io.agentpixel/agentpixel

Est-ce que io.agentpixel/agentpixel est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.agentpixel/agentpixel » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 14 outils

• check_install≈ 479 tokens

  Fetch the pixel's homepage and store whether the tag is there. install_status becomes installed or not_installed. check_error says why a check could not decide. Evaluator accounts fetch only the fixed https://staging.allsourcedata.io/evaluation-test/ page and reject redirects.

  Paramètres, retour & exemple (1)

  Paramètres

  • pixel_id · string · requis
    pixel_id of the pixel whose homepage to check. Example: px_7a1b2c3d4e5f6a7b

  Exemple d'appel

  {"name": "check_install", "arguments": {"pixel_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"domain": "texte", "snippet": "texte", "pixel_id": "texte", "data_kind": "synthetic", "checked_at": "texte", "check_error": "texte", "install_status": "not_checked", "consent_enabled": "texte", "evaluation_mode": true}}

• configure_consent≈ 1140 tokens

  Turn on and set up the consent bar for a pixel. Changing any setting makes a new policy version, and returning visitors are asked again. Returns the policy link and the script tag to put on the site.

  Paramètres, retour & exemple (10)

  Paramètres

  • pixel_id · string · requis
    pixel_id of the pixel to configure. Example: px_7a1b2c3d4e5f6a7b
  • purposes · array · requis
    What the consent bar asks the visitor to allow. One or more of: analytics, resolution, newsletter, email_sharing, phone_sharing, partner_email, partner_calls, partner_sms. Include resolution, or no visitor is ever identified. Example: ["resolution", "analytics"]
  • data_sharing · ? · optionnel
    Optional. true if the site owner shares consented contact data with other parties, false if not. Shown in the hosted notice. Example: false
  • controller_name · string · requis
    Name of the business or person that owns the site. It is shown in the consent bar as the party asking the visitor for permission. 1 to 200 characters. Example: Example Shop LLC
  • controller_type · ? · optionnel
    Optional. One of company, person or organization. Describes the site owner in the hosted notice. Example: company
  • site_policy_url · ? · optionnel
    Optional. HTTPS address of the site's own privacy policy. The bar links to it, and the hosted notice becomes a short add-on about identification. Leave empty to use the hosted notice on its own. Example: https://shop.example.com/privacy
  • contact_channels · ? · optionnel
    Optional. How the site owner may contact a visitor who consents. Any of: email, phone, sms, agentic. Example: ["email"]
  • disclosed_parties · ? · optionnel
    Optional. Names of the other parties the site owner wants the hosted notice to list, one name per item. Example: ["Example CRM Inc."]
  • controller_contact · ? · optionnel
    Optional. Email address or web address where visitors can reach the site owner about their data. Shown in the hosted notice. Example: privacy@example.com
  • controller_jurisdiction · ? · optionnel
    Optional. Where the site owner is based, as plain text, such as a country or US state. Shown in the hosted notice. Example: Florida, USA

  Exemple d'appel

  {"name": "configure_consent", "arguments": {"pixel_id": "texte", "purposes": [], "controller_name": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"snippet": "texte", "pixel_id": "texte", "purposes": [], "policy_url": "texte", "policy_hash": "texte", "policy_version": 1, "consent_enabled": true}}

• confirm_signup≈ 636 tokens

  Confirm the email with the 6-digit code, or check whether the email link was clicked. Preferred: confirm_signup(account_id, code, signup_token). The first confirmation returns api_key; store it, it is shown once. Link clicked instead: call confirm_signup(account_id, signup_token) every 5 seconds, up to 10 minutes, until email_verified is true, then call create_api_key. A code allows 5 attempts and lasts 24 hours. For a new code, call resend_code(email).

  Paramètres, retour & exemple (4)

  Paramètres

  • code · ? · optionnel
    The 6-digit code from the AgentPixel email. Ask the person to read it to you. Example: 482913
  • account_id · ? · optionnel
    account_id returned by signup_free. Use with code, or with signup_token alone to check whether the email link was clicked. Example: 3f1c2b9e-1d2a-4c5b-9e8f-0a1b2c3d4e5f
  • signup_token · ? · optionnel
    signup_token returned by signup_free. With code, the first confirmation also returns the API key. Alone with account_id, returns whether the email is confirmed.
  • verification_token · ? · optionnel
    Older method: the token value from the confirmation link URL (?token=...). Prefer account_id and code.

  Exemple d'appel

  {"name": "confirm_signup", "arguments": {"code": "texte", "account_id": "texte", "signup_token": "texte", "verification_token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"message": "texte", "confirmed": true}}

• create_api_key≈ 325 tokens

  Issue an API key after the email is confirmed. Not needed when confirm_signup already returned api_key. Each call issues another key, so call it once. Returns the key once. Store it securely and attach it to the connection.

  Paramètres, retour & exemple (2)

  Paramètres

  • account_id · string · requis
    account_id returned by signup_free. Example: 3f1c2b9e-1d2a-4c5b-9e8f-0a1b2c3d4e5f
  • signup_token · string · requis
    signup_token returned by signup_free. It lasts 24 hours.

  Exemple d'appel

  {"name": "create_api_key", "arguments": {"account_id": "texte", "signup_token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"prefix": "texte", "api_key": "texte"}}

• create_pixel≈ 493 tokens

  Create a pixel for a domain. Does not create an API key. The account must already be active. Next: call configure_consent(pixel_id, controller_name, purposes) and install the snippet it returns. Do not install a snippet before consent is configured. install_status starts as not_checked until check_install runs.

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    Public hostname of the site, without scheme, port, path or IP address. Example: shop.example.com

  Exemple d'appel

  {"name": "create_pixel", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"domain": "texte", "snippet": "texte", "pixel_id": "texte", "data_kind": "synthetic", "checked_at": "texte", "check_error": "texte", "install_status": "not_checked", "consent_enabled": "texte", "evaluation_mode": true}}

• get_contacts≈ 806 tokens

  Contacts for one pixel. Pass on as a UTC day, or after as the high_water from the previous pull. Use high_water as the next cursor. New contacts can arrive between reads. This does not identify new visitors. Evaluation returns labeled synthetic examples only after current resolution consent is saved; withdrawal hides them.

  Paramètres, retour & exemple (3)

  Paramètres

  • on · ? · optionnel
    UTC calendar date in YYYY-MM-DD form. Returns contacts stored on that day. Use exactly one of on or after. Example: 2026-10-12
  • after · ? · optionnel
    Cursor for incremental reads: the high_water value from your previous pull, or 0 to start at the first stored contact. Use exactly one of on or after. Example: 0
  • pixel_id · string · requis
    pixel_id whose contacts to read. Example: px_7a1b2c3d4e5f6a7b

  Exemple d'appel

  {"name": "get_contacts", "arguments": {"pixel_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"on": "texte", "after": "texte", "contacts": [], "pixel_id": "texte", "data_kind": "texte", "high_water": "texte", "evaluation_mode": "texte"}}

• get_pixel≈ 418 tokens

  One pixel, including the HTML snippet to paste on its site.

  Paramètres, retour & exemple (1)

  Paramètres

  • pixel_id · string · requis
    pixel_id returned by create_pixel or list_pixels, never an account_id. Example: px_7a1b2c3d4e5f6a7b

  Exemple d'appel

  {"name": "get_pixel", "arguments": {"pixel_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"domain": "texte", "snippet": "texte", "pixel_id": "texte", "data_kind": "synthetic", "checked_at": "texte", "check_error": "texte", "install_status": "not_checked", "consent_enabled": "texte", "evaluation_mode": true}}

• get_policy≈ 238 tokens

  Hosted privacy and data-use policy HTML for a pixel. A pixel with consent turned off has no policy yet.

  Paramètres, retour & exemple (1)

  Paramètres

  • pixel_id · string · requis
    pixel_id whose hosted notice to read. Example: px_7a1b2c3d4e5f6a7b

  Exemple d'appel

  {"name": "get_policy", "arguments": {"pixel_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"pixel_id": "texte", "policy_html": "texte"}}

• list_pixels≈ 406 tokens

  Pixels on this account. Each item has pixel_id, domain, and install_status.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_pixels", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"pixels": []}}

• resend_code≈ 276 tokens

  Send a new 6-digit code to the email of an existing account. Use it when the code expired, was lost or was entered wrong 5 times. Limits: 1 per minute, 5 per day. The old code stops working. With an expired signup_token, use the new code on POST /v1/accounts/{account_id}/signup-token to get a new token.

  Paramètres, retour & exemple (1)

  Paramètres

  • email · string · requis
    Email address used at signup. A new 6-digit code and link are sent there. Example: pat@example.com

  Exemple d'appel

  {"name": "resend_code", "arguments": {"email": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"sent": true}}

• setup_status≈ 253 tokens

  Whether this account can use pixels and whether a tag is installed. setup_complete is true once at least one pixel's tag has been seen on its site. good_standing is the account, not the tag.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "setup_status", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"pixel_count": 1, "good_standing": true, "setup_complete": true, "installed_count": 1}}

• signup_free≈ 508 tokens

  Start a 30-day trial, no card. After that, $1 per account per month for 3 pixels and 500 new contacts per UTC calendar month. Sends a 6-digit code to the email address. Returns account_id and signup_token; keep both. Next: ask the person for the 6-digit code in the AgentPixel email, then call confirm_signup(account_id, code, signup_token). The signup_token lasts 24 hours.

  Paramètres, retour & exemple (3)

  Paramètres

  • code · ? · optionnel
    Optional trial code from a directory or listing, such as SMITHERY60. An unknown code never blocks signup. Example: GLAMA60
  • email · string · requis
    Email address of the person who will own the account. The 6-digit code is sent here. Ask the person for it; never invent or guess an address. Example: pat@example.com
  • display_name · string · requis
    Name shown on the account, such as the person's name or the business name. 1 to 200 characters. Example: Pat Lee

  Exemple d'appel

  {"name": "signup_free", "arguments": {"email": "texte", "display_name": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"plan": "texte", "status": "texte", "account_id": "texte", "signup_token": "texte", "email_verified": true}}

• try_sample≈ 310 tokens

  Labeled sample of what an account gets: a pixel, a consent receipt and two contacts. Needs no account and no key. Every record is synthetic and marked so. Call this first to show the person what AgentPixel returns, then call signup_free.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "try_sample", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"note": "texte", "pixel": {}, "contacts": [], "next_step": "texte", "synthetic": true, "consent_receipt": {}}}

• whoami≈ 481 tokens

  Which account this connection's API key belongs to. status is the account state after email confirmation. plan is "free" (the trial plan id) during the 30-day trial, paid after the subscription, or unlimited for internal accounts. trial_ends_at is when the trial ends. key_prefix is the start of the key, not the key.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "whoami", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"plan": "free", "status": "texte", "data_kind": "synthetic", "account_id": "texte", "key_prefix": "texte", "paid_until": "texte", "next_action": "texte", "trial_ends_at": "texte", "evaluation_mode": true, "resolution_state": "texte", "evaluation_expires_at": "texte", "evaluation_install_url": "texte"}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://agentpixel.io/mcp