Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "chartlink": {
      "type": "http",
      "url": "https://chartlink.app/mcp",
      "headers": {
        "Authorization": "Bearer ${CHARTLINK_TOKEN}"
      }
    }
  }
}

claude mcp add --transport http chartlink https://chartlink.app/mcp --header "Authorization: Bearer ${CHARTLINK_TOKEN}"

[mcp_servers.chartlink]
url = "https://chartlink.app/mcp"
bearer_token_env_var = "CHARTLINK_TOKEN"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "chartlink": {
      "type": "remote",
      "url": "https://chartlink.app/mcp",
      "enabled": true,
      "headers": {
        "Authorization": "Bearer {env:CHARTLINK_TOKEN}"
      }
    }
  }
}

{
  "mcpServers": {
    "chartlink": {
      "type": "http",
      "url": "https://chartlink.app/mcp",
      "headers": {
        "Authorization": "Bearer ${CHARTLINK_TOKEN}"
      }
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=chartlink&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vY2hhcnRsaW5rLmFwcC9tY3AiLCJoZWFkZXJzIjp7IkF1dGhvcml6YXRpb24iOiJCZWFyZXIgJHtDSEFSVExJTktfVE9LRU59In19"
}

{
  "servers": {
    "chartlink": {
      "type": "http",
      "url": "https://chartlink.app/mcp",
      "headers": {
        "Authorization": "Bearer ${CHARTLINK_TOKEN}"
      }
    }
  }
}

{
  "mcpServers": {
    "chartlink": {
      "httpUrl": "https://chartlink.app/mcp",
      "headers": {
        "Authorization": "Bearer ${CHARTLINK_TOKEN}"
      }
    }
  }
}

extensions:
  "chartlink":
    enabled: true
    name: "chartlink"
    type: streamable_http
    uri: "https://chartlink.app/mcp"
    headers:
      "Authorization": "Bearer ${CHARTLINK_TOKEN}"
    timeout: 300

Placeholders to fill from your own secret store: ${CHARTLINK_TOKEN}. The registry never accepts secret values.

Quality 79 / 100good

protocoln/a · weight 25

n/a
protocol.modern, protocol.stateless, protocol.transport, protocol.list_ttlno remote answered a protocol handshake (not probed yet, unreachable, or local-only)

authorization83 · weight 15

pass
auth.prmProtected Resource Metadata (RFC 9728) published
pass
auth.as_metadataauthorization server metadata reachable
warn
auth.cimdonly Dynamic Client Registration, deprecated in 2026-07-28 in favour of CIMD
n/a
auth.secret_in_urlno templated URL

tool hygiene86 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
pass
tools.annotations8 of 8 tools declare readOnlyHint or destructiveHint
fail
tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: create_from_template (idempotentHint); whoami (destructiveHint); get_template (destructiveHint); …
pass
tools.token_costabout 2,772 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stability75 · weight 15

warn
stability.changes6 tool changes in 30 days
pass
stability.rug_pullno tool changed its meaning under the same name

dependencies67 · weight 15

pass
deps.known_vulnsno known advisory in 98 resolved packages
fail
deps.mcp_sdk_version@modelcontextprotocol/sdk 1.30.1 has 1 known advisory (GHSA-6qxp-vccf-f47h); update @modelcontextprotocol/sdk to 1.31.0 or later
pass
deps.resolvable[email protected] resolved: 98 packages

8 tools, about 2,772 tokens to load them all · tool set 70e5c0d2209b · tools last changed 2026-10-02 · checked 2026-10-20 09:31 UTC

Tool changes

2026-10-02create_edit_linkremoved
Returns a URL opening the visual tweak panel for ONE chart (text, colors, spacing, label nudges) with no login. PUBLISH FIRST: the editor saves and republishes a published chart, it cannot publish a draft. Scope: view, tweak, and republish that chart only — never delete, never spend credits, nothing else in the workspace. OFFER THIS whenever the human's request is aesthetic fine-tuning: handing over the wheel beats a nudge-by-nudge back-and-forth. The secret is shown once; links don't expire and can be revoked with revoke_edit_link.
2026-10-02signupremoved
Creates a workspace and returns its API key (shown ONCE — keep it). Works on a keyless connection; every other tool needs the key. Then put the key where your client keeps it (plugin api_key setting, the Authorization header, or CHARTLINK_API_KEY for the npx bridge) and reconnect.
2026-09-30publish_assetchangedinput schema
2026-09-29update_assetchangedinput schema
2026-09-29create_from_templatechangedinput schema
2026-09-29check_template_datachangedinput schema

Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 94 / 100

provenance90

liveness100

freshness85

hygiene100

+repository +namespace-matches-repo +website +reachable +uptime-100% ~updated-34d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Dependencies

[email protected] npm97 dependencies, resolved · MCP SDK @modelcontextprotocol/sdk 1.30.1 · advisories checked 2026-10-19

advisory	severity	package	fixed in
GHSA-6qxp-vccf-f47hMCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server	high	`@modelcontextprotocol/[email protected]`MCP SDK, direct	fixed in `1.31.0`

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://chartlink.app/mcp` streamable-http	oauth2 AS: https://chartlink.app/api/auth	yes	100%	398 ms	–	2026-10-20

package	registry	version	runtime	secrets
`chartlink-mcp`	npm	0.1.2	–	`CHARTLINK_API_KEY`

Tools (8)

`check_template_data`destructive	Matches every region value against the template's geography and reports unmatched values with the closest real codes, how many regions would stay grey, and the scale the map would use. No key needed. Use it when unsure of the codes; then create_from_template with the same data and knobs.
`create_from_template`	The template's design, your data, your words. `knobs` are the template's settings (get_template shows the schema): theme light\|dark\|editorial, dataType gradient\|buckets\|categories and surroundings true\|false (then waterColor, landColor) for maps, title/description/source/brand {text, fontFamily, fontSize, color}, backgroundColor, and the scale knobs for the dataType (colormap and direction, range, breaks or classes, categoryColors/categoryOrder). data = {columns: [{id, type}], rows: [[…]]}: use the template's column ids, or exactly two columns (region first, value second) for a map. publish: true makes the URLs live in the same call. A success means it validated AND rendered — look at the preview. Region values that match nothing come back as a 400 listing each with its closest real codes, before anything is made — no separate check needed. `config` is the advanced path: the engine's settings, merged after the knobs.
`get_template`read-only	Read this before create_from_template. Returns the template with `contract`: its looks (theme × dataType × surroundings), the knobs JSON Schema, the columns with their roles, the region-code convention with three real codes and a lookup URL, what each dataType expects of the value column, and a complete example call whose shape you copy. Takes an id, the page slug, or the page address as on chartlink.app/maps — sweden/municipalities, us/texas/counties, london/wards — so you can skip list_templates when you know the place.
`list_templates`read-only	Templates are named by the NEED they answer (need, asks, tags), each with urls.png (show it to your human) and `columns`: the column ids your data must supply. Pass q with what the person asked for — "map of brazil's states", "ranked bars with flags", "change between two years" — and the list comes back ranked; take the first. Then create_asset with template: <id> and your data — the whole design comes along. Any chart id you were shown works as a template too, not only these.
`publish_asset`destructive	Makes the draft live. Returns urls: paste urls.embedIframe on iframe platforms; on Substack insert urls.png as an image and link it to urls.page. Pinned history: urls.png + '?v=N'.
`submit_feedback`	If a capability is missing, a schema fights you, or docs are wrong: record it here so the owner can fix it. One report per distinct issue, with a real description — reports get fixed same-day when they say what you tried, what you expected, and what happened (title-only reports can't be acted on).
`update_asset`destructive	configPatch is DEEP-MERGED: objects merge recursively, arrays replace wholesale, null clears a key — send only what changes. To REMOVE keys (drop document.aspect, delete one of texts[]) pass `config` instead: it REPLACES the whole config (get_asset returns the current one to edit). `data` (if given) replaces rows wholesale. Requires expectedVersion from the last envelope; on 409 re-merge onto the returned `current`. Updating does NOT publish by default — pass publish: true to publish in the same call, or call publish_asset separately.
`whoami`read-only	Returns key name + workspace. Call this first — non-destructive auth check. Everything you write is stamped createdBy/updatedBy = key name.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "io.github.oscarleoo/chartlink",
  "title": "chartlink",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://chartlink.app/mcp",
      "type": "streamable-http",
      "headers": [
        {
          "name": "Authorization",
          "isSecret": true,
          "isRequired": true,
          "description": "Bearer <chartlink API key>. Get one with POST https://chartlink.app/api/signup (no account needed; the key is shown once)."
        }
      ]
    }
  ],
  "version": "0.1.2",
  "packages": [
    {
      "version": "0.1.2",
      "transport": {
        "type": "stdio"
      },
      "identifier": "chartlink-mcp",
      "registryType": "npm",
      "environmentVariables": [
        {
          "name": "CHARTLINK_API_KEY",
          "isSecret": true,
          "description": "chartlink API key (viz_...). POST https://chartlink.app/api/signup returns one, no account needed. Optional for listing tools; required for calling them."
        }
      ]
    }
  ],
  "repository": {
    "url": "https://github.com/oscarleoo/chartlink-agents",
    "source": "github",
    "subfolder": "packages/chartlink-mcp"
  },
  "websiteUrl": "https://chartlink.app",
  "description": "Charts and tables for AI agents with live-updating embed links. No account: signup returns a key."
}