# @sketchxflow/mcp SketchXFlow MCP server — design websites and apps from Claude, Cursor, and any MCP client. - **Type:** MCP server - **Trust:** 60/100 (B), scored on the package rubric - **Verification:** community-indexed — nobody has claimed this listing - **Version:** 0.22.0 - **Author:** Unknown - **License:** MIT - **npm:** @sketchxflow/mcp - **Source:** https://gitlab.com/kriyax-labs/sketchxflow - **Compatible clients:** claude-code, cursor, copilot, gemini (basis: transport) ## Trust 60/100 (B), scored on the package rubric - Publisher verified: no - Install scripts: nothing suspicious found - Prompt-injection scan: not run - Obfuscation scan: not run - Evidence age: 3 days ## Security scan - **Status:** clean - **Scanned:** 2026-09-20T11:19:11.588Z - **Version scanned:** 0.22.0 - **CVEs:** none found by OSV at scan time ## Tools 30 declared. Statically extracted from the shipped source — a floor on the surface, not a census. - `sketchxflow_version` — Report which version of the SketchXFlow MCP server is running, whether a newer one is published, and whether the SketchXFlow API accepts your SKETCHXFLOW_API_KE - `sketchxflow_list_models` - `sketchxflow_clarify` — Use BEFORE designing when the brief is thin. Send the user's latest message (and the running `vision` + `history` from prior turns); get back a reply to relay, - `sketchxflow_design_page` — Generate ONE polished page. Omit project_id to start a NEW project (creates the project + its first page). Pass an existing project_id to ADD a page to that pro - `sketchxflow_plan` — Create the project and produce its SITE PLAN — the page list (slug, name, purpose) and each page's section breakdown — for review BEFORE any HTML is generated. - `sketchxflow_refine_plan` — Apply one natural-language change to a project's saved site plan and return the updated plan — 'add a careers page', 'drop the blog', 'the pricing page needs a - `sketchxflow_generate_from_plan` — Generate every page of a project's saved site plan, in one consistent pass. This is the step that costs coins and takes time (a few minutes, scaling with the pa - `sketchxflow_design_creative` — Generate a fixed-canvas graphic — a flyer, poster, social post/story, or an AD creative for Meta / Instagram / Google (feed, story, reel, leaderboard, rectangle - `sketchxflow_design_email` — Generate a responsive, client-safe HTML email — newsletter, welcome, promotional, announcement, transactional, or event invite — from a brief. Uses email-safe r - `sketchxflow_launch_kit` — Generate a complete, on-brand LAUNCH KIT from one brief — a landing page + launch email + social posts + poster, all consistent. Auto-creates a brand (palette/f - `sketchxflow_create_logo` — Design a brand LOGO from a name + brief — a symbol mark plus wordmark, lockups, and favicons. Optionally ground it on an existing project so it inherits that br - `sketchxflow_create_animation` — Generate a motion-graphics ANIMATION from a brief — a branded intro / logo reveal / kinetic-typography sting, or a product demo. It becomes a self-contained, au - `sketchxflow_brand_kits` — List the brand kits (saved brand identities — name, palette, fonts, voice) in your account, to attach to a launch kit via brand_kit_id. - `sketchxflow_edit` — Apply a natural-language change to one page — e.g. 'make the hero darker', 'tighten the pricing section', 'swap the testimonial for a logo wall'. Brand-locked: - `sketchxflow_get_code` — Return the full HTML (Tailwind inline) of a generated page so you can re-implement or adapt it into the user's codebase (React/Next/Vue/plain HTML). Call after - `sketchxflow_get_image` — Return a rendered screenshot (PNG) of a page so you can SEE how the design actually looks. Use it to visually verify or critique a design after sketchxflow_desi - `sketchxflow_add_image` — Insert an image into an existing design — a poster, creative, or any page. Either AI-GENERATE one from `prompt` (costs coins, respects the project's AI-image to - `sketchxflow_experimental_start` — Open an EXPERIMENTAL DESIGN session: one surface, built the way a designer builds one — a SECTION at a time, each section STACKED up a layer at a time (a ground - `sketchxflow_experimental_discuss` — One turn with the art director WITHOUT applying anything: pass what the user said and get back a revised proposal for the next layer. Use it when they want to c - `sketchxflow_experimental_layer` — Stack ONE layer onto the design and return what it put down plus the director's next proposal. This is the step that costs coins. A SECTION layer is small and q - `sketchxflow_experimental_stack` — Read a layered design's build: which sections exist, what is stacked inside each one, which whole-page passes have run, and what the director proposes next. Use - `sketchxflow_check_job` — Pick up a generation that was still running when the tool call returned. Pass the job_id from a '⏳ Still …' reply; this waits for it and returns the finished re - `sketchxflow_get_project` — Project status: preview URL + page list (slug/name). - `sketchxflow_list_projects` — List the projects in your SketchXFlow account (most recent first). - `sketchxflow_services_projects` — Your projects with SketchXFlow's development services — the ones you've asked the team to build — with their state and links. Free. - `sketchxflow_services_start` - `sketchxflow_services_say` - `sketchxflow_services_requirements` - `sketchxflow_services_finalise` - `sketchxflow_services_invoices` ## Install **Verdict: review** — Installable, but 1 thing to check first: No publisher has proved control of this listing; it is indexed, not vouched for. **Cautions** (coverage gaps and advisories — never blocking) - No publisher has proved control of this listing; it is indexed, not vouched for. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"mcp\": {\n \"command\": \"npx\",\n \"args\": [\n \"-y\",\n \"@sketchxflow/mcp\"\n ],\n \"env\": {\n \"SKETCHXFLOW_API_KEY\": \"\"\n }\n }\n }\n}" ``` **Credentials it will ask for** (names only — Forge never holds a value): - `SKETCHXFLOW_API_KEY` — Sketchxflow API Key (required) Placeholders only. Forge never holds, brokers, or transmits a credential value — replace each in your own config file. Do not send a value back to Forge; no Forge endpoint accepts one. - This entry needs 1 credential (1 required). The generated config carries placeholders, so it will fail in the editor rather than at runtime if they are left unset. ## Blast radius Extensive blast radius — mutates data; holds an api key. - Floor 46, ceiling 46 (tier: extensive) - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/%40sketchxflow%2Fmcp - Install plan: https://forgeregistry.com/api/v1/packages/%40sketchxflow%2Fmcp/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/%40sketchxflow%2Fmcp - HTML page: https://forgeregistry.com/registry/%40sketchxflow%2Fmcp - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.