MarketNow

io.github.alicelabs-llc由 GitHub 帳號 alicelabs-llc 發布v1.16.2更新於 Nov 11, 2026

Search 70,510 indexed MCP servers, install-risk scoring and Ed25519-signed Agent Trust Cards.

已驗證Streamable HTTP可網頁執行網頁搜尋與抓取安全與監控

概覽

AI 產生的概覽

MarketNow 是託管的信任登錄服務,其 MCP 伺服器讓助理驗證代理憑證、評估網域風險、檢查撤銷狀態並搜尋已收錄的 MCP 伺服器。

可以做什麼
  • 驗證並在八種格式間轉換 AI 代理憑證,列出支援的格式與驗證流程階段
  • 評估網域的詐騙風險,並檢查 Agent Trust Card 或 CA 金鑰的撤銷狀態
  • 以安全優先評分搜尋已收錄的 MCP 伺服器登錄資料
  • 使用 JCS 與 SHA-256 為 MCP 工具定義產生加密指紋
  • 提交技能至目錄,進行驗證與 Sentinel 掃描
適用情境
適合在助理需要於依據某個代理憑證、網域或 MCP 伺服器採取行動前判斷其是否可信時使用,也適合查找與審查 MCP 伺服器,或將自己的技能發布到目錄。
執行需求
可使用遠端 Streamable HTTP 端點,或透過 npx(需 Node.js)執行本機 npm 套件 marketnow-mcp,也可使用已發布的 Docker 映像。未宣告需要驗證、環境變數或標頭。
安裝前請注意
提交技能會在驗證與掃描後發布到公開目錄,請先確認送出的內容。驗證與網域檢查會將憑證或網域傳送給第三方託管服務。README 中的收錄數量與登錄描述不一致,相關數字應視為未經查證。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 MarketNow,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Web executable,透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式,或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南,先向你展示發布者、端點和登入方式,經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/io.github.alicelabs-llc%2Fmarketnow/install.md,並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前,先告訴我它的發布者、端點和登入方式,等我確認。不要把 API 金鑰寫進命令或我會提交的檔案;問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "marketnow": {
      "type": "http",
      "url": "https://marketnow.site/api/mcp"
    }
  }
}

README

MarketNow — Trust Infrastructure for AI Agents

[mcpservers.org] [mcptry] [status]

Repo ecosystem (one owner per concern, split 2026-09-26):

RepoSole owner of
alicelabs-llc/MARKETNOW (this repo)Product code: mcp-server (npm marketnow-mcp), atc-sdk/atc-python/atc-rust, Docker/Cline/Cursor integrations, CLIs, security audits
eddyflores100-lang/marketnowLive marketplace: site (aep-marketplace/), catalog data (_data/, skills/, public/api/), the 21 scheduled data pipelines, Vercel deploys of marketnow.site
alicelabs-llc/universal-trust-adapterATC/1.0 protocol: spec, adapters, reference implementation, plugins
alicelabs-llc/marketnow-submissionsPublic skill submissions queue
alicelabs-llc/statusLive status page

Data and site questions go to the marketplace repo; protocol questions to UTA; everything else lives here.

MarketNow doesn't sell AI tools. It determines whether AI agents should be allowed to trust and execute them.

[npm version] [npm downloads] [License: AliceLabs LLC Proprietary] [Official MCP Registry]

What is MarketNow?

MarketNow is trust infrastructure for AI agents: a hosted registry that verifies skills, credentials and domains across 68,388 indexed MCP servers (132,737 tracked across GitHub, npm and PyPI), with signed skill submissions, revocation checks and a 9-tool MCP API.

Every indexed entry is security-first scored. The MCP API is free — 68,387 of the 68,388 indexed servers are free to install (paid: 1 in the public stats API).

The 9 MCP tools (endpoint v1.16.0)

Endpoint tracks the npm train: v1.16.0 (2026-10-05 — auth-gate join in /api/skills: requires_auth / auth_state / rfc9728_valid on 6,165 probed skills, ?auth= filters, auth_gate response block); previously v1.15.0 (2026-09-26).

The MCP server exposes 9 tools, all under the marketnow_* namespace so Claude Desktop, Cursor, Cline, LangChain and LlamaIndex can disambiguate them at tool-choice time:

#ToolWhat it does
1marketnow_verify_trustVerify any AI-agent credential (JWT, W3C VC, MCP Card, ATC v3, A2A, EAT-AI, ZTA, X.509) through the UTA 12-stage verification pipeline
2marketnow_translate_credentialTranslate a credential between 8 formats (ATC v3, JWT, W3C VC, A2A, EAT-AI, ZTA, MCP Card, X.509) losslessly via the Universal Trust Schema
3marketnow_list_formatsList the 8 supported credential formats with their algorithms and status
4marketnow_get_pipelineGet the 12-stage verification pipeline details
5marketnow_check_domainScam checker: returns a domain risk score with reasons
6marketnow_search_skillsSearch the registry of indexed MCP servers (GitHub, npm, PyPI), security-first scored
7marketnow_check_revocationCheck revocation of an Agent Trust Card or CA key against the signed Revocation Registry (MNR-CRL-1.0) + live ledger
8marketnow_fingerprint_toolCryptographically fingerprint MCP tool definitions (OWASP MCP Cheat Sheet) with RFC 8785 JCS + SHA-256
9marketnow_submit_skillPublish a skill to the catalog: validated and Sentinel-scanned (injection patterns, embedded secrets, dangerous capabilities)

Tool contract: deterministic marketnow_ snake_case names · intent-oriented descriptions · strict JSON-Schema parameters · structured { content, isError } responses.

Quick start

Add to Cursor — 1 click (no terminal)

[Add to Cursor]

Connect any MCP client (Streamable HTTP)

json
{  "mcpServers": {    "marketnow": {      "url": "https://marketnow.site/api/mcp"    }  }}

Run the MCP server

bash
npx -y marketnow-mcp

Run it in Docker (audited repo tree, published by CI)

bash
docker run -i --rm ghcr.io/alicelabs-llc/marketnow-mcp:1.16.0# or register it in the Docker MCP Toolkit:docker mcp gateway add --docker ghcr.io/alicelabs-llc/marketnow-mcp

Cline

Paste the ready block from integrations/cline/cline_mcp_settings.json into Cline → MCP Servers → Configure. The repo also ships .clinerules/ house rules. Guide: integrations/cline/README.md.

Cursor

Open this repo as your Cursor workspace — .cursor/mcp.json auto-registers the server, and .cursor/rules/marketnow.mdc teaches Cursor the house rules. Guide: integrations/cursor/README.md.

Verify an Agent Trust Card (ATC/1.3)

bash
curl "https://www.marketnow.site/api/atc?action=ca-key"    # public CA key (Ed25519, RFC 8032)curl "https://www.marketnow.site/api/atc?action=spec"      # ATC/1.3 specificationcurl "https://www.marketnow.site/api/atc?action=verify&card_id=ATC-2026-XXXXX"

Stats (public, machine-readable)

MetricValue
MCP servers indexed68,388
Tracked across all sources132,737
Core certified (L1)59,946
Community indexed9,131
Free to install68,387 of 68,388 (paid: 1)
Paid1
L1 index checks10/10 passing
L2 Sentinel scans2,839 of 2,868 npm tarballs
Credential formats8 (ATC v3, JWT, W3C VC, A2A, EAT-AI, ZTA, MCP Card, X.509)
Verification pipeline12 stages (UTA)
CAEd25519 (RFC 8032)

Source of truth: https://www.marketnow.site/api/stats.json — CI fails if any surface diverges.

Security model

Two levels:

  • L1 — index certification: all 68,388 entries pass 10 metadata/security checks before being indexed.
  • L2 — Sentinel scans: shipped npm tarballs are scanned (2,839 to date) for injection patterns, embedded secrets and dangerous capabilities. Skills that fail are quarantined and published in the transparency report.

Conformance

Canonical conformance vectors for the UTA pipeline: /uta/conformance/vectors/_index.json (schema 1.5.0).

Links

License

All code in this repository is PROPRIETARY — property of AliceLabs LLC.

For licensing: [email protected] For support: [email protected] General: [email protected]

Built by AliceLabs LLC (Wyoming, USA) — founder Edison Flores.

來源:README.md,提交 626180c

工具

0
SourceWeft 尚未讀取此伺服器的工具。

版本歷史

4
  1. v1.16.2最新Nov 11, 2026
  2. v1.16.1Oct 25, 2026
  3. v1.16.0Oct 5, 2026
  4. v1.15.0Sep 29, 2026

評分

已滿足適用檢查項的 75%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具必需15 分

    請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分

    請在儲存庫或註冊中心條目中宣告授權條款。