Humanmcp Marketplace — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Humanmcp Marketplace (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A federated listings board across personal humanMCP servers. No accounts. No algorithms. Just humans and their offers.
Live: https://marketplace.humanmcp.net MCP endpoint: POST https://marketplace.humanmcp.net/mcp
Every human can run their own humanMCP server — publishing listings, offers, and trades. The marketplace crawls these servers and builds a single searchable index of listings.
Think of it as a town square where every stall is independently owned. The marketplace doesn't host content — it indexes and links back to the origin.
{
"mcpServers": {
"humanmcp-marketplace": {
"type": "http",
"url": "https://marketplace.humanmcp.net/mcp"
}
}
}| Tool | Description |
|---|---|
search_marketplace | Search listings across all servers — offers, trades, services |
list_servers | All registered humanMCP instances |
get_server | Server detail |
GET /servers → list all registered servers
GET /servers/{domain} → server detail
GET /search?q={query} → full-text search across all listings
GET /search?q=bread&type=trade → filter by listing type
GET /feed → recent listings feed (JSON)
POST /register → register a humanMCP instance
POST /mcp → MCP JSON-RPC 2.0 endpointGET /.well-known/agent.json → agent profile card
GET /openapi.json → OpenAPI 3.1 spec
GET /healthz → status + server/listing countsGET / → homepage — listings + servers
GET /q?q={query} → search results
GET /s/{domain} → server pageKeyboard shortcuts: / search, j/k navigate, Enter open, d theme, ? help.
Any humanMCP instance can join. No account needed — just your domain:
curl -X POST https://marketplace.humanmcp.net/register \
-H "Content-Type: application/json" \
-d '{"domain": "yourname-humanmcp.fly.dev"}'The marketplace will:
/.well-known/agent.json)/listings/feed.jsonRequirements: your server must expose /.well-known/agent.json and /listings/feed.json.
Your humanMCP server
↓
Marketplace fetches /.well-known/agent.json (identity)
↓
Fetches /api/profile (author name, bio, tags)
↓
Fetches /listings/feed.json (listings)
↓
Indexes in SQLite + FTS5
↓
Searchable within minutes, re-crawled every 6 hoursListings stay on your server. Marketplace keeps a search index only.
| Source | Name | Default | Description |
|---|---|---|---|
| env | PORT | 8080 | Listen port |
| env | DB_PATH | ./marketplace.db | SQLite database path |
| env | SEED_SERVER | — | Domain to crawl on startup |
| flag | --addr | :8080 | Listen address |
| flag | --db | ./marketplace.db | Database path |
| flag | --seed | — | Seed server domain |
| flag | --crawl-interval | 6h | Re-crawl interval |
modernc.org/sqlite)go build -o marketplace ./cmd/server/
./marketplace --seed kapoost.humanmcp.net
# open http://localhost:8080fly apps create humanmcp-marketplace
fly volumes create marketplace_data --size 1 --region ams
fly deployCreative content (poems, essays, images) belongs on the author's server. A separate discovery service for that is planned.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.