Agent-first image hosting — upload images and get instant CDN URLs.
Inferido de los transportes que declara este listado (streamable-http). Que un cliente no aparezca aquí no significa que se haya descartado: simplemente Forge no puede confirmarlo.
La verificación confirma la identidad del publicador (la propiedad del repo), no la seguridad del código. El análisis de seguridad cubre los CVE conocidos y los scripts de instalación sospechosos.
Leído de un handshake MCP real initialize → tools/list contra el endpoint declarado. No se invocó ninguna herramienta: tools/list es la llamada de introspección de solo lectura que el protocolo define para esto. Refleja lo que el servidor anunciaba en ese momento; un endpoint alojado no está fijado a ninguna versión y puede cambiar sin avisar.
https://mcp.pixelvault.dev/mcp8 herramientas · 259 mshttps://mcp.pixelvault.dev/mcp/oauthrequiere autenticaciónget_imageGet metadata (CDN URL, size, MIME type, dimensions) for one PixelVault image by id. Maps to GET /v1/images/:id. Requires a PixelVault API key sent as a Bearer token in the Authorization header. The returned CDN URL supports on-the-fly transforms via query params — e.g. ?w=400&fit=cover (resize/crop…Get metadata (CDN URL, size, MIME type, dimensions) for one PixelVault image by id. Maps to GET /v1/images/:id. Requires a PixelVault API key sent as a Bearer token in the Authorization header. The returned CDN URL supports on-the-fly transforms via query params — e.g. ?w=400&fit=cover (resize/crop…
| Parámetro | Tipo | Descripción |
|---|---|---|
| id* | string | Image id to fetch, e.g. img_abc123 |
list_imagesList images in your PixelVault project, most recent first. Maps to GET /v1/images with pagination. Requires a PixelVault API key sent as a Bearer token in the Authorization header. The returned CDN URL supports on-the-fly transforms via query params — e.g. ?w=400&fit=cover (resize/crop), ?fmt=webp…List images in your PixelVault project, most recent first. Maps to GET /v1/images with pagination. Requires a PixelVault API key sent as a Bearer token in the Authorization header. The returned CDN URL supports on-the-fly transforms via query params — e.g. ?w=400&fit=cover (resize/crop), ?fmt=webp…
| Parámetro | Tipo | Descripción |
|---|---|---|
| page | integer | Page number (default 1) |
| per_page | integer | Items per page (default 20, max 100) |
delete_imageprivilegiadaPermanently delete one PixelVault image by id. Maps to DELETE /v1/images/:id. Requires a PixelVault API key sent as a Bearer token in the Authorization header.Permanently delete one PixelVault image by id. Maps to DELETE /v1/images/:id. Requires a PixelVault API key sent as a Bearer token in the Authorization header.
| Parámetro | Tipo | Descripción |
|---|---|---|
| id* | string | Image id to delete, e.g. img_abc123 |
upload_imageprivilegiadaUpload an image to PixelVault and get an instant CDN URL. Maps to POST /v1/images. Provide exactly one of `source_url` (a public http(s) URL the server fetches) or `data` (base64-encoded bytes); optional `folder`, `filename`, and `expires_in` (seconds, for an auto-expiring image). Max 5 MB; JPG/PNG…Upload an image to PixelVault and get an instant CDN URL. Maps to POST /v1/images. Provide exactly one of `source_url` (a public http(s) URL the server fetches) or `data` (base64-encoded bytes); optional `folder`, `filename`, and `expires_in` (seconds, for an auto-expiring image). Max 5 MB; JPG/PNG…
| Parámetro | Tipo | Descripción |
|---|---|---|
| source_url | string | Public http(s) URL of an image to fetch and upload. Provide this OR data. |
| data | string | Base64-encoded image bytes (data URLs accepted). Provide this OR source_url. |
| folder | string | Optional folder/path prefix for the image. |
| filename | string | Optional original filename, e.g. photo.png. |
| expires_in | integer | Optional time-to-live in seconds. The image is auto-deleted after this many seconds (must be 60–2,592,000, i.e. 1 minute to 30 days). Omit for a permanent imag… |
upload_batchprivilegiadaUpload many images (1–50) in one call, grouped into a collection — e.g. a CI run or a set of generated variants. Maps to POST /v1/images/batch. Each item is `data` (base64) or `source_url` (server-fetched, SSRF-guarded), with optional `filename`/`metadata`. Set `visibility: "private"` to get a sign…Upload many images (1–50) in one call, grouped into a collection — e.g. a CI run or a set of generated variants. Maps to POST /v1/images/batch. Each item is `data` (base64) or `source_url` (server-fetched, SSRF-guarded), with optional `filename`/`metadata`. Set `visibility: "private"` to get a sign…
| Parámetro | Tipo | Descripción |
|---|---|---|
| images* | array | 1–50 images to upload into the collection. |
| type | string | Collection type/discriminator (e.g. ci_build, generation). Default 'batch'. |
| name | string | Idempotency key — re-running with the same (type, name) upserts the same collection. |
| visibility | string | 'private' returns a signed URL per image (free plan: up to 100 private images); 'public' returns a plain CDN URL. Default 'public'. |
| expires_in | integer | Image deletion TTL in seconds (60–2,592,000). Omit for permanent. |
| sign_expires_in | integer | Signature lifetime for private URLs in seconds (60–2,592,000, default 7 days). |
| metadata | object | Freeform collection metadata, e.g. { commit, pr_number, branch }. |
sign_urlMint a time-limited signed URL for a private image. Maps to POST /v1/images/:id/sign-url. Provide `id` and optional `expires_in` (seconds, default 3600). The signature binds the image, so the URL can't be replayed against another image; strip it and the CDN returns 403. Deleting the image revokes i…Mint a time-limited signed URL for a private image. Maps to POST /v1/images/:id/sign-url. Provide `id` and optional `expires_in` (seconds, default 3600). The signature binds the image, so the URL can't be replayed against another image; strip it and the CDN returns 403. Deleting the image revokes i…
| Parámetro | Tipo | Descripción |
|---|---|---|
| id* | string | Image id to mint a signed URL for, e.g. img_abc123. |
| expires_in | integer | Signature lifetime in seconds (60–2,592,000). Default 3600 (1 hour). |
transform_imageBuild an on-the-fly transform URL for a PixelVault image (resize, crop, format/quality, AI background removal, blur/sharpen/rotate/flip, brightness/contrast/saturation, and same-project watermark tiling). Provide exactly one of `url` (a PixelVault CDN URL) or `id` (an image id, resolved via the API…Build an on-the-fly transform URL for a PixelVault image (resize, crop, format/quality, AI background removal, blur/sharpen/rotate/flip, brightness/contrast/saturation, and same-project watermark tiling). Provide exactly one of `url` (a PixelVault CDN URL) or `id` (an image id, resolved via the API…
| Parámetro | Tipo | Descripción |
|---|---|---|
| url | string | Absolute CDN URL of a PixelVault image, as returned by upload_image / get_image / list_images. Provide this OR id. |
| id | string | PixelVault image id (e.g. img_abc123); its CDN URL is resolved via the API. Provide this OR url. Requires an API key when used. |
| size | string | Named size preset: s=256px, m=640px, l=1280px, social=1200x630 OG card. Wins over width/height. |
| width | integer | Target width in px (1..4000). Snapped UP to the nearest allowed step. scale-down never upscales. |
| height | integer | Target height in px (1..4000). Snapped UP to the nearest allowed step. |
| fit | string | Resize mode. scale-down (default) never enlarges; contain/cover/crop/pad resize to the exact box and may upscale. Only meaningful alongside width/height. |
| format | string | Output format. auto negotiates WebP/AVIF from the client's Accept header. |
| quality | string | Output quality. auto lets Cloudflare choose. |
| segment | string | AI background removal (BiRefNet): foreground keeps the subject and makes the background transparent. Output is forced to PNG unless an opaque background is set… |
| background | string | Fill color behind a removed (segment) or padded (fit=pad) background: hex (#ffaa00), rgb()/rgba(), or a common CSS color name. No effect otherwise. |
| gravity | string | Crop anchor, only with fit=cover|crop: face, left, right, top, bottom, auto, or 'XxY' coords 0.0-1.0. face enables zoom. |
| zoom | number | Face-crop tightness 0.0-1.0, only with gravity=face. |
| blur | number | Gaussian blur (0-250); snapped to the nearest of 10/30/60/120. <=0 is ignored. |
| sharpen | number | Sharpen strength (0-10); snapped to the nearest of 1/3/5. |
| rotate | number | Rotate clockwise; rounded to the nearest right angle (90/180/270). |
| flip | string | Mirror horizontally (h), vertically (v), or both (hv). |
| brightness | number | Brightness multiplier 0-2 (1=no change); snapped to 0.5/0.75/1.25/1.5/2. |
| contrast | number | Contrast multiplier 0-2 (1=no change); snapped to 0.5/0.75/1.25/1.5/2. |
| saturation | number | Saturation multiplier 0-2 (1=no change, 0=grayscale); snapped to 0/0.5/1.5/2. |
| tile | string | Filename (optionally folder-prefixed, with extension) of another image in the SAME project to tile edge-to-edge as a watermark, e.g. watermark.png. |
rescue_imgurriesgo de inyecciónScan a web page for hotlinked Imgur images and return a PixelVault rescue URL for each — a proxy that lazily rehosts the image on first request, keeping it working through the UK Imgur block. The anonymous rescue tier is a durable ~30-day edge cache (see `cache_ttl_days` in the result), not permane…Scan a web page for hotlinked Imgur images and return a PixelVault rescue URL for each — a proxy that lazily rehosts the image on first request, keeping it working through the UK Imgur block. The anonymous rescue tier is a durable ~30-day edge cache (see `cache_ttl_days` in the result), not permane…
ot permanent storage. Maps to POST /v1/imgur-scan (server-side page fetch; no API key required). Provide `page_url`…| Parámetro | Tipo | Descripción |
|---|---|---|
| page_url* | string | Public https:// URL of a page to scan for hotlinked Imgur images. |
8 de 8 herramientas publicaron una descripción.
Los nombres y descripciones de las herramientas los escribe el publicador y se muestran literalmente como texto inerte. Son las cadenas que un cliente MCP pasa al modelo, así que Forge las analiza en busca de patrones de inyección de prompts — cualquier hallazgo aparece junto al análisis de seguridad de arriba. «Privilegiada» es una coincidencia de palabra clave en el nombre de la herramienta, no una auditoría de lo que hace: un nombre inofensivo puede hacer cualquier cosa.
Agent-first image hosting — upload images and get instant CDN URLs.
Los nombres enlazados abren el índice de Forge con todas las entradas que se observó que exponen esa herramienta. Ver todas las herramientas indexadas.
Esta entrada no publica ningún paquete de npm, así que Forge no tiene un árbol de dependencias para ella. Es una carencia de cobertura, no una afirmación de que no tenga dependencias.