pi-coding-agent inside an aicodebox container. One image, five ways in: interactive shell, one-shot API, OpenAI-compatible endpoint, MCP server, Telegram bot, and a cron scheduler that fires pi on whatever schedule you want. You talk to pibox. pibox talks to pi. pi talks to whatever LLM you point it at. Nobody cares about the middle.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio · streamable-http · http
verified
reported
listed in the official MCP registry counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit a83c901 · analyzer v33 · 2d ago
skills & prompt files 1
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 19
filesystem 1
- fs psyb0t-docker-pibox-a83c901/pibox/extensions/mcp-bridge/index.ts :20
import { readFileSync, existsSync } from "node:fs";
shell / exec 1
- shell psyb0t-docker-pibox-a83c901/.agents/plugins/pibox/bin/cli.js :9
import { spawnSync } from "node:child_process";
secrets 1
- secrets psyb0t-docker-pibox-a83c901/.agents/plugins/pibox/bin/cli.js :31
const token = process.env.PIBOX_MCP_MODE_TOKEN;
declared dependencies 1
- mcp-remote@0.1.38