MCP Radar
MCP-Server

MarketNow

io.github.alicelabs-llc/marketnow
MCP- & Agenten-Infrastruktur Sicherheit Öffentlich und erreichbar MCP 2026-07-28

Was dieses MCP kann

Verifies agent credentials, translates credential formats, checks domain risks, fingerprints MCP tool definitions, and searches or audits an MCP skill registry.

Funktionen

Tools

9 Tools
marketnow_check_domain
Check domain risk
Check if a domain is suspicious (scam checker). Returns risk score and reasons.
Nur Lesen Externer Zugriff Idempotent
Eingabeschema 
{'type': 'object', 'required': ['domain'], 'properties': {'domain': {'type': 'string', 'description': 'The domain to check (e.g. example.com)'}}}
marketnow_check_revocation
Check revocation status
Check the revocation status of an Agent Trust Card (card_id) or CA key (kid) against the signed MarketNow Revocation Registry (MNR-CRL-1.0) + live ledger. Returns VALID/EXPIRED/REVOKED/SUPERSEDED/UNKNOWN with PERMIT/DENY recommendation. Fail-closed: unknown subjects answer UNKNOWN+DENY. The signed CRL layer is independently verifiable via Ed25519 (RFC 8785 JCS).
Nur Lesen Idempotent
Eingabeschema 
{'type': 'object', 'properties': {'kid': {'type': 'string', 'description': 'CA key ID (e.g. mn-ca-002, mn-ca-003)'}, 'nonce': {'type': 'string', 'description': 'Optional client nonce — echoed in the response (anti-replay)'}, 'card_id': {'type': 'string', 'description': 'Agent Trust Card ID (e.g. ATC-2026-1509360)'}}}
marketnow_fingerprint_tool
Fingerprint MCP tools
Cryptographically fingerprint MCP tool definitions (OWASP MCP Cheat Sheet: 'verify tool descriptions haven't changed'). Computes RFC 8785 JCS + sha256 per tool plus a manifest fingerprint for the whole tools/list surface. Pass a previous manifest in 'pinned' to get a drift report (added/removed/changed) — the core defense against tool poisoning and rug-pull redefinitions.
Nur Lesen Idempotent
Eingabeschema 
{'type': 'object', 'required': ['tools'], 'properties': {'tools': {'type': 'array', 'items': {'type': 'object'}, 'description': 'Tool definitions from tools/list: [{name, description, inputSchema}]'}, 'pinned': {'type': 'object', 'description': 'Optional: previous manifest {tools:[{name, fingerprint_sha256}]} from an earlier fingerprint run — enables drift detection'}}}
marketnow_get_pipeline
Get verification pipeline
Get the 12-stage credential-verification pipeline details (PARSE→DECISION).
Nur Lesen Idempotent
Eingabeschema 
{'type': 'object', 'properties': {}}
marketnow_list_formats
List credential formats
List all 9 supported credential adapter formats (ATC, EAT-AI, ZTA, A2A, MCP Card, W3C VC, OAuth, SPIFFE, X.509) with their algorithms and status.
Nur Lesen Idempotent
Eingabeschema 
{'type': 'object', 'properties': {}}
marketnow_search_skills
Search MCP servers
Search the MarketNow registry of indexed MCP servers (68k+ across GitHub, npm and PyPI, security-first scored).
Nur Lesen Idempotent
Eingabeschema 
{'type': 'object', 'properties': {'query': {'type': 'string', 'description': 'Search query'}, 'category': {'type': 'string', 'description': 'Filter by category'}}}
marketnow_submit_skill
Submit MCP skill
Publish a skill to the MarketNow catalog (the write side). The package is validated and Sentinel-scanned (injection patterns, embedded secrets, dangerous APIs, suspicious URLs, typosquat, dedup against the 68k+ catalog) AND its claims are verified live: repo_url must exist (HTTP 200), install must reference a real package on npm/PyPI/crates/Docker Hub. False claims are rejected (422). Accepted skills with real substance (files/code/verifiable repo) are stored in the public auditable queue as certified-L1.5, pending L2 review and catalog merge. Description-only submissions are accepted but never merged. Any pricing model is accepted — free, per-call (x402), subscription or custom: the vendor sets the price, MarketNow verifies the security. No authentication required. Do NOT include secrets — the scanner rejects them.
Externer Zugriff
Eingabeschema 
{'type': 'object', 'required': ['skill'], 'properties': {'skill': {'type': 'object', 'description': 'Skill package. Required: name, version, description, author. Recommended: runtime (node|python|rust|go|dotnet|docker|luau|roblox|other), install, repo_url, homepage, tags (max 12), capabilities, doc.usage, doc.system_prompt, files {name:content} (max 60KB), test.url (https — probed), pricing {model: free|per-call|per-call-x402|subscription|one-time|freemium|revenue-share|custom, price, currency, details max 300} — the vendor sets any price; we verify security, not pricing.'}, 'dry_run': {'type': 'boolean', 'description': 'If true, run the full validation + scan but store nothing'}}}
marketnow_translate_credential
Translate credential format
Translate a credential between the 9 adapter formats (ATC, JWT/OAuth, W3C VC, A2A, EAT-AI, ZTA, MCP Card, SPIFFE, X.509). Lossless conversion through Universal Trust Schema (UTS). See /api/trust?action=formats.
Nur Lesen Idempotent
Eingabeschema 
{'type': 'object', 'required': ['from', 'to', 'payload'], 'properties': {'to': {'type': 'string', 'description': 'Target format: atc-v3, jwt, w3c-vc, a2a-card, mcp-card, x509'}, 'from': {'type': 'string', 'description': 'Source format: atc-v3, jwt, w3c-vc, a2a-card, mcp-card, x509'}, 'payload': {'type': 'string', 'description': 'The credential JSON to translate'}}}
marketnow_verify_trust
Verify agent credential
Verify any AI agent credential (ATC v3, JWT/OAuth, W3C VC, MCP Card, A2A, EAT-AI, ZTA, SPIFFE SVID, X.509) through the UTA 12-stage credential-verification pipeline (PARSE→DECISION — distinct from Sentinel's 12 skill-audit stages). Returns validity, format, trust score, and issues.
Nur Lesen Idempotent
Eingabeschema 
{'type': 'object', 'required': ['credential'], 'properties': {'credential': {'type': 'string', 'description': 'The credential to verify (JSON string or JWT)'}}}
Verlauf

Letzte Tool-Änderungen

Geändert
marketnow_submit_skill
2. October 2026 02:40
Geändert
marketnow_fingerprint_tool
2. October 2026 02:40
Geändert
marketnow_check_revocation
2. October 2026 02:40
Geändert
marketnow_search_skills
2. October 2026 02:40
Geändert
marketnow_check_domain
2. October 2026 02:40
Geändert
marketnow_get_pipeline
2. October 2026 02:40
Geändert
marketnow_list_formats
2. October 2026 02:40
Geändert
marketnow_translate_credential
2. October 2026 02:40
Geändert
marketnow_verify_trust
2. October 2026 02:40
Hinzugefügt
marketnow_submit_skill
30. September 2026 02:40
Hinzugefügt
marketnow_fingerprint_tool
30. September 2026 02:40
Hinzugefügt
marketnow_check_revocation
30. September 2026 02:40
Hinzugefügt
marketnow_search_skills
30. September 2026 02:40
Hinzugefügt
marketnow_check_domain
30. September 2026 02:40
Hinzugefügt
marketnow_get_pipeline
30. September 2026 02:40
Hinzugefügt
marketnow_list_formats
30. September 2026 02:40
Hinzugefügt
marketnow_translate_credential
30. September 2026 02:40
Hinzugefügt
marketnow_verify_trust
30. September 2026 02:40
Entdecken

Ähnliche MCP-Server

AIMEAT

io.aimeat/aimeat

Provides a self-hosted agent operating system with agent work delegation, access controls, federation, hooks, SSO, security admin…

hyperion

com.thetempleofdoom.hyperion/hyperion

Acts as a paid MCP tool marketplace and utility gateway with server discovery, HTTP and JavaScript tools, research, data conversi…

Japan Public Ledgers MCP

com.mcp-revenue-empire/japan-public-ledgers

Provides agent identity, memory, audit, trust, proxy, temporary email, webhook, CAPTCHA, and alerting capabilities alongside publ…

PHION Agent Trust Infrastructure

systems.phion/evidence-engine

Provides agent trust, policy, provenance, evidence, delegation, telemetry, and transaction-control services for MCP and agent wor…

Swamp

world.swampai/swamp

Coordinates security agents through scoped bug-bounty programs, target claims, vulnerability submissions, peer review, shared fin…

AgentBIT

app.agentbit/mcp

Routes pay-per-call tools over x402 on Base, covering discovery, data conversion, company research, counterparty screening, domai…

SaSame MCP Observatory + Gold Rush Town

online.sasame/research

Audits and profiles MCP servers, provides ecosystem analytics, trust and claim records, and non-custodial transaction or escrow a…

ThinkNEO Control Plane

ai.thinkneo/control-plane

Provides an enterprise AI control plane for governance, guardrails, spend tracking, compliance, and model or tool routing.