GateCore Marketplace

com.gatecoreai由 gatecoreai.com 發布官方發布者v1.1.0更新於 Oct 25, 2026

Procure governed AI capabilities: machine-readable price, scope, trust, gateway-delegation terms.

已驗證Streamable HTTP可網頁執行安全與監控商業與電商

概覽

AI 產生的概覽

GateCore 受治理 AI 能力市場的遠端 MCP 伺服器,讓助理探索商品、讀取合約條款並提出採購請求。

可以做什麼
探索並讀取市場商品,附帶機器可讀的價格、所需權限範圍、最低信任度、目標與資料分級,無需帳號。為某個商品請求受治理的採購決策(PROCURE、REVIEW 或 DENY),符合條件時附帶閘道委派中繼資料。授權對商品的簽章存取,並在本機對賣方輸出做雜湊、以買方代理金鑰證明完成,回傳最終簽章收據。列出憑證租戶可見的採購決策,並向支援的商品提交經同意的消費者潛在客戶。
適用情境
當助理需要在 GateCore 上評估或購買受治理的 AI 能力,並在交易前以程式方式比較價格、權限範圍與信任條款時使用。探索與商品讀取無需憑證;採購、歷史記錄與潛在客戶提交需要存取金鑰。
執行需求
遠端 streamable HTTP 端點,無需本機執行環境或套件。探索與商品讀取無需金鑰或帳號。採購、採購歷史與潛在客戶提交需要 GateCore 簽發的 MCP 存取金鑰(gcmk_ 前綴),可從 GateCore 開發者入口自助取得。需要能連線至 GateCore 端點的網路。
安裝前請注意
採購可能承諾付費能力;價格以分為單位寫在商品合約中,請求前應核對預算。存取金鑰承載代理身分與租戶範圍,應視為機密保管。採購、授權、完成與潛在客戶提交都會改變狀態並產生簽章收據。潛在客戶包含提交給第三方商品的消費者資料。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 GateCore Marketplace,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Web executable,透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式,或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南,先向你展示發布者、端點和登入方式,經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/com.gatecoreai%2Fmarketplace/install.md,並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前,先告訴我它的發布者、端點和登入方式,等我確認。不要把 API 金鑰寫進命令或我會提交的檔案;問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "gatecore-marketplace": {
      "type": "http",
      "url": "https://mcp.gatecoreai.com/mcp"
    }
  }
}

README

GateCore

GateCore is the governed transaction layer for AI agents. Every agent request is identity-verified, policy-checked, priced, settled, and receipted on a tamper-evident ledger before it touches tools, data, or money.

This repository is GateCore's public integration surface: the MCP server manifest, a quickstart, runnable client examples, and the agent-facing capability file. It is the canonical reference for the com.gatecoreai/marketplace entry in the official MCP registry.

What you can do today

Point any MCP client at https://mcp.gatecoreai.com/mcp and, with no key and no account:

  • Discover governed capabilities. discover_listings returns published marketplace listings with machine-readable price, required scopes, and minimum trust terms attached.
  • Read the contract before you commit. get_listing returns one listing and its machine-enforceable contract: price, required scopes, minimum trust, target, and data classification. Your agent can evaluate the terms programmatically instead of parsing marketing copy.

With a GateCore MCP access key (gcmk_ prefix), an agent can also:

  • Request a governed procurement decision. procure returns PROCURE, REVIEW, or DENY. An eligible decision carries gateway delegation metadata, and execution happens through GateCore's signed gateway API.
  • Read its own audit trail. list_procurements returns the procurement decisions visible to the credential's tenant.
  • Submit a consented lead. submit_lead delivers a qualified consumer lead to a listing that accepts them.

QUICKSTART.md has the exact handshake and copy-pasteable calls. examples/ has short, dependency-light clients for discovery and listing fetch.

Why terms are machine-readable

An agent that wants to buy something on the open web has to read a human sales page, guess at the price, guess at the scope of what it is allowed to do with the result, and take the seller's word for quality. GateCore replaces all three guesses with structured fields on the listing:

  • Price is stated in cents on the contract, so an agent can filter by budget before it ever asks to transact.
  • Scope is the explicit set of permissions the capability requires, so an agent can check the request against its own policy instead of discovering the mismatch after the fact.
  • Trust is a minimum threshold expressed on the contract. Trust on GateCore is earned from verified outcomes. It cannot be asserted by the seller or purchased.

Because those terms are attached to the listing rather than to a sales page, the decision to transact is one an agent can make on its own and a human can audit afterward.

Receipts and the audit trail

Every governed decision produces a signed receipt that binds the request, the policy decision, and the settlement together. Receipts are Ed25519-signed and independently verifiable: GateCore publishes the receipt signing keys at https://api.gatecoreai.com/v1/receipts/keys, and a client-side verifier at gatecoreai.com/verify recomputes the canonical bytes and checks the signature entirely in the browser. Verification requires no account and no call back to GateCore, so a receipt stands as evidence to a counterparty who does not trust us.

That is the point of the design. The decision is bound to the evidence, so "what did the agent do, under whose authority, at what price, and on what terms" has one answer that survives the session.

Public endpoints

PurposeURL
MCP endpoint (streamable HTTP)https://mcp.gatecoreai.com/mcp
MCP manifesthttps://mcp.gatecoreai.com/.well-known/mcp.json
Agent capability filehttps://gatecoreai.com/llms.txt
Public marketplacehttps://gatecoreai.com/marketplace/
Receipt verifierhttps://gatecoreai.com/verify
Receipt signing keyshttps://api.gatecoreai.com/v1/receipts/keys

Registry entry

GateCore is listed on the official Model Context Protocol registry as com.gatecoreai/marketplace. server.json in this repository is that manifest.

Access keys

Discovery is open. Procurement, procurement history, and lead submission require a GateCore-issued MCP access key so that agent identity and tenant scope come from the credential rather than from tool-call arguments. Get one self-serve, free, at app.gatecoreai.com/developer/portal. For anything else, contact [email protected].

License

Apache License 2.0. See LICENSE and NOTICE.

來源:README.md,提交 7056a2f

工具

8

discover_listings

Discover Marketplace Listings

Discover governed GateCore marketplace capabilities with machine-readable pricing, required scopes, and minimum trust terms. Results preserve the marketplace's organic order.

輸入參數tagsquerymin_trustmax_price_cents

get_listing

Get Listing Details

Fetch one governed marketplace listing and its machine-enforceable contract terms: price, required scopes, minimum trust, target, and data classification.

輸入參數listing_id必填

procure

Request Governed Procurement

Request governed procurement for a listing. In public full mode, identity comes from the MCP access key, trust comes from GateCore's baseline, and the result is a PROCURE, REVIEW, or DENY decision with gateway delegation when eligible.

輸入參數scopeslisting_id必填request_idprocurement_idmax_price_centsrequester_trust必填requester_agent_id必填

authorize_access

Authorize Governed Access

Authorize signed access to a governed listing. Purpose is forwarded unchanged when present; policy at the gateway decides whether the declared purpose is allowed.

輸入參數purposelisting_id必填max_price_cents

complete_access

Complete Governed Access

Hash seller output locally, attest completion with the buyer agent key, and return the terminal signed receipt. Seller output itself is never forwarded or returned.

輸入參數ticket必填outcome必填seller_output必填

list_procurements

List Procurement Decisions

List procurement decisions for the credential tenant in public modes.

無需輸入參數。

request_listing_access

Request Listing Access

Submit an idempotent listing-access request for the credential's tenant and agent.

輸入參數agent_idlisting_id必填

submit_lead

Submit Consumer Lead

Submit a consented consumer lead to a supported published listing.

輸入參數lead必填listing_id必填

版本歷史

1
  1. v1.1.0最新Sep 16, 2026

評分

已滿足適用檢查項的 100%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分