Convert images to SVG in ChatGPT

For developers integrating a client. You can use the conversion panel without this reference.

MCP tool reference

{
  "name": "imagesvg_vectorize",
  "arguments": { "style": "balanced", "purpose": "icon" }
}

style: clean | balanced | detailed, default balanced. purpose: icon | clipart | photo | coloring, default clipart. Optional image: required download_url and file_id, optional mime_type and file_name. URLs must pass the HTTPS *.oaiusercontent.com file-domain restriction.

Tools used by the conversion panel

These are marked visibility: ["app"] to keep them out of the model’s tool menu. Visibility is a host presentation hint, not an authorization boundary. Every call still requires the OAuth account and server-side quota checks.

All objects reject unknown fields. Image pixels, base64 files and SVG strings are not accepted by MCP tool calls. Optional SVG saving uses a separate capability-authorized HTTP PUT, limited to 1 MiB, after the user’s explicit click. The bytes must match the confirmed result hash and contain vector-only SVG; active content, embedded images and external resources are rejected. The UI resource is ui://imagesvg/converter-v9.html with MIME type text/html;profile=mcp-app.

OAuth and direct API access

The public interface is Streamable HTTP MCP, using the official MCP server SDK. Use an MCP SDK for protocol negotiation, OAuth and reconnects. There is no separate REST /vectorize endpoint, no static API key, and no upload-and-convert cloud service in this version.

OAuth 2.1 is handled by Cloudflare’s OAuth provider library: authorization-code flow, PKCE, exact registered redirects, scoped bearer access, refresh and revocation. The scope is imagesvg:convert; request offline_access if your client needs refresh access. Tokens target the canonical /mcp resource. Website cookies are not API credentials.

Access tokens last one hour; refresh grants last 30 days. Disconnecting revokes the grant and its tokens, subject to KV propagation (up to a minute). Treat tokens as secrets; never put them in URLs, screenshots or client-side source.

Inspect the API with curl

The first call discovers authentication. After completing OAuth with an MCP client, store its access token in a local environment variable. The example protocol date is a supported negotiated MCP version; production clients should negotiate rather than hard-code it.

curl -i https://imagesvg.com/mcp

curl https://imagesvg.com/mcp \
  -H "Authorization: Bearer $IMAGESVG_ACCESS_TOKEN" \
  -H 'Content-Type: application/json' \
  -H 'Accept: application/json, text/event-stream' \
  --data '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-11-25","capabilities":{},"clientInfo":{"name":"my-app","version":"1.0"}}}'

curl https://imagesvg.com/mcp \
  -H "Authorization: Bearer $IMAGESVG_ACCESS_TOKEN" \
  -H 'Content-Type: application/json' \
  -H 'Accept: application/json, text/event-stream' \
  -H 'MCP-Protocol-Version: 2025-11-25' \
  --data '{"jsonrpc":"2.0","id":2,"method":"tools/call","params":{"name":"imagesvg_account","arguments":{}}}'

A successful initialize is followed by notifications/initialized in a complete MCP client. This service uses stateless HTTP and does not require an MCP session ID. Tool failures return isError: true with structured error data; HTTP 200 alone does not mean conversion succeeded.

Allowance, billing and limits

• The website and MCP use the same account and wallet. No separate MCP credit balance or API billing product is introduced.
• Free: 3 successful images per UTC day and 15 per UTC month, whichever limit is reached first. Reservations temporarily reduce availability. One concurrent task and 30 starts per day.
• An active website pass applies, with two concurrent tasks and 100 starts per hour. This integration exports SVG only; other website formats are not exposed by this integration.
• Changing style on the same logical image within the same panel reuses its successful free-image allowance, but counts as another attempt. A new panel creates a new job and may count as a new image.
• Working resolution: at most 2,048 pixels per edge and 4 million pixels. Original dimensions are preserved in output coordinates.
• A grant must start within 120 seconds; an authorized run/confirmation expires within two hours. Cancelled or expired unused reservations are released. The panel stops a local run after two minutes.
• Protocol requests are limited to 16 KB. Rate limits and service-wide capacity budgets also apply; avoid polling and repeated automatic retries.

Client requirements

Clients need remote Streamable HTTP MCP, OAuth and MCP Apps. The visible panel must permit blob Web Workers and local image previews. Native export, file-library saving and link opening depend on the host’s capabilities. This is an interactive SVG converter; a headless or background agent cannot run its conversion on a user’s device without a visible local UI.

Ordinary image pixels are not accepted by the MCP protocol. Conversation file references are read by the panel directly. Optional download delivery accepts only the generated, confirmed SVG, not original images. Hash checks, capability credentials and quotas are enforced by the service.