Gapup MCP — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Gapup MCP (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<p align="center"> <img src="https://raw.githubusercontent.com/getgapup/gapup-mcp-public/main/assets/logo-512.png" alt="Gapup MCP" width="128" height="128" /> </p>
English · Français · Español · Deutsch · 日本語 · 中文 · 한국어 · Português (BR)
Agent-payable C-suite knowledge — 271 tools, x402 micro-payments, board-ready JSON.
Live endpoint: https://mcp.gapup.io/mcp Free tier: 100 calls/month, no credit card → hub.gapup.io/agents-api/onboard
A hosted Model Context Protocol server exposing 100+ business expertise tools for AI agents. Each tool returns a structured, audited, board-ready JSON deliverable in 1-30 seconds.
Pay-per-call via x402 (USDC + EURC on Base + Optimism). No subscription, no API gateway. The price is encoded in the response — agents pay what they consume.
audience param routes human (Mistral gold-standard, ~30s) vs agent (Cerebras qwen-3-235b, <5s)competitive_intel — EDGAR + Yahoo + Wayback + Wikipedia multi-source deep-divesec_filing_decoder — 10-K / 10-Q / 8-K extraction + KPIs movement + red flags + M&A signalssanctions_screener_multi — 8 lists parallel (OFAC + EU + UK + UN + SECO + SEMA + DFAT) + PEP + adverse mediakyc_screener — KYC/AML 6 sources refreshed weeklypentest_scope_estimator — PTES scope + effort/cost rangesattack_surface_monitor — passive recon (crt.sh + DNS + Shodan) + CVE/EPSS/KEVclinical_evidence_briefer — PubMed + ClinicalTrials.gov + OpenFDA, GRADE-gradedre_deal_screener — EU-first real estate (DVF Cerema + Géorisques)research_paper_qa — OpenAlex 45M open-access + Semantic Scholar + CORE, DOI-citedindustry_classifier_naics_sic — NAICS + SIC + NACE + GICS + ISIC + HS with hierarchy + confidenceBusiness Intelligence · Finance · Compliance · Strategy · Sales · Sustainability · Research · Real Estate · Healthcare · Security
# Free tier: get a key at https://hub.gapup.io/agents-api/onboard
export GAPUP_API_KEY=gpk_your_free_key
curl -X POST https://mcp.gapup.io/mcp \
-H "Content-Type: application/json" \
-H "Accept: application/json, text/event-stream" \
-H "x-api-key: $GAPUP_API_KEY" \
-d '{
"jsonrpc": "2.0",
"method": "tools/call",
"id": 1,
"params": {
"name": "industry_classifier_naics_sic",
"arguments": {
"company_description": "Maritime freight forwarder, reefer containers, intra-EU",
"company_name": "Helios Cold Chain"
}
}
}'npm install -g @smithery/cli
smithery auth login
smithery mcp add gapup-team/gapup-mcpAdd to your MCP config (see docs/CLIENTS.md for all 30+ supported clients):
{
"mcpServers": {
"gapup": {
"type": "http",
"url": "https://mcp.gapup.io/mcp",
"headers": {
"x-api-key": "gpk_your_free_key"
}
}
}
}See client/example.ts.
| Tier | $ USD | Examples |
|---|---|---|
| T0 | $0.002 | FX lookups, simple commodity prices |
| T1 | $0.05 | Industry classifier, pentest scope estimator |
| T2 | $0.10 | Domain tech fingerprint, market sizing |
| T3 | $0.15 | Attack surface, SEC filings, sanctions multi |
| T4 | $0.20 | Real estate deal screener, clinical evidence, KYC, AI Act audit |
| T5 | $0.30 | Competitive deep dive flagship |
| T6 | $1.50 | Async batch (bulk KYC, AI governance full report) |
Free tier: 100 calls/month total across all tiers. No credit card.
Full details: docs/PRICING.md.
agent ─→ mcp.gapup.io ─→ Cluster PM2 (2 instances, Cerebras-backed for agent mode)
│ │
│ └─→ Fly.io edges (fra/sin/gru) for global low-latency
│
└─→ Cloudflare WAF + rate-limit + cacheFull architecture: docs/ARCHITECTURE.md.
/__metrics endpoint (rate-limit-aware)Listed on (verified live):
io.github.getgapup/gapup-mcp (also feeds GitHub MCP Registry, Augment Code Discovery, …)The contents of THIS repository (manifests, docs, SDK examples, governance files) are licensed under [MIT](LICENSE) — you can fork, translate, reuse the snippets, contribute back.
The hosted API at mcp.gapup.io is governed separately by the Gapup Terms of Service. The MIT grant does NOT cover commercial API usage at scale — that's a per-call x402 settlement.
The server implementation itself is private (closed-source). This repository contains zero server source code — only the public surface (manifests + docs + examples) that lets clients integrate with the hosted endpoint.
Claude Code · TypeScript · MCP SDK · x402 protocol · Cerebras + Mistral + Anthropic
© 2026 Gapup. All rights reserved.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.