npm JavaScript analyzed 0.52.203 deep scan · partial (107/1,186 files)

comfyui-mcp

v0.52.203
npm

Local-first, agent-native control plane for ComfyUI — MCP server + autonomous sidebar agent that drives your live graph in natural language on ANY LLM: Claude/ChatGPT/Gemini on your subscription (no API key), free local models via Ollama (fully offline),

maintainer
artokun
licence
MIT
first seen
2026-06-12
last seen
2026-09-17
releases · 30d
387
short id

comfyui-mcp is an MCP server distributed on npm, maintained by artokun, tracked here since June 2026. It has shipped 1013 releases (currently 0.52.203) and exposes 36 tools. Tools include apps, batch, bisect, calculate, clear_vram, comfy_cli, and 30 more. Its composite risk grade is B — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised 2 review prompts — dangerous code and toxic flow (lethal trifecta) — each a pattern worth a human look rather than a finding of fault.

Its 36 tools appear to reach filesystem, shell / exec, network, secrets and database, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

Since the previous scan on 2026-09-10: 14 tools added and 155 tools removed.

full security breakdown →
tools 20 of 36
  • apps
  • batch
  • bisect
  • calculate
  • clear_vram
  • comfy_cli
  • create_workflow
  • download_model
  • enqueue_workflow
  • generate_image
  • get_defaults
  • get_history
  • get_image
  • get_system_stats
  • get_workflow
  • install_comfyui
  • install_custom_node
  • kitchen
  • list_api_nodes
  • list_local_models
All 36 tools →
release cadence · 90d 953 releases
06-20 00:00 08-03 00:00 now
recent releases last 10
version date src
v0.52.203 2026-09-10 github
0.52.203 2026-09-10 npm
v0.52.202 2026-09-07 github
0.52.202 2026-09-07 npm
v0.52.201 2026-09-07 github
0.52.201 2026-09-07 npm
v0.52.200 2026-09-07 github
0.52.200 2026-09-07 npm
0.52.199 2026-09-05 npm
v0.52.199 2026-09-05 github

view all →