plantcv-mcp

Plant phenotyping over MCP — traits, plus the segmentation overlay they were measured from.

PlantCV as an MCP measurement instrument: it returns plant trait numbers and the picture they were computed from, and refuses to return numbers when the segmentation is degenerate.

Unofficial. Not affiliated with, endorsed by, or sponsored by the Donald Danforth Plant Science Center or the PlantCV maintainers. See NOTICE.

Why you are handed the overlay

Red marks the pixels that were measured. Both images below come from the same file and the same threshold method — the only difference is one parameter.

✅ channel="a", object_type="dark"	❌ channel="s", object_type="dark"
Mask covers 3.1% of the frame, 9 components. area=32427	Mask covers 96.1% — it is the background. area=1007829

The failure on the right is what this server exists to prevent. Without the picture, both runs return seventeen traits with correct units and entirely believable magnitudes. The one on the right is measuring the wall behind the plants.

segment() returns the overlay and diagnostics but no traits. measure() requires the session_id that segment() mints. You cannot get a number without first being handed the image it came from.

That is not a style preference. Measured on real images with PlantCV 4.11.3:

All three produce correctly-united, entirely believable numbers.

Install

pip install plantcv-mcp

Or from the repository, to track unreleased changes:

uv add git+https://github.com/musharna/plantcv-mcp

Or from a local checkout:

uv add /path/to/plantcv-mcp

Requires Python 3.11+. Installing pulls PlantCV and its scientific stack (scikit-image, dask, scipy), so the first install is not fast.

Configure your MCP client

The server speaks stdio. The console script installed by the package is plantcv-mcp.

Claude Code

claude mcp add plantcv -- plantcv-mcp

Claude Desktop — add to claude_desktop_config.json:

{
  "mcpServers": {
    "plantcv": {
      "command": "plantcv-mcp"
    }
  }
}

If the executable is not on your PATH (common when it lives in a project virtualenv), give the absolute path to it, or invoke it through uv:

{
  "mcpServers": {
    "plantcv": {
      "command": "uv",
      "args": ["run", "--directory", "/path/to/plantcv-mcp", "plantcv-mcp"]
    }
  }
}

Verify it is wired up by calling list_methods(), which reports the channels, the methods, and the pinned PlantCV version.

Tools

Typical loop: suggest_segmentation → segment → look at the overlay → segment again with a different channel, method or polarity if it is wrong → measure.

segment parameters

The segment() response for the image at the top of this page — verbatim, apart from a shortened session_id and an elided warning message:

{
  "session_id": "9d2384c8-…",
  "channel": "a",
  "method": "otsu",
  "object_type": "dark",
  "fill_size": 200,
  "mask_fraction": 0.031,
  "component_count": 9,
  "major_object_count": 4,
  "largest_area": 8628,
  "overlay_scale": 1.0,
  "overlay_png_bytes": 748233,
  "warnings": [
    {
      "code": "multi_specimen",
      "message": "4 comparably-sized objects detected (areas: [8628, 7981, 7106, 6748]). …"
    }
  ]
}

The overlay arrives alongside this as a second content block, as an image.

Getting the polarity right

object_type decides which side of the threshold is the plant, and it is the easiest way to get a confidently wrong answer — that is the right-hand image at the top of this page.

Two things guard against it. suggest_segmentation reports what both polarities yield on your image before you commit, alongside a contact sheet of every colourspace:

And segment emits an implausible_coverage warning when the mask covers more than half the frame. Neither refuses the measurement, because a macro shot of a single leaf legitimately fills the frame — they make the choice visible rather than making it for you.

fill_size deletes any component smaller than itself, so a small specimen can vanish entirely. When that happens segment reports fill_erased_mask and names the size to drop below, rather than letting it look like a bad channel choice.

What it measures

One measure() call returns seventeen traits, each with a unit.

The last two are PlantCV's own flags. They are passed through as information, never as validity signals — on an all-zero mask PlantCV reports both as True while returning seventeen zeros. They are bounds checks, not success checks.

Passing analyses=["size", "color"] adds hue, saturation and value statistics — hue_circular_mean, hue_circular_std, hue_median (degrees), saturation_mean, saturation_median, value_mean, value_median (percent). The three frequency histograms that accompany them total 692 numbers, so they are withheld unless you ask for them with include_histograms=true.

Real-world units

Traits are in pixels by default, and pixel sizes are not comparable between images shot at different distances or zoom levels. Pass px_per_mm to measure() and spatial traits come back in mm and mm2:

measure(session_id, px_per_mm=12.5)
  area    207.533 mm2     (32427 pixels)
  width    54.880 mm      (686 pixels)

Lengths divide by px_per_mm, areas by its square. That distinction is a hard-coded table rather than something inferred from PlantCV's unit strings, because PlantCV labels both area and width as "pixels" — scaling everything with that label linearly would leave every area wrong by exactly a factor of px_per_mm, plausibly and silently. Positions (center_of_mass, ellipse_center) stay in pixels, since a millimetre coordinate means nothing without a defined origin.

If you have a marker of known real size in the frame — a coin, a printed disc — put a box around it and let the server measure it:

calibrate_scale_from_marker(image_path, x=100, y=100, w=100, h=100, marker_length_mm=20)
  -> px_per_mm 4.05, marker_length_px 81

marker_length_mm is the marker's longest real dimension. Check marker_length_px against what you expect, because a wrong scale silently rescales every trait you measure afterwards. The region is cropped before thresholding, so nothing outside your box can be selected; PlantCV's own report_size_marker_area takes an ROI instead, and measured against a disc of known 80 px diameter it returns 348 with a tight ROI — a silent 4.35× error. If the detected object reaches the crop edge you get a marker_touches_crop_edge warning, which usually means the polarity is wrong and the background was measured.

Colour correction

segment(..., color_correct=true) detects a Macbeth-style ColorChecker in the frame and corrects to a standard reference, which is what makes colour traits comparable between images shot under different lighting. measure() re-applies the same correction, so traits are always measured on the pixels the mask was drawn on.

If no card is found this raises rather than quietly measuring the uncorrected image — returning colour traits that look corrected and are not would be the same kind of confident wrongness as an inverted mask.

Measuring many images

measure_images(image_paths, channel, method, ...) applies one fixed recipe across up to 200 images.

This is the one place the two-step discipline cannot hold literally: nobody reviews two hundred overlays. So the overlay is replaced by the only honest substitute — every image runs the same guards as segment(), and any image that trips a blocking guard comes back with no traits at all, just a reason and an instruction to inspect it individually. Advisory warnings such as multi_specimen are attached to the traits rather than suppressing them.

{
  "summary": {
    "submitted": 2,
    "measured": 1,
    "needs_review": 1,
    "review_paths": ["blank.png"]
  },
  "results": [
    {
      "image_path": "blank.png",
      "measured": false,
      "traits": null,
      "refused_because": "empty_mask — traits withheld because the mask probably does not describe the plant."
    }
  ]
}

Settle the recipe on one representative image with suggest_segmentation and segment first, looking at the overlay, then apply it here. A batch never returns a number the server could not validate — which is weaker than a human looking at a mask, and is stated plainly rather than implied.

Security and trust boundary

This server reads image files anywhere on the host filesystem, and returns them to the model as images.

suggest_segmentation and segment take an image_path and pass it straight to PlantCV's reader. There is no directory allow-list and no sandbox. Any path the model asks for — that the operating-system user running the server can read — will be decoded and returned as a base64 image in the model's context.

Practical consequences:

• Treat it like any other local filesystem MCP server. Run it as a user whose read access you are comfortable exposing to the model driving it.
• A prompt-injected or adversarial model can use it to view arbitrary image files on the machine. Non-image files fail to decode and raise, but the error message discloses whether the path exists.
• Do not run it as root, and do not expose it to untrusted input on a machine holding sensitive imagery.

Restricting reads to a configured root directory is a candidate for a future release; it is deliberately not implemented today, and this section exists so that is a decision you make rather than a surprise you discover.

Limitations

measure() is single-ROI by design: it treats the whole image as one region, so on a tray it merges every plant into one object. Use measure_regions() for multi-plant images — it measures each region separately and returns an overlay with the regions outlined and numbered.

Morphology traits (leaf angles, stem, skeleton) and iterative mask refinement are still not implemented.

Sessions are in-memory and capped (8 by default, LRU-evicted). They do not survive a server restart.

Attribution and licensing

This project is MIT licensed. It depends on PlantCV, which is licensed under the Mozilla Public License 2.0. No PlantCV source is vendored or redistributed here — it is an ordinary runtime dependency — so the MIT license applies to this project's own files. See NOTICE for the full statement.

More

• CHANGELOG.md — what changed, and why
• docs/MUTATION-CHECKS.md — every guard disabled on purpose, and the test that went red for it. A guard whose test passes with the guard removed is not a test.

Images on this page are rendered from tests/fixtures/multi_specimen.png, an original render by the author, and regenerate from committed code.