OpenBoss & The Pixel bronze

www.thepixel.lol

“OpenBoss is one giant piñata with a public health bar that everyone in the world is hitting at the same time. Whoever lands the killing blow is engraved on its grave forever, and that engraving is the only thing anyone wins. The Pixel is a single pixel in a permanent auction. TO BUY SMACKS AND HIT THE BOSS: 1. list_packs — see what they cost 2. create_checkout — returns a URL. Give it to the person; THEY pay with their own card. You are not charging anybody and cannot. 3. check_purchase — poll with the sessionId until paid, then keep the walletToken 4. smack_boss — pass the walletToken, once per swing, as many times as they have smacks Free smacks need no purchase at all: smack_boss with a visitorId, three per visitorId and not hourly — waiting does not hand them back. They cannot land the killing blow. Two things to be straight with people about: there are no prizes and no payouts of any kind — this is an entertainment purchase, not a wager — and all sales are final. Buying the pixe

https://api.openboss.lol/mcp its card

Checked 4d ago tools

we checked this the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate: Issued by Google Trust Services domain-validated
Valid until 18 Jan 2027 as of our check on 10 Nov 2026. A wildcard certificate: its other hosts are invisible here, because CT logs the wildcard, not them.

Control of the hostname was checked; nothing about who operates it.

Key ECDSA P-256, signed ECDSA-SHA256, issued via WE1 under GTS Root R4 — classical, as every publicly trusted certificate is today.

Names on this certificate (2)

openboss.lol, *.openboss.lol.
Connection: TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 10 Nov 2026. The agent is served from api.openboss.lol, so that server's operator chose this. What this means
DANE / TLSA: Not verified (TLSA query returned RCodeNameError)
Discovery: Well-known document
This host also publishes an ARD catalog (/.well-known/ai-catalog.json) declaring 13 resources. The catalog's entries are the publisher's claims, not something agenttru.st verified.
AI use policy: Search: yesAI input: yesAI training: yes

What this site's robots.txt says about how AI may use its content. Recorded as the operator wrote it, not enforced — these are preferences about use, not access, and agenttru.st only reads the agent's own discovery documents.
AI-facing documents: Publishes /llms.txt — “The Pixel” a curated map of the site's content for language models

Fetched from this host during verification. Neither document is how this agent was discovered.
First seen: 10 Nov 2026

View verification details

Assurance: bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols: MCP verified by handshake or card fetch, not merely advertised
Hosted in: ? Unknown · Cloudflare, Inc. (AS13335)
The address did not geolocate — usually anycast hosting, where one address answers from many places at once.
Last checked: 4d ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of www.thepixel.lol controls every word below.

This card declares no skills. That is not a fault — the field is optional, and an agent can be perfectly functional without describing itself.

What kind of listing

No skills declared: Its card declares no skills, or, for an MCP server, listed no tools.

Checked by agenttru.st against this listing's hostname and card — facts about a name or an address, not about what the agent does. How kinds are decided.

What its catalog declares

From the ARD catalog this host publishes at /.well-known/ai-catalog.json. The operator controls every entry; agenttru.st verified that the catalog exists and parses, and nothing about what the entries say.

The Pixel llms.txt

text/plain

The agent-facing map of The Pixel: what is sold, how the perpetual auction works, what a buyer receives, what happens to a bid that loses, and an explicit instruction not to complete a purchase on anybody’s behalf. Written to be quoted.

https://thepixel.lol/llms.txt

The Pixel live state

json

The whole auction in one read: the current owner’s display name, the price they paid in cents, the enforced minimum next bid, the pixel’s colour as a normalised #rrggbb, lifetime sale and revenue totals, and the fifty most recent sales with owner, price, time and colour for each. Read-only and unauthenticated.

https://api.openboss.lol/pixel

Live event stream

text/event-stream

Server-Sent Events from the shared backend. Carries a `pixel` event on every sale and every repaint — the event’s `reason` field distinguishes the two — alongside the sibling site’s boss events on the same connection. The polite alternative to polling.

https://api.openboss.lol/events

The Pixel API catalog (RFC 9727)

linkset

The RFC 9727 linkset for the same public API: every read endpoint as a catalog item, plus the health endpoint as its status link and the terms and privacy policy that govern its use.

https://thepixel.lol/.well-known/api-catalog

The Pixel rules

text/html

The mechanics in bullets: the $1 opening price, the $1 minimum increment over the current price, the $1,000 single-bid ceiling, the colour rules, and what happens when two payments land in the same instant.

https://thepixel.lol/rules

The Pixel pricing

text/html

What the pixel costs, read live from the API when the page is rendered: the current price, the minimum next bid, the $1 increment, the single-bid ceiling, that prices are final with no VAT added, that all payments are final, and the two ways a buyer ends up with nothing. There is deliberately no schema.org Offer or structured price anywhere on this site — the figure is a live auction floor and a cached snapshot of it would be wrong by construction — so a client that needs the number must read GET /pixel

https://thepixel.lol/pricing

And 7 more entries in the catalog, not shown here.

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Protocol: mcp
Version: 1.0.0

View all card details

Capabilities: tools
Agent card: https://api.openboss.lol/mcp

Operate this agent and would rather not be listed? Request removal.