pixalia — an AI-agent door via Bubblio.
Inferred from the transports this listing declares (streamable-http). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read from a real MCP initialize → tools/list handshake against the declared endpoint. No tool was ever invoked — tools/list is the read-only introspection call the protocol defines for this. It reflects what the server advertised at that moment; a hosted endpoint is not pinned to any version and can change without notice.
https://api.bubblio.dev/agent/door_a9015a46f924/mcp5 tools · 2443msaboutWhat this platform is and what visiting agents may do here.What this platform is and what visiting agents may do here.
No input schema was published for this tool.
askAsk about this platform: capabilities, pricing, policies. Answers are grounded in the platform's own knowledge with cited sources.Ask about this platform: capabilities, pricing, policies. Answers are grounded in the platform's own knowledge with cited sources.
| Parameter | Type | Description |
|---|---|---|
| question* | string | The question, in plain language (max 2000 chars). |
list_actionsList the actions this platform has registered for visiting agents: name, description, parameters (JSON Schema), and whether each needs an agent key. No key is needed in advance — quoting a keyed action without one returns connect instructions for your human.List the actions this platform has registered for visiting agents: name, description, parameters (JSON Schema), and whether each needs an agent key. No key is needed in advance — quoting a keyed action without one returns connect instructions for your human.
No input schema was published for this tool.
quoteGet a quote for one action call. The quote pins the exact tool + args and returns a quote_id for confirm. Nothing executes until confirm. Quotes expire after 10 minutes.Get a quote for one action call. The quote pins the exact tool + args and returns a quote_id for confirm. Nothing executes until confirm. Quotes expire after 10 minutes.
| Parameter | Type | Description |
|---|---|---|
| tool* | string | An action name from list_actions. |
| args | object | Arguments for the action, matching its parameters schema (max 16KB). |
| agent_key | string | Optional agent key, minted by a user account on this platform. Don't hunt for one first: quote without a key and, if the action needs one, the quote returns a… |
confirmExecute a quoted action. Confirming executes this action exactly once. A duplicate confirm returns the original receipt, never a second execution. A quote awaiting human approval (status needs_approval) is polled with this same tool — pass wait_seconds to long-poll; polling never consumes the quote.Execute a quoted action. Confirming executes this action exactly once. A duplicate confirm returns the original receipt, never a second execution. A quote awaiting human approval (status needs_approval) is polled with this same tool — pass wait_seconds to long-poll; polling never consumes the quote.
| Parameter | Type | Description |
|---|---|---|
| quote_id* | string | The quote_id returned by quote. |
| agent_key | string | The same agent key the quote was made with. Required to confirm (or poll) a quote that was made with a key — a keyed quote_id is not a bearer token. |
| wait_seconds | number | For quotes awaiting human approval or payment: how long to wait (0–25s) before answering awaiting_human / awaiting_payment. Ignored once the quote is ready. |
| payment_credential | object | Paid actions only: { type, token } — a rail from the quote's payment profile (e.g. type "stripe_spt" with an spt_… token) plus the opaque payment token for it.… |
| payment | object | Compat alias for payment_credential: { rail, token }. Present one or the other, never both. |
5 of 5 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
pixalia — an AI-agent door via Bubblio.
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
This entry publishes no npm package, so Forge has no dependency tree for it. That is a gap in coverage — not a statement that it has no dependencies.