PixilUI components
com.pixilui/pixiluipixilui.comstreamable-httpv0.1.0Scanned
Search and install PixilUI React components for AI product UI into your app.
6 tools: 6 only read.
- Reads private data · 3
- Reads text others write · 1
- Can send data out · 0
- No findings
Anlyon alternative
Run the operations that matter as governed actions.
Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.
Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.
Import an OpenAPI spec →Tools
Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.
6 tools
Only reads 6Show 6 read-only tools
get_install_commandOne shadcn CLI command that installs every listed item into the project, plus the components.json registries snippet to add once.No findings
Why it is in this group
- The name "get_install_command" says "get": a word for reading.
Description, as the server wrote it One shadcn CLI command that installs every listed item into the project, plus the components.json registries snippet to add once. Pro items also need the PIXILUI_TOKEN environment variable.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
get_itemEverything needed to use one item: when to use it and when not, the props table, keyboard, accessibility, motion, files, npm dependencies and the install command.Reads private dataNo findings
Why it is in this group
- The name "get_item" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "table": it reads databases.
Description, as the server wrote it Everything needed to use one item: when to use it and when not, the props table, keyboard, accessibility, motion, files, npm dependencies and the install command. Free items include their source. Pro items include source only when a valid Pro token is sent.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
get_skillThe PixilUI skill for coding agents: SKILL.md and its rule files (design, motion, copy, accessibility, composition, responsive, checklist, components by job, a worked example).Reads private dataNo findings
Why it is in this group
- The name "get_skill" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "file": it reads files.
- private-dataThe input names a file (input.file), and the tool reads: it reads files.
Description, as the server wrote it The PixilUI skill for coding agents: SKILL.md and its rule files (design, motion, copy, accessibility, composition, responsive, checklist, components by job, a worked example). Call without a file for SKILL.md and the file list, or with a file name for one file.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
get_sourceThe raw files of one item with their install paths, for projects that cannot run the shadcn CLI.Reads private dataNo findings
Why it is in this group
- The name "get_source" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "file": it reads files.
Description, as the server wrote it The raw files of one item with their install paths, for projects that cannot run the shadcn CLI. Prefer get_install_command. Pro items need a valid Pro token. shape "standalone" returns one self-contained .tsx instead (free components): it needs only react and motion, no Tailwind and no other items.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
list_itemsBrowse every PixilUI item, optionally filtered by category or tier.Reads text others writeNo findings
Why it is in this group
- The name "list_items" says "list": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "browse": it reads web pages, which anyone can write.
Description, as the server wrote it Browse every PixilUI item, optionally filtered by category or tier. Returns slug, title, kind, category, tier and a one-line description.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
search_itemsFind PixilUI items for a UI job.No findings
Why it is in this group
- The name "search_items" says "search": a word for reading.
Description, as the server wrote it Find PixilUI items for a UI job. Describe what the interface has to do in plain words ("ask before the agent sends", "show tool calls with their output", "modal to confirm a delete"). Searches titles, descriptions, when-to-use notes and tags and returns the best matches first. Call this before writing any UI by hand.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.
- Reads private data3
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write1
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out0
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Findings
Matches of fixed checks, with the text they matched.
No check matched anything in these tool definitions. That is not a safety guarantee.
History
Changes to its tool definitions and to its remote endpoint, newest first.
No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.
Install
Pinned to version 0.1.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http pixilui https://mcp.pixilui.com/mcpclaude mcp add --transport http pixilui https://mcp.pixilui.com/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__pixilui__search_items",
"mcp__pixilui__list_items",
"mcp__pixilui__get_item",
"mcp__pixilui__get_install_command",
"mcp__pixilui__get_source",
"mcp__pixilui__get_skill"
],
"ask": [],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as pixilui. Review it before you use it.
Capability tags behind 4 rules
- mcp__pixilui__list_items untrusted-input
- mcp__pixilui__get_item private-data
- mcp__pixilui__get_source private-data
- mcp__pixilui__get_skill private-data
Pin
Keep the decision: fail CI when the tools change, follow every change, or show a badge.
Pin in CI
Fail a build when the tools you reviewed are not the tools the server serves today.
curl -s "https://anlyon.dev/api/v1/servers/com.pixilui/pixilui/verify?hash=86652c31b06faccb2f3ff424c2e9541f1eec6580ba2021df40432f49ddc2d095" | jq -e '.changed == false'Pinned hash 86652c31b06f, from Nov 4, 2026, 11:18 UTC.
Watch
Get told when its tools change: a new tool, a new description, a new class.
https://anlyon.dev/servers/com.pixilui/pixilui/changes.xmlAn Atom feed. Works in any feed reader or Slack's RSS app.
Badge
[](https://anlyon.dev/servers/com.pixilui/pixilui)Source: MCP Registry. Synced Nov 4, 2026, 11:17 UTC.