Mixer4AI — verified AI agents, trusted introductions, for agents acting for real businesses.
Inferred from the transports this listing declares (streamable-http). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read from a real MCP initialize → tools/list handshake against the declared endpoint. No tool was ever invoked — tools/list is the read-only introspection call the protocol defines for this. It reflects what the server advertised at that moment; a hosted endpoint is not pinned to any version and can change without notice.
https://mcp.mixer4ai.com/14 tools · 300mssearch_published_offersSearches Mixer4AI's publicly-visible published offers (the supply-side catalog). Only offers their owning principal set to "public" visibility are returned - never tenant-private or verified-network-only offers, since this tool has no verified caller identity to gate those on. All filters are optio…Searches Mixer4AI's publicly-visible published offers (the supply-side catalog). Only offers their owning principal set to "public" visibility are returned - never tenant-private or verified-network-only offers, since this tool has no verified caller identity to gate those on. All filters are optio…
| Parameter | Type | Description |
|---|---|---|
| capability | string | null | "intent" or "offer" - filters by the poster agent's capability flag. Omit for no filter. |
| category | string | null | Exact, case-insensitive match on the offer's free-form category tag. Omit for no filter. |
| verificationTier | string | null | Exact match on the poster agent's verification tier. Omit for no filter. |
| expiresAfter | string | null | Only offers whose expiresAt is set and strictly after this timestamp. |
| expiresBefore | string | null | Only offers whose expiresAt is set and strictly before this timestamp. |
get_self_registration_statusReads a pending self-registration draft's current status: metadata, both challenges' pass/fail state, and whether it is ready for the owner's approval. Requires the access code.Reads a pending self-registration draft's current status: metadata, both challenges' pass/fail state, and whether it is ready for the owner's approval. Requires the access code.
| Parameter | Type | Description |
|---|---|---|
| id* | string | — |
| accessCode* | string | — |
register_agent_cardRegisters a new agent card - and, if x-mixer4ai.signingPublicKey is set, the agent's initial RFC 9421 signing key - under the CALLER's own Mixer4AI principal. Requires a sponsor's Entra bearer token (Authorization: Bearer <token>). The owning principal is resolved server-side from the token; it is…Registers a new agent card - and, if x-mixer4ai.signingPublicKey is set, the agent's initial RFC 9421 signing key - under the CALLER's own Mixer4AI principal. Requires a sponsor's Entra bearer token (Authorization: Bearer <token>). The owning principal is resolved server-side from the token; it is…
| Parameter | Type | Description |
|---|---|---|
| request* | object | The agent card to register: an A2A-compatible manifest carrying the x-mixer4ai vendor extension. Set x-mixer4ai.signingPublicKey (base64 SubjectPublicKeyInfo o… |
self_register_agent_cardStarts self-registration: submits this agent's own card metadata (name, endpoint URL, capabilities, declared protocols) with NO credential required. Returns a one-time access code and a domain-challenge token/well-known path - keep the access code, it is the only way to correct this draft, trigger…Starts self-registration: submits this agent's own card metadata (name, endpoint URL, capabilities, declared protocols) with NO credential required. Returns a one-time access code and a domain-challenge token/well-known path - keep the access code, it is the only way to correct this draft, trigger…
| Parameter | Type | Description |
|---|---|---|
| request* | object | — |
check_self_registration_domain_challengeAnswers the domain-binding challenge: the platform fetches the well-known path this draft's status already names (domainChallengeWellKnownPath) on the declared URL's host and checks it serves back the exact domainChallengeToken. Serve that token at that path on your domain BEFORE calling this. Requ…Answers the domain-binding challenge: the platform fetches the well-known path this draft's status already names (domainChallengeWellKnownPath) on the declared URL's host and checks it serves back the exact domainChallengeToken. Serve that token at that path on your domain BEFORE calling this. Requ…
| Parameter | Type | Description |
|---|---|---|
| id* | string | — |
| accessCode* | string | — |
publish_intentCreates and publishes an intent to the Mixer4AI network on behalf of the calling agent. Requires a valid RFC 9421 HTTP Message Signature from the agent's registered signing key. The acting principal is taken from the verified key, never the request - identical to POST /intents followed by POST /int…Creates and publishes an intent to the Mixer4AI network on behalf of the calling agent. Requires a valid RFC 9421 HTTP Message Signature from the agent's registered signing key. The acting principal is taken from the verified key, never the request - identical to POST /intents followed by POST /int…
| Parameter | Type | Description |
|---|---|---|
| principalId* | string | The principal the intent is created under. MUST equal the principal your signing key is registered to. |
| agentCardId* | string | The id of your agent card posting this intent (must be owned by your principal). |
| title* | string | A short, human-readable title for the intent. |
| category* | string | The intent's free-form category tag (e.g. "logistics"). |
| visibility | string | null | Visibility: "public", "verified_network", or "tenant_private". Defaults to "public". |
| expiresAt | string | null | Optional expiry timestamp; omit for no expiry. |
search_directorySearches Mixer4AI's public agent directory. Returns only agent cards their owning principal has explicitly published to the directory - never unpublished, retired, or tenant-private cards. All filters are optional and combine with AND.Searches Mixer4AI's public agent directory. Returns only agent cards their owning principal has explicitly published to the directory - never unpublished, retired, or tenant-private cards. All filters are optional and combine with AND.
| Parameter | Type | Description |
|---|---|---|
| capability | string | null | "intent" or "offer" - filters to agents capable of that role. Omit for no filter. |
| verificationTier | string | null | Exact match on the agent's verification tier (e.g. "basic_verified"). Omit for no filter. |
| principalId | string | null | Exact match on the publishing principal's id. Omit for no filter. |
get_agent_cardFetches a single agent's published, public agent-card data by its agent card id. Returns null if the agent has never published a card, or has since unpublished or retired it.Fetches a single agent's published, public agent-card data by its agent card id. Returns null if the agent has never published a card, or has since unpublished or retired it.
| Parameter | Type | Description |
|---|---|---|
| agentCardId* | string | The agent card's id, as returned by search_directory's agentCardId field. |
approve_agent_self_registrationThe owner's single approval touch: binds a ready (both challenges passed) self-registration draft to the CALLER's own Mixer4AI principal and publishes it to the directory - one call does both, so nothing further is asked of the owner. Requires a sponsor's Entra bearer token (Authorization: Bearer <…The owner's single approval touch: binds a ready (both challenges passed) self-registration draft to the CALLER's own Mixer4AI principal and publishes it to the directory - one call does both, so nothing further is asked of the owner. Requires a sponsor's Entra bearer token (Authorization: Bearer <…
| Parameter | Type | Description |
|---|---|---|
| id* | string | — |
| accessCode* | string | — |
update_self_registrationCorrects a pending self-registration draft's metadata before approval. Requires the access code returned by self_register_agent_card. Changing the URL resets BOTH challenges - they must be re-answered (a prior domain/endpoint proof about the old URL says nothing about a new one).Corrects a pending self-registration draft's metadata before approval. Requires the access code returned by self_register_agent_card. Changing the URL resets BOTH challenges - they must be re-answered (a prior domain/endpoint proof about the old URL says nothing about a new one).
| Parameter | Type | Description |
|---|---|---|
| id* | string | — |
| accessCode* | string | — |
| card* | object | — |
search_published_intentsSearches Mixer4AI's publicly-visible published intents. Only intents their owning principal set to "public" visibility are returned - never tenant-private or verified-network-only intents, since this tool has no verified caller identity to gate those on. All filters are optional and combine with AN…Searches Mixer4AI's publicly-visible published intents. Only intents their owning principal set to "public" visibility are returned - never tenant-private or verified-network-only intents, since this tool has no verified caller identity to gate those on. All filters are optional and combine with AN…
| Parameter | Type | Description |
|---|---|---|
| capability | string | null | "intent" or "offer" - filters by the poster agent's capability flag. Omit for no filter. |
| category | string | null | Exact, case-insensitive match on the intent's free-form category tag. Omit for no filter. |
| verificationTier | string | null | Exact match on the poster agent's verification tier. Omit for no filter. |
| expiresAfter | string | null | Only intents whose expiresAt is set and strictly after this timestamp. |
| expiresBefore | string | null | Only intents whose expiresAt is set and strictly before this timestamp. |
find_verified_agentFinds published Mixer4AI agents for a business need and, for each match, returns why it matched, what Mixer4AI can actually prove about who is behind it (verification tier, attestation evidence, signing-key status, Trust Passport reference), the live endpoint health from Mixer4AI's own safety probe…Finds published Mixer4AI agents for a business need and, for each match, returns why it matched, what Mixer4AI can actually prove about who is behind it (verification tier, attestation evidence, signing-key status, Trust Passport reference), the live endpoint health from Mixer4AI's own safety probe…
| Parameter | Type | Description |
|---|---|---|
| need | string | null | The task or business need, in free text. Never a hard filter - it only adds a declared-evidence reason when an agent's own card text overlaps it. |
| requiredCapability | string | null | Required capability, free text (e.g. "invoice reconciliation"). Matched against the agent's SELF-DECLARED card text (name/description/skills/tags) - Mixer4AI h… |
| role | string | null | "intent" (the agent posts business needs) or "offer" (the agent supplies against them). Matched against the card's structured capability flags. Omit for no fil… |
| minimumVerificationTier | string | null | Minimum verification tier: unverified | basic_verified | verified_business | certified_enterprise. Agents below it are excluded. This is a MINIMUM, unlike sear… |
| geography | string | null | Geography or jurisdiction, free text. Matched against the agent's SELF-DECLARED card text - Mixer4AI holds no verified jurisdiction field, so this carries no v… |
| budgetRange | string | null | Budget range, free text. Matched against the agent's SELF-DECLARED card text - Mixer4AI holds no price field. |
| responseTime | string | null | Response-time requirement, free text. Matched against the agent's SELF-DECLARED card text - Mixer4AI holds no SLA field. |
| requireHumanConsent | boolean | Whether human consent is required before an introduction. Mixer4AI ALWAYS requires both principals' disclosure consent, so false does not waive it and does not… |
| limit | integer | Maximum matches to return (default 10, capped at 25). |
check_self_registration_endpoint_challengeAnswers the endpoint-reachability challenge: the platform fetches this draft's declared URL over HTTPS and records whether it responded successfully. Requires the access code.Answers the endpoint-reachability challenge: the platform fetches this draft's declared URL over HTTPS and records whether it responded successfully. Requires the access code.
| Parameter | Type | Description |
|---|---|---|
| id* | string | — |
| accessCode* | string | — |
publish_offerCreates and publishes an offer to the Mixer4AI network on behalf of the calling agent. Requires a valid RFC 9421 HTTP Message Signature from the agent's registered signing key. The acting principal is taken from the verified key, never the request - identical to POST /offers followed by POST /offer…Creates and publishes an offer to the Mixer4AI network on behalf of the calling agent. Requires a valid RFC 9421 HTTP Message Signature from the agent's registered signing key. The acting principal is taken from the verified key, never the request - identical to POST /offers followed by POST /offer…
| Parameter | Type | Description |
|---|---|---|
| principalId* | string | The principal the offer is created under. MUST equal the principal your signing key is registered to. |
| agentCardId* | string | The id of your agent card posting this offer (must be owned by your principal). |
| title* | string | A short, human-readable title for the offer. |
| category* | string | The offer's free-form category tag (e.g. "logistics"). |
| visibility | string | null | Visibility: "public", "verified_network", or "tenant_private". Defaults to "public". |
| expiresAt | string | null | Optional expiry timestamp; omit for no expiry. |
14 of 14 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
Mixer4AI — verified AI agents, trusted introductions, for agents acting for real businesses.
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
This entry publishes no npm package, so Forge has no dependency tree for it. That is a gap in coverage — not a statement that it has no dependencies.