestring“SVG only”eyeDotStylestring“SVG only”overwriteboolean
“Makes a barcode as SVG (sized in mm, prints at exact size) or PNG (at a DPI, written into the file): EAN-13, EAN-8, UPC-A, UPC-E, ISBN, Code 128, Code 39, Code 93, ITF-14, Interleaved 2 of 5, GS1-128…”
10 inputs, 3 required
typestringrequiredtextstringrequired“The value, e.g.”outputstringrequired“.svg or .png file”moduleMMnumber“Narrowest bar in mm (default per type, e.g.”heightMMnumber“Bar height in mm (1D codes)”dpiinteger“PNG resolution (default 300)”showTextboolean“Human-readable line under 1D codes (default true)”colorstringbackgroundstring“Hex or "transparent"”overwriteboolean
“Finds and decodes every QR code, Micro QR, Data Matrix, Aztec, PDF417 and 1D barcode (EAN, UPC, Code 128/39/93, ITF, Codabar, DataBar) in a PNG, JPEG, GIF or BMP image, and explains the content: Wi-F…”
Publisher declares: read-only yes
1 input, 1 required
filesarrayrequired
“Re-encodes JPEG, PNG, WebP, AVIF and JPEG XL images with the Squoosh codecs (MozJPEG, OxiPNG, libwebp, libavif, libjxl): convert between formats, compress at a quality, and shrink to a maximum width/…”
10 inputs, 1 required
filesarrayrequiredformatstring“Default same as the input”qualityinteger“Lossy formats (default 80)”losslessboolean“WebP, AVIF and JPEG XL”maxWidthintegermaxHeightintegerscalenumber“Percent of the original size”backgroundstring“Fill for transparent pixels when writing JPEG (default #ffffff)”outputDirstring“Default: <name>-converted.<ext> next to each input”overwriteboolean
- image_to_svgcalculates or convertsdescribed as changing data
“Traces a JPEG, PNG, WebP, AVIF or JPEG XL into an SVG of filled paths (imagetracerjs).”
6 inputs, 1 required
filestringrequiredpresetstring“Default logo”colorsinteger“Overrides the preset”maxSideinteger“Longest side traced, in pixels (default 1000)”outputstring“Default: <name>.svg next to the input”overwriteboolean
“Puts images into one PDF, one per page, in the order given: A4 or Letter (orientation from each image, or fixed) with a margin, or pages the size of each image.”
7 inputs, 2 required
filesarrayrequiredoutputstringrequired“PDF path”pageSizestring“Default a4”orientationstringmarginMMnumber“Default 10”titlestringoverwriteboolean
- favicon_creategenerates contentdescribed as changing data
“Makes the usual favicon set from a logo (JPEG, PNG, WebP, AVIF or JPEG XL): favicon.ico (16, 32, 48 px), 16/32 px PNGs, apple-touch-icon, the Android 192/512 icons and site.webmanifest, centred on a …”
7 inputs, 2 required
filestringrequiredoutputDirstringrequired“Folder for the files”backgroundstring“Hex fill behind the image (default transparent)”paddingPercentnumber“Space around the image (default 0)”namestring“App name for the manifest”themeColorstring“Manifest colour (default the background or #ffffff)”overwriteboolean
- logo_creategenerates contentdescribed as changing data
“Builds a text logo as SVG: a shape with initials (circle, rounded, square, hexagon, diamond, shield) beside or above the name and tagline, or the text alone.”
18 inputs, 2 required
namestringrequiredtaglinestringlettersstring“Mark inside the shape (default the initials of the name)”layoutstring“Default stacked”shapestring“Default circle”fontstring“Default sans”boldboolean“Default true”letterSpacingnumber“Percent of the font size (default 0)”presetstring“Default forest”shapeColorstringshapeColor2string“End of the gradient”gradientboolean“Default true”markColorstringtextColorstringtaglineColorstringbackgroundstring“Default transparent”outputstringrequired“.svg file”overwriteboolean
- gif_createdescribed as changing data
“Joins JPEG, PNG, WebP, AVIF or JPEG XL images into an animated GIF, in the order given, each fitted (or cropped to fill) on a frame of one size.”
9 inputs, 2 required
filesarrayrequiredoutputstringrequired“.gif path”widthinteger“Default: the first image, at most 800 px wide”heightintegerdelayMsinteger“Time per frame (default 500)”loopboolean“Default true”fitstring“Default contain”backgroundstring“Hex, behind contained frames (default #ffffff)”overwriteboolean
“The main colours of a JPEG, PNG, WebP, AVIF or JPEG XL image (k-means in OKLab, transparent pixels ignored), largest share first, as hex, RGB and OKLCH.”
Publisher declares: read-only yes
2 inputs, 1 required
filestringrequiredcolorsinteger“Default 6”
- image_metadata_readreads or searches
“Shows what a photo reveals: GPS position (with a map link), camera and lens, date taken, author and copyright, software and exposure, from EXIF, XMP and IPTC in JPEG, PNG, WebP, HEIC, AVIF and TIFF.”
Publisher declares: read-only yes
1 input, 1 required
filestringrequired
- image_remove_backgroundcalculates or convertsdescribed as changing data
“Cuts the subject (people, products, animals, objects) out of a JPEG, PNG, WebP, AVIF or JPEG XL photo with the ormbg AI model, on this machine.”
7 inputs, 1 required
filesarrayrequiredbackgroundstring“Fill behind the subject (default transparent)”cropboolean“Trim to the subject (default false)”formatstring“Default png; jpeg needs a background”qualityinteger“webp, avif and jpeg (default 90)”outputDirstring“Default: <name>-no-bg.<ext> next to each input”overwriteboolean
- invoice_to_pdfgenerates contentdescribed as changing data
“Makes an A4 invoice, proforma or quote PDF: seller and buyer, dates, line items with VAT rates, totals with VAT per rate (rounded per rate, as accountants check them), payment details, notes and an o…”
13 inputs, 6 required
kindstring“Default invoice”numberstringrequiredissueDatestringrequired“YYYY-MM-DD”dueDatestring“YYYY-MM-DD”currencystring“e.g.”sellerobjectrequiredbuyerobjectrequireditemsarrayrequirednotesstringlogostring“PNG or JPEG file”langstring“Labels and formats (default en)”outputstringrequired“PDF path”overwriteboolean
“Reads the text in JPEG, PNG, WebP, AVIF or JPEG XL images (scans, screenshots, photos of documents) with Tesseract on this machine.”
Publisher declares: read-only yes
5 inputs, 1 required
filesarrayrequiredlanguagesarray“Default ["eng"]”layoutstring“Join lines into paragraphs (default) or keep every line break”outputstring“Write all the text to this .txt file instead of returning it”overwriteboolean
“Converts any video ffmpeg on this machine can read (AVI, WMV, FLV, MPEG, H.266/VVC with ffmpeg 7+…) to MP4, MOV, MKV, WebM, MPEG-TS or AVI, or extracts the sound to MP3, M4A, OGG or WAV.”
12 inputs, 1 required
filestringrequiredformatstring“Default: from the output extension, else mp4”outputstring“Default: <name>.<format> next to the input (<name>-converted.<format> for the same extension)”videoCodecstring“Default: h264, or vp9 for webm; "copy" keeps the original stream”audioCodecstring“Default: the format's first (aac, opus for webm/ogg, mp3, pcm); "copy" keeps it”qualitystring“Lower means smaller files (default medium)”maxHeightinteger“e.g.”fpsnumber“Frame rate cap”startnumber“Seconds”endnumber“Seconds”muteboolean“Drop the sound”overwriteboolean
“Turns a clip of a video (at most 60 s) into an animated GIF with ffmpeg on this machine, using a palette made for that clip.”
8 inputs, 1 required
filestringrequiredoutputstring“.gif path (default: <name>.gif next to the video)”startnumber“Seconds”endnumber“Seconds (default: the end of the video, at most 60 s after start)”fpsinteger“Default 10”widthinteger“Default 480 (never enlarged)”loopboolean“Default true”overwriteboolean
“Enlarges a video (or a clip of it, at most 60 s) 2x or 4x with Real-ESRGAN, frame by frame, on this machine; results up to 4K.”
7 inputs, 1 required
filestringrequiredoutputstring“.mp4 path (default: <name>-<scale>x.mp4 next to the video)”scalenumber“Default 2”modelstring“general for live action (default), anime for animation (about twice as fast)”startnumber“Seconds”endnumber“Seconds (default: the end, at most 60 s after start)”overwriteboolean
“Saves still images from a video with ffmpeg on this machine: one every N seconds, a set number spread over the clip, one at each scene change, or every frame (at most 500).”
11 inputs, 2 required
filestringrequiredmodestringrequired“interval: every `every` seconds; count: `count` frames spread evenly; scenes: the first frame of each shot; all: every frame”everynumber“Seconds between frames for interval (default 1)”countinteger“Frames for count (default 12)”sensitivitynumber“Scene detection, higher finds smaller changes (default 50)”formatstring“Default png”widthinteger“Shrink to this width (never enlarged)”startnumber“Seconds”endnumber“Seconds”folderstring“Default: <name>-frames next to the video”overwriteboolean“Replace frames with the same names”
- video_remove_backgroundcalculates or convertsdescribed as changing data
“Keys out a plain background (green screen, blue screen, a plain wall) with ffmpeg on this machine.”
9 inputs, 1 required
filestringrequiredcolorstring“Background colour to remove, e.g.”tolerancenumber“How far from the colour still counts as background (default 30)”softnessnumber“Edge softness (default 10)”backgroundstring“Put the subject on this colour and write MP4; omit for a transparent WebM”outputstring“Default: <name>-transparent.webm or <name>-background.mp4 next to the video”startnumber“Seconds”endnumber“Seconds”overwriteboolean
- audio_denoisecalculates or convertsdescribed as changing data
“Turns down background noise (fans, traffic, hum, keyboard) in a recording and keeps the voice, with RNNoise on this machine.”
4 inputs, 1 required
filestringrequiredoutputstring“Default: <name>-clean.wav next to the input; a .mp4/.mov/.mkv/.webm output keeps the video”amountnumber“1 removes as much as it can (default); lower blends some of the original back”overwriteboolean
“Transcribes speech from any audio or video file ffmpeg can read with OpenAI Whisper, on this machine: plain text, SRT or WebVTT subtitles, or text with timestamps.”
7 inputs, 1 required
filestringrequiredmodelstring“Default base”languagestring“ISO 639-1 code such as "ro" (default: detected)”taskstring“translate gives English text (default transcribe)”formatstring“Default txt”outputstring“Default: <name>.<format> next to the input (.txt for timestamped)”overwriteboolean
“Enlarges JPEG, PNG, WebP, AVIF or JPEG XL images 2x or 4x with Real-ESRGAN (AI that restores detail), on this machine.”
7 inputs, 1 required
filesarrayrequiredscalenumber“Default 2”modelstring“general for photos (default), anime for drawings, cartoons and anime (faster)”formatstring“Default same as the input”qualityinteger“Lossy formats (default 90)”outputDirstring“Default: <name>-<scale>x.<ext> next to each input”overwriteboolean
Each quoted sentence is the first sentence of the publisher’s own description. The kind of tool and the “changes data” mark are our AI model’s reading of that description, not something we tested: two differently worded runs had to agree, otherwise no label is shown, and nobody has checked them by hand. A tool without the “changes data” mark is described as only reading, searching or calculating, or the two runs did not agree. No tool was called. Read the publisher’s full description before relying on it. “Publisher declares” lists the hints the server itself sends with the tool (MCP annotations: read-only, destructive, idempotent, open-world); they are the publisher's claims, not checked by us. Inputs are the parameters in the tool's own input schema: name, declared type, whether it is required, and the first sentence of its description. Read 2026-10-23.
How well are its tools described?
Features #4 and #5
How clearly this server's own tool descriptions say what a tool does, and how consistent its tool list is. The first part is an AI model's yes/no reading of each description; the second part is counted. We do not turn it into a grade.
Descriptions
AI reading of each description
- Says what the tool does
- 100% of 63 tools
- Says what it returns
- 66% of 53 tools
- States limits, defaults or errors
- 33% of 63 tools
- Says when to use it
- 2% of 63 tools
- Items covered per tool
- 1.9 of 4 on average
Counted from the listing
- Parameters with a description
- 71% of 400
- Tools with a description
- 100% of 63
- Typical description length
- 273 characters
The tool set
Counted from the listing
- Tools
- 63
- Size of the list
- about 18,246 tokens for an agent to load (characters ÷ 4)
- Naming
- 60 of 63 names use snake_case
AI reading: easy to mix up
No pair found.
The AI items cover 63 of 63 tools: for a tool where two differently worded runs disagreed, that item is left out. They were not checked by hand, and no tool was called. “Easy to mix up” means two tools whose names or descriptions overlap without saying how they differ; the AI found none, comparing tools within groups of 40. We do not rate whether the tool set is complete or whether side effects are spelled out, because our AI reading of those was not reliable enough.
How do I add it to my client?
Config from the registry entry
From the npm package app-ionelul-mcp
Our sandbox started this package on 2026-10-23 (a read-only session: no tool was called).
Add to CursorAn install link in the format Cursor documents, holding the Cursor config below. The command runs the publisher’s code on your machine.
Claude Desktop · claude_desktop_config.json (Settings → Developer → Edit Config)
{
"mcpServers": {
"app": {
"command": "npx",
"args": [
"-y",
"app-ionelul-mcp@0.12.0"
]
}
}
}Cursor · .cursor/mcp.json in a project, or ~/.cursor/mcp.json
{
"mcpServers": {
"app": {
"command": "npx",
"args": [
"-y",
"app-ionelul-mcp@0.12.0"
]
}
}
}VS Code · .vscode/mcp.json
{
"servers": {
"app": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"app-ionelul-mcp@0.12.0"
]
}
}
}VS Code (command line) · Bash or zsh terminal (macOS, Linux)
code --add-mcp '{"name":"app","type":"stdio","command":"npx","args":["-y","app-ionelul-mcp@0.12.0"]}'Claude Code
claude mcp add --transport stdio app -- npx -y app-ionelul-mcp@0.12.0
Try it in the MCP Inspector · runs on your machine, opens in your browser · Node 22.19+
npx @modelcontextprotocol/inspector@2.11.0 -- npx -y app-ionelul-mcp@0.12.0
- Optional settings the entry also lists (left out above): FFMPEG_PATH.
- This runs the publisher's code on your machine (npx). Read its README first.
- The MCP Inspector lists the server's tools, resources and prompts; a tool you call there runs for real.
Built from the server's registry entry with each client's documented format (checked 2026-10-14; the Cursor link and the VS Code command 2026-10-19; the MCP Inspector command 2026-10-21). Values in < > are yours to fill in; this page never contains a key. Where the server needs a setting the entry does not declare, it can still fail to start.
Can it be installed, and is it up to date?
Version pin · advisories
Listed version
- Registry lists
- 0.12.0
- Latest stable
- 0.12.0
- Status
- current
- Withdrawn
- no
Source: registry.npmjs.org · 2026-10-23. About the version the registry lists; a manual install may resolve to a different one.
Dependency advisories
Counted in the full dependency tree as resolved on 2026-10-24 (npm audit; each bar counts packages with an advisory, not advisories). Bars share one scale. The package itself has no known vulnerability (OSV.dev).
Integrity, provenance, license
- Integrity
- sha512-Zf49w3/2XTUvALxqh…
- Signature
- signed
- License
- MIT
Source: the package registry · 2026-10-22.
Usage
- Downloads
- 783 in the last month
Source: api.npmjs.org · 2026-10-22.
Does the registry listing match what we found?
Feature #6The registry verifies a package once, when it is published, and does not re-check it. A difference below is about the listing, not a judgement of the publisher.
| Registry says | We found | Result | Source · date |
|---|---|---|---|
| Published package can be started | Started and answered | matches | our test · 2026-10-23 |
| Version 0.12.0 on npm | Exists and can be installed | matches | npm · 2026-10-23 |
Choosing
Record checks
Public records · not a safety rating4 of 6 record checks met · 3 do not apply
- #3,434 of 15,115 packages by monthly downloads, tied with 2 others
- Not ranked by stars: no public GitHub repository
- MetRegistry entry is active and says how to run itActive, with a package or a remote address.
- Not metSource repository link opensThe registry entry gives no repository link.
- Does not applyRepository is not archivedNo public GitHub repository to read.
- Does not applyCode pushed to the repository in the 90 days before our checkNo public GitHub repository to read.
- Does not applyRepository publishes a security policy (SECURITY.md)No public GitHub repository to read.
- MetPackage names its licence with a standard (SPDX) identifierMIT
- MetThe version the registry lists can be installed and is not withdrawnThe listed version exists and is current.
- Not metnpm package carries build provenance (attestation)Signed by npm, but no build attestation.
- MetNo known critical or high advisory in the package or its dependenciesNone known in the package or its dependency tree.
Read from public records only: the registry entry, npm/PyPI, GitHub and advisory databases, checked 2026-10-22. No tool was called. Only “met” and “not met” are counted, so the total differs between servers; a check that does not apply or that we could not run is listed, never counted against it. It is not a safety rating. How each check works · Leaderboards
Common questions about com.ionelul/app
Answered from the data aboveIs com.ionelul/app safe to install?
We do not rate servers as safe or unsafe. 4 of its 6 applicable record checks are met (facts from public records, each listed on this page). What the records show: The listed version is the latest stable release. The package itself has no known vulnerability (OSV.dev). Its full dependency tree has no known advisory. 39 of its tools describe changing data (our AI model's reading of the descriptions). These are facts with their sources on this page, not a safety guarantee, and we did not run its tools.
Is com.ionelul/app free to use?
Its website (app.ionelul.com/mcp) describes a free pricing model. This is an AI-classified reading of the page on 2026-10-23, so check the page itself before relying on it.
Has com.ionelul/app been security tested?
Partly. 2 of the 12 checks that apply to it were exercised. We started the package in an isolated sandbox and read what it declares, but this test round was read-only, so its tools were not called. No security verdict is published before verification.
What can com.ionelul/app do?
It lists 63 tools. In our AI model's reading of their descriptions (two runs had to agree, nobody checked it by hand), they include tools that read or search, create or change data, generate content and calculate or convert. We did not call any tool, so this describes the text, not the behaviour.
Can com.ionelul/app change or delete data?
39 of its tools say in their description that they create, edit, delete, send or run something (our AI model's reading). We did not call any tool, so we cannot say what actually happens.
Is the listed version current?
Yes. The registry lists 0.12.0, the latest stable release on npm.
Found this page useful?
Anonymous · no sign-inA quick, anonymous reaction — no account, no email. One per kind from your browser. The tally updates when the page is next refreshed, and it is only a rough count, never a safety rating or a measured number of people.
Similar servers
Same topic · AI-read
- io.github.JonathanRReed/apple-tools-mcpApple Tools (Unified)also has tools that calculates or converts, creates or changes data, generates content, reads or searchescompare with this one
- io.github.temporal-cortex/mcpTemporal Cortex Calendar MCPalso has tools that calculates or converts, creates or changes data, generates content, reads or searchescompare with this one
- io.github.dreamworkhq/dreamworkDreamworkalso has tools that calculates or converts, creates or changes data, generates content, reads or searchescompare with this one
- io.github.matbanik/pomeraPomera AI Commanderalso has tools that calculates or converts, creates or changes data, generates content, reads or searchescompare with this one
- io.github.Apomera/alloflow-remediationAlloFlow Document Remediationalso has tools that calculates or converts, creates or changes data, generates content, reads or searchescompare with this one
- com.aiapplyd/aiapplydAI Applydalso has tools that calculates or converts, creates or changes data, generates content, reads or searchescompare with this one
Active servers whose topic is also “productivity-and-docs” and that have at least one tool of the same kind; most kinds in common first, then most GitHub stars. The topic and the tool kinds are an AI model's reading of the publishers' descriptions, not checked by hand. Similar is not a recommendation.
Compare with another server
Side by side: registry entry, our read-only session, the tools and the 18 classification fields. Same values as each page; no score.
Security testing
What did we test, and what did we leave out?
18 checks · features #1, #2
Not probed (read-only run)
We started the package in an isolated sandbox and read what it declares, but this test round was read-only, so its tools were not called. No security score is given; a check we did not run is never counted as passed.
- Inventory: exercised
- Hidden instructions: exercised
- Real execution: not run · our policy
- Secret leak: not run · nothing to check it against
- Internal addresses: not run · our policy
- Unconfirmed changes: not run · our policy
- Bad input: not run · our policy
- Model requests: not run · nothing to check it against
- Sensitive questions: not run · nothing to check it against
- Folder boundary: not run · our policy
- Log leaks: not run · nothing to check it against
- Hidden content: not run · nothing to check it against
- Fake assistant turns: not applicable
- Token passthrough: not applicable
- Token audience: not applicable
- Sign-in redirect: not applicable
- Consent handling: not applicable
- Sign-in metadata: not applicable
2 exercised10 not run (reason given)6 not applicable
Each check ends in exactly one state: exercised, not run (with the reason), or not applicable (with the reason). 2 of the 12 checks that apply to it were exercised. We do not publish security-check outcomes for named servers.
- 1Inventory
tool-listReads the declared tools, resources and prompts.exercised - 2Hidden instructions
description-poisoningLooks for hidden instructions in tool descriptions.exercised
- 3Real execution
real-executionCalls a tool and checks what really happens.This check calls the package's tools. This test round was read-only, so no tool was called; tools can act on outside services with the publisher's or a user's account.not run · our policy - 4Secret leak
canary-leakPlants a fake secret and checks whether it leaks.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against - 5Internal addresses
ssrfChecks whether a tool can be steered to internal addresses.This check calls the package's tools. This test round was read-only, so no tool was called; tools can act on outside services with the publisher's or a user's account.not run · our policy - 6Unconfirmed changes
write-without-confirmationChecks whether tools that change data act without asking.This check calls the package's tools. This test round was read-only, so no tool was called; tools can act on outside services with the publisher's or a user's account.not run · our policy - 7Bad input
error-handlingSends bad input and watches how the server answers.This check calls the package's tools. This test round was read-only, so no tool was called; tools can act on outside services with the publisher's or a user's account.not run · our policy - 8Model requests
samplingChecks whether the server asks the client's model to act for it.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against - 9Sensitive questions
elicitation-sensitive-dataChecks whether the server asks users for sensitive data.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against - 10Folder boundary
root-boundaryChecks whether the server reaches outside the folders it was given.This check calls the package's tools. This test round was read-only, so no tool was called; tools can act on outside services with the publisher's or a user's account.not run · our policy - 11Log leaks
logging-side-channelChecks whether log messages carry data they should not.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against - 12Hidden content
audience-hidingChecks resources that hide content from the user.This check needs content the server returns, and nothing was read or called.not run · nothing to check it against
- 13Fake assistant turns
fake-assistant-turnChecks prompts that pose as the assistant's own words.The server exposes no prompts.not applicable - 14Token passthrough
token-passthroughChecks whether the server forwards a user's token to other services.The server runs locally over standard input/output, so there is no sign-in flow to check.not applicable - 15Token audience
token-audience-validationChecks whether tokens meant for another service are accepted.The server runs locally over standard input/output, so there is no sign-in flow to check.not applicable - 16Sign-in redirect
open-redirectChecks the sign-in redirect for abuse.The server runs locally over standard input/output, so there is no sign-in flow to check.not applicable - 17Consent handling
confused-deputyChecks consent handling when one service acts for another.The server runs locally over standard input/output, so there is no sign-in flow to check.not applicable - 18Sign-in metadata
oauth-url-schemeChecks the published sign-in metadata for unsafe URLs.The server runs locally over standard input/output, so there is no sign-in flow to check.not applicable
Source: our own test in an isolated sandbox, 2026-10-23, mcp-runtime-engine@0.1.0. Which checks count and why follows our published scoring model.
What happened during the test?
Feature #8
The steps in order, as the test record holds them.
- 0 msStarted the published package in an isolated sandbox (read-only mode)
- 5,835 msConnected after 0 redirects.
- Read the inventory: 63 tools, 0 resources, 0 prompts.
- 7,964 msFinished: 2 checks exercised.
Reference
How is it classified?
18 fields
One value per field, each with its source. Fields written by AI models are marked. A field with no value says why.
“Is it free? Yes, like every tool on this site. No account and no API key.”
“Not stated” means the source did not state it; “does not apply” means it does not apply to this kind of server; “our limit” means our own lookup failed. A linked value opens the directory filtered to the same value.
Cite or correct this page
Sources and corrections
Suggested citation
ProtocolProbe. “com.ionelul/app: MCP server record.” Data checked 2026-10-23. https://protocolprobe.com/mcp/servers/com.ionelul/app
Figures are valid for the date shown. Our facts on this page are CC BY 4.0: reuse them with a link and the check date. Quoted text (the publisher’s descriptions, website quotes, tool names) is not ours to license.
As JSON: this record in the API · API documentation.
Badge for your README
[](https://protocolprobe.com/mcp/servers/com.ionelul/app)
It shows this server's record-check count: facts from public records, no tool called. It is not a security rating or a pass. It links here and updates after each data reload.
Something wrong, or is this yours?
If a fact here is wrong, tell us and we will re-check it. If you operate this server, you can run our checks on it yourself with the free self-test command; we call no server’s tools ourselves for anything shown here.
Write to hello@protocolprobe.com · corrections log · methodology