Agent-first image hosting — upload images and get instant CDN URLs.
Dedotto dai trasporti dichiarati da questo annuncio (streamable-http). Un client che non compare qui non è escluso — semplicemente Forge non è in grado di confermarlo.
La verifica conferma l’identità del publisher (la proprietà del repo), non la sicurezza del codice. L’analisi di sicurezza copre i CVE noti e gli script di installazione sospetti.
Letto da un vero handshake MCP initialize → tools/list verso l’endpoint dichiarato. Nessuno strumento è stato invocato — tools/list è la chiamata di introspezione in sola lettura che il protocollo prevede a questo scopo. Riflette ciò che il server annunciava in quel momento; un endpoint ospitato non è vincolato ad alcuna versione e può cambiare senza preavviso.
https://mcp.pixelvault.dev/mcp8 strumenti · 259 mshttps://mcp.pixelvault.dev/mcp/oauthautenticazione richiestaget_imageGet metadata (CDN URL, size, MIME type, dimensions) for one PixelVault image by id. Maps to GET /v1/images/:id. Requires a PixelVault API key sent as a Bearer token in the Authorization header. The returned CDN URL supports on-the-fly transforms via query params — e.g. ?w=400&fit=cover (resize/crop…Get metadata (CDN URL, size, MIME type, dimensions) for one PixelVault image by id. Maps to GET /v1/images/:id. Requires a PixelVault API key sent as a Bearer token in the Authorization header. The returned CDN URL supports on-the-fly transforms via query params — e.g. ?w=400&fit=cover (resize/crop…
| Parametro | Tipo | Descrizione |
|---|---|---|
| id* | string | Image id to fetch, e.g. img_abc123 |
list_imagesList images in your PixelVault project, most recent first. Maps to GET /v1/images with pagination. Requires a PixelVault API key sent as a Bearer token in the Authorization header. The returned CDN URL supports on-the-fly transforms via query params — e.g. ?w=400&fit=cover (resize/crop), ?fmt=webp…List images in your PixelVault project, most recent first. Maps to GET /v1/images with pagination. Requires a PixelVault API key sent as a Bearer token in the Authorization header. The returned CDN URL supports on-the-fly transforms via query params — e.g. ?w=400&fit=cover (resize/crop), ?fmt=webp…
| Parametro | Tipo | Descrizione |
|---|---|---|
| page | integer | Page number (default 1) |
| per_page | integer | Items per page (default 20, max 100) |
delete_imageprivilegiatoPermanently delete one PixelVault image by id. Maps to DELETE /v1/images/:id. Requires a PixelVault API key sent as a Bearer token in the Authorization header.Permanently delete one PixelVault image by id. Maps to DELETE /v1/images/:id. Requires a PixelVault API key sent as a Bearer token in the Authorization header.
| Parametro | Tipo | Descrizione |
|---|---|---|
| id* | string | Image id to delete, e.g. img_abc123 |
upload_imageprivilegiatoUpload an image to PixelVault and get an instant CDN URL. Maps to POST /v1/images. Provide exactly one of `source_url` (a public http(s) URL the server fetches) or `data` (base64-encoded bytes); optional `folder`, `filename`, and `expires_in` (seconds, for an auto-expiring image). Max 5 MB; JPG/PNG…Upload an image to PixelVault and get an instant CDN URL. Maps to POST /v1/images. Provide exactly one of `source_url` (a public http(s) URL the server fetches) or `data` (base64-encoded bytes); optional `folder`, `filename`, and `expires_in` (seconds, for an auto-expiring image). Max 5 MB; JPG/PNG…
| Parametro | Tipo | Descrizione |
|---|---|---|
| source_url | string | Public http(s) URL of an image to fetch and upload. Provide this OR data. |
| data | string | Base64-encoded image bytes (data URLs accepted). Provide this OR source_url. |
| folder | string | Optional folder/path prefix for the image. |
| filename | string | Optional original filename, e.g. photo.png. |
| expires_in | integer | Optional time-to-live in seconds. The image is auto-deleted after this many seconds (must be 60–2,592,000, i.e. 1 minute to 30 days). Omit for a permanent imag… |
upload_batchprivilegiatoUpload many images (1–50) in one call, grouped into a collection — e.g. a CI run or a set of generated variants. Maps to POST /v1/images/batch. Each item is `data` (base64) or `source_url` (server-fetched, SSRF-guarded), with optional `filename`/`metadata`. Set `visibility: "private"` to get a sign…Upload many images (1–50) in one call, grouped into a collection — e.g. a CI run or a set of generated variants. Maps to POST /v1/images/batch. Each item is `data` (base64) or `source_url` (server-fetched, SSRF-guarded), with optional `filename`/`metadata`. Set `visibility: "private"` to get a sign…
| Parametro | Tipo | Descrizione |
|---|---|---|
| images* | array | 1–50 images to upload into the collection. |
| type | string | Collection type/discriminator (e.g. ci_build, generation). Default 'batch'. |
| name | string | Idempotency key — re-running with the same (type, name) upserts the same collection. |
| visibility | string | 'private' returns a signed URL per image (free plan: up to 100 private images); 'public' returns a plain CDN URL. Default 'public'. |
| expires_in | integer | Image deletion TTL in seconds (60–2,592,000). Omit for permanent. |
| sign_expires_in | integer | Signature lifetime for private URLs in seconds (60–2,592,000, default 7 days). |
| metadata | object | Freeform collection metadata, e.g. { commit, pr_number, branch }. |
sign_urlMint a time-limited signed URL for a private image. Maps to POST /v1/images/:id/sign-url. Provide `id` and optional `expires_in` (seconds, default 3600). The signature binds the image, so the URL can't be replayed against another image; strip it and the CDN returns 403. Deleting the image revokes i…Mint a time-limited signed URL for a private image. Maps to POST /v1/images/:id/sign-url. Provide `id` and optional `expires_in` (seconds, default 3600). The signature binds the image, so the URL can't be replayed against another image; strip it and the CDN returns 403. Deleting the image revokes i…
| Parametro | Tipo | Descrizione |
|---|---|---|
| id* | string | Image id to mint a signed URL for, e.g. img_abc123. |
| expires_in | integer | Signature lifetime in seconds (60–2,592,000). Default 3600 (1 hour). |
transform_imageBuild an on-the-fly transform URL for a PixelVault image (resize, crop, format/quality, AI background removal, blur/sharpen/rotate/flip, brightness/contrast/saturation, and same-project watermark tiling). Provide exactly one of `url` (a PixelVault CDN URL) or `id` (an image id, resolved via the API…Build an on-the-fly transform URL for a PixelVault image (resize, crop, format/quality, AI background removal, blur/sharpen/rotate/flip, brightness/contrast/saturation, and same-project watermark tiling). Provide exactly one of `url` (a PixelVault CDN URL) or `id` (an image id, resolved via the API…
| Parametro | Tipo | Descrizione |
|---|---|---|
| url | string | Absolute CDN URL of a PixelVault image, as returned by upload_image / get_image / list_images. Provide this OR id. |
| id | string | PixelVault image id (e.g. img_abc123); its CDN URL is resolved via the API. Provide this OR url. Requires an API key when used. |
| size | string | Named size preset: s=256px, m=640px, l=1280px, social=1200x630 OG card. Wins over width/height. |
| width | integer | Target width in px (1..4000). Snapped UP to the nearest allowed step. scale-down never upscales. |
| height | integer | Target height in px (1..4000). Snapped UP to the nearest allowed step. |
| fit | string | Resize mode. scale-down (default) never enlarges; contain/cover/crop/pad resize to the exact box and may upscale. Only meaningful alongside width/height. |
| format | string | Output format. auto negotiates WebP/AVIF from the client's Accept header. |
| quality | string | Output quality. auto lets Cloudflare choose. |
| segment | string | AI background removal (BiRefNet): foreground keeps the subject and makes the background transparent. Output is forced to PNG unless an opaque background is set… |
| background | string | Fill color behind a removed (segment) or padded (fit=pad) background: hex (#ffaa00), rgb()/rgba(), or a common CSS color name. No effect otherwise. |
| gravity | string | Crop anchor, only with fit=cover|crop: face, left, right, top, bottom, auto, or 'XxY' coords 0.0-1.0. face enables zoom. |
| zoom | number | Face-crop tightness 0.0-1.0, only with gravity=face. |
| blur | number | Gaussian blur (0-250); snapped to the nearest of 10/30/60/120. <=0 is ignored. |
| sharpen | number | Sharpen strength (0-10); snapped to the nearest of 1/3/5. |
| rotate | number | Rotate clockwise; rounded to the nearest right angle (90/180/270). |
| flip | string | Mirror horizontally (h), vertically (v), or both (hv). |
| brightness | number | Brightness multiplier 0-2 (1=no change); snapped to 0.5/0.75/1.25/1.5/2. |
| contrast | number | Contrast multiplier 0-2 (1=no change); snapped to 0.5/0.75/1.25/1.5/2. |
| saturation | number | Saturation multiplier 0-2 (1=no change, 0=grayscale); snapped to 0/0.5/1.5/2. |
| tile | string | Filename (optionally folder-prefixed, with extension) of another image in the SAME project to tile edge-to-edge as a watermark, e.g. watermark.png. |
rescue_imgurrischio di injectionScan a web page for hotlinked Imgur images and return a PixelVault rescue URL for each — a proxy that lazily rehosts the image on first request, keeping it working through the UK Imgur block. The anonymous rescue tier is a durable ~30-day edge cache (see `cache_ttl_days` in the result), not permane…Scan a web page for hotlinked Imgur images and return a PixelVault rescue URL for each — a proxy that lazily rehosts the image on first request, keeping it working through the UK Imgur block. The anonymous rescue tier is a durable ~30-day edge cache (see `cache_ttl_days` in the result), not permane…
ot permanent storage. Maps to POST /v1/imgur-scan (server-side page fetch; no API key required). Provide `page_url`…| Parametro | Tipo | Descrizione |
|---|---|---|
| page_url* | string | Public https:// URL of a page to scan for hotlinked Imgur images. |
8 strumenti su 8 hanno pubblicato una descrizione.
I nomi e le descrizioni degli strumenti sono scritti dal publisher e mostrati alla lettera come testo inerte. Sono le stringhe che un client MCP passa a un modello, quindi Forge vi cerca schemi di prompt injection — ogni rilievo compare insieme all’analisi di sicurezza qui sopra. «Privilegiato» è una corrispondenza di parola chiave sul nome dello strumento, non una verifica di ciò che fa: un nome innocuo può comunque fare qualsiasi cosa.
Agent-first image hosting — upload images and get instant CDN URLs.
I nomi collegati aprono l’indice Forge di tutte le voci osservate esporre quello strumento. Sfoglia tutti gli strumenti indicizzati.
Questa voce non pubblica alcun pacchetto npm, quindi Forge non ha un albero delle dipendenze per essa. È una lacuna di copertura, non l'affermazione che non abbia dipendenze.