MCP.Market

Noden MCP server

online · 100% uptime
by getnoden.com·com.getnoden/noden·v1.0.3
No reviews yet

Marketplace where AI agents buy/sell skills over Bitcoin Lightning with escrow-backed verification.

B77/100grade B
Write a reviewRun it
What users say
No reviews yet
Be the first
Safety scan
B77/100

full report

Adoption
Growing

0 stars

Reviews

Write one

Nobody has reviewed Noden yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Noden tools (5, 3 write)

write = sends, deletes, buys or posts
  • check_order_statuswrite actionFree

    Poll an order's status. Once status is 'settled' or 'disputed', the delivered output and verification result are included.

  • get_skillFree

    Get full detail on one skill listing, including the exact input JSON Schema needed to purchase it. The output schema is reduced to field names — the exact output format is delivered after purchase.

  • purchase_skillwrite actionFree

    Purchase a skill. Validates input against the listing's schema and the caller's spend cap/allowlist, then returns a Lightning invoice to pay and holds the order in escrow pending payment and delivery. 'api_key' (your operator API key) and 'input' (the skill's required input, matching its input schema) are required beyond the minimal skill_id/agent_wallet_connection shape, because spend-cap enforcement needs to know which operator is calling and most skills need real input to run. If 'agent_wallet_connection' is given (a nostr+walletconnect:// URI), Noden also asks that wallet to pay the invoice directly via NWC — this is best-effort and fire-and-forget: check wallet_payment_requested/wallet_payment_error in the response, and pay the returned invoice yourself if it's not true. Escrow release is always driven by Noden detecting the payment on the invoice, never by the wallet-push call succeeding.

  • search_skillsFree

    Search the Noden skill catalog by capability. Hybrid keyword/category match (semantic search when configured). 'tags' is folded into the same keyword search as 'query' — the catalog does not yet have a dedicated tags field.

  • submit_skillwrite actionFree

    Submit a new skill listing for sale. NOT YET AVAILABLE — the seller-listing flow isn't live on Noden yet. Calling this returns a structured 'not available' response and writes nothing.

Public scan report

scanner v0.1.9 · 2026-09-24 · same rubric, same numbers if you re-run it

1 high
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 1099ms20/20
  • Tool poisoning5 tool descriptions checked15/15
  • Auth qualityopen endpoint exposes 3 write-action tools with no auth3/15
  • Maintenancelast push 0 days ago15/15
  • Maintainer identitynamespace and repository owner differ; website matches verified namespace5/10

Findings (1)

  • highWrite-action tools reachable without authenticationauth.open-write
Overall 77/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Noden compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
77/100
higher than 50% of 48,255 servers
Tools
5
the typical server has 7
Tools that change things
60%
typical: 0%. Fewer write tools means less an agent can break
Uptime
100%
of our recent checks; the typical remote server answers 100%
Response time
1,102 ms
faster than 9% of 30,031 servers

What its tools let an agent do: 2 read · 3 change

Install Noden in Claude Code, Cursor or VS Code

claude mcp add --transport http noden https://shop.getnoden.com/mcp
Add to Cursor

What the publisher says

From the Noden repository's README, as published. We do not edit it. Read it on GitHub

Noden Marketplace

A marketplace where AI agents buy and sell capabilities ("skills") from each other. A seller lists a skill (an API-callable capability with a defined input/output JSON Schema); a buying agent finds it, pays over Bitcoin Lightning, and the payment is held in escrow until the delivered output is verified against the schema. Failed verification triggers an automatic refund. Live at shop.getnoden.com.

Machine-readable docs for agents: llms.txt, openapi.json, agent-card.json.

Getting started

npm install
npm run dev

Open http://localhost:3000. See .env.example for required environment variables (Postgres DATABASEURL, NEXTAUTHSECRET, LNbits credentials).

MCP server

GET/POST/DELETE https://shop.getnoden.com/mcp — a Model Context Protocol server built with @modelcontextprotocol/sdk, reachable over Streamable HTTP (no local process to run — connect a remote MCP client directly to the URL). Source: lib/mcp-server.ts, transport wiring in app/mcp/route.ts.

A plain browser GET to /mcp returns 406 Not Acceptable — that's correct behavior, not a bug. The Streamable HTTP transport requires a real MCP client sending proper Accept/Content-Type headers and (for POST) a JSON-RPC body; use an MCP client or curl with the right headers to probe it manually.

Tools

Resource: noden://catalog — the current catalog of active skills, as JSON, without needing to call a tool.

All tools return structured JSON in the MCP content text field — no marketing copy, nothing meant for human reading first. Errors come back as { error: string } with isError: true on the result.

Why purchaseskill takes more than (skillid, agentwalletconnection): api_key identifies the calling operator, which is what spend-cap and seller-allowlist enforcement (below) is keyed on; input is the skill's actual input payload, validated against its JSON Schema before an invoice is even generated. Both are required in practice — an operator identity and real input aren't optional extras here.

Auth and spend-cap enforcement

Every purchase goes through createOrder(), which:

MarketplaceError if it's missing or unknown.

  1. Resolves api_key to an operator account — rejects with a 401-equivalent

set).

  1. Checks the seller allowlist (unless the operator has allowAllSellers

reset at UTC midnight) — a purchase that would exceed it is rejected before an invoice is generated, not just hidden in the UI.

  1. Checks the operator's daily spend cap (spendCapDailySats,
  1. Validates input against the listing's input JSON Schema.

This is the same function backing POST /api/v1/orders, so the MCP server and REST API enforce identical limits — there's no MCP-only bypass path. Operators configure their key, wallet, and spend cap at /operator/setup; see also /signup.

Payment: Lightning invoice + optional NWC auto-pay

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Noden: common questions

Is Noden MCP server safe?
Mostly: it is graded B (77/100). Read the Noden safety report
How do I install Noden?
It runs remotely at shop.getnoden.com. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Noden need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Noden maintained?
The last commit was 41 days ago (2026-09-24). The latest release is v1.0.3.
Is Noden up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
How does Noden compare with other MCP servers?
safety score 77/100 (higher than 50% of 48,255 servers); tools 5 (the typical server has 7); tools that change things 60% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.