MCP.Market

Supership Scan MCP server

by andysalvo·io.github.andysalvo/supership-scan·v2.0.2
No reviews yet

Buy any x402 API or data on Base, Solana, Polygon. No wallet on the seller's chain. For AI agents.

C58/100grade C
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
C58/100

full report

Adoption
New

0 stars66 downloads/wk

Reviews

Write one

Nobody has reviewed Supership Scan yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Supership Scan tools (4)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • list_catalog

    List sources supership can procure across substrates: real-time crypto market data, news, on-chain analytics, prices, and more. Returns each source's URL, price, network, and description. Pass any of these URLs to procure.

  • manifest

    Search the entire indexed x402 economy (52,000 services) for the data or service you need. Results are ranked by distinct payers -- real adoption -- not call counts, which wash trades inflate. Returns sources with price, network, payer count, and links to procure. The fastest way to find the right source.

  • procure

    Fetch any x402 source across any chain (Base, Solana, Polygon) without holding a wallet on the seller's chain. supership fronts payment, delivers the goods, and returns a signed delivery receipt -- proof of what you got, settled on-chain. Find sources with the manifest tool. First runs are free.

  • scan_directory

    Scan a local directory for security vulnerabilities before you ship: exposed secrets, auth holes, injection, config and Supabase misconfig. Code is analyzed by supership; the free tier returns score and grade only and stores no source.

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

1 high1 medium
  • Code scan10 source files scanned20/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancerepository archived0/15
  • Maintainer identityregistry namespace matches repository owner6/10

Findings (2)

  • mediumeval / new Function usedexec.eval
    src/rules/injection.mjs: …sage', severity: 'critical', // eval() but not variable named eval or comment…
  • highRepository is archivedmaint.archived
Overall 58/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Supership Scan compares

Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
58/100
higher than 13% of 915 Security servers
Tools
4
the typical Security server has 6
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
66
more than 51% of 248 Security servers with a package

What its tools let an agent do: 4 read

Install Supership Scan in Claude Code, Cursor or VS Code

Runs npx -y supership-scan on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add supership-scan -- npx -y supership-scan
Add to Cursor

What the publisher says

From the Supership Scan repository's README, as published. We do not edit it. Read it on GitHub

supership

The search engine and clearing house for the agent economy. Built by Crest Deployment Systems.

supership indexes the entire x402 economy -- 52,000 services -- so an AI agent can find the right data and fetch it with a receipt. Reading the menu is free. Fetching through supership returns the goods plus a signed delivery receipt: proof of what you got, from where, settled on-chain. That is the part going direct can never give you.

Install

npm install -g supership-scan

Published on npm as supership-scan (the original name; kept for install continuity).

Requires Node.js 18+.

MCP server

npx -y -p supership-scan supership-mcp

Or wire it into any MCP client (Claude Code, Cursor, Windsurf):

{
  "mcpServers": {
    "supership": {
      "command": "npx",
      "args": ["-y", "-p", "supership-scan", "supership-mcp"]
    }
  }
}

Tools

Free menu, paid kitchen

  • The menu is free. manifest shows the real market: every relevant source, free or paid, ranked by who actually paid for it. That ranking is the part you cannot compute yourself -- it takes the whole index and the payment history.
  • The kitchen is the product. When you procure, supership crosses to the source (on whatever chain it lives), pays, takes delivery, and hands you the goods plus a signed delivery receipt -- an Ed25519 record of what was delivered (source, SHA-256 of the goods, settlement tx, timestamp), verifiable at /api/pubkey. That receipt is the provenance going direct cannot give you.

HTTP API

API base: https://supership.crestsystems.ai

Discovery: agent.json | llms.txt | OpenAPI

What supership does not do

  • It does not sell the data. It indexes the market and delivers what you ask for, with a receipt.
  • It does not hold your funds. The MCP server holds no keys and moves no money locally.
  • It does not give investment advice.

License

Apache 2.0.

Nothing above is checked by us. What we check is on the safety report.

Supership Scan: common questions

Is Supership Scan MCP server safe?
With care: it is graded C, so read the findings first (58/100). Read the Supership Scan safety report
How do I install Supership Scan?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Supership Scan need an API key?
No secret keys are declared. It reads 1 setting from the environment.
Is Supership Scan maintained?
The last commit was 153 days ago (2026-06-04). The latest release is v2.0.2.
What can I use instead of Supership Scan?
Servers from other publishers that do the same job: x402 Security & Alpha Oracle MCP server, Solana Security Standard MCP server and Unclaimed Sol MCP server.
How does Supership Scan compare with other Security MCP servers?
safety score 58/100 (higher than 13% of 915 Security servers); tools 4 (the typical Security server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Supership Scan

Same job from other publishers: the closest match first, then the best rated.

  • x402 Security & Alpha Oracle
    Read-only pre-trade honeypot simulation and DEX alpha oracle for Solana and Base.
    A
  • Solana Security Standard
    Scan Solana/Anchor code against the Solana Security Standard and serve the ruleset to MCP clients.
    A
  • Unclaimed Sol
    The first Vibe Claiming MCP: AI agents scan and reclaim dormant SOL on Solana. Signs locally.
    B
  • crosscheck
    Checks for AI agents over x402: review drafts, accept-check handoffs, scan skills before install.
    A
  • Insumer
    Wallet auth: send a wallet and conditions, get a signed boolean across 37 chains.
    B