Ucm.Ai — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Ucm.Ai (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
An API marketplace that lets AI agents autonomously discover and use services — no human intervention required.
Today, AI agents can only use tools that developers have pre-integrated. UCM gives agents autonomous API access:
Agent needs to search the web
→ ucm_discover("search the web for information")
→ Found: ucm/web-search, $0.01/call
→ ucm_call("ucm/web-search", "search", { query: "..." })
→ Results returned, $0.01 deducted from creditsNo UI, no manual approval — register once, get $1.00 free credits, start calling APIs.
POST /v1/call atomically purchases and executes any servicenpx @ucm/mcp-server gives any MCP-capable agent 7 marketplace toolsGive your agent this prompt:
Read https://registry.ucm.ai/onboarding.md and follow the instructions to join UCM.The agent will self-register, get an API key + $1.00 credits, and start using services autonomously.
Add to your MCP config (Claude Desktop, Claude Code, Cursor, etc.):
{
"mcpServers": {
"ucm": {
"command": "npx",
"args": ["-y", "@ucm/mcp-server@latest"],
"env": {
"UCM_API_KEY": "ucm_key_..."
}
}
}
}No API key yet? The ucm_register tool will create one automatically.
MCP Tools (7):
| Tool | Description |
|---|---|
ucm_discover | Search for services by natural language need |
ucm_call | Call a service (buy + execute atomically, auto-refund on failure) |
ucm_balance | Check credit balance |
ucm_history | View transaction history |
ucm_service_info | Get service details and endpoints |
ucm_register | Self-register as agent (free, $1.00 credits) |
ucm_list_services | Browse the full service catalog |
# 1. Register (free, get $1.00 credits)
curl -X POST https://registry.ucm.ai/v1/agents/register \
-H "Content-Type: application/json" \
-d '{"name": "my-agent"}'
# → { "api_key": "ucm_key_...", "credits": { "balance": "1.00" } }
# 2. Call a service
curl -X POST https://registry.ucm.ai/v1/call \
-H "Authorization: Bearer ucm_key_..." \
-H "Content-Type: application/json" \
-d '{"service_id": "ucm/web-search", "endpoint": "search", "body": {"query": "AI news"}}'
# → { "amount_charged": "0.01", "result": { ... } }pip install ucmfrom ucm import UCMClient
client = UCMClient(
registry_url="https://registry.ucm.ai",
api_key="ucm_key_...",
)
# Discover services
services = await client.discover("weather forecast API")
# Call a service
result = await client.call("ucm/web-search", "search", {"query": "AI news"})
# Check balance
balance = await client.balance()100 services, 217 endpoints (87 free, 13 paid at $0.01–$0.05/call).
| Service | Price | What It Does |
|---|---|---|
| ucm/web-search | $0.01 | Search the web (Tavily) |
| ucm/web-scrape | $0.02 | Scrape web pages (Firecrawl) |
| ucm/image-generation | $0.05 | Generate images from text (Together AI) |
| ucm/code-sandbox | $0.03 | Execute code in sandbox (E2B) |
| ucm/text-to-speech | $0.01 | Convert text to audio (Kokoro TTS) |
| ucm/speech-to-text | $0.01 | Transcribe audio (Whisper) |
| ucm/email | $0.01 | Send emails (Resend) |
| ucm/doc-convert | $0.02 | Convert documents (Firecrawl) |
| ucm/us-stock | $0.01 | US stock market data (Finnhub) |
| ucm/cn-finance | $0.01 | China financial data (Tushare Pro) |
| ucm/translate | $0.01 | Text translation (MyMemory) |
| ucm/qr-code | $0.01 | Generate QR codes (GoQR.me) |
| ucm/news | $0.01 | Latest news (NewsData.io) |
Weather, Wikipedia, currency exchange, countries, holidays, dictionary, books, geocode, math, IP geolocation, address lookup, academic papers, nutrition, crypto prices, timezone, domain info, quotes, Hacker News, random data, poetry, movies, word associations, universities, zip codes, trivia, jokes, advice, bored activity ideas, Bible verses, Chuck Norris facts, recipes, cocktails, breweries, food products, sunrise/sunset, dog images, cat facts, avatars, colors, Lorem Ipsum, NASA, SpaceX, ISS tracker, space news, arXiv papers, earthquakes, World Bank, FDA data, carbon intensity, elevation, age/gender/nationality prediction, UK postcodes, vehicle data, Met Museum, Art Institute of Chicago, TV shows, anime, iTunes, music, radio stations, free games, game deals, Pokemon, D&D, memes, IP lookup, barcodes, Wayback Machine, npm, PyPI, GitHub repos, country flags, deck of cards, Star Wars, xkcd, Rick & Morty, Nobel Prize, historical events, Kanye quotes, Rust crates, Docker Hub, Lichess, periodic table, airports, random fox images.
Browse the live catalog: GET https://registry.ucm.ai/v1/services
| Method | Path | Auth | Description |
|---|---|---|---|
| POST | /v1/call | API Key | Call a service (buy + execute in one step) |
| POST | /v1/agents/register | No | Register agent, get API key + $1.00 credits |
| GET | /v1/services | No | Browse service catalog |
| POST | /v1/discover | No | Semantic service search |
| GET | /v1/balance | API Key | Check credit balance |
| GET | /v1/history | API Key | Transaction history |
| GET | /v1/services/:id | No | Service details |
| GET | /v1/credits | API Key | Credit balance details |
| GET | /onboarding.md | No | Agent onboarding guide |
Auth: Authorization: Bearer ucm_key_...
For the full endpoint list, see the API docs.
| Resource | Link |
|---|---|
| Docs | ucm.ai/docs |
| Onboarding Guide | registry.ucm.ai/onboarding.md |
| Dashboard | dashboard.ucm.ai |
| npm Package | @ucm/mcp-server |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.