MCP.Market

GuardMarket MCP server

by zma-petterzhang·io.github.zma-petterzhang/guardmarket·v0.3.0

MCP client for commerce/data skills; requires a configured GuardMarket backend.

B83/100grade B
What users say
No reviews yet
Be the first
Safety scan
B83/100

full report

Adoption
New

0 stars

Reviews

Write one

Nobody has reviewed GuardMarket yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

GuardMarket tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it

no findings
  • –Code scanpackage could not be scannedn/a
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 0 days ago15/15
  • Maintainer identityregistry namespace matches repository owner6/10
Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How GuardMarket compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
83/100
higher than 65% of 48,255 servers

Install GuardMarket in Claude Code, Cursor or VS Code

The registry entry has no remote endpoint or installable package.

What the publisher says

From the GuardMarket repository's README, as published. We do not edit it. Read it on GitHub

GuardMarket — commerce and data skills over MCP

<!-- mcp-name: io.github.zma-petterzhang/guardmarket -->

中文 · 125-skill catalog · Releases · Integration examples

GuardMarket gives MCP clients five tools to discover versioned skills, inspect their schemas and prices, invoke with an explicit spending cap, and read wallet balances and receipts. The catalog describes 125 implemented commerce, inventory, CSV, JSON, text, date, math, statistics, encoding, validation, and unit-conversion skills.

This repository is the public client and documentation. Skill execution, accounts, and billing run in a separately operated GuardMarket backend. Installing this client does not create a backend or a wallet. No public production MCP endpoint, PyPI listing, or official directory approval is claimed. The static website is documentation, not an execution endpoint. The bundled examples are synthetic and contain no account data.

Install and connect

Desktop bundle: download guardmarket-mcp-0.3.0.mcpb from release v0.3.0 and verify it against SHA256SUMS. Open it in a host that supports MCPB 0.4 and its uv runtime. The host manages Python 3.11+; the bundle has no external Python dependencies. Configure your actual backend URL in the install form. Leave the masked consumer API key blank for anonymous discovery. Hosts supporting only older MCPB formats should use the wheel/stdio installation below. This bundle still needs a running backend; it does not install the marketplace server. See bundle details.

Python 3.11+ is required. The Python client has no runtime dependencies.

python3 -m venv .venv
.venv/bin/python -m pip install "git+https://github.com/zma-petterzhang/guardmarket.git@v0.3.0"
.venv/bin/guardmarket-mcp --version

For installation without Git, download the wheel from release v0.3.0, verify its SHA-256 against the release SHA256SUMS, then run python -m pip install /path/to/guardmarket_mcp-0.3.0-py3-none-any.whl. Pin a version or commit in production. On Windows use .venv\Scripts\python.exe and .venv\Scripts\guardmarket-mcp.exe.

Set GUARDMARKET_URL to your backend origin, for example http://127.0.0.1:8787 for a local instance. The client accepts HTTPS origins and numeric-loopback HTTP origins only. Redirects and environment HTTP proxies are disabled.

export GUARDMARKET_URL=http://127.0.0.1:8787
.venv/bin/guardmarket-mcp

The command waits for MCP messages on standard input; it is normally launched by your AI client. market.search and market.describe work anonymously if the backend permits public discovery. The other three tools require a consumer API key created in that backend's account settings. Provide it via the client's environment (GUARDMARKETAPIKEY) or a user-owned mode-0600 regular file (--key-file /absolute/path/key). The key-file option is POSIX-only; environment variables work on Windows. Never put a real key in a committed configuration or a chat message.

Tools and billing behavior

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

GuardMarket: common questions

Is GuardMarket MCP server safe?
Mostly: it is graded B (83/100). Read the GuardMarket safety report
Does GuardMarket need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is GuardMarket maintained?
The last commit was 39 days ago (2026-09-26). The latest release is v0.3.0.