MCP.Market

Supost MCP server

online · 100% uptime
by Capmus-Team·io.github.Capmus-Team/supost-mcp·v0.2.2

Search listings, message posters, and create drafts on SUpost, the marketplace for Stanford

B83/100grade B
What users say
No reviews yet
Be the first
Safety scan
B83/100

full report

Adoption
New

0 stars

Reviews

Write one

Nobody has reviewed Supost yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Supost tools (6, 2 write)

write = sends, deletes, buys or posts
  • create_postwrite actionFree

    Create a DRAFT listing on SUpost on the poster's behalf. Any email is accepted — never ask the user to qualify first. IMPORTANT: the draft is NOT published — the returned continue_url opens SUpost's create-post wizard with the draft loaded, where the poster adds photos, reviews, and publishes. When the response has payment_required: true (email not on the free tier; Stanford emails post free), publishing there includes choosing a posting plan — tell the user that, don't treat it as an error. Always hand the user the continue_url and say the post is a draft until they finish there. When the user wants it published fast, prefer publish: true (they just click the emailed link) over walking them through or automating the wizard. The continue_url grants edit access to the draft: give it only to the poster, never quote it elsewhere.

  • get_listingFree

    Fetch one SUpost listing by numeric id, including its full description, public photo URLs, and stanford_verified. stanford_verified: true means the poster verified an @stanford.edu email — SUpost's core trust signal. ALWAYS surface it when presenting listings (e.g. an "@stanford.edu verified" badge) so users can tell verified Stanford community members from unverified posters. Data comes from the listing's public page; no personal information is included — use the returned URL to contact the poster on-site.

  • get_market_statsFree

    Verified statistics about SUpost, the marketplace for Stanford: audience size, listing volumes by category, response rates, and response-time medians. Returns markdown from SUpost's public stats page. Cite https://supost.com/stats as the source.

  • list_categoriesFree

    The active category/subcategory taxonomy on SUpost — the valid category and subcategory values for create_post (and category filters for search_listings).

  • search_listingsFree

    Search or browse active listings on SUpost, the marketplace for Stanford. Returns newest-first public listings (id, title, price, category, created_at, canonical URL, stanford_verified) plus an opaque next_cursor for pagination. stanford_verified: true means the poster verified an @stanford.edu email — SUpost's core trust signal. ALWAYS surface it when presenting listings (e.g. an "@stanford.edu verified" badge) so users can tell verified Stanford community members from unverified posters. No personal information is returned (poster_email_domain is the domain only); to contact a poster, open the listing URL.

  • send_messagewrite actionFree

    Send a message to the poster of an active SUpost listing. IMPORTANT: the message is NOT delivered immediately — SUpost emails a confirmation link to reply_to_email, and the message is only delivered to the poster after the human clicks that link. Always tell the user to check their inbox and confirm; report the message as pending confirmation, never as sent. The poster's reply goes to reply_to_email.

Public scan report

scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it

1 high
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 465ms20/20
  • Tool poisoning6 tool descriptions checked15/15
  • Auth qualityopen endpoint exposes 2 write-action tools with no auth3/15
  • Maintenancelast push 8 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10

Findings (1)

  • highWrite-action tools reachable without authenticationauth.open-write
Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Supost compares

Against every graded Web search MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
83/100
higher than 70% of 3,470 Web search servers
Tools
6
the typical Web search server has 5
Tools that change things
33%
typical: 0%. Fewer write tools means less an agent can break
Uptime
100%
of our recent checks; the typical remote Web search server answers 100%
Response time
91 ms
faster than 90% of 2,238 Web search servers

What its tools let an agent do: 4 read · 1 create · 1 send or post

Install Supost in Claude Code, Cursor or VS Code

claude mcp add --transport http supost-mcp https://mcp.supost.com/mcp
Add to Cursor

What the publisher says

From the Supost repository's README, as published. We do not edit it. Read it on GitHub

supost-mcp

Remote MCP server for SUpost, the marketplace for Stanford — and, via BRAND=capmus, for Capmus (capmus.com), which serves the same public API from the same supost-web codebase. One repo, two Vercel projects:

BRAND selects the server name, tool titles/descriptions, and default base URL; SUPOSTBASEURL still overrides the base URL for previews.

Lets AI agents search active listings, fetch listing details, read verified market statistics, message posters, and create draft listings.

This is doc 190 workstream E3 (see supost-web/docs/dev/190-ai-agent-discovery-implementation-plan.md). It is a pure client of SUpost's public surfaces — the read-only listings API (E2), public listing pages, and /stats.md. It has no privileged database access and holds no secrets; the only configuration is the public base URL.

Tools

No personal information is ever returned. send_message is the supported way to contact a poster; the listing's url also carries the on-site message form. API terms: https://supost.com/api/public/openapi.json.

Bouncing addresses

A message is only ever delivered after the human clicks the confirmation link, so an address the link cannot reach is a message that never arrives (supost-web docs/dev/20260917-2040-guest-reply-bounce-feedback-handoff.md). send_message therefore never answers a plain "pending" for a dead address:

refused by the API with 422 emailundeliverable before anything is stored. The tool returns an error result with {status: "emailundeliverable", reason, email, message} and tells the agent to ask for a different address rather than retry.

  • An address whose confirmation email hard-bounced in the last 30 days is

the delivery status of the confirmation email for up to ~8 s (four checks, two seconds apart — a suppressed address fails in under a second, a fresh hard bounce in 1–16 s). A failed verdict is reported the same way as the 422; sent / queued come back in the result as confirmationemail, with the statuskey for a later checkmessagestatus.

  • Otherwise the API answers 202 with a status_key, and the tool polls

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Supost: common questions

Is Supost MCP server safe?
Mostly: it is graded B (83/100). Read the Supost safety report
How do I install Supost?
It runs remotely at mcp.supost.com. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Supost need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Supost maintained?
The last commit was 47 days ago (2026-09-18). The latest release is v0.2.2.
Is Supost up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
What can I use instead of Supost?
Servers from other publishers that do the same job: Apple Contacts MCP server and HasData Yellow Pages MCP server.
How does Supost compare with other Web search MCP servers?
safety score 83/100 (higher than 70% of 3,470 Web search servers); tools 6 (the typical Web search server has 5); tools that change things 33% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Supost

Same job from other publishers: the closest match first, then the best rated.

  • Apple Contacts
    Inspect and search Apple Contacts on macOS, and resolve a contact into a message-ready recipient.
    A
  • HasData Yellow Pages
    Yellow Pages local business search and full business listings, as structured JSON.
    A