npm package discovery and stats viewer.

Discover Tips

  • General search

    [free text search, go nuts!]

  • Package details

    pkg:[package-name]

  • User packages

    @[username]

Sponsor

Optimize Toolset

I’ve always been into building performant and accessible sites, but lately I’ve been taking it extremely seriously. So much so that I’ve been building a tool to help me optimize and monitor the sites that I build to make sure that I’m making an attempt to offer the best experience to those who visit them. If you’re into performant, accessible and SEO friendly sites, you might like it too! You can check it out at Optimize Toolset.

About

Hi, 👋, I’m Ryan Hefner  and I built this site for me, and you! The goal of this site was to provide an easy way for me to check the stats on my npm packages, both for prioritizing issues and updates, and to give me a little kick in the pants to keep up on stuff.

As I was building it, I realized that I was actually using the tool to build the tool, and figured I might as well put this out there and hopefully others will find it to be a fast and useful way to search and browse npm packages as I have.

If you’re interested in other things I’m working on, follow me on Twitter or check out the open source projects I’ve been publishing on GitHub.

I am also working on a Twitter bot for this site to tweet the most popular, newest, random packages from npm. Please follow that account now and it will start sending out packages soon–ish.

Open Software & Tools

This site wouldn’t be possible without the immense generosity and tireless efforts from the people who make contributions to the world and share their work via open source initiatives. Thank you 🙏

© 2026 – Pkg Stats / Ryan Hefner

omni-vision-pro

v1.3.0

Published

Production-grade MCP server with smart attachment auto-detection, ordered vision/OCR analysis, code context, and safe ZIP inspection.

Readme

Quick start

You need Node.js 20.10 or newer. Install the MCP server once; local OCR works immediately without an API key.

1. Install once from an AI chat

Paste this command into Codex, OpenCode, Claude Code, Cursor, or VS Code chat and ask it to run it:

npx --yes omni-vision-pro@latest setup --yes

That command detects the editor that launched it, installs a private version-pinned runtime, updates only that editor's MCP configuration, and verifies all three tools. It will not silently change every installed editor. Setup is now finished; adding or changing an API key later does not reinstall the MCP server.

To choose the client yourself, or intentionally configure every supported client:

npx --yes omni-vision-pro@latest setup --target cursor
npx --yes omni-vision-pro@latest setup --target vscode
npx --yes omni-vision-pro@latest setup --target all

Restart or reload the AI client once, then ask:

Use omni-vision-pro to analyze this screenshot. Return the visible text, UI hierarchy, layout, colors, interactions, accessibility issues, and reusable components.

With no cloud key, images are processed locally with Tesseract OCR.

2. Add Gemini or OpenAI later - optional

Open PowerShell or a terminal and run:

npx --yes omni-vision-pro@latest provider

The simple menu lets you choose Gemini or OpenAI and paste the key into a hidden prompt. Saving a key selects that provider immediately. Restart or reload the AI client, and Omni will use AI vision first with automatic local OCR fallback.

The same menu can add, replace, or remove keys; switch between Gemini and OpenAI; show the current status; or turn AI off and back on. It never changes the MCP client configuration, so setup remains a one-time job.

Add a key safely from an AI chat

Copy only a Gemini or OpenAI key to the clipboard, then ask the AI chat to run:

npx --yes omni-vision-pro@latest provider set --from-clipboard

Omni recognizes the provider, stores the key in its private settings, and selects it. The key is never placed in chat text, command arguments, shell history, or client JSON/TOML.

Windows and macOS clipboard support works out of the box. Linux needs wl-paste or xclip.

You can also control AI from the chat without exposing a key:

# Keep saved keys, but process images locally with OCR
npx --yes omni-vision-pro@latest provider off

# Turn AI back on and use any configured provider
npx --yes omni-vision-pro@latest provider on

# Show the active mode and which keys are configured
npx --yes omni-vision-pro@latest provider status

Restart or reload the AI client after changing provider settings.

Run the first setup yourself

For a guided client selection prompt, run:

npx --yes omni-vision-pro@latest setup

Check the result at any time:

npx --yes omni-vision-pro@latest doctor

What it does

| Capability | What you get | | --- | --- | | Image context | One screenshot or an ordered batch, with a result for every index. | | Attachment recovery | A three-tier resolver checks explicit input, the active editor's attachment cache, then recent OS temporary/clipboard cache files. | | UI analysis | Structured JSON for layout, components, text, typography, colors, spacing, interactions, accessibility, and uncertainties. | | Code context | A clean file tree followed by safe text contents from a file or directory. | | ZIP context | In-memory ZIP inspection without extracting files to disk. | | Local measurements | Resized dimensions, dominant color, and a compact palette measured with sharp. | | Automatic vision | Local OCR works by default. Add a Gemini or OpenAI key later to enable AI vision; cloud failures fall back to OCR. |

No special image folder is required. If a client has the image bytes only in memory, pass an inline data:image/...;base64,... reference.

Smart image auto-detection

analyze_images can be called with an explicit path, an ordered path array, or no path at all:

  1. Explicit input - absolute paths, relative paths, file:// URLs, Markdown image links, and inline Base64 image data are tried first.
  2. Active editor cache - Omni detects Codex, OpenCode, Claude Code/Desktop, Cursor, or VS Code and searches only that client's known attachment locations.
  3. Recent temporary fallback - if the first two tiers miss, Omni scans the OS temp directory and clipboard-style cache folders for supported images created or modified during the last 10 minutes.

Automatic scans are bounded, ignore symlinks and project/vendor folders, and never search Desktop, Documents, Downloads, or arbitrary source directories. Multiple auto-detected images are returned oldest-to-newest so the result order matches their attachment order. Explicit paths are allowed to reference older images because the user selected them intentionally.

Clients

| Client | Auto setup | Manual path | Notes | | --- | :---: | :---: | --- | | Codex CLI, desktop, or IDE | Yes | Yes | Automatic setup uses the codex CLI. Desktop-only users can add the shared TOML entry manually. | | OpenCode | Yes | Yes | Project and user opencode.json or opencode.jsonc. | | Claude Code | Yes | Yes | Automatic setup uses the claude CLI. User and project scopes are supported. | | Cursor | Yes | Yes | User or project mcp.json, plus a one-click install link below. | | Visual Studio Code | Yes | Yes | Automatic setup writes the user or workspace mcp.json entry. | | Claude Desktop | Yes | Yes | Automatic setup safely merges the user-wide claude_desktop_config.json entry. |

Automatic setup targets one active client by default. Use --target all only when you intentionally want every supported client configured.

Provider controls

Client setup and vision-provider settings are separate. Install the MCP server once, then change providers whenever you want without reinstalling it.

| Current setting | Processing order | What it means | | --- | --- | --- | | No API key | Tesseract OCR | Free local text extraction works immediately. | | auto | Configured Gemini, configured OpenAI, then OCR | Uses every available fallback automatically. | | gemini | Gemini, then OCR | Prefer Gemini and keep local OCR as the safe fallback. | | openai | gpt-4o-mini, then OCR | Prefer low-detail OpenAI vision and keep local OCR as the safe fallback. | | ocr / AI off | Tesseract OCR only | Never calls Gemini or OpenAI, even when keys remain saved. |

Run the friendly terminal menu at any time:

npx --yes omni-vision-pro@latest provider

Adding or replacing a key selects that provider. Turning AI off keeps the keys for later; turning it back on does not require pasting them again. If a cloud request fails, reaches quota, or becomes unavailable, the image is retried with local OCR instead of crashing the MCP server.

OpenAI image handling

When OpenAI is enabled, the server applies EXIF orientation, limits the prepared image to 1024px wide and 4096px tall, compresses it to JPEG or PNG with sharp, and sends gpt-4o-mini with explicit detail: "low", one completion, and a default 600-token output ceiling. These are strong cost guardrails designed for sub-cent analysis and approximately sub-$0.001 requests under current pricing, but no third-party billing amount can be guaranteed permanently.

OpenAI documents that low detail gives the model a 512px low-resolution view. Layout, larger text, component hierarchy, and locally measured color palettes remain useful; tiny text, exact coordinates, and pixel-perfect reconstruction are best-effort. Local sharp measurements are included separately so dominant and palette colors do not depend only on the low-detail model view.

Gemini model handling

The default compatibility path tries gemini-1.5-flash and then the configured fallback. To choose a current model directly, set:

GEMINI_MODEL=gemini-2.5-flash

Cloud analysis receives only the resized image. Source files and ZIP contents stay local to this server.

MCP tools

| Tool | Input | Output | | --- | --- | --- | | analyze_images | Optional image_paths; optional max_auto_images; optional prompt | Delimited blocks beginning --- [Image Index 1] Visual Analysis ---, with provider and structured JSON details. | | read_code_context | path, optional max_files, optional max_output_bytes | A file tree and readable source contents. | | read_zip_context | .zip path, optional max_files, optional max_output_bytes | A virtual tree and readable archive contents without extraction. |

Analyze screenshots

{
  "image_paths": [
    "C:/Screenshots/home.png",
    "C:/Screenshots/settings.png"
  ],
  "prompt": "Focus on responsive layout, reusable components, and accessibility."
}

Images are processed sequentially in the exact supplied order. A failed image gets its own result and does not discard later images.

To analyze the newest attachment without supplying a path:

{}

To recover several recent attachments automatically:

{
  "max_auto_images": 3,
  "prompt": "Compare the responsive states in upload order."
}

Read a project folder

{
  "path": "C:/Projects/my-app/src",
  "max_files": 80,
  "max_output_bytes": 750000
}

Read a ZIP safely

{
  "path": "C:/Downloads/my-app.zip",
  "max_files": 80,
  "max_output_bytes": 750000
}

Manual client setup

The MCP launch command is:

npx --yes omni-vision-pro@latest serve

Manual setup is useful when a client is not detected, when you want a project-only entry, or when you are configuring VS Code or Claude Desktop.

User-wide CLI setup:

codex mcp add omni-vision-pro -- npx --yes omni-vision-pro@latest serve

Or add this to ~/.codex/config.toml (or .codex/config.toml in a trusted project):

[mcp_servers.omni-vision-pro]
command = "npx"
args = ["--yes", "omni-vision-pro@latest", "serve"]
startup_timeout_sec = 120
tool_timeout_sec = 1200
enabled = true

The Codex desktop app and IDE extension share this configuration. Restart or start a new session, then check /mcp.

Add this to a project opencode.json or opencode.jsonc, or to the user config at ~/.config/opencode/opencode.json:

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "omni-vision-pro": {
      "type": "local",
      "command": ["npx", "--yes", "omni-vision-pro@latest", "serve"],
      "enabled": true,
      "timeout": 600000
    }
  }
}

On Windows, ~ means your user folder. Restart OpenCode and run opencode mcp list.

User-wide setup:

claude mcp add --scope user --transport stdio omni-vision-pro -- npx --yes omni-vision-pro@latest serve

Project setup from the project root:

claude mcp add --scope project --transport stdio omni-vision-pro -- npx --yes omni-vision-pro@latest serve

Project entries live in .mcp.json and may require approval. Verify with claude mcp list.

One-click install:

Add omni-vision-pro to Cursor

Or put this in ~/.cursor/mcp.json for all projects or .cursor/mcp.json for one project:

{
  "mcpServers": {
    "omni-vision-pro": {
      "type": "stdio",
      "command": "npx",
      "args": ["--yes", "omni-vision-pro@latest", "serve"]
    }
  }
}

Reload the window, then open Settings > Tools & MCP and enable the server if needed.

Run MCP: Add Server from the Command Palette, or create .vscode/mcp.json:

{
  "servers": {
    "omni-vision-pro": {
      "type": "stdio",
      "command": "npx",
      "args": ["--yes", "omni-vision-pro@latest", "serve"]
    }
  }
}

Start it from the inline action, run MCP: List Servers, and approve the trust prompt. See the VS Code MCP guide.

Add this to claude_desktop_config.json:

{
  "mcpServers": {
    "omni-vision-pro": {
      "command": "npx",
      "args": ["--yes", "omni-vision-pro@latest", "serve"]
    }
  }
}

Common locations:

  • Windows: %APPDATA%\\Claude\\claude_desktop_config.json
  • macOS: ~/Library/Application Support/Claude/claude_desktop_config.json

Completely quit and reopen Claude Desktop after saving.

Privacy and safety

| Data | Where it goes | | --- | --- | | No key or AI off | Processed locally with Tesseract. Saved keys are not used. | | Gemini mode | A resized image is sent to Google. | | OpenAI mode | A resized low-detail image is sent to OpenAI. | | Code and ZIP context | Read locally and returned to the MCP host; not sent directly to vision providers. | | API keys | Stored in the private Omni .env, not in client JSON or TOML. |

The MCP host may include returned text in its own model context under that host's privacy policy.

Built-in safeguards include:

  • no filesystem extraction for ZIP files;
  • path traversal, duplicate, encryption, CRC, compression-ratio, and ZIP bomb checks;
  • no symlink traversal;
  • automatic omission of node_modules, .git, dist, build, .next, binaries, and common secret files such as .env, id_rsa, and private keys;
  • bounded image-cache scans and image-size limits; and
  • absolute host paths hidden from normal results unless OMNI_INCLUDE_ABSOLUTE_PATHS=true is set.

Returned source and archive contents are marked as untrusted data. The consuming model must not follow instructions found inside them.

Private settings

Most users should use npx --yes omni-vision-pro@latest provider. If you prefer manual configuration, provider settings are stored here:

  • Windows: %APPDATA%\omni-vision-pro\.env
  • macOS/Linux: ${XDG_CONFIG_HOME:-~/.config}/omni-vision-pro/.env

Create the file if it does not exist. The easiest setup is one line for the provider you want:

GEMINI_API_KEY=your_gemini_key

or:

OPENAI_API_KEY=your_openai_key

Save the file and restart the AI client. With no OMNI_VISION_PROVIDER line, automatic mode is used: a saved key enables AI vision and local OCR remains the final fallback.

If both keys are saved, automatic mode tries Gemini, then OpenAI, then local OCR. You can make that choice explicit:

OMNI_VISION_PROVIDER=auto

Prefer one saved provider before OCR:

OMNI_VISION_PROVIDER=gemini

or:

OMNI_VISION_PROVIDER=openai

Force free local OCR while keeping saved keys:

OMNI_VISION_PROVIDER=ocr

Never pass API keys as command arguments. Use the hidden terminal prompt, clipboard import, environment variables, or this private file. The CLI rejects key flags because shell history and process lists can expose them.

Useful optional controls:

| Variable | Purpose | | --- | --- | | OMNI_ALLOWED_ROOTS | Restrict code/ZIP reading to these roots. Use ; on Windows and : on macOS/Linux. | | OMNI_INCLUDE_ABSOLUTE_PATHS=true | Include absolute paths in normal image/context output. | | GEMINI_MODEL | Select the Gemini model. | | GEMINI_FALLBACK_MODEL | Select the Gemini fallback model. | | OMNI_MAX_IMAGES | Maximum images per request, default 10. | | OMNI_RECENT_ATTACHMENT_MS | Auto-detection window, default and maximum 600000 (10 minutes). | | OMNI_OPENAI_MAX_OUTPUT_TOKENS | OpenAI output ceiling, default 600, allowed range 128-700. | | OMNI_CLOUD_TIMEOUT_MS | Cloud request timeout, default 30000. | | OMNI_OCR_TIMEOUT_MS | OCR request timeout, default 90000. |

The server also accepts a project .env, and only allowlisted settings are loaded. Omni's private provider mode is authoritative so provider off stays reliable. For API keys and other settings, process variables keep the highest priority, followed by the project and private .env files.

Troubleshooting

| Symptom | Try this | | --- | --- | | Clipboard import cannot find the key | Copy only the Gemini/OpenAI key, then run npx --yes omni-vision-pro@latest provider set --from-clipboard again. | | A key was added but OCR is still active | Run npx --yes omni-vision-pro@latest provider status, then npx --yes omni-vision-pro@latest provider on, and restart/reload the AI client. | | The wrong AI provider is being used | Run npx --yes omni-vision-pro@latest provider, choose the provider you want, then restart/reload the AI client. | | The client cannot find npx | Install Node.js 20.10+, restart the client, or replace npx with its full path such as C:\\Program Files\\nodejs\\npx.cmd. | | The server is installed but not visible | Run npx --yes omni-vision-pro@latest doctor, restart/reload the client, then approve the server or project trust prompt. | | An image attachment is not found | Call analyze_images without image_paths immediately after attaching it. Omni automatically checks the active editor cache and the last 10 minutes of OS temporary attachment data; no special copy folder is needed. | | OCR takes too long | The first OCR request starts a local worker. Keep client tool timeouts above 90 seconds; image arrays run sequentially. | | Gemini reports a retired model | Set GEMINI_MODEL=gemini-2.5-flash in the private .env. | | Code or ZIP access is denied | If OMNI_ALLOWED_ROOTS is set, include the intended project folder, restart the client, and try again. | | A config entry looks wrong | Setup preserves unrelated settings and creates backups before changing JSON/JSONC client files. |

Advanced commands

# Open the beginner-friendly menu
npx --yes omni-vision-pro@latest provider

# Check the active mode without revealing keys
npx --yes omni-vision-pro@latest provider status

# Add or replace a key through a hidden terminal prompt
npx --yes omni-vision-pro@latest provider set gemini
npx --yes omni-vision-pro@latest provider replace openai

# Import a copied key without putting it in shell history
npx --yes omni-vision-pro@latest provider set --from-clipboard

# Choose how configured providers are used
npx --yes omni-vision-pro@latest provider use gemini
npx --yes omni-vision-pro@latest provider use openai
npx --yes omni-vision-pro@latest provider use auto

# Temporarily use local OCR, then turn AI back on
npx --yes omni-vision-pro@latest provider off
npx --yes omni-vision-pro@latest provider on

# Remove keys from Omni's private settings
npx --yes omni-vision-pro@latest provider remove gemini
npx --yes omni-vision-pro@latest provider remove openai
npx --yes omni-vision-pro@latest provider remove all

set and replace both save the new key and select that provider. off retains private credentials; remove deletes them from Omni's private settings. Keys set separately in process variables or a project .env must be removed from that source. Restart or reload the AI client after a change.

npx --yes omni-vision-pro@latest doctor
npx --yes omni-vision-pro@latest doctor cursor
npx --yes omni-vision-pro@latest uninstall
npx --yes omni-vision-pro@latest uninstall --target all

Uninstall removes only entries recognized as managed by this installer. It keeps the private .env so reinstalling does not lose credentials. Delete that file separately when you want to erase stored keys.

npm install
npm run check
npm run build
node dist/cli.js serve

For a local client entry, use node C:/full/path/to/omni-vision-pro/dist/cli.js serve instead of npx.

npm run check
npm run build
npm pack --dry-run
npm audit --omit=dev

Protocol messages use stdout. Operational diagnostics use stderr so they cannot corrupt MCP stdio traffic.

License

MIT. See LICENSE.