Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Pixelbolt pixel art toolkit

MCPB · PIXELBOLT.MCPB

Pixel art and sprite animation for agents: JSON recipes to PNG, APNG, GIF and sprite sheets.

Available components

52 Trust /100

Last scanned (2 hours ago)

Scores higher than 88% of MCPB servers

Category Design and Media

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security13
  • No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.Unverified
  • Known CVEs could not be checked: we found no dependency list to check in this bundle: either it runs a compiled binary, whose bundled manifests we do not read, or none of the package.json, requirements.txt, pyproject.toml or uv.lock files it ships for its runtime declares a dependency we can read (a requirements.txt that only points at a setup.py project, a local path, or a nested requirements file we cannot follow counts as none).Unverified
  • No install/post-install scripts declared.Pass
  • Dependency health could not be checked: we found no dependency list to check in this bundle: either it runs a compiled binary, whose bundled manifests we do not read, or none of the package.json, requirements.txt, pyproject.toml or uv.lock files it ships for its runtime declares a dependency we can read (a requirements.txt that only points at a setup.py project, a local path, or a nested requirements file we cannot follow counts as none).Unverified
Provenance & Transparency97
  • Source repository is publicly reachable at the declared URL. View diagnostics → Pass
  • Cryptographically verified build provenance (signed, bound to skulitom/Pixelbolt). View diagnostics → Pass
  • Clear OSI-approved license (MIT).Pass
  • Actively maintained (last published 0 days ago).Pass
  • Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability52
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 2322 tokens (~290/item across 8 items; 8 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management13
  • Stability observed for 4 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage89
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 66% of tool parameters carry a description.Partial
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 8 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 9 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 18 Oct 26 +2
    • Tool safety: pass → unverified ▼ security
    • Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. security
    • Schema quality: 261 → 290 ▼ functional
    • Capabilities: pass → unverified ▼ functional
    • Tool coverage: 100 → unverified ▼ functional
    • Stability: unverified → 0.13 ▲ functional
    • Package version: 0.8.0 → 0.9.0 functional
  • 14 Oct 26 +27
    • Injection markers: unverified → pass ▲ security
    • First check of Judged manipulation: pass security
    • Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
    • Tool coverage: unverified → 100 ▲ functional
    • MCP protocol: unverified → pass ▲ functional
    • First check of Schema quality: fail functional
    • First check of Destructive annotations: pass functional
    • First check of Schema quality: fail functional
    • First check of Tool coverage: 66 functional
    • First check of Schema quality: good functional
  • 13 Oct 26 23

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 18 Oct 2026 · Analysed mcpb/https://github.com/skulitom/Pixelbolt/releases/download/v0.9.0/pixelbolt.mcpb@0.9.0

Provenance Verified

A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.

Result Verified
Ecosystem mcpb
Reason Verified
Discovered via GitHub artifact attestations
Source repo skulitom/Pixelbolt
Certificate issuer https://token.actions.githubusercontent.com
Certificate SAN https://github.com/skulitom/Pixelbolt/.github/workflows/release.yml@refs/tags/v0.9.0
Rekor log index 3312720171
Predicate type SLSA build provenance https://slsa.dev/provenance/v1
Subject digest sha256:8e71223eadd0eced17a6b2fbe39be2d953cf4b02e9ccb7fac1c4e9d0fb61f906

Background: How many MCP packages publish verified provenance →

MCP tools · 8 exposed · ~2,201 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
pixel_compile ~303

Build a character animation from parts, a terrain tileset, particle effects such as sparks, embers or dust, simulated smoke, fire, explosions, steam, magic swirls and water (splashes, waterfalls, drips, bubbling potions), or a lighting normal map. Compile a pixelforge-poses source (named parts, attachments, rotated parts, tweened in-betweens, mirrored poses, markers), a pixelforge-autotile template (47-tile blob or 16-tile cardinal sets), a pixelforge-fx source (seeded particle emitters baked into frames), a pixelforge-fluid source (a deterministic fluid simulation mapped onto palette ramps; loops seamlessly) or a pixelforge-normals source (a lighting normal pass derived from a colour recipe, aligned for scene lighting and editable like any recipe) into an ordinary recipe. Saves the recipe as a revision and returns a contact sheet; pass metadata: true for pose attachment/marker metadata, the autotile mask table, particle counts, fluid peaks and per-frame pixel counts, or the normal directions.

NameTypeReqDescription
metadataboolean––
sourceobjectyesA pixelforge-poses, pixelforge-autotile, pixelforge-fx, pixelforge-fluid or pixelforge-normals document (see pixel_help topics). A normals source's recipe may be inline, a file under the server root…

No output schema declared.

No examples provided.

pixel_help ~67

Start here before drawing pixel art, sprites, tiles, icons, effects or animations. Get the Pixelbolt authoring guide, JSON Schema, and a complete editable example. Pass topic poses, scenes, autotile, fx, fluid or normals for those sidecar schemas.

NameTypeReqDescription
topic–––

No output schema declared.

No examples provided.

pixel_import ~115

Turn existing pixel art or a sprite sheet PNG into an editable recipe. Import a native-resolution 8-bit RGB/RGBA PNG (optionally sliced by an unscaled atlas) as an editable recipe without changing any pixel. Pass data (base64 PNG) or path (inside the server root). Saves the recipe as a revision.

NameTypeReqDescription
atlasobject––
datastring–Base64 PNG bytes.
namestring––
pathstring–PNG file path relative to the server root.

No output schema declared.

No examples provided.

pixel_inspect ~621

Look at pixel art, a sprite or an animation frame by frame to check how it looks. See a project without exporting assets. Returns one PNG contact sheet of every frame (or the chosen frames, or one animation in playback order), read left to right and top to bottom, with each cell's frame name and duration. With grid: true it also returns palette-key text grids with x/y rulers for exact pixel checks. view: tile repeats frames 3x3 for seam review. Use region to zoom in. Saves an immutable recipe revision. Use this while iterating; call pixel_render to export.

NameTypeReqDescription
animationstring–Show one animation in playback order instead of frames.
backgroundstring–Cell background: checker (default), transparent, a palette name or a hex color.
diagnosticsboolean–Advisory duplicate, empty, isolated-pixel, palette and loop-boundary evidence, original animation timing, and per-frame counts of pixels a cleanup change would alter (corners, strays).
framesarray–Frame names to show, in this order. * (any characters) and ? (one character) in a name select every matching frame in project order, such as "flash-*". Default: every frame.
gridboolean–Also return each frame as palette-key text rows with x/y rulers. At most 16,384 pixels in total.
layersarray–Isolate named layers, preserving inheritance/transforms/visibility. Omits frame ops, background and final canvas corrections, which do not belong to a named layer.
maxCellsinteger–Bound the preview with evenly spaced samples; returns omitted count and original positions. Does not alter exported animation. Evenly spaced samples can alias with a repeating pattern; use step and o…
nativeboolean–Also return a native-size contact sheet beside the enlarged view.
offsetinteger–First position the step keeps, counting from 0. Default 0; offset 1 with step 2 shows the B frames.
projectobject––
referencestring–Saved revision to compare against at the same origin. Adds a before/after image and changed-pixel report.
regionobject–Crop every frame to this canvas rectangle. Smaller regions are shown larger.
revisionstring–Revision id from an earlier Pixelbolt response. Send it instead of project to reuse that recipe, including after restarting with the same MCP --out directory.
scaleinteger–Contact sheet scale. Default: the largest that fits about 1024px.
stepinteger–Keep every step-th cell of the selection (frames or animation positions), starting at offset: step 2 shows only the A frames of an A/B strobe. Applied before maxCells.
view––Onion uses pink previous/cyan next poses in animation playback order (requires animation). Tile repeats each frame 3x3 and reports doubled edges and wrap steps.

No output schema declared.

No examples provided.

pixel_patch ~369

Fix or tweak pixel art (one pixel, a colour, a frame or its timing) without redrawing it. Change a recipe with targeted edits instead of resending it. Pass revision or project, plus changes applied in order: {"set": path, "value": v}, {"insert": path, "value": v}, {"remove": path}, or {"paint": "frames[blink]", "value": [{"x": 9, "y": 7, "color": "k"}]}. Paint replaces exact RGBA in canvas coordinates after all layers; transparent erases. {"cleanup": "frames[run-2]", "value": {"corners": true}} proposes fixes for doubled corners and stray pixels. Other paths look like frames[blink].layers[body].ops[2].x2, palette.k or animations.idle.frames[-]. Or pass overlay to apply a saved correction overlay. The patch is atomic and the result must validate. Returns the new revision, edit details, every frame whose pixels changed (exact pixels for small changes), timing and animation changes, and a before/after PNG with one row per frame. Saves immutable base and result revisions; render the revision to export assets.

NameTypeReqDescription
changesarray–Edits applied in order. Paths match error paths, such as frames[3].duration; lists also accept [name] and [-] to append.
overlayobject–Apply a saved pixelforge-overlay instead of changes. Canvas-only overlays reapply when the frames they touch are unchanged (reported as rebased).
projectobject––
revisionstring–Revision id from an earlier Pixelbolt response. Send it instead of project to reuse that recipe, including after restarting with the same MCP --out directory.

No output schema declared.

No examples provided.

pixel_render ~309

Export pixel art as game-ready files: sprite sheet, sprites, animations, GIFs or frames for a video. Render a project into PNG sprite sheet, atlas JSON, individual PNGs, APNG animations, CSS, and Canvas player. Writes a new unique folder inside the configured export directory and saves an immutable recipe revision. Returns the folder, key files (relative), frame/animation counts, actual playback and a bounded contact sheet. Large previews report sample positions and omissions; all frames still export. Optionally select an animation.

NameTypeReqDescription
animationstring–Preview this animation in playback order. Default: preview every frame in project order. All animations are always exported.
gifobject–Also write every animation as a GIF in gifs/ for sharing ({} for defaults). Exact colours, at most 256 per frame, never quantized; notes report alpha and timing changes.
listFilesboolean–List every exported file. Default: key files plus frame/animation counts.
projectobject––
revisionstring–Revision id from an earlier Pixelbolt response. Send it instead of project to reuse that recipe, including after restarting with the same MCP --out directory.
sequenceobject–Also write a numbered PNG sequence for a video editor into sequence/: one PNG per video frame with alpha, plus sequence.json and a README with the ffmpeg command for a .mov. The result reports timing…

No output schema declared.

No examples provided.

pixel_scene ~242

Compose a pixel art scene or room from sprites, tilemaps and lighting. Render a pixelforge-scene manifest (placements, tilemaps with autotile legends and neighbour rules, named cues, sequences, trajectories, attachments, ground sorting, shade placements, palette themes and optional multiplied or ramp lighting) at a time in milliseconds and return the image plus placements and warnings. Assets may be inline recipes, files under the server root, or {"revision": id}. Pass export: true to write a replayable scene bundle to a new folder, and sequence: { fps, size } to write the scene as numbered PNG frames for a video editor.

NameTypeReqDescription
densityboolean––
exportboolean––
litboolean––
scaleinteger––
sceneobjectyes–
sequenceobject–Also write a numbered PNG sequence for a video editor into sequence/: one PNG per video frame with alpha, plus sequence.json and a README with the ffmpeg command for a .mov. The result reports timing…
timeinteger––
view–––

No output schema declared.

No examples provided.

pixel_validate ~175

Check a pixel art recipe for mistakes before inspecting or exporting it. Validate a pixel project and return its revision id, dimensions, frame timing, animations, and clipping locations. Pass fps to check the timing against a video frame grid. Saves an immutable recipe revision; no asset export.

NameTypeReqDescription
fpsnumber|string–Also check timing against a video frame rate (24, 25, 29.97, 30, 60 or a fraction): frameGrid lists frame durations that are not whole video frames, positions a sequence would lengthen, shorten or ne…
projectobject––
revisionstring–Revision id from an earlier Pixelbolt response. Send it instead of project to reuse that recipe, including after restarting with the same MCP --out directory.

No output schema declared.

No examples provided.

Install

How do I install the Pixelbolt pixel art toolkit MCP server?

Pixelbolt pixel art toolkit ships as an MCPB bundle, a single file you download and open in an MCP host that supports MCPB bundles, such as Claude Desktop. The host reads the launch command from the bundle's own manifest, so there is no command to copy. Before opening it, check the file's SHA-256 matches the one the MCP registry declares for it, 8e71223eadd0eced17a6b2fbe39be2d953cf4b02e9ccb7fac1c4e9d0fb61f906; the commands to do that are on this page. If it does not match, do not open it.

mcpb · pixelbolt.mcpb

Download bundle

Check the download matches the SHA-256 the MCP registry declares before you open it. If it does not match, do not open the file.

SHA-256

8e71223eadd0eced17a6b2fbe39be2d953cf4b02e9ccb7fac1c4e9d0fb61f906

macOS / Linux

echo "8e71223eadd0eced17a6b2fbe39be2d953cf4b02e9ccb7fac1c4e9d0fb61f906  pixelbolt.mcpb" | shasum -a 256 -c

Windows (PowerShell)

(Get-FileHash -Algorithm SHA256 .\pixelbolt.mcpb).Hash -eq "8e71223eadd0eced17a6b2fbe39be2d953cf4b02e9ccb7fac1c4e9d0fb61f906"

Run it in the folder you saved the bundle to, then open the file with an MCPB-capable host such as Claude Desktop.

Common questions

What is the Pixelbolt pixel art toolkit MCP server?

Pixelbolt pixel art toolkit is an MCP server listed in the public MCP registry as io.github.skulitom/pixelbolt. Pixel art and sprite animation for agents: JSON recipes to PNG, APNG, GIF and sprite sheets. This page covers its MCPB bundle (https://github.com/skulitom/Pixelbolt/releases/download/v0.9.0/pixelbolt.mcpb).

Is the Pixelbolt pixel art toolkit MCP server safe to use?

Pixelbolt pixel art toolkit scores 52 out of 100 on VerifyMCP. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Pixelbolt pixel art toolkit MCP server expose?

Pixelbolt pixel art toolkit exposes 8 tools: pixel_help, pixel_validate, pixel_inspect, pixel_patch, pixel_render, and 3 more. Their descriptions and schemas cost roughly 2,201 tokens of context every time the server is loaded.

What licence is the Pixelbolt pixel art toolkit MCP server under?

Pixelbolt pixel art toolkit declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.