app.svglab/svglab

Est-ce que app.svglab/svglab est sûr ?

Au dernier audit MCP Hub, le serveur MCP « app.svglab/svglab » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 8 outils

• account_status≈ 152 tokens

  Check which SVG Lab plan this account is on, whether the SVG Lab editing tools are available to you, and how many MCP requests are left (plan allowance, free trial, top-up balance). Call this first if other tools are missing, then relay the message to the user as written.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "account_status", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• docs≈ 356 tokens

  SVG Lab's reference, on demand. No arguments: every operation run can call and every design guide, one line each. op: an operation's arguments, output shape and executable examples. ops: up to 25 operations in one reply. recipe: assembly, chunking, recovery, layout-patches or helpers (working scripts with input and output). guide: design and drawing advice. query: keyword search over operations and guides.

  Paramètres, retour & exemple (5)

  Paramètres

  • op · string · optionnel
    One operation's name, e.g. create_layout.
  • ops · array · optionnel
    Several operation names, returned together in request order.
  • guide · string · optionnel
    One guide's id from the index, e.g. typography-direction.
  • query · string · optionnel
    Words to search for, e.g. "gradient" or "draw a hand".
  • recipe · string · optionnel · assembly | chunking | recovery | layout-patches | helpers

  Exemple d'appel

  {"name": "docs", "arguments": {"op": "texte", "ops": [], "guide": "texte", "query": "texte", "recipe": "assembly"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• look≈ 571 tokens

  See an artboard: the rendered PNG plus measured facts about it: text overflowing its box, text overlapping other text or covered by a shape drawn above it, shapes past the frame (and how far), text contrast below WCAG AA with the ratio, fonts that fell back, and text under 11 px on a phone artboard. Facts are measurements, not a verdict: you decide what to fix. region {x, y, width, height} (artboard-local) crops a detail at up to 8x; scale sets the zoom. Without artboard, the active one. artboards:[refs] or flow:true returns one readable contact sheet and per-artboard facts. before_after:true compares with the previous look of this same view. Inspect the whole flow, choose its most valuable improvement and decide whether to revise; no round quota or score. critique:true optionally adds a separate advisory review; pass a one-paragraph brief, remembered per project.

  Paramètres, retour & exemple (8)

  Paramètres

  • flow · boolean · optionnel
  • brief · string · optionnel
    One paragraph for the optional reviewer; retained for this project.
  • scale · number · optionnel
    Zoom, up to 4 (8 with region). Omit to let the preview pick.
  • region · object · optionnel
    Crop this rectangle, artboard-local (0,0 is the artboard's top-left).
  • artboard · ? · optionnel
  • critique · boolean · optionnel
  • artboards · array · optionnel
  • before_after · boolean · optionnel

  Exemple d'appel

  {"name": "look", "arguments": {"flow": true, "brief": "texte", "scale": 1, "region": {}, "artboard": "texte", "critique": true}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• place_image≈ 948 tokens

  Put a real photograph on the canvas inside a box, the way a design tool does it: fit "cover" crops the picture to the box through a clipPath (the photo keeps its true proportions and stays repositionable, it is never squashed), fit "contain" fits it whole inside. corner_radius rounds the frame. scrim lays a transparent-to-colour gradient over the photo so overlay text stays readable on any image. Give it ONE source: data_url (base64 bytes you already have), url (a direct link to a PNG, JPEG, WebP or GIF, which the server fetches and size-limits to 1.5 MB) or photo {query} (the server searches Unsplash, then Pexels, and the reply says which source and the attribution to credit). Coordinates are local to artboard when given. Returns the image, scrim and clip ids and the rendered box; one undo step. For a hero card with a title over the photo, prefer the photo_card component inside create_layout, which lays the caption out for you. Choose the photo with search_photos first (read docs guide photos); for a file the user supplied (a generated image, a logo) use upload_asset. Refused (drawn_only) in a project set to imagery "drawn": draw the picture instead.

  Paramètres, retour & exemple (12)

  Paramètres

  • x · number · requis
  • y · number · requis
  • fit · string · optionnel · cover | contain
    Default cover.
  • url · string · optionnel
    Direct link to an image file. The server fetches it; the editor cannot fetch across origins.
  • name · string · optionnel
  • photo · object · optionnel
  • scrim · ? · optionnel
    true for the default bottom wash, or an object. Use it under any text placed over the photo.
  • width · number · requis
  • height · number · requis
  • artboard · ? · optionnel
  • data_url · string · optionnel
    data:image/png|jpeg|webp|gif;base64,... Use this only for bytes you already hold; prefer url or photo.
  • corner_radius · number · optionnel

  Exemple d'appel

  {"name": "place_image", "arguments": {"x": 1, "y": 1, "width": 1, "height": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• project≈ 572 tokens

  The user's SVG Lab cloud projects (My Projects). action new {name, imagery?} starts an empty project and switches to it (the current one is saved first); open {project_id} continues earlier work; list shows them, newest first; current gives the project in use and the link to hand the user; export {artboard, outline_text?, background?} returns one artboard as SVG with embedded fonts, without changing the document. Large exports return svg as a plain string slice with part, total_parts and export_id: fetch parts 2 through total_parts with {artboard, part, export_id} and concatenate svg in order without separators; pause saves and closes the server editor (hands your artboards back to the user) before a long think or when you are done; the next call reopens it.

  Paramètres, retour & exemple (9)

  Paramètres

  • name · string · optionnel
    new: shown in My Projects, e.g. 'Coffee shop app'.
  • part · integer · optionnel
    export: numbered SVG part, starting at 1.
  • action · string · requis · new | open | list | current | export | pause
  • imagery · string · optionnel · any | photo | mixed | drawn
    new: "drawn" when the brief rules out photos (place_image is then refused).
  • artboard · ? · optionnel
    export: the artboard to export.
  • export_id · string · optionnel
    export: the frozen export_id returned with part 1.
  • background · string · optionnel
    export: a background colour for the exported copy.
  • project_id · string · optionnel
    open: the id from list.
  • outline_text · boolean · optionnel
    export: outline the text in the exported copy.

  Exemple d'appel

  {"name": "project", "arguments": {"action": "new"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• run≈ 1387 tokens

  Run JavaScript inside the user's SVG Lab editor, in one call. One run can build a whole screen or illustration. The code is the body of an async function: use await, loops, helper functions and data, and return a JSON value. It gets sl: await sl.op(name, args) runs one SVG Lab operation and returns its result, and throws on failure with the reason, so the script stops like normal code; await sl.try(name, args) is the same but returns {ok:false, message} instead of throwing; sl.log(...) and console.log are returned in logs; sl.ids(receipt) reads editable ids; creators return shape_ids and handle while retaining old fields. Pass a receipt or group id as shape_ids/target_ids; explicit ids take precedence over ambient artboard. sl.define(name, source) stores your function with the project for later sl.helpers[name](args) calls; its source closes over sl in the same sandbox. sl.batch(items) chunks creations. sl.glow, terrain, stars, crescent and reflection return editable assemblies with your style; sl.chartScale(domain, range) maps custom data. docs {recipe:'helpers'} gives their contracts. sl.artboard is the artboard passed to run ({id, name, x, y, width, height}) or null. With artboard, operations that take an artboard use it when you leave it out, and their coordinates are local to it (0,0 is its top-left). Operations: create_shape, create_shapes, create_text, create_path, pencil, edit_path, simplify_path, smooth_path, boolean_op, offset_path, transform, align, distribute, align_to_artboard, set_style, set_stroke, set_gradient, set_filter, set_pattern, clip_shapes, clip_to_artboard, text_on_path, set_text, duplicate, group, ungroup, name_group, reorder, resize, fit_to_box, fit_to_children, repeat, mirror, flip, scatter, add_texture, create_icon, create_layout, update_layout, design_tokens, define_styles, list_design_styles, measure_text, list_fonts, list_components, list_layouts, list_shapes, describe_document, inspect_path, inspect_layout, check_contrast, check_contacts, optical_center, snap_to_grid, normalize_spacing, normalize_radii, resolve_overflow, create_figure, create_limb, create_hand, create_line_of_action, create_organic, form_lines, add_artboard, set_artboard, list_artboards, set_active_artboard, fit_artboard, delete_shapes, make_symbol, place_symbol, list_symbols, detach_symbol, set_locked, define_helper, list_helpers, bind_slot. docs {op} gives any operation's arguments; docs {ops:[...]} reads several together; docs {query} searches operations and guides. The script has no network, DOM or storage: photos go in with place_image, the user's files with upload_asset. Limits: 40 seconds, 2,000 operations, 60,000 characters. Reply: result (your return value), ops, created_ids, changed_ids, warnings from the engine, logs, duration_ms. If it fails: error {message, op, line}; everything done before the error stays on the canvas and created_ids lists what this run made, so delete_shapes them or carry on. Quick arguments (? = optional; artboard defaults to run.artboard): create_shapes {shapes:[], artboard?}; set_gradient {shape_ids:[], type:linear|radial, stops:[]}; transform {shape_ids:[], dx?, dy?, scale?, rotate?}; set_style {shape_ids:[], fill?, stroke?, opacity?}; set_text {shape_ids:[], content?, font_size?, font_family?, font_weight?}; update_layout {layout_id, patches?:[], root?, x?, y?, width?, height?}; create_layout {artboard?, x?, y?, width?, height?, root}; scatter {region, count, item, seed?, artboard?, name?}; reorder {shape_ids:[], mode:front|back|forward|backward|behind|in_front_of}; group {shape_ids?:[], artboard?, name?}; create_icon {icon, x, y, size?, artboard?, name?}; repeat {shape_ids:[], mode?:linear|grid|radial, count, gap?, columns?, artboard?, radius?, rotate?}; design_tokens {preset?:light|dark, set?:{}}; clip_shapes {target_ids:[], clip_id}; list_shapes {artboard?}; duplicate {shape_ids:[]}; set_filter {shape_ids:[]}; boolean_op {op:union|subtract|intersect|exclude, shape_ids:[]}; create_figure {view:side|front|three_quarter, joints:{}, name?, artboard?}; create_path {name?, style?:{}, opacity?, artboard?, points:[], closed?}; measure_text {opacity?, content, font_size?, font_family?, font_weight?}; add_artboard {width?, height?, x?, y?, name?}; create_text {name?, style?:{}, opacity?, artboard?, content, x, y, font_size?, font_family?, font_weight?}; set_artboard {artboard?, width?, height?, x?, y?, name?}; clip_to_artboard {artboard?, shape_ids?:[]}. create_shapes items: {type:"shape",kind:"rect",x,y,width,height,style} or {type:"text",content,x,y,font_family,font_size,style}; style uses fill, stroke, stroke_width, opacity. create_path points: {x,y,hin?:{x,y},hout?:{x,y}}. Gradient stops: {offset:0..1,color}. docs {ops:[...]} has full schemas.

  Paramètres, retour & exemple (2)

  Paramètres

  • code · string · requis
    The body of an async function, given sl (and console). Return a JSON value.
  • artboard · ? · optionnel
    Artboard index, id or name: operations that take an artboard use it when the script leaves it out.

  Exemple d'appel

  {"name": "run", "arguments": {"code": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• search_photos≈ 524 tokens

  Find real photographs for a screen and CHOOSE one. Each candidate returns its description (alt text), orientation and aspect, pixel size, dominant colour, photographer, licence and the exact attribution string, and (preview, default true) a small thumbnail image so you judge it by eye. Read docs guide photos before the first search. Query the product's own subject and moment ("barista pouring latte art close up", not "coffee" or "lifestyle"). Choose by subject first, then room for text where the caption goes, then colour fit with your palette (compare color to your tokens), then consistency of light and grade with the other photos on the screen; never settle for index 0 by default. Pass the chosen url to place_image, or use it as an image node or photo_card src in create_layout (the server fetches https links). Sources: Unsplash, then Pexels (both need an API key on the deployment; without one the call fails and says so). For the user's OWN files use upload_asset. It is also how you find a reference before hand drawing: pass the chosen url to study a reference using your own image tools {url} and study it. In a drawn only project (imagery "drawn") use it only for references; photos are not placed there.

  Paramètres, retour & exemple (5)

  Paramètres

  • limit · integer · optionnel
    Candidates to return, default 6.
  • query · string · requis
  • source · string · optionnel · unsplash | pexels
  • preview · boolean · optionnel
    Return a small thumbnail of each candidate as an image block. Default true; false when your client cannot view images.
  • orientation · string · optionnel · landscape | portrait | square

  Exemple d'appel

  {"name": "search_photos", "arguments": {"query": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• upload_asset≈ 1080 tokens

  Place the USER'S OWN image file on the canvas: a picture they generated, a product shot, their logo. Give exactly one source: url (a direct https link to the file; the server fetches it, refuses private or local addresses, follows at most 3 redirects and checks the real type from the bytes), data_url (base64; practical only for small files, because every character is output you must write), or asset_id (from POST /api/v1/assets, which is how a shell agent uploads a local file with one curl; see the reply's next field). PNG, JPEG, WebP and GIF up to 4 MB land as an image in the box exactly like place_image (fit cover crops through a clipPath, contain fits whole, corner_radius, scrim for overlay text). An SVG up to 512 KB and 1500 elements is sanitised (scripts, event handlers, external links and foreignObject removed) and imported as EDITABLE shapes fitted into the box and grouped; as:"image" keeps it as one picture instead. Without width and height it keeps its natural size, shrunk to fit and centred on the artboard. Coordinates are local to artboard when given. One undo step. The reply carries layout_src ("asset:<id>", valid 24 h) to reuse the same raster as an image node or photo_card src in create_layout without sending it again. Never use this to smuggle in SVG you wrote yourself: build artwork with the drawing operations. SVG typed inline as a data_url is refused, and SVG files that read as model-written are refused too. The one exception is purpose:"pattern_tile": a small repeating tile (patterns, textures, hatching, dot fields; at most 128 units a side) that becomes a repeating pattern fill on shape_ids, never a picture on its own. For stock photography use search_photos.

  Paramètres, retour & exemple (16)

  Paramètres

  • x · number · optionnel
  • y · number · optionnel
  • as · string · optionnel · auto | shapes | image
    SVG only: shapes (default, editable) or image (one picture). Rasters are always images.
  • fit · string · optionnel · cover | contain
    Images only. Default cover.
  • url · string · optionnel
    Direct https link to a PNG, JPEG, WebP, GIF or SVG file (not a web page).
  • name · string · optionnel
  • scrim · ? · optionnel
    Images only: a gradient wash so text over the picture reads.
  • width · number · optionnel
  • height · number · optionnel
  • purpose · string · optionnel · artwork | pattern_tile
    artwork (default): place the user's file. pattern_tile: an SVG tile that repeats as the fill of shape_ids (patterns and textures only).
  • artboard · ? · optionnel
  • asset_id · string · optionnel
    ast_... from POST /api/v1/assets or an earlier upload_asset reply. Expires after 24 h.
  • data_url · string · optionnel
    data:image/png;base64,... (or image/svg+xml). Small files only; use asset_id for anything over a few KB.
  • shape_ids · array · optionnel
    pattern_tile only: the shapes to fill with the repeating tile.
  • tile_size · number · optionnel
    pattern_tile only: the tile's width in document units (height follows the SVG's aspect). Default: the SVG's own width, capped at 128.
  • corner_radius · number · optionnel
    Images only.

  Exemple d'appel

  {"name": "upload_asset", "arguments": {"x": 1, "y": 1, "as": "auto", "fit": "cover", "url": "texte", "name": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://svglab.app/mcp/agents