Name: InkRoom
Author: InkRoomAI

InkRoom MCP

Generate, edit and upscale images with references, batch jobs, cost previews and original downloads.

Tool-list grade A Remote · Streamable HTTP API key 3 tools v0.3.23

No reviews yet by InkRoomAI The publisher’s own endpoint — this marketplace is not in the path

96/100

tool-list score

tools declared

remote

at its publisher

—

calls last 7d

What it does

Generate, edit and upscale images with references, batch jobs, cost previews and original downloads.

Quickstart

# 1 — add it to Claude Code
claude mcp add --scope user --transport http inkroom-mcp https://mcp.inkroom.ai --header 'Authorization: Bearer ${AUTHORIZATION}' --header 'Accept-Language: ${ACCEPT_LANGUAGE}' --header 'X-InkRoom-Continuation: ${X_INKROOM_CONTINUATION}'

# 2 — ask your agent for something these tools do
#   help, list_models, prompts

It needs AUTHORIZATION (Your own InkRoom MCP Token, including the Bearer prefix. Sign in at https://inkroom.ai/mcp-server. Image generation uses paid credits and requires a cost…), ACCEPT_LANGUAGE, X_INKROOM_CONTINUATION: this sends them in the Authorization and Accept-Language and X-InkRoom-Continuation headers from your environment, so export them first — its endpoint answers 401 without them.

InkRoom costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.

Publishernot claimed

InkRoomAI2 servers

2 categories

All 2 servers

Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.

Installation

Where are you running it?

Every route below installs the same thing and ends at the same approval screen. Nothing here runs on your machine and nothing runs on ours: this server answers at its publisher’s own address, and what you install is the connection straight to it.

Claude Codedeclared by this listing

This is a public server: it answers at its publisher’s own address and this marketplace is not in the path. Claude Code registers it in one command; --scope user makes it available in every project. The transport below is http, as the publisher's own manifest declares it. Claude Code reads AUTHORIZATION (Your own InkRoom MCP Token, including the Bearer prefix. Sign in at https://inkroom.ai/mcp-server. Image generation uses paid credits and requires a cost…), ACCEPT_LANGUAGE, X_INKROOM_CONTINUATION from your environment each time it connects and sends them in the Authorization and Accept-Language and X-InkRoom-Continuation headers — its endpoint answers 401 without them — so the key stays out of its config: export them in your shell profile (macOS, Linux), or run setx AUTHORIZATION …, setx ACCEPT_LANGUAGE …, setx X_INKROOM_CONTINUATION … and open a new terminal (Windows).

claude mcp add --scope user --transport http inkroom-mcp https://mcp.inkroom.ai --header 'Authorization: Bearer ${AUTHORIZATION}' --header 'Accept-Language: ${ACCEPT_LANGUAGE}' --header 'X-InkRoom-Continuation: ${X_INKROOM_CONTINUATION}'

Reconnect, or start a new session, and the tools appear in the model’s tool list.

Free on mcprush, and it answers at its publisher’s own address: this marketplace is not in the path, so there is no key of ours to hold and no card to add — but its publisher asks for a key of their own on every call.

What it asks of you

It reaches a system of yours, so it needs your own credential rather than the publisher’s: Authorization header — Your own InkRoom MCP Token, including the Bearer prefix. Sign in at https://inkroom.ai/mcp-server. Image generation uses paid credits and requires a cost preview and authorization.. You set it in your own client’s config, on your machine — this marketplace never holds it.

What it writes

One config entry pointing straight at the publisher’s own address — this marketplace is not in the path, and nothing from this listing executes on your machine.

What you approve

3 tools, with what each one reads, writes and reaches shown before you agree — the same list on every route above. Read the tool surface.

Tool surface

What the model actually sees. Descriptions are diffed on every release — see version history.

Only tools that write or reach the network

Read static help without an MCP Token, model call or credit charge. All help topics are available. Returns topic, steps, examples, documentation/setup links and versions. Account, billing and generation topics describe authenticated operations; they do not read personal data or execute work. Anonymous execution is limited to list_models, help and public prompts.

Parameter	Type	Required	Notes
topic	string	no	Help topic; omit for the capability matrix.

Read the public image-model catalog. Returns scope, accountAuthorization=not_evaluated, models (id, status=listed, offers with parameters and public credit prices), pricingSource and visibleCount. priceSemantics=public_sale_exact; prices retain three decimals, free offers are zero and missing pricing is explicit. Listed configuration does not guarantee account access or capacity, and generation pr

Parameter	Type	Required	Notes
includeUnavailable	boolean	no	With a Token, also show public models blocked for that account; anonymous results never evaluate account access.

Read public prompts without an MCP Token, model call or credit charge. search (default) queries published, reviewed system recommendations; get reads a currently public detail by the id returned from search. scope must be omitted or recommended; mine, favorites and private data remain authenticated. Returns scope, accountAuthorization=not_evaluated, action and list (items/pagination) or item (orig

Parameter	Type	Required	Notes
action	string	no	search lists cases; get reads one full prompt. Default search.
category	string	no	Optional category filter.
group	string	no	Optional group filter.
id	string	no	Prompt ID returned by search; required for get.
keyword	string	no	Optional search text.
page	integer	no	Search page, starting at 1.
pageSize	integer	no	Results per page; default 5, maximum 20.
scope	string	no	Recommended public cases or this authenticated user's own prompts.
tags	array	no	Optional tag filters.

Free

$0 forever

Every tool — any call limit is its publisher’s, not ours
No card, and mcprush charges nothing for it
Runs at its publisher’s own address — this marketplace is not in the path
Nothing to cap, because mcprush bills nothing

Nothing here is billable: mcprush charges nothing to install InkRoom or to call it, at any volume.

ATool-list grade · score 96 / 100

Release 0.3.23 · scanned 22 Oct 2026

Graded from the tools this server lists, not from its source code.

Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.

Threat score100

Client score96

Findings0 threat · 0 capability

Capabilityminimal

Coveragemanifest

Verificationnot in this report

Surface digesta495fffbcd941edec7a61846fcc3f0da89037484fb2f30de4acd53ff0821e89f

Score vectorthreat 100 → client 96

Term	Level	What it prices	Points
capability-exposure	minimal	capability blast radius (minimal) — client exposure if the model is manipulated	−0
coverage-honesty	manifest	inspection depth (manifest) — how much of the target the scan could see	−4

score = clamp(round(threatScore − E_cap − E_ver − E_cov), 0, 100). No model, no opinion, no network call at scoring time: the same methodology version against the same bytes always produces this number, and every line above is a field of the report rather than a summary of it.

What the scan could actually read

A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.

The scan read each tool’s name, description, input schema and annotations exactly as the server listed them the last time it answered us; no code was reviewed. We ask the server again about once a month, and a list that changed is graded again.

Tool surfaceread

Implementation sourcenot available

Package metadatanot available

Live transportnot available

The implementation source was not read — this reflects the declared tool metadata only.

Capability — what it could do if the model were manipulated

Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. minimal is the level these add up to.

Tool	Capability tags	Why the tag was assigned
help	no tags
list_models	no tags
prompts	no tags

Toxic-flow graph

The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.

The public result for this release does not print the flow graph, so there is nothing to show here. That is not the same as "no paths were found": what the scan did read is above, under coverage.

Supply chain and provenance

Integrityfirst-seen

Surface digesta495fffbcd941ede

Scanned2026-10-22

This is the first scan of this surface here, so there is nothing yet to compare it against.

Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.