pixasso-mcp

MCPattested

v1.0.4io.github.ErebuzzzUnknownUpdated 2d agonpm GitHub

End-to-end frontend engineering and design orchestrator across 16 foundational pillars.

Works in

ClaudeCursorCopilotGemini

Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Attested build

A verified provenance attestation binds this artifact to the listed repository. Nobody has claimed the listing yet — this proves where the code was built, not who stands behind it.

1GitHub stars

2d agoLast update

Package

Authorio.github.Erebuzzz

LicenseUnknown

Version1.0.4

Sourcenpm+mcp-registry

GitHubErebuzzz/pixasso

SBOMCycloneDX 1.6 ↓

Trust Status

A

85/100Trusted

✓Listed in Forge index+10/10

✓Identity verified · attested build+20/20

—Ed25519 publish signature+0/5

→ Included automatically when the publisher runs `forge publish`

—Domain verification+0/5

→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }

✓npm Trusted Publishing (Sigstore)+5/5

—npm maintainer match+0/5

→ Publisher: add the verified GitHub login to the npm package's maintainers (npm owner add <login>)

✓CVE scan · clean+30/30

✓Static analysis · clean+20/20

Paste into Claude Code, Cursor, or any AI assistant to fix all gaps

StatusIdentity verified

PublisherUnverified

SignatureUnsigned

Domain—

Provenance✓ Sigstore-verified · 6443f69

Dependencies✓ 60 resolved+ · none vulnerable

Tool surface19 tools · none privileged

Security scan✓ Cleanv1.1.0 · todayHow well does this scan work?

EvalsNone

IndexedSep 23, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

19 tools · none privileged

Statically extracted from the published packagev1.1.0 · 6h ago

Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.

Filter toolsPrivileged only

pixasso_discover_intentInitiate adaptive intent discovery for a frontend project across the 16 pillars and generate tailored popup questions.

Initiate adaptive intent discovery for a frontend project across the 16 pillars and generate tailored popup questions.

No input schema was published for this tool.

pixasso_search_referencesSearch across all 20 Pixasso design reference catalogs, 11 templates, and the 16 frontend pillars.

Search across all 20 Pixasso design reference catalogs, 11 templates, and the 16 frontend pillars.

No input schema was published for this tool.

pixasso_fetch_referenceFetch and deconstruct a live reference website server-side. Extracts page title, meta description, heading structure (h1-h4), visible links, and readable text content. Detects client-rendered SPAs (Framer, Webflow, React shells) and flags unrendered content rather than hallucinating. NOTE: Does not…

Fetch and deconstruct a live reference website server-side. Extracts page title, meta description, heading structure (h1-h4), visible links, and readable text content. Detects client-rendered SPAs (Framer, Webflow, React shells) and flags unrendered content rather than hallucinating. NOTE: Does not…

No input schema was published for this tool.

pixasso_generate_genomeValidate design decisions and compile a machine-readable design-genome.yaml specification.

Validate design decisions and compile a machine-readable design-genome.yaml specification.

No input schema was published for this tool.

pixasso_generate_brainBuild a Graphify-style Mermaid visualization mapping design decisions and Task DAG execution state.

Build a Graphify-style Mermaid visualization mapping design decisions and Task DAG execution state.

No input schema was published for this tool.

pixasso_audit_designAudit HTML, JSX, or CSS against generic AI clichés, accessibility guidelines, and the 16-pillar rubric.

Audit HTML, JSX, or CSS against generic AI clichés, accessibility guidelines, and the 16-pillar rubric.

No input schema was published for this tool.

pixasso_generate_test_planGenerate an automated multi-viewport testing matrix (390px, 768px, 1024px, 1440px) and overflow detection script.

Generate an automated multi-viewport testing matrix (390px, 768px, 1024px, 1440px) and overflow detection script.

No input schema was published for this tool.

intent-discoveryInitiate adaptive intent discovery using the Adaptive Discovery Matrix before generating code.

Initiate adaptive intent discovery using the Adaptive Discovery Matrix before generating code.

No input schema was published for this tool.

projectTypeArchetype of the project: full_web_app, editorial_landing_page, creative_3d_canvas, or design_system

Archetype of the project: full_web_app, editorial_landing_page, creative_3d_canvas, or design_system

No input schema was published for this tool.

briefBrief description of the intended product or interface

Brief description of the intended product or interface

No input schema was published for this tool.

frontend-architectureScaffold an end-to-end frontend engineering architecture across all 16 foundational pillars.

Scaffold an end-to-end frontend engineering architecture across all 16 foundational pillars.

No input schema was published for this tool.

applicationNameName of the web application or service

Name of the web application or service

No input schema was published for this tool.

stackPreferencePreferred frontend stack (e.g. Next.js 15, React 19, Vite, SvelteKit)

Preferred frontend stack (e.g. Next.js 15, React 19, Vite, SvelteKit)

No input schema was published for this tool.

design-critiqueConduct a rigorous 5-pillar design and code quality audit to detect generic AI tropes and a11y flaws.

Conduct a rigorous 5-pillar design and code quality audit to detect generic AI tropes and a11y flaws.

No input schema was published for this tool.

markupOrUrlComponent HTML/JSX markup, CSS, or live URL to critique

Component HTML/JSX markup, CSS, or live URL to critique

No input schema was published for this tool.

typography-directionDefine an intentional typography system (display, serif, monospace) using modular math scales.

Define an intentional typography system (display, serif, monospace) using modular math scales.

No input schema was published for this tool.

narrativeToneNarrative voice and atmosphere (e.g. Noerd editorial, Stripe paper, technical monospace)

Narrative voice and atmosphere (e.g. Noerd editorial, Stripe paper, technical monospace)

No input schema was published for this tool.

interface-qaGenerate an automated multi-viewport testing matrix (390px, 768px, 1024px, 1440px) and overflow checks.

Generate an automated multi-viewport testing matrix (390px, 768px, 1024px, 1440px) and overflow checks.

No input schema was published for this tool.

pageUrlTarget URL or local dev server address to verify

Target URL or local dev server address to verify

No input schema was published for this tool.

19 of 19 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

End-to-end frontend engineering and design orchestrator across 16 foundational pillars.

Keywords

mcp

Alternatives

Comparing tool surfaces…

Tools exposed

19 tools · none privileged · observed 2026-09-23 by static extraction. A tool surface is what one scan read on one day, not a live capability list.

pixasso_discover_intent
pixasso_search_references
pixasso_fetch_reference
pixasso_generate_genome
pixasso_generate_brain
pixasso_audit_design
pixasso_generate_test_plan
intent-discovery
projectType
brief
frontend-architecture
applicationName
stackPreference
design-critique
markupOrUrl
typography-direction
narrativeTone
interface-qa
pageUrl

Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.

Dependency tree

What one Forge scan resolved from npm metadata on 2026-09-23 — observed resolution, not a publisher declaration.

60 packages resolved · 8 direct · none carrying advisories Resolution stops at depth 4 and 60 packages.

zod3.25.76
hono4.13.8
agents0.17.413 dependencies
- yaml2.9.1
- yargs18.2.0+6 not drawn
- nanoid5.1.16
- esbuild0.28.2
- mimetext3.0.28incomplete+2 not drawn
- partyserver0.5.10incomplete
- partysocket1.3.0incomplete
- cron-schedule6.0.0
- @cloudflare/codemode0.4.4incomplete
- @cfworker/json-schema4.1.1
- @rolldown/plugin-babel0.2.4incomplete
- @modelcontextprotocol/sdk1.29.0incomplete
- @babel/plugin-proposal-decorators8.0.2incomplete
octokit5.0.5+8 not drawn3 dependencies
- @octokit/app16.1.4incomplete
- @octokit/core7.0.8incomplete
- @octokit/oauth-app8.0.4incomplete
linkedom0.18.13+5 not drawn
@mozilla/readability0.6.0
@modelcontextprotocol/sdk1.30.1+16 not drawn1 dependency
- hono4.13.8shown above
@cloudflare/workers-oauth-provider0.10.4

The crawl stopped at the 60-package limit. The rest of the tree was never resolved.

36 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)

Declared but not resolved

121 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.

package cap reached: 121

@babel/runtime-corejs3 ^7.26.0 — required by mimetext@3.0.28package cap reached
js-base64 ^3.7.7 — required by mimetext@3.0.28package cap reached
mime-types ^2.1.35 — required by mimetext@3.0.28package cap reached
nanoid ^5.1.9 — required by partyserver@0.5.10package cap reached
event-target-polyfill ^0.0.4 — required by partysocket@1.3.0package cap reached
acorn ^8.17.0 — required by @cloudflare/codemode@0.4.4package cap reached
@types/json-schema ^7.0.15 — required by @cloudflare/codemode@0.4.4package cap reached
picomatch ^4.0.7 — required by @rolldown/plugin-babel@0.2.4package cap reached
ajv ^8.17.1 — required by @modelcontextprotocol/sdk@1.29.0package cap reached
zod ^3.25 || ^4.0 — required by @modelcontextprotocol/sdk@1.29.0package cap reached
cors ^2.8.5 — required by @modelcontextprotocol/sdk@1.29.0package cap reached
hono ^4.11.4 — required by @modelcontextprotocol/sdk@1.29.0package cap reached

+109 more not listed. The counts by reason above cover all of them.

Not followed: peerDependencies, optionalDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.