Mmcp.market

Legit MCP server

by gonna.bond·bond.gonna/legit·v1.0.0

Trust scores and organic demand intelligence for x402 agents

C67/100grade C
What users say
No reviews yet
Be the first
Safety scan
C67/100

full report

Adoption
New

Little public usage data yet

Reviews

Write one

Nobody has reviewed Legit yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Legit tools (4)

write = sends, deletes, buys or posts
  • check_trustFree

    Trust report for one merchant: 0-100 score, letter grade, uptime, median latency and a plain-English explanation. Accepts Algorand, EVM or Solana addresses, or an https URL.

  • compare_merchantsFree

    Head-to-head trust comparison of 2-5 merchant addresses. Returns the winner address and a one-sentence rationale.

  • get_badge_urlFree

    Embeddable LEGIT trust-badge SVG URL for a merchant, plus a ready-to-paste HTML snippet for the merchant's site.

  • leaderboardFree

    Top merchants by trust score, optionally filtered to one network (e.g. base-mainnet, algorand-mainnet, solana-mainnet).

Public scan report

scanner v0.1.9 · 2026-09-24 · same rubric, same numbers if you re-run it

1 low
  • Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 854ms20/20
  • Tool poisoning4 tool descriptions checked15/15
  • Auth qualityopen endpoint, read-only tools10/15
  • Maintenanceno repository listed3/15
  • Maintainer identityno repository or website to verify2/10

Findings (1)

  • lowNo source repository listedmaint.no-repo
Overall 67/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Install directly

claude mcp add --transport http legit https://legit.gonna.bond/mcp
Add to Cursor

Legit: common questions

Is Legit MCP server safe?
With care: it is graded C, so read the findings first (67/100). Read the Legit safety report
How do I install Legit?
It runs remotely at legit.gonna.bond. Add it to Claude Code, Claude Desktop or Cursor with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Legit need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Legit maintained?
The latest release is v1.0.0.
Is Legit up?
100% of our last 20 checks got an answer. We check remote servers about four times a day.

More from gonna.bond