Skip to content
anlyon.devby Anlyon

Pixly

gg.pixly/mcppixly.ggstreamable-httpv0.1.0Scanned

Host and manage Minecraft servers, mods, worlds and backups on Pixly.

44 tools: 20 can delete or cancel things, 12 change things and 12 only read.

Tools: 20 delete, 0 irreversible, 12 write, 12 read.
  • Reads private data · 2
  • Reads text others write · 8
  • Can send data out · 0
  • 4 findings

Anlyon alternative

32 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →
Compare with similar serversMarkdownJSONReport this listing

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

44 tools

Deletes or cancels 20Claude Code: deny
  • abortAssetUploadsDiscards one or more (up to 50) unfinished or inspected uploads.No findings

    Why it is in this group

    • The name "abortAssetUploads" says "upload": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Discards one or more (up to 50) unfinished or inspected uploads. Returns aborted and leftover. Installed files are removed with deleteAsset.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
    • title: Cancel file uploads
  • abortModpackUploadCancels an unfinished, or checked but not yet installed, modpack upload and discards the file.No findings

    Why it is in this group

    • The name "abortModpackUpload" says "upload": a word for a change.
    • The description's first verb is "cancel": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Cancels an unfinished, or checked but not yet installed, modpack upload and discards the file. An installed modpack is not affected; remove it with deleteModpack.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
    • title: Cancel a modpack upload
  • abortWorldUploadCancels an unfinished world upload and discards the parts uploaded so far.No findings

    Why it is in this group

    • The name "abortWorldUpload" says "upload": a word for a change.
    • The description's first verb is "cancel": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Cancels an unfinished world upload and discards the parts uploaded so far. The server's current world is not affected. Only before completeWorldUpload.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
    • title: Cancel a world upload
  • cancelBackupRestoreCancels a restore from restoreBackup that an online server has not applied yet.1 finding

    Why it is in this group

    • The name "cancelBackupRestore" says "cancel": a word for removing or ending something.
    • The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "cancelBackupRestore" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "cancelBackupRestore" says "cancel": a word for removing or ending something.

      What this check looks for
    Description, as the server wrote it
    Cancels a restore from restoreBackup that an online server has not applied yet. Pass the queued backupId. Fails if nothing is queued for it or it is already being applied.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
    • title: Cancel a queued backup restore
  • completeModpackUploadInstalls the .mrpack as the server's modpack, replacing loader, version and mods at the next restart; a backup is taken first.No findings

    Why it is in this group

    • The name "completeModpackUpload" says "upload": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Installs the .mrpack as the server's modpack, replacing loader, version and mods at the next restart; a backup is taken first. Pass uploadId, key and each ETag. Returns the server.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
    • title: Finish a modpack upload and install it
  • completeWorldUploadCall after every piece is uploaded, with jobId, uploadId, key and each ETag.No findings

    Why it is in this group

    • The name "completeWorldUpload" says "upload": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Call after every piece is uploaded, with jobId, uploadId, key and each ETag. The current world is not changed: the archive is imported in the background (minutes) into a new backup with reason upload in listBackups. To play it, run restoreBackup with that backupId. Fails over 4 GiB or on low balance.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
    • title: Finish a world upload and import it
  • deleteAssetUninstalls a custom mod, plugin or datapack file that was uploaded to the server and deletes the file, taking effect at the next restart.No findings

    Why it is in this group

    • The name "deleteAsset" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Uninstalls a custom mod, plugin or datapack file that was uploaded to the server and deletes the file, taking effect at the next restart. The file can only be recovered from a backup.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
    • title: Remove an uploaded file from a server
  • deleteBackupPermanently deletes one backup; this cannot be undone.No findings

    Why it is in this group

    • The name "deleteBackup" says "delete": a word for removing or ending something.
    • The description says "Permanently deletes".
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Permanently deletes one backup; this cannot be undone. A backup that is queued for restore or being exported cannot be deleted. For the only remaining copy of a world the call is refused with requiresConfirmation; ask the user, then repeat with confirm true.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
    • title: Delete a backup
  • deleteBackupExportDeletes the downloadable archive made by startBackupExport.No findings

    Why it is in this group

    • The name "deleteBackupExport" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Deletes the downloadable archive made by startBackupExport. The backup itself is kept and can be exported again.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
    • title: Delete a backup's downloadable export
  • deleteModpackUninstalls the server's uploaded custom modpack and deletes the file, taking effect at the next restart.No findings

    Why it is in this group

    • The name "deleteModpack" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Uninstalls the server's uploaded custom modpack and deletes the file, taking effect at the next restart. The world is kept, though the server may then suggest a world reset to clear content the pack left behind.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
    • title: Remove the custom modpack from a server
  • deleteServerPermanently deletes the server with its world, settings, backups and exports, shutting it down if running.No findings

    Why it is in this group

    • The name "deleteServer" says "delete": a word for removing or ending something.
    • The description says "Permanently deletes".
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Permanently deletes the server with its world, settings, backups and exports, shutting it down if running. Call it only for a server the user named in this request, one server per call; for a request that names none or covers several, such as delete my servers, list them with listServers and ask which to delete first. For a fresh world use resetServer. To keep the world, first startBackupExport and download it with getBackupDownloadUrl. The user can also delete it on the Danger tab of the webUrl from listServers (webUrl followed by danger/). Returns deleted: true.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
    • title: Delete a server permanently
  • dismissJoinAttemptClears the notice for a player the whitelist turned away; it does not whitelist, kick or ban.No findings

    Why it is in this group

    • The name "dismissJoinAttempt" says "dismiss": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Clears the notice for a player the whitelist turned away; it does not whitelist, kick or ban. To let them in, add them to whitelist with updateServer. Returns the server.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
    • title: Dismiss a blocked join attempt
  • keepServerAwakeDelays a running server's idle sleep by 5 minutes from now; it keeps being charged meanwhile.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Delays a running server's idle sleep by 5 minutes from now; it keeps being charged meanwhile. Use it while working on a server with no players online; to wake an asleep server use startServer. Fails with 409 if not running. Returns sleepAt.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
    • title: Keep a running server from falling asleep
  • resetServerReplaces the world with a fresh one, keeping settings, content and address; for an earlier world use restoreBackup instead.No findings

    Why it is in this group

    • The name "resetServer" says "reset": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Replaces the world with a fresh one, keeping settings, content and address; for an earlier world use restoreBackup instead. A running server disconnects its players and comes back online on the new world. A reset backup of the current world is taken first and earlier backups are kept, but the archived world of a long-asleep server is discarded. The user can also reset it on the Danger tab of the webUrl from listServers (webUrl followed by danger/). Returns the server.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
    • readOnlyHint: false
    • title: Reset a server's world
  • restartServerReboots a running server's machine; players are disconnected for a minute or two while it boots and fetches its content from Modrinth, CurseForge or their download links.Reads text others writeNo findings

    Why it is in this group

    • The name "restartServer" says "restart": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Reboots a running server's machine; players are disconnected for a minute or two while it boots and fetches its content from Modrinth, CurseForge or their download links. Use it for a pending size change or a stuck server; for changed game settings use restartToApplySettings. A restore queued with restoreBackup replaces the world during the reboot, and the restart needs enough account balance for the server's size. Fails unless the server is running (use startServer); returns the server.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: false
    • title: Restart a whole server
  • restartToApplySettingsRestarts only the Minecraft program on an online server so changed settings apply; players drop for a few seconds while it reloads content from Modrinth, CurseForge or their downlo…Reads text others writeNo findings

    Why it is in this group

    • The name "restartToApplySettings" says "restart": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Restarts only the Minecraft program on an online server so changed settings apply; players drop for a few seconds while it reloads content from Modrinth, CurseForge or their download links. Use it when the server reports a restart is required; for a size change use restartServer. If a pending change needs a full reboot (size, or a restore queued with restoreBackup) it reboots the machine instead. Fails unless online (use startServer).

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: false
    • title: Restart a server to apply changed settings
  • restoreBackupReplaces the whole world with the chosen backup.No findings

    Why it is in this group

    • The description's first verb is "replace": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Replaces the whole world with the chosen backup. No backup of the current world is taken, so everything since that backup is lost unless you run createBackup first. An asleep server restores at once; an online server applies it at the next restartServer or restartToApplySettings, and until then cancelBackupRestore undoes it. A different backupId replaces a queued restore.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
    • title: Restore a server's world from a backup
  • setResourcePackSets the resource pack players are offered on join, from Modrinth, an uploaded .zip or a link; from: none removes it.Reads text others writeNo findings

    Why it is in this group

    • The name "setResourcePack" says "set": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Sets the resource pack players are offered on join, from Modrinth, an uploaded .zip or a link; from: none removes it. It applies at the next restart (restartToApplySettings). Make it mandatory with resourcePackRequired in updateServer. Returns the server.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: false
    • title: Set or remove a server's resource pack
  • startServerWakes an asleep server so players can join it from the internet at its address; not for an online server (use restartServer).Reads text others writeNo findings

    Why it is in this group

    • The name "startServer" says "start": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Wakes an asleep server so players can join it from the internet at its address; not for an online server (use restartServer). While booting it fetches its mods, plugins and modpack from Modrinth, CurseForge or their download links, and a backup queued with restoreBackup replaces the current world. Starting needs enough account balance for the server's size, which pays for the running server. Returns the server; poll listServers until statusDetail is server-online, a few minutes later.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: false
    • title: Start a server
  • updateServerChanges a server's name, size, settings, player lists, content, auto-start or custom domain.Reads text others writeNo findings

    Why it is in this group

    • The name "updateServer" says "update": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Changes a server's name, size, settings, player lists, content, auto-start or custom domain. Omitted fields are kept, and a sent list replaces the stored one (uploaded files excepted). Not for the resource pack (setResourcePack) or a fresh world (resetServer). The returned server says when a restart is required (restartToApplySettings); a larger size costs more per running hour.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: false
    • title: Change a server's name, size or settings
Changes things 12Claude Code: ask
  • completeAssetUploadsInstalls one or more (up to 50) files from startAssetUpload calls; resource packs go through setResourcePack.No findings

    Why it is in this group

    • The name "completeAssetUploads" says "upload": a word for a change.
    Description, as the server wrote it
    Installs one or more (up to 50) files from startAssetUpload calls; resource packs go through setResourcePack. Files failing a check are returned in rejected with key and error; the rest apply at the next restart.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
    • title: Finish uploads and install the files
  • createBackupTakes a manual backup of the server's current world, which can later be restored or exported.No findings

    Why it is in this group

    • The name "createBackup" says "create": a word for a change.
    Description, as the server wrote it
    Takes a manual backup of the server's current world, which can later be restored or exported. Fails while the server is starting, stopping or restoring, before its first boot, or when the account balance is too low. Returns the backup as pending; listBackups shows it completed when done. Name a backup to the user by its time and reason; never show its backupId.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
    • readOnlyHint: false
    • title: Back up a server's world now
  • createServerCreates a server, asleep and free until startServer or a joining player wakes it, and returns it with its id and join address.Reads text others writeNo findings

    Why it is in this group

    • The name "createServer" says "create": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Creates a server, asleep and free until startServer or a joining player wakes it, and returns it with its id and join address. Region sets player latency and cannot change later: ask where players are if unknown; regions and size prices come from getPricingCatalog. Optional content from Modrinth, CurseForge or a link downloads on first start; uploaded files are added afterwards with the asset or modpack upload tools. Accounts hold a limited number of servers; at the limit, delete one with deleteServer.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: false
    • title: Create a Minecraft server
  • inspectAssetUploadCompletes a startAssetUpload and reports its kind, size and metadata without installing it.1 finding

    Why it is in this group

    • The name "inspectAssetUpload" says "inspect": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "inspectAssetUpload" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "inspectAssetUpload" says "inspect": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Completes a startAssetUpload and reports its kind, size and metadata without installing it. To install, pass it to completeAssetUploads, or setResourcePack with its key for a resource pack; abortAssetUploads discards it.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
    • title: Finish an upload and check the file
  • inspectModpackUploadCompletes a startModpackUpload and returns its version, loader and contents without installing.1 finding

    Why it is in this group

    • The name "inspectModpackUpload" says "inspect": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "inspectModpackUpload" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "inspectModpackUpload" says "inspect": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Completes a startModpackUpload and returns its version, loader and contents without installing. To install, call completeModpackUpload with the same arguments; abortModpackUpload discards it.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
    • title: Finish a modpack upload and check it
  • refreshWorldUploadPartsReturns new one-hour links for pieces of a startWorldUpload whose links expired.1 finding

    Why it is in this group

    • The name "refreshWorldUploadParts" says "upload": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "refreshWorldUploadParts" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "refreshWorldUploadParts" says "upload": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Returns new one-hour links for pieces of a startWorldUpload whose links expired. Pass jobId, uploadId, key and the pieces still to upload.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: Renew the links for a world upload
  • startAssetUploadOnly for an assistant that can send the user's file with HTTP PUT, such as a coding agent with a shell.No findings

    Why it is in this group

    • The name "startAssetUpload" says "start": a word for a change.
    Description, as the server wrote it
    Only for an assistant that can send the user's file with HTTP PUT, such as a coding agent with a shell. Begins uploading one .jar or .zip mod, plugin, datapack or resource pack (up to 512 MiB, storage capped per server and account) and returns uploadId, key, fileName and parts: PUT each piece within an hour and keep each ETag. Then completeAssetUploads installs mods, plugins and datapacks, inspectAssetUpload checks a file or readies a resource pack for setResourcePack, and abortAssetUploads discards it.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
    • readOnlyHint: false
    • title: Start uploading a custom mod or plugin file
  • startBackupExportPackages a backup into a downloadable archive.No findings

    Why it is in this group

    • The name "startBackupExport" says "start": a word for a change.
    Description, as the server wrote it
    Packages a backup into a downloadable archive. Requires a paid account and balance; refused while another upload, export or restore is pending (at most 3 per account). Poll listBackups until exportState is ready, then call getBackupDownloadUrl; if it returns to idle instead, the export failed.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
    • readOnlyHint: false
    • title: Export a backup as a downloadable file
  • startModpackUploadOnly for an assistant that can send the user's file with HTTP PUT, such as a coding agent with a shell.No findings

    Why it is in this group

    • The name "startModpackUpload" says "start": a word for a change.
    Description, as the server wrote it
    Only for an assistant that can send the user's file with HTTP PUT, such as a coding agent with a shell. Begins uploading a Modrinth .mrpack (up to 1 GiB). Returns uploadId, key, fileName and parts (url valid one hour): PUT each piece, keep each ETag, then completeModpackUpload. Refused when a modpack is set: deleteModpack removes an uploaded one, updateServer a catalog one.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
    • readOnlyHint: false
    • title: Start uploading a custom modpack
  • startWorldUploadOnly for an assistant that can send the user's file with HTTP PUT, such as a coding agent with a shell.No findings

    Why it is in this group

    • The name "startWorldUpload" says "start": a word for a change.
    Description, as the server wrote it
    Only for an assistant that can send the user's file with HTTP PUT, such as a coding agent with a shell. Begins uploading a world archive (.zip, .tar.gz, .tgz; up to 4 GiB). Returns jobId, uploadId, key and parts (partNumber, url valid one hour): PUT each piece to its url, keep each ETag, then call completeWorldUpload. Refused while another upload, export or restore is pending.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
    • readOnlyHint: false
    • title: Start uploading a world archive
  • stopServerShuts a running server down so it sleeps, disconnecting players and ending running charges; world and settings are kept.No findings

    Why it is in this group

    • The name "stopServer" says "stop": a word for a change.
    Description, as the server wrote it
    Shuts a running server down so it sleeps, disconnecting players and ending running charges; world and settings are kept. For a reboot use restartServer. While autoStartEnabled is on, a joining player wakes it (turn off with updateServer). Returns the server.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
    • title: Stop a server
  • verifyCustomDomainLooks up the public DNS record of the custom domain set with updateServer customDomain and updates its status; use it after the user changes DNS.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Looks up the public DNS record of the custom domain set with updateServer customDomain and updates its status; use it after the user changes DNS. A record that points at the server verifies the domain and starts routing players to it. A failing record is reported with its reason and never takes a verified domain off the server; one whose record stays wrong is revoked later by Pixly's hourly check. Returns check.verified, with a reason on failure, and the server.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: false
    • title: Re-check a server's custom domain
Only reads 12Show 12 read-only tools
  • getBackupDownloadUrlReturns a signed link, valid for 6 hours, to download a backup exported with startBackupExport.Reads text others writeNo findings

    Why it is in this group

    • The name "getBackupDownloadUrl" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe name "getBackupDownloadUrl" says "get" and "url": it reads web pages, which anyone can write.
    Description, as the server wrote it
    Returns a signed link, valid for 6 hours, to download a backup exported with startBackupExport. Fails if the export is not ready yet; requires a paid account. Returns url (a .tar.gz for the user) and expiresAt.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: Get the download link for an exported backup
  • getBalanceShows the signed-in user's balance, this month's spend so far and projected total, and what awake servers cost per hour.No findings

    Why it is in this group

    • The name "getBalance" says "get": a word for reading.
    Description, as the server wrote it
    Shows the signed-in user's balance, this month's spend so far and projected total, and what awake servers cost per hour. Call it when the user asks about their balance or spending. It cannot add funds. When the user asks to add funds: show the balance and addFunds with a link to dashboardUrl, and no other link, no button, amount, total after adding or steps.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: Show your Pixly balance and this month's spend
  • getBedrockRangeReturns the Java version range Bedrock players can join, for fabric, neoforge and spigot (Paper and its forks); an empty string means unknown.No findings

    Why it is in this group

    • The name "getBedrockRange" says "get": a word for reading.
    Description, as the server wrote it
    Returns the Java version range Bedrock players can join, for fabric, neoforge and spigot (Paper and its forks); an empty string means unknown. Check it before enabling config.bedrockEnabled.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: Check which versions support Bedrock players
  • getConsoleLogsReturns up to 200 recent console lines, including startup, oldest first.No findings

    Why it is in this group

    • The name "getConsoleLogs" says "get": a word for reading.
    Description, as the server wrote it
    Returns up to 200 recent console lines, including startup, oldest first. Use it to see why a server failed to start or what happened in game; it cannot run commands. Returns events, nextCursor (newer) and prevCursor (older); platform notices are left out, so a page can hold fewer lines, or none, while prevCursor still leads to older ones. degraded: true means the read timed out, retry. Show lines to the user in a code block, one per line.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: Read a server's recent console output
  • getLoaderVersionsLists the Minecraft versions each config.type can run, keyed by type.No findings

    Why it is in this group

    • The name "getLoaderVersions" says "get": a word for reading.
    Description, as the server wrote it
    Lists the Minecraft versions each config.type can run, keyed by type. Use it before createServer or updateServer to choose config.version. VANILLA is omitted because it runs every version; a missing type means its list is unavailable.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: List available Minecraft versions by server software
  • getMonthSpendingBreaks this calendar month's spend so far down by server: cost, compute cost and time awake.Reads private dataNo findings

    Why it is in this group

    • The name "getMonthSpending" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "calendar": it reads calendars.
    Description, as the server wrote it
    Breaks this calendar month's spend so far down by server: cost, compute cost and time awake. Match each serverId to a name with listServers and name servers by that name. For the total and the balance use getBalance.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: Show this month's spend per server
  • getPricingCatalogReturns estimated monthly prices in US cents, as the site shows them, for every available region and size under three play schedules (casual, regular, evenings), plus always-on hos…No findings

    Why it is in this group

    • The name "getPricingCatalog" says "get": a word for reading.
    Description, as the server wrote it
    Returns estimated monthly prices in US cents, as the site shows them, for every available region and size under three play schedules (casual, regular, evenings), plus always-on host references when available. Name each size by its memoryGb, adding vcpu when two sizes share the same memory; the size value is only for createServer. The hourly price the site shows for a size is its lowest monthlyCents divided by hoursPerMonth across the schedules, rounded to a whole cent and never below 1 cent. Use it to quote prices or choose region and size: pass a region's id (not awsRegion) as createServer region, and a size as size. Works without sign-in.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: Compare server prices by region and play schedule
  • getServerMetricsReturns the server's load samples over the last minutes (default 30, up to 360), oldest first, one about every 30 seconds while it runs.No findings

    Why it is in this group

    • The name "getServerMetrics" says "get": a word for reading.
    Description, as the server wrote it
    Returns the server's load samples over the last minutes (default 30, up to 360), oldest first, one about every 30 seconds while it runs. Each point has its time, memory use, tick load in permille (divide by 20 for milliseconds per tick; 1000 means the server is lagging) and peak players. Gaps mean the server was asleep or starting. Use it to explain when and why a server lagged.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: Read a server's recent load and memory history
  • getServerUsageReturns the time the server spent with at least one player online in its latest unbroken run on its current size (its last 7 days with players, or more days back until they hold 8 …No findings

    Why it is in this group

    • The name "getServerUsage" says "get": a word for reading.
    Description, as the server wrote it
    Returns the time the server spent with at least one player online in its latest unbroken run on its current size (its last 7 days with players, or more days back until they hold 8 hours), histograms of CPU, tick load, GC pause share, memory peak, the JVM's live set and memory outside its heap over that time, and suggestion: the smaller, cheaper size that would carry the same play, or null when the current size is needed or that run holds less than 8 hours of play. Use suggestion to answer whether the server can run on a smaller size; changing size is updateServer with the target size and applies on the next start.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: Read how much of its size a server used with players online
  • listBackupsLists backups newest first with backupId, startTime, sizeBytes, reason (daily, manual, upload, freeze, reset, config-change) and exportState (idle, exporting, ready).No findings

    Why it is in this group

    • The name "listBackups" says "list": a word for reading.
    Description, as the server wrote it
    Lists backups newest first with backupId, startTime, sizeBytes, reason (daily, manual, upload, freeze, reset, config-change) and exportState (idle, exporting, ready). Pass backupId to restoreBackup, cancelBackupRestore, startBackupExport, getBackupDownloadUrl (exportState ready) or deleteBackup. Name a backup to the user by its time and reason; never show its backupId.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: List a server's backups
  • listBillsLists past calendar months' bills, newest first, each with its cost per server.Reads private dataNo findings

    Why it is in this group

    • The name "listBills" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "list" and "calendar": it reads calendars.
    Description, as the server wrote it
    Lists past calendar months' bills, newest first, each with its cost per server. status pending means the month is closed but its bill is not final yet. Match each serverId to a name with listServers; a deleted server no longer appears there.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: List your monthly bills
  • listServersLists the account's servers with id, name, join address, region, size, settings, state and recent disk, memory and lag figures.No findings

    Why it is in this group

    • The name "listServers" says "list": a word for reading.
    Description, as the server wrote it
    Lists the account's servers with id, name, join address, region, size, settings, state and recent disk, memory and lag figures. runtime.loadCause, when present, says why a server keeps lagging with players on: memory (garbage collection), cpu-starved (one core shared with background work; a second core fixes it), run-bound (the world's own work; optimise rather than upsize) or unclassified. For when and how badly it lagged, use getServerMetrics. Use it to find the serverId other tools take, by the name the user knows. A server is online only when statusDetail is server-online; desiredState stopped means asleep. joinAttempts lists players the whitelist turned away (see dismissJoinAttempt).

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: List your Minecraft servers

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data2
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write8
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out0
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

4 warn
  • WarninspectAssetUpload

    The server marks "inspectAssetUpload" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "inspectAssetUpload" says "inspect": a word for reading.

    What this check looks for
  • WarncancelBackupRestore

    The server marks "cancelBackupRestore" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "cancelBackupRestore" says "cancel": a word for removing or ending something.

    What this check looks for
  • WarninspectModpackUpload

    The server marks "inspectModpackUpload" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "inspectModpackUpload" says "inspect": a word for reading.

    What this check looks for
  • WarnrefreshWorldUploadParts

    The server marks "refreshWorldUploadParts" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "refreshWorldUploadParts" says "upload": a word for a change.

    What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 0.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http pixly https://pixly.gg/api/mcp
claude mcp add --transport http pixly https://pixly.gg/api/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__pixly__getBedrockRange",
      "mcp__pixly__listBills",
      "mcp__pixly__getMonthSpending",
      "mcp__pixly__getLoaderVersions",
      "mcp__pixly__getPricingCatalog",
      "mcp__pixly__listServers",
      "mcp__pixly__listBackups",
      "mcp__pixly__getBackupDownloadUrl",
      "mcp__pixly__getConsoleLogs",
      "mcp__pixly__getServerMetrics",
      "mcp__pixly__getServerUsage",
      "mcp__pixly__getBalance"
    ],
    "ask": [
      "mcp__pixly__createServer",
      "mcp__pixly__startAssetUpload",
      "mcp__pixly__completeAssetUploads",
      "mcp__pixly__inspectAssetUpload",
      "mcp__pixly__createBackup",
      "mcp__pixly__startBackupExport",
      "mcp__pixly__verifyCustomDomain",
      "mcp__pixly__startModpackUpload",
      "mcp__pixly__inspectModpackUpload",
      "mcp__pixly__stopServer",
      "mcp__pixly__startWorldUpload",
      "mcp__pixly__refreshWorldUploadParts"
    ],
    "deny": [
      "mcp__pixly__deleteServer",
      "mcp__pixly__updateServer",
      "mcp__pixly__abortAssetUploads",
      "mcp__pixly__deleteAsset",
      "mcp__pixly__deleteBackup",
      "mcp__pixly__deleteBackupExport",
      "mcp__pixly__cancelBackupRestore",
      "mcp__pixly__restoreBackup",
      "mcp__pixly__dismissJoinAttempt",
      "mcp__pixly__keepServerAwake",
      "mcp__pixly__deleteModpack",
      "mcp__pixly__abortModpackUpload",
      "mcp__pixly__completeModpackUpload",
      "mcp__pixly__resetServer",
      "mcp__pixly__setResourcePack",
      "mcp__pixly__restartServer",
      "mcp__pixly__restartToApplySettings",
      "mcp__pixly__startServer",
      "mcp__pixly__abortWorldUpload",
      "mcp__pixly__completeWorldUpload"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as pixly. Review it before you use it.

Capability tags behind 10 rules
  • mcp__pixly__listBills private-data
  • mcp__pixly__getMonthSpending private-data
  • mcp__pixly__createServer untrusted-input
  • mcp__pixly__updateServer untrusted-input
  • mcp__pixly__getBackupDownloadUrl untrusted-input
  • mcp__pixly__verifyCustomDomain untrusted-input
  • mcp__pixly__setResourcePack untrusted-input
  • mcp__pixly__restartServer untrusted-input
  • mcp__pixly__restartToApplySettings untrusted-input
  • mcp__pixly__startServer untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/gg.pixly/mcp/verify?hash=fc86350e35bfada4551b9c8ce81ec2035084c42589066d79cf9500d5ea149a94" | jq -e '.changed == false'

Pinned hash fc86350e35bf, from Oct 30, 2026, 16:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/gg.pixly/mcp/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for gg.pixly/mcp
[![anlyon.dev](https://anlyon.dev/badge/gg.pixly/mcp.svg)](https://anlyon.dev/servers/gg.pixly/mcp)

Source: MCP Registry · repository. Synced Oct 30, 2026, 16:17 UTC.