com.cobaltcapture/cobalt

Est-ce que com.cobaltcapture/cobalt est sûr ?

Au dernier audit MCP Hub, le serveur MCP « com.cobaltcapture/cobalt » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 12 outils

• add_note≈ 220 tokens

  Append a free-standing text note (not tied to a screenshot) to a review created by create_review. Use for context, steps taken, or a summary of findings between screenshots.

  Paramètres, retour & exemple (3)

  Paramètres

  • text · string · requis
    The note text (plain text or markdown).
  • review · string · requis
    The review slug or URL from create_review.
  • claim_token · string · requis
    The claim_token from create_review (authorizes the write). For a review the human has SAVED to their account, pass the agent token they generated on the review page (Export & more → Hand to your agent) here instead.

  Exemple d'appel

  {"name": "add_note", "arguments": {"text": "texte", "review": "texte", "claim_token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• add_screenshot≈ 752 tokens

  Append one screenshot, with an optional title and note, to the end of a review. The image is stored in Cobalt and shown in the review. Three ways to supply it: `page_url`, a public page that Cobalt renders in a headless browser (`viewport` 'desktop' at 1280px or 'mobile' at 390px, `full_page` for the whole scroll, `hide_selectors` for elements to hide; common cookie banners are hidden automatically), which also returns the rendered image; `image_url`, an image already uploaded to https://cobaltcapture.com/api/upload; or `image`, a small base64 image. This tool only appends; it never changes an existing item (replace_screenshot does that).

  Paramètres, retour & exemple (11)

  Paramètres

  • image · string · optionnel
    A small base64-encoded PNG, JPEG or WebP (data: URL prefix accepted). Intended for images under about 100 KB; larger screenshots are better uploaded and passed as image_url.
  • title · string · optionnel
    Optional short caption for the screenshot.
  • review · string · requis
    The review slug or URL from create_review.
  • comment · string · optionnel
    Optional note describing what this screen shows or what's wrong with it.
  • page_url · string · optionnel
    A public http(s) page for Cobalt to render and screenshot server-side. Pages behind a login can't be rendered. Becomes the item's source_url unless one is passed. Takes 10 to 30 seconds; a site that blocks automated browsers returns an error.
  • viewport · string · optionnel · desktop | mobile
    With page_url: 'desktop' (1280x800, default) or 'mobile' (390x844 phone, 2x, touch).
  • full_page · boolean · optionnel
    With page_url: capture the entire scrollable page instead of the first viewport. Default false. Pages that scroll inside an inner container come back viewport-sized.
  • image_url · string · optionnel
    An image URL on Cobalt's own image host, as returned by https://cobaltcapture.com/api/upload (multipart field `file`, returns {url, key}) or by the editor's window.cobaltGrab(). External URLs are refused.
  • source_url · string · optionnel
    Optional URL of the page the screenshot was taken on.
  • claim_token · string · requis
    The claim_token from create_review (authorizes the write). For a review the human has SAVED to their account, pass the agent token they generated on the review page (Export & more → Hand to your agent) here instead.
  • hide_selectors · array · optionnel
    With page_url: extra CSS selectors to hide before the shot, e.g. ['#newsletter-modal', '.chat-widget']. Common cookie and consent banners are hidden on every render.

  Exemple d'appel

  {"name": "add_screenshot", "arguments": {"review": "texte", "claim_token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• check_inbox≈ 270 tokens

  Read mail delivered to an inbox from create_inbox, newest first, for example a verification code or confirmation link from the signup email of the product being tested. Requires the inbox_token, so only whoever created the inbox can read it. Returns immediately; mail usually arrives within seconds, so an empty result can be checked again shortly. format="html" returns each message's HTML for reviewing the email's design.

  Paramètres, retour & exemple (3)

  Paramètres

  • format · string · optionnel · text | html
    "text" (default) returns each message flattened to readable text, with link targets kept. "html" returns the raw HTML part.
  • address · string · requis
    The inbox address from create_inbox.
  • inbox_token · string · requis
    The inbox_token from create_inbox (authorizes reading).

  Exemple d'appel

  {"name": "check_inbox", "arguments": {"address": "texte", "inbox_token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• create_inbox≈ 198 tokens

  Create a temporary email inbox for testing the signup or email flow of a product the user owns or is authorised to test, within that product's terms. Returns an `address` to enter in the product's form and an `inbox_token` for reading it with check_inbox. Each inbox expires 24 hours after it is created, receives mail only (it cannot send), and accepts mail only while it exists. Up to 20 inboxes can be created per hour from one IP address.

  Paramètres, retour & exemple (1)

  Paramètres

  • review · string · optionnel
    Optional review slug this inbox belongs to — a label for your own bookkeeping.

  Exemple d'appel

  {"name": "create_inbox", "arguments": {"review": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• create_review≈ 332 tokens

  Start a new Cobalt Capture review and get a handle for filling it in. Use this to compile the findings of any site study — a usability pass, a pricing teardown, a positioning audit, a QA run — into one shareable, durable report with real screenshots. Works from any client, chat assistants included: with no browser, add_screenshot(page_url=...) renders the pages for you. Returns a `review` slug and a `claim_token` — pass BOTH back to add_screenshot / add_note to append content. Also returns a `review_url` to share and a `save_url` the human opens (while signed in) to save the review to their account permanently. The review is anonymous and auto-deletes after 30 days unless saved.

  Paramètres, retour & exemple (3)

  Paramètres

  • title · string · requis
    Title of the review, e.g. 'Onboarding walkthrough — Jupiter Invoice'.
  • summary · string · optionnel
    Optional overview shown at the top of the review (plain text or markdown). Good place for the overall task, outcome, and headline findings.
  • product_url · string · optionnel
    Optional URL of the product/site under review.

  Exemple d'appel

  {"name": "create_review", "arguments": {"title": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• email_review≈ 256 tokens

  Email a link to a review to the person who ran the study. Sends only to an address that belongs to a verified Cobalt account (other addresses are refused, which keeps the tool from being used to send unsolicited mail). The email contains only the review link, never text supplied in the call.

  Paramètres, retour & exemple (3)

  Paramètres

  • email · string · requis
    The human's Cobalt account email. Must belong to a verified account, or the send is refused.
  • review · string · requis
    The review slug or URL from create_review.
  • claim_token · string · requis
    The claim_token from create_review (proves you created this review), or, for a saved review, the agent token its owner generated on the review page (Export & more → Hand to your agent).

  Exemple d'appel

  {"name": "email_review", "arguments": {"email": "texte", "review": "texte", "claim_token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• fetch≈ 168 tokens

  Fetch the full text of a Cobalt study by the id search returned, or of any Cobalt review by its URL (/r/<slug>) or slug. Returns text: findings, prices, the comparison matrix, and the underlying review's notes with links to its screenshots. Use get_review instead when you need to see the screenshots as images.

  Paramètres, retour & exemple (1)

  Paramètres

  • id · string · requis
    An id from search (e.g. 'teardown:canva'), or a review URL or slug.

  Exemple d'appel

  {"name": "fetch", "arguments": {"id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_playbook≈ 540 tokens

  Return the full text of a Cobalt study playbook: a step-by-step method for a kind of product review that ends in a shareable Cobalt review. Available: 'pricing_teardown' (can a buyer tell what they would pay and which tier fits; public pages only); 'website_teardown' (what each key page leads with and says, judged as a first-time visitor; public pages only; 'positioning_pass' is its old name); 'comparison_study' (two or three products compared for one buying decision, with a sourced matrix; public pages plus web search); 'usability_pass' (a first-time-user audit: a new user signs up and tries to get real jobs done, judged as a whole experience; needs a browser); 'flow_pass' (one specific flow the user names, such as checkout or inviting a teammate, walked step by step including its emails; needs a browser); 'investigation_pass' (a product investigation of an app the user owns, run in its own environment; needs a browser and usually the code); 'design_pass' (what the product looks like across nine phone, tablet and desktop sizes with menus, dialogs and forms opened: uneven padding, near-miss alignment, cut-off or colliding text, and a few hard fundamentals, nominated by a script in the page; needs a browser). The public-page studies work without a browser because add_screenshot(page_url) renders pages server-side. The same methods are offered as MCP prompts, and every playbook's full text is published at https://cobaltcapture.com/developers#playbooks. Each one tells the user its plan before acting, and the ones that sign up or use a product stop for the user's approval first.

  Paramètres, retour & exemple (3)

  Paramètres

  • url · string · optionnel
    The site to run it against, if you already know it.
  • name · string · requis
    Playbook name, e.g. 'usability_pass'.
  • companion_of · string · optionnel
    design_pass only: the URL of the usability or scenario review this pass accompanies.

  Exemple d'appel

  {"name": "get_playbook", "arguments": {"name": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_review≈ 142 tokens

  Fetch a Cobalt Capture review by its share link or slug. Returns the reviewer's notes as text AND each annotated screenshot as an image, so you can see exactly what was marked and what to change.

  Paramètres, retour & exemple (1)

  Paramètres

  • review · string · requis
    A Cobalt review URL (https://cobaltcapture.com/r/<slug> or /s/<slug>) or just the slug.

  Exemple d'appel

  {"name": "get_review", "arguments": {"review": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• replace_screenshot≈ 742 tokens

  Overwrite one existing screenshot in a review with a new capture, in the same position. Destructive: the old image and any pins or annotations on it are removed and cannot be recovered; the title and comment change only if new ones are passed. Works on screenshots only, not notes. Takes the same capture arguments as add_screenshot, plus `item`, the 1-based number of the screenshot to replace.

  Paramètres, retour & exemple (12)

  Paramètres

  • item · integer · requis
    The 1-based number of the existing screenshot item to overwrite (as it appears in the review, counting notes).
  • image · string · optionnel
    A small base64-encoded PNG, JPEG or WebP (data: URL prefix accepted). Intended for images under about 100 KB; larger screenshots are better uploaded and passed as image_url.
  • title · string · optionnel
    Optional short caption for the screenshot.
  • review · string · requis
    The review slug or URL from create_review.
  • comment · string · optionnel
    Optional note describing what this screen shows or what's wrong with it.
  • page_url · string · optionnel
    A public http(s) page for Cobalt to render and screenshot server-side. Pages behind a login can't be rendered. Becomes the item's source_url unless one is passed. Takes 10 to 30 seconds; a site that blocks automated browsers returns an error.
  • viewport · string · optionnel · desktop | mobile
    With page_url: 'desktop' (1280x800, default) or 'mobile' (390x844 phone, 2x, touch).
  • full_page · boolean · optionnel
    With page_url: capture the entire scrollable page instead of the first viewport. Default false. Pages that scroll inside an inner container come back viewport-sized.
  • image_url · string · optionnel
    An image URL on Cobalt's own image host, as returned by https://cobaltcapture.com/api/upload (multipart field `file`, returns {url, key}) or by the editor's window.cobaltGrab(). External URLs are refused.
  • source_url · string · optionnel
    Optional URL of the page the screenshot was taken on.
  • claim_token · string · requis
    The claim_token from create_review (authorizes the write). For a review the human has SAVED to their account, pass the agent token they generated on the review page (Export & more → Hand to your agent) here instead.
  • hide_selectors · array · optionnel
    With page_url: extra CSS selectors to hide before the shot, e.g. ['#newsletter-modal', '.chat-widget']. Common cookie and consent banners are hidden on every render.

  Exemple d'appel

  {"name": "replace_screenshot", "arguments": {"item": 1, "review": "texte", "claim_token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• search≈ 186 tokens

  Search the studies Cobalt Capture has published on well-known products: pricing teardowns, positioning audits, and head-to-head comparisons (for example Canva pricing, Spotify vs Apple Music). Returns matching studies as {id, title, url}; pass an id to fetch for the full text. It does NOT search private reviews, which are reachable only by their link (use get_review, or fetch with the review URL).

  Paramètres, retour & exemple (1)

  Paramètres

  • query · string · requis
    What to look for, e.g. 'canva pricing' or 'spotify'.

  Exemple d'appel

  {"name": "search", "arguments": {"query": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• update_review≈ 301 tokens

  Set or replace a review's summary and/or title. The summary is shown at the top of the review, above every screenshot and note. Replaces any existing summary or title.

  Paramètres, retour & exemple (5)

  Paramètres

  • title · string · optionnel
    Optional replacement title.
  • review · string · requis
    The review slug or URL from create_review.
  • summary · string · optionnel
    The overview shown at the top of the review. Replaces any existing summary.
  • claim_token · string · requis
    The claim_token from create_review (authorizes the write). For a review the human has SAVED to their account, pass the agent token they generated on the review page (Export & more → Hand to your agent) here instead.
  • compared_to · string · optionnel
    Optional: when this run repeats an earlier study, the earlier review's slug or URL. Recorded so re-runs can be compared over time.

  Exemple d'appel

  {"name": "update_review", "arguments": {"review": "texte", "claim_token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://cobaltcapture.com/mcp