Server definition

Hash: sha256:7c8fbfbb6cd3b244fcd46ed6b139e7669049d7bf4e1ea00599505dbb7c90a563
What it is: What a remote MCP server returned when asked what it offers: 9 tools

The blob, as servednamed by its sha256

{
  "instructions": null,
  "tools": [
    {
      "description": "Check if a domain is suspicious (scam checker). Returns risk score and reasons.",
      "inputSchema": {
        "properties": {
          "domain": {
            "description": "The domain to check (e.g. example.com)",
            "type": "string"
          }
        },
        "required": [
          "domain"
        ],
        "type": "object"
      },
      "name": "marketnow_check_domain",
      "outputSchema": null
    },
    {
      "description": "Check the revocation status of an Agent Trust Card (card_id) or CA key (kid) against the signed MarketNow Revocation Registry (MNR-CRL-1.0) + live ledger. Returns VALID/EXPIRED/REVOKED/SUPERSEDED/UNKNOWN with PERMIT/DENY recommendation. Fail-closed: unknown subjects answer UNKNOWN+DENY. The signed CRL layer is independently verifiable via Ed25519 (RFC 8785 JCS).",
      "inputSchema": {
        "properties": {
          "card_id": {
            "description": "Agent Trust Card ID (e.g. ATC-2026-1509360)",
            "type": "string"
          },
          "kid": {
            "description": "CA key ID (e.g. mn-ca-002, mn-ca-003)",
            "type": "string"
          },
          "nonce": {
            "description": "Optional client nonce — echoed in the response (anti-replay)",
            "type": "string"
          }
        },
        "type": "object"
      },
      "name": "marketnow_check_revocation",
      "outputSchema": null
    },
    {
      "description": "Cryptographically fingerprint MCP tool definitions (OWASP MCP Cheat Sheet: 'verify tool descriptions haven't changed'). Computes RFC 8785 JCS + sha256 per tool plus a manifest fingerprint for the whole tools/list surface. Pass a previous manifest in 'pinned' to get a drift report (added/removed/changed) — the core defense against tool poisoning and rug-pull redefinitions.",
      "inputSchema": {
        "properties": {
          "pinned": {
            "description": "Optional: previous manifest {tools:[{name, fingerprint_sha256}]} from an earlier fingerprint run — enables drift detection",
            "type": "object"
          },
          "tools": {
            "description": "Tool definitions from tools/list: [{name, description, inputSchema}]",
            "items": {
              "type": "object"
            },
            "type": "array"
          }
        },
        "required": [
          "tools"
        ],
        "type": "object"
      },
      "name": "marketnow_fingerprint_tool",
      "outputSchema": null
    },
    {
      "description": "Get the 12-stage credential-verification pipeline details (PARSE→DECISION).",
      "inputSchema": {
        "properties": {},
        "type": "object"
      },
      "name": "marketnow_get_pipeline",
      "outputSchema": null
    },
    {
      "description": "List all 9 supported credential adapter formats (ATC, EAT-AI, ZTA, A2A, MCP Card, W3C VC, OAuth, SPIFFE, X.509) with their algorithms and status.",
      "inputSchema": {
        "properties": {},
        "type": "object"
      },
      "name": "marketnow_list_formats",
      "outputSchema": null
    },
    {
      "description": "Search the MarketNow registry of indexed MCP servers (68k+ across GitHub, npm and PyPI, security-first scored).",
      "inputSchema": {
        "properties": {
          "category": {
            "description": "Filter by category",
            "type": "string"
          },
          "query": {
            "description": "Search query",
            "type": "string"
          }
        },
        "type": "object"
      },
      "name": "marketnow_search_skills",
      "outputSchema": null
    },
    {
      "description": "Publish a skill to the MarketNow catalog (the write side). The package is validated and Sentinel-scanned (injection patterns, embedded secrets, dangerous APIs, suspicious URLs, typosquat, dedup against the 68k+ catalog) AND its claims are verified live: repo_url must exist (HTTP 200), install must reference a real package on npm/PyPI/crates/Docker Hub. False claims are rejected (422). Accepted skills with real substance (files/code/verifiable repo) are stored in the public auditable queue as certified-L1.5, pending L2 review and catalog merge. Description-only submissions are accepted but never merged. Any pricing model is accepted — free, per-call (x402), subscription or custom: the vendor sets the price, MarketNow verifies the security. No authentication required. Do NOT include secrets — the scanner rejects them.",
      "inputSchema": {
        "properties": {
          "dry_run": {
            "description": "If true, run the full validation + scan but store nothing",
            "type": "boolean"
          },
          "skill": {
            "description": "Skill package. Required: name, version, description, author. Recommended: runtime (node|python|rust|go|dotnet|docker|luau|roblox|other), install, repo_url, homepage, tags (max 12), capabilities, doc.usage, doc.system_prompt, files {name:content} (max 60KB), test.url (https — probed), pricing {model: free|per-call|per-call-x402|subscription|one-time|freemium|revenue-share|custom, price, currency, details max 300} — the vendor sets any price; we verify security, not pricing.",
            "type": "object"
          }
        },
        "required": [
          "skill"
        ],
        "type": "object"
      },
      "name": "marketnow_submit_skill",
      "outputSchema": null
    },
    {
      "description": "Translate a credential between the 9 adapter formats (ATC, JWT/OAuth, W3C VC, A2A, EAT-AI, ZTA, MCP Card, SPIFFE, X.509). Lossless conversion through Universal Trust Schema (UTS). See /api/trust?action=formats.",
      "inputSchema": {
        "properties": {
          "from": {
            "description": "Source format: atc-v3, jwt, w3c-vc, a2a-card, mcp-card, x509",
            "type": "string"
          },
          "payload": {
            "description": "The credential JSON to translate",
            "type": "string"
          },
          "to": {
            "description": "Target format: atc-v3, jwt, w3c-vc, a2a-card, mcp-card, x509",
            "type": "string"
          }
        },
        "required": [
          "from",
          "to",
          "payload"
        ],
        "type": "object"
      },
      "name": "marketnow_translate_credential",
      "outputSchema": null
    },
    {
      "description": "Verify any AI agent credential (ATC v3, JWT/OAuth, W3C VC, MCP Card, A2A, EAT-AI, ZTA, SPIFFE SVID, X.509) through the UTA 12-stage credential-verification pipeline (PARSE→DECISION — distinct from Sentinel's 12 skill-audit stages). Returns validity, format, trust score, and issues.",
      "inputSchema": {
        "properties": {
          "credential": {
            "description": "The credential to verify (JSON string or JWT)",
            "type": "string"
          }
        },
        "required": [
          "credential"
        ],
        "type": "object"
      },
      "name": "marketnow_verify_trust",
      "outputSchema": null
    }
  ]
}

Verify it yourself

curl -s https://api.teppi.xyz/v1/evidence/sha256:7c8fbfbb6cd3b244fcd46ed6b139e7669049d7bf4e1ea00599505dbb7c90a563 | sha256sum