# com.makeupar/fashion Provides YouCam API for virtual try-on of clothing, jewelry, and watches. - **Type:** MCP server - **Trust:** 60/100 (B), scored on the content rubric - **Verification:** community-indexed — nobody has claimed this listing - **Version:** 1.0.1 - **Author:** com.makeupar - **License:** Unknown - **Endpoints:** streamable-http https://mcp-api-01.makeupar.com/mcp/fashion - **Source:** https://yce.perfectcorp.com/ai-api - **Endpoint health:** reachable (last checked 2026-09-20T05:25:29.309Z, 4 samples) — uptime is not a security property and is not part of the trust score - **Compatible clients:** claude-code, cursor, copilot, chatgpt, gemini (basis: transport) ## Trust 60/100 (B), scored on the content rubric - Publisher verified: no - Install scripts: nothing suspicious found - Prompt-injection scan: clean - Obfuscation scan: clean - Evidence age: 1 day ## Security scan - **Status:** clean - **Scanned:** 2026-09-20T05:25:29.309Z - **Version scanned:** live - **CVEs:** no coverage — this entry has no package coordinates to query OSV against, so "no known CVEs" is NOT asserted for it. **Findings** - injection-shaped content (note) in the `Get-Feature-Cost` tool: Links to undeclared domain: yce.perfectcorp.com ## Tools 18 declared. Observed from a live `tools/list` probe. - `AI-Bracelet-Virtual-Try-On` — The Ultimate AI Bracelet Virtual Try-On Employ AI-powered solutions to assist your customers with online purchases, ensuring perfect fit and great shopping sati - `AI-Earrings-Virtual-Try-On` — The Ultimate AI Earring Virtual Try-On Top AI ear piercing simulator for virtual earring try-on and virtual piercing try-on Create realistic and dynamic earring - `AI-Necklace-Virtual-Try-On` — Luxurious Look and Feel with State-of-the-Art Virtual Try-On for Necklace Precise AI neck and clavicle tracking gives users an ultra-realistic AR try-on experie - `AI-Ring-Virtual-Try-On` — Easily Create Your AR Ring or Engagement Ring Try Ons. You Only Need to Upload Images. Opt for 2D images for effortless yet high-quality virtual try-on experien - `AI-Watch-Virtual-Try-On` — Virtually Try-On AR Watches with Ease! Only One 2D Image Needed. With just a single 2D image upload, users can instantly try on top-notch watches virtually usin - `AI-Bag-Virtual-Try-On` — AR makes luxury bag shopping a tangible experience! AR tech empowers brands to showcase handbags with unmatched realism. From strap length to bag pairing, custo - `AI-Clothes-Virtual-Try-On` — AI Clothes is a virtual fitting room that lets users try on clothes without physically wearing them. Using AI and photo editing technology, these apps overlay o - `AI-Fabric-Virtual-Try-On` — Transform your look with stunning realism! Explore unique fabric styles with photo mode — whether it's the elegance of silky textures or the vibrance of bold pr - `AI-Fabric-Virtual-Try-On-Templates` — List predefined templates. - `AI-Hat-Virtual-Try-On` — Step into the future of fashion with our Hyper-Realistic AR Try-On for Headwear, powered by cutting-edge AI technology. This innovative solution transforms onli - `AI-Scarf-Virtual-Try-On` — Enhance your fashion experience with the online AR Scarf Virtual Try-On. Shoppers can instantly drape scarves over their outfits and see how patterns flow in re - `AI-Shoes-Virtual-Try-On` — Step into the future of shopping with our AR Shoes Virtual Try-On. Instantly see how your favourite styles look and fit right from your screen. Powered by cutti - `upload_file` — Upload base64-encoded media files to the YouCam API and return file_id(s). - `File-Upload` — Interactive drag-and-drop widget for uploading images (JPEG, PNG) or videos (MP4). Returns file IDs for YouCam AI tools (AI-Fabric, AI-Cloth, AI-Makeup-Vto, AI- - `Get-Running-Task-Status` — Retrieves the current status and results of a previously initiated AI processing task. Use this tool when you need to check on a task that was started earlier b - `Get-Upload-API-Info` — Returns the upload API endpoint and example request/response for uploading images (JPEG, PNG) or videos (MP4) to YouCam AI./n Use when the user wants to upload - `Get-Feature-Cost` — Check the unit consumption for each API. The values are consistent with those listed at https://yce.perfectcorp.com/ai-api/api-pricing. - `AI-Makeup-Virtual-Try-On-Pattern-Name` — Get AI Makeup VTO available pattern names. ## Install **Verdict: review** — Installable, but 2 things to check first: No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it. **Cautions** (coverage gaps and advisories — never blocking) - No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it. - No publisher has proved control of this listing; it is indexed, not vouched for. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"fashion\": {\n \"type\": \"http\",\n \"url\": \"https://mcp-api-01.makeupar.com/mcp/fashion\"\n }\n }\n}" ``` ## Blast radius Moderate to extensive — no credential declaration found, from the publisher, the upstream registry, or the README. Known so far: mutates data; runs on someone else's infrastructure. - Floor 28, ceiling 52 (tier: unknown) - `unknown` means the floor and ceiling land in different bands — not measured enough to name one. It does not mean low. - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/com.makeupar%2Ffashion - Install plan: https://forgeregistry.com/api/v1/packages/com.makeupar%2Ffashion/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/com.makeupar%2Ffashion - HTML page: https://forgeregistry.com/registry/com.makeupar%2Ffashion - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.