Marketnow MCP server

Read from the package source without running it. The installed server may list more.

• marketnow_check_revocation

  Check the revocation status of an Agent Trust Card (card_id) or CA key (kid) against the signed MarketNow Revocation Registry (MNR-CRL-1.0) + live ledger. Use this BEFORE trusting or caching any ATC — a card that verified cryptographically yesterday may be REVOKED today (e.g. mn-ca-002 was revoked for key compromise on 2026-09-08). Returns status (VALID/EXPIRED/REVOKED/SUPERSEDED/UNKNOWN) + recomm

• marketnow_fingerprint_tool

  Cryptographically fingerprint MCP tool definitions (TFP-1.0): SHA-256 over the RFC 8785 JCS canonical form of each tool plus a manifest fingerprint for the whole tools/list surface. Use this (1) on first contact with any MCP server to PIN its tool surface, and (2) on every subsequent tools/list with the pinned manifest to detect drift — the OWASP MCP Cheat Sheet control 'verify tool descriptions h

• marketnow_get_install_command

  Get the exact `npx` install command for a skill. Use this when an agent has already selected a skill via marketnow_search_skills or marketnow_recommend_skills and is ready to install. All skills are currently FREE — no purchase step is required.

• marketnow_get_manifest

  Get marketplace metadata: total skill count, pricing tiers, API endpoint inventory, and aggregate security metrics (Sentinel checks performed, threats detected, skills quarantined). Use this to ground an agent's understanding of marketplace scale and security posture before any install or trust decision.

• marketnow_get_owasp_compliance

  Get MarketNow's alignment with the OWASP MCP Cheat Sheet (12 controls — tool fingerprinting, capability declarations, least-privilege, output validation, etc.). Also returns the live tool fingerprint (SHA-256) and capability manifest (filesystem/network/shell/credentials/process inference) for any registered skill. Use this BEFORE invoking a skill whose blast radius you need to bound — it tells yo

• marketnow_get_skill

  Fetch full metadata for a single skill by its ID or slug. Returns README excerpt, install command, Sentinel security score, license, and the canonical marketplace URL. Use this AFTER marketnow_search_skills or marketnow_recommend_skills when the agent needs the complete skill record before invoking marketnow_get_install_command.

• marketnow_list_categories

  List all marketplace skill categories with live counts. Use this ONCE at the start of a session to map the taxonomy before doing a category-filtered search with marketnow_search_skills. No input parameters.

• marketnow_lookup_referral

  Look up referral stats for a code you own: total clicks, installs, purchases, and commission earned. Use this after marketnow_mint_referral to measure the performance of your viral loop.

• marketnow_mint_referral

  Mint a unique referral code (ref_xxxxxxxx) tied to your agent_id. Share it with other agents — when they make a purchase using your code, you earn 5% commission. Check your stats with marketnow_lookup_referral. Use this to participate in the marketplace's viral loop once you have an established agent_id.

• marketnow_recommend_skills

  Get AI-ranked skill recommendations for a task described in natural language. Returns the best-matching MCP servers with Sentinel security scores and match_score. Use this when the agent knows the GOAL (e.g. "scrape a website", "send a Discord message", "query PostgreSQL") but has not yet decided which skill to install. Faster and more accurate than marketnow_search_skills for open-ended goals.

• marketnow_search_skills

  Search the MarketNow marketplace for MCP-compatible skills. Returns matching skills with price, category, install command, and Sentinel security score. Use this whenever an agent needs to discover a tool for a specific task — preferred entry point before any install or recommendation. Results are bounded to `limit` (1–50) and sorted by the requested criterion.

• marketnow_submit_skillwrite action

  Submit a GitHub repository containing an MCP server to the MarketNow marketplace. The server runs L1.5 metadata checks + L1.7 malware scan synchronously, persists the submission to the public ledger, and queues the L2 sandbox audit (~1h). If L1.5+L1.7 pass, the skill becomes discoverable via marketnow_search_skills and is pre-allocated an Agent Trust Card. FREE. Use this when an agent encounters a

• marketnow_verify_atc_spec

  Verify ANY Agent Trust Card — DUAL FORMAT (ATC/3.0 unified, since v1.13.0). (1) Production ledger envelopes {card_id, status, payload (schema_version 1.1.0), signature}: real Ed25519 verification against the embedded MarketNow CA key registry (rotation-aware: ca-key-001 retired, mn-ca-002 retired-compromised = fail-closed, mn-ca-003 active), RFC 8785 JCS canonicalization, sha256 signed_payload_has

• marketnow_verify_receipt

  Verify a signed delivery proof (action-receipt) for a completed purchase. Receipts are emitted on every paid purchase and persisted to a public ledger. Returns what was delivered (skill_id, license_key, amount), the settle txhash, and interop fields for the Vibe action-ref system. Use this to confirm a purchase actually completed before granting the agent downstream access.

• marketnow_verify_trust

  Verify an Agent Trust Card (ATC) before interacting with an untrusted agent or skill. Checks the Ed25519 signature, expiry date, and revocation status. Returns `sentinel_review_score` (0–10, review evidence — not a verdict) and `decision_authority="consumer"` (the runtime makes the trust decision, not the card). Use this BEFORE executing any MCP tool whose provenance you cannot otherwise establish

• Code scan3 source files scanned25/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitylocal package, no credentials required12/15
• Maintenancelast push 6 days ago15/15
• Maintainer identitynamespace and repository owner differ; website matches verified namespace6/10

Safety score

89/100

higher than 83% of 4,460 AI and agents servers

Tools

15

the typical AI and agents server has 6

Tools that change things

7%

typical: 0%. Fewer write tools means less an agent can break

GitHub stars

1

more than 50% of 2,711 AI and agents servers

Downloads a week

528

more than 87% of 1,538 AI and agents servers with a package

Marketnow: common questions

Is Marketnow MCP server safe?

Yes, by our scan: it is graded A (89/100). Read the Marketnow safety report

How do I install Marketnow?

It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.

Does Marketnow need an API key?

Not as far as the registry entry and our scan can tell: no credentials are declared or required.

Is Marketnow maintained?

The last commit was 9 days ago (2026-10-26). The latest release is v1.14.2.

What can I use instead of Marketnow?

Servers from other publishers that do the same job: three.ws Provenance MCP server, Agent Security Scanner MCP server and agent-device MCP server.

How does Marketnow compare with other AI and agents MCP servers?

safety score 89/100 (higher than 83% of 4,460 AI and agents servers); tools 15 (the typical AI and agents server has 6); tools that change things 7% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.