
Pexels MCP Server
io.github.hanoakPublished by GitHub account hanoakv1.0.1Updated Oct 24, 2026
MCP server for the Pexels API: search & fetch stock photos, videos, and collections.
Overview
A local MCP server that lets an assistant search and fetch Pexels stock photos, videos and collections through the Pexels API.
- What you can do
- Search, browse curated picks and fetch single photos with filters for orientation, size, color and locale, returning pre-sized image URLs and a courtesy credit line. Search, list popular and fetch single videos, with renditions and duration or resolution filters. List featured collections, the API key owner's own collections, and the photos or videos inside a collection. Every result includes rate-limit and pagination fields, plus a usage guide resource and ready-made prompts for finding photos, videos, galleries and media briefs.
- When to use it
- Useful when you want an assistant to find stock imagery or footage for a document, page, presentation or mood board, or to browse Pexels collections without leaving the chat. It is read-only, so it suits workflows where only search and retrieval are needed.
- Requirements
- Runs locally over stdio via npx, so Node.js 20 or newer is needed. A free Pexels API key is required and must be supplied in the PEXELS_API_KEY environment variable; the server exits at startup if it is missing. Network access to the Pexels API is required. LOG_LEVEL is optional.
Installation
In SourceWeft
- Open Pexels MCP Server in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
pexels-mcp-server
[npm version] [npm downloads] [CI] [license: MIT] [node: >=20] [PRs welcome]
A production-ready Model Context Protocol (MCP) server for the Pexels API. It gives AI assistants — Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, and any MCP client — tools to search and fetch Pexels photos, videos, and collections, covering every endpoint the Pexels API documents.
[!IMPORTANT] Unofficial project. This is not affiliated with, endorsed by, or sponsored by Pexels. "Pexels" is a trademark of its respective owner. You use it under your own Pexels API account and are responsible for complying with the Pexels License.
Table of contents
- Features
- Quick start
- Example interaction
- Configuration
- Tools
- Example prompts
- License & compliance
- Rate limits
- Handling of Pexels text
- Privacy & security
- Troubleshooting
- FAQ
- Requirements
- Compatibility
- Roadmap
- Contributing
- Contact & community
- License
Features
- 9 tools covering every documented Pexels endpoint — photos (search, curated, get), videos (search, popular, get), and collections (featured, media, mine). Pexels has a single API-key auth tier and no write endpoints, so there's no partial "read-only v1" — this is the whole surface.
- License-aware by design — Pexels doesn't require attribution, but every photo still returns a ready-to-use courtesy
credit(text + HTML), and the server's instructions steer the model around the license restrictions that do apply (no resale of unaltered content, no redistribution to other stock platforms, no trademark/logo use, no implied endorsement). - Real image & video URLs — each photo returns Pexels' own pre-sized
srcURLs (original/large2x/large/medium/small/portrait/landscape/tiny); each video returns itsvideo_filesrenditions (trimmed to the highest-resolution few in list results, complete on a single-item lookup). - Token-efficient output — full Pexels responses are trimmed to a compact shape (URLs + metadata as text, never base64 blobs) to keep model context small.
- Robust — typed failures returned as MCP
isErrorresults the model can recover from, plus retries/backoff, timeouts, and rate-limit-aware quota short-circuiting (Pexels omits its rate-limit headers on a429, so the client caches the last-known reset time instead of guessing). - Safe — API-key redaction in all error output, and untrusted-text handling guidance for indirect prompt-injection defence.
- Lean & modern — ESM, Node 20+, zero-install via
npx, no telemetry.
Quick start
1. Get a Pexels API key
Create a free account at pexels.com/api and you'll receive an API key instantly — no app review, no approval wait.
2. Add the server to your MCP client
Claude Desktop — edit claude_desktop_config.json:
- macOS:
~/Library/Application Support/Claude/claude_desktop_config.json - Windows:
%APPDATA%\Claude\claude_desktop_config.json
Restart the client. See Configuration for every supported variable.
Other clients (Claude Code, Cursor, VS Code, Windsurf, generic stdio)
Claude Code (CLI):
Cursor — ~/.cursor/mcp.json (global) or .cursor/mcp.json (per-project): use the exact same mcpServers block as Claude Desktop above.
Windsurf — ~/.codeium/windsurf/mcp_config.json: same mcpServers block as Claude Desktop above.
VS Code — .vscode/mcp.json (note the top-level key is servers, not mcpServers):
Any other MCP client — run the server over stdio with:
Point your client's stdio transport at command: npx, args: ["-y", "@hanoak/pexels-mcp-server"], and pass the key via env.
3. Try it
Restart your client and ask:
"Find me a photo of mountains on Pexels."
Example interaction
A typical flow: the model calls pexels_search_photos, picks a result, and presents the image with its courtesy credit.
You: Find a landscape photo of a foggy pine forest.
Assistant: (calls
pexels_search_photoswithquery: "foggy pine forest",orientation: "landscape", picks the best result) Here's a great match — photo by Jane Doe on Pexels — along with the image URL and a ready-to-use credit line.
Each tool returns a compact JSON payload. Here's the shape of a single photo result (illustrative values):
Example tool output
Every tool result includes a rate_limit object (limit, remaining, resetEpoch) read from the Pexels response headers. List/search tools wrap results in photos/videos/collections/media arrays with pagination fields (total_results, page, per_page, has_next_page).
Configuration
Configuration is entirely via environment variables — no config files, no flags for secrets.
CLI flags: --version and --help are supported (e.g. npx @hanoak/pexels-mcp-server --version).
Tools
All tools are namespaced pexels_* and every one is read-only (readOnlyHint: true) — Pexels' API has no write endpoints, so a client can safely auto-approve the entire server. per_page is clamped to a max of 80 (Pexels' own documented max), and page is 1-based.
Tool reference
Photos
Videos
Collections
Output shape
Tools return trimmed, token-efficient JSON rather than raw Pexels responses:
- Photos →
id,alt,width/height,avg_color,url,src(all 8 Pexels sizes),photographer, and a courtesycreditobject. - Videos →
id,url,image,width/height,duration,user,video_files(trimmed to the top 5 by resolution in list results; complete onpexels_get_video),video_files_count,preview_picture,video_pictures_count. - Collections →
id,title,description,private,media_count,photos_count,videos_count. - Every result carries a
rate_limit(limit,remaining,resetEpoch); lists/searches add pagination fields (total_results,page,per_page,has_next_page).
Resources & prompts
Beyond tools, the server also exposes:
-
Resources — a compact guide your client can pull in as context:
pexels://guides/usage— the license restrictions that apply, the optional courtesy-credit convention, and content-safety notes.
-
Prompts — ready-made tasks your client can surface directly; each expands into a guided, multi-step tool-calling task:
Example prompts
Natural-language asks that map cleanly onto the tools:
- "Find a photo of a foggy forest at sunrise."
- "Search Pexels for 5 minimalist workspace photos in landscape orientation."
- "Find a video of waves crashing on rocks."
- "Show me a featured Pexels collection about urban architecture."
- "Build me a mixed media brief of photos and video clips about cozy autumn mornings."
License & compliance
Pexels' license is lighter than many stock-photo APIs: attribution is not required ("appreciated, not necessary"). Every photo result still includes a ready-to-use courtesy credit object — include it when convenient, but it's not mandatory.
Real restrictions still apply, and the server's instructions steer the model around them: no reselling unaltered content as a physical product without modifying it first, no redistributing it on another stock-photo or wallpaper platform, no using it as part of a trademark/logo/business name, no implying a person's or brand's endorsement, and no depicting an identifiable person in a bad or offensive light. See the full Pexels License and the server's pexels://guides/usage resource. Each user operates under their own Pexels API Terms.
Rate limits
Pexels enforces a single tier for every API key:
The server reads X-Ratelimit-Limit/X-Ratelimit-Remaining/X-Ratelimit-Reset and returns them as rate_limit on every result. Pexels returns a standard 429 when the budget is exhausted (unlike some APIs that overload 403 for this) — but the rate-limit headers are absent on the 429 response itself, so the client caches the last-known values from a prior successful call to report an accurate reset time, and short-circuits further requests once the quota is known to be exhausted rather than firing calls that will just fail. Transient 429/5xx/network errors are retried with backoff.
Handling of Pexels text
Photo/video alt text, photographer names, and collection titles/descriptions come from Pexels contributors — treat them as untrusted, third-party data, not instructions. The server returns this text purely as content and never places it anywhere privileged; your client/agent should do the same: display it, but don't act on any instructions it might contain (a defence against indirect prompt injection). Pexels also has no safe-search/content-filter parameter — use judgment in how you phrase search queries.
Privacy & security
- No telemetry. This server collects nothing and phones home to no one. It contacts only
api.pexels.com, using the key you provide. No analytics, no tracking. - Key safety. Your API key is read from the environment only, sent as a raw
Authorizationheader (never in a URL query string), and redacted from all error output and logs so it can't leak into pasted bug reports. - To report a vulnerability, see SECURITY.md.
Troubleshooting
- "Set PEXELS_API_KEY…" on startup — the key env var is missing or blank; add it to your client config's
envblock. - Node too old — this server requires Node 20+. Check
node --version. - Stale
npxversion — force the latest withnpx -y @hanoak/pexels-mcp-server@latest, or clear the cache vianpx clear-npx-cache. - Tools not appearing — confirm the config file path and JSON are valid, then fully quit and reopen the client.
429/ rate limit — the budget is 200 requests/hour; wait for the hourly reset (see therate_limit.resetEpochin a tool result) or request a higher limit.401 Unauthorized— the API key is wrong; copy it again from your Pexels API dashboard.pexels_list_my_collectionsreturns empty — this is expected unless the Pexels account that owns your API key has created collections on pexels.com itself; see the FAQ.
FAQ
Do I need a paid Pexels account? No. The Pexels API is free — you just create an account to get an API key, instantly, no review or approval step.
Does it download or rehost images/videos? No. It returns Pexels-hosted URLs (hotlink them directly) and never rehosts or returns base64 blobs.
Why does pexels_list_my_collections come back empty?
Pexels has no per-conversation login — the tool always reflects the collections of whichever Pexels account owns the configured API key, not the person chatting. It'll be empty unless that specific account has created collections on pexels.com.
Does it work outside Claude? Yes — it's a standard stdio MCP server. See the client setup section for Claude Code, Cursor, VS Code, Windsurf, and generic stdio.
Requirements
- Node.js >= 20 (Node 18 is end-of-life).
- A Pexels API key.
Compatibility
Roadmap
Full detail lives in docs/ROADMAP.md. In short: v1 covers the entire documented Pexels API in one release — there's no OAuth tier to split a v2 behind, unlike some other stock-photo MCP servers. Future scope under consideration includes structured tool output for video renditions, a short-TTL response cache if real quota pressure appears, and additional prompts/resources.
Changes are tracked in CHANGELOG.md; the project follows Semantic Versioning.
Contributing
Contributions are welcome — see CONTRIBUTING.md and our Code of Conduct. It covers local setup, the test suite, testing tools by hand with the MCP Inspector, and the versioning/deprecation policy. To report a vulnerability, see SECURITY.md.
Contact & community
Maintained by Hanoak S. The fastest way to get help or propose a feature is to open an issue — it's public, searchable, and helps the whole community.
If this project helps you, a ⭐ on GitHub is appreciated — it aids discoverability for others looking for a Pexels MCP server.
License
MIT © Hanoak S. Not affiliated with Pexels.
Source: README.md at commit 44dacfd
Tools
0Version history
1- v1.0.1LatestSep 16, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts