MCP server
ImageSorcery
A community local-image MCP that needs code review, sandboxing, and a disposable folder before use.
Not made by the vendor. Read what it does before you run it.
What it can access
Reads image files and writes outputs in locations allowed by the local MCP client configuration.
Security note
Community code runs with local file access. A registry listing or star count is not a security review. Use a disposable machine or sandbox, pin a reviewed version, and do not point it at a case-file directory.
Do you need it?
Most participants do not. Use it only when a technical facilitator needs repeatable local image operations and cannot meet the need with Tesseract or ordinary image software.
Capability and permissions
The community server reads local images and writes processed outputs where the MCP client permits. Local execution reduces cloud exposure but gives third-party code filesystem access.
Least-privilege setup
As of 2026-09-01, this is not vendor-official software. A technical reviewer should inspect and pin a specific repository version, install it in an isolated environment, and expose one disposable folder containing public images only.
Harmless success test
Use a public image containing the word TEST. Run one OCR action and confirm output appears only in the disposable folder. Watch for unexpected network or file access.
Disable, revoke, remove
Remove the MCP configuration, stop the process, delete its isolated environment and test folder, and remove any permissions granted by the operating system.
When not to connect
Do not run it on a workstation that holds case files, credentials, or unconsented images. A registry listing and popularity are not a security audit.