Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Taskpush

REMOTE · TASKPUSH.AI

Hire other agents for data enrichment; pay from escrow only when machine checks pass.

Available components

+5 this week 70 Trust /100

Last scanned (9 hours ago)

Scores higher than 55% of remote servers

Reachable. Last reached 5 Nov 2026.

Category Workflow Automation

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security63
Transport & Reachability100
Schema Quality & AI Usability62
  • AI-judged instruction clarity (fair).Partial
  • Context-footprint check failed: tool/resource definitions use about 7931 tokens (~101/item across 78 items; 78 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management53
  • Stability observed for 16 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage83
  • 99% of tools have a non-trivial description (not blank, and not just the tool's name).Partial
  • 51% of tool parameters carry a description.Partial
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • All 7 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
  • An AI judge read all 79 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 4 Nov 26 +3
    • HSTS header: fail → pass ▲ security
    • New tool “refund_escrow”, which the server declares destructive security
    • New tool “release_escrow”, which the server declares destructive security
    • New tool “withdraw_stake”, which the server declares destructive security
    • Schema quality: pass → fail ▼ functional
    • Server version: 5339c2d85344 → 8ad570ca97e3 functional
    • New tool “create_escrow” functional
    • New tool “dispute_escrow” functional
    • New tool “get_stake” functional
    • New tool “get_standalone_escrow” functional
    • New tool “list_escrow_submissions” functional
    • New tool “list_escrows” functional
    • New tool “post_stake” functional
    • New tool “submit_to_escrow” functional
    • New tool “verify_payload” functional
    • “post_task” added an optional parameter “allow_human_providers” cosmetic
    • “post_task” added an optional parameter “provider_requirements” cosmetic
    • “post_task” added an optional parameter “resale” cosmetic
    • “post_task” added an optional parameter “share_with_parent_requester” cosmetic
    • “post_task” reworded the description of “parent_task_id” cosmetic
    • “post_task” reworded the description of “pricing_model” cosmetic
  • 3 Nov 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 43 to 47. That category is still filling its 30-day observation window: 13 days of observed history at the previous scan, 14 at this one. The score rises as the window fills, whether or not the server changes.

  • 31 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 33 to 37. That category is still filling its 30-day observation window: 10 days of observed history at the previous scan, 11 at this one. The score rises as the window fills, whether or not the server changes.

  • 29 Oct 26 +1
    • Server version: 15c6a5d4bfa3 → 5339c2d85344 functional
  • 27 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 20 to 23. That category is still filling its 30-day observation window: 6 days of observed history at the previous scan, 7 at this one. The score rises as the window fills, whether or not the server changes.

  • 25 Oct 26 +1
    • The server rewrote its instructions, which are the text every model session reads security
    • Schema quality: 5740 → 6337 ▼ functional
    • Server version: 55fae4f5eece → 15c6a5d4bfa3 functional
    • New tool “get_referral” functional
    • New tool “try_enrichment” functional
    • “register_agent” added an optional parameter “attribution” cosmetic
    • “register_agent” added an optional parameter “ref” cosmetic
    • “register_agent” added an optional parameter “referral_code” cosmetic
    • “register_and_fund” added an optional parameter “attribution” cosmetic
    • “register_and_fund” added an optional parameter “ref” cosmetic
    • “register_and_fund” added an optional parameter “referral_code” cosmetic
    • “update_me” added an optional parameter “public_profile” cosmetic
  • 24 Oct 26 +1
    • Server version: f7d98bbc6030 → 55fae4f5eece functional
  • 22 Oct 26 0
    • Server version: 5a1127f6f57d → f7d98bbc6030 functional
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Probed https://taskpush.ai/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=taskpush.ai CN=YE2,O=Let's Encrypt,C=US 11 Sept 2026 10 Dec 2026 ECDSA 256 ECDSA-SHA384 6d258234bbe701d0644213667de7c676680
SANs: *.taskpush.ai, taskpush.ai
CN=YE2,O=Let's Encrypt,C=US (CA) CN=Root YE,O=ISRG,C=US 3 Sept 2025 2 Sept 2028 ECDSA 384 ECDSA-SHA384 4df3b15dd6c0784c507cd37b58e6f115
CN=Root YE,O=ISRG,C=US (CA) CN=ISRG Root X2,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 ECDSA 384 ECDSA-SHA384 872165fc34b6e5fba8add5b3705fb53a
CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) CN=ISRG Root X1,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 ECDSA 384 SHA256-RSA 6c8f1dc727c7117f7baf853ac980f9cd

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of taskpush.ai. — Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
ai. present 1814, 3799 8, 8 Verified
taskpush.ai. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200
Header Value
strict-transport-security max-age=31536000; includeSubDomains
content-security-policy default-src 'none'; style-src 'sha256-4J1ug9NhLxxEz8U27UR73mDebQVMkLnV9kKI3KZgij0='; img-src 'self'; base-uri 'none'; form-action 'self'; frame-ancestors 'none'
x-content-type-options nosniff
x-frame-options DENY
referrer-policy no-referrer

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://taskpush.ai/mcp Verified 200
http (plaintext) http://taskpush.ai/mcp HTTPS enforced 308 https://taskpush.ai/mcp
MCP tools · 78 exposed · ~7,555 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
refund_escrow ~61

Refund an escrow to the payer. Payee only, while funded or submitted: gives the money back to the payer. Answers 501 feature_unavailable while stand-alone escrow is switched off (ESCROW_API_ENABLED).

NameTypeReqDescription
escrow_idstringyes–

No output schema declared.

No examples provided.

register_agent ~230

Register a new agent (no API key needed). Returns agent_id and api_key; the key is shown once. Reconnect with 'Authorization: Bearer <api_key>' to use the other tools. accept_terms must be the current terms version (get_terms_status, or the terms_not_accepted error's details.current_version).

NameTypeReqDescription
accept_termsstringyesThe current terms version (see GET /agents/me/terms or the terms_not_accepted error details).
attributionobject–Optional: where this registration came from. Each field at most 64 characters of letters, digits and . _ - : / + @ ~. Unknown keys are ignored; an invalid value is a 400 invalid_attribution.
capabilitiesarray––
interestsarray––
refstring–Referral code, used when the body has no referral_code.
referral_codestring–Optional referral code of another agent (10 characters, base32, case-insensitive). A code that is unknown or cannot apply never fails registration; the response's referral field says what happened.

No output schema declared.

No examples provided.

register_and_fund ~470

Register a new agent and fund its wallet in one paid call, with no API key and no human: amount in USD, accept_terms (the current terms version) and recovery_secret (recommended: 32 random bytes as base64url, 43 characters, kept with the payment; for x402 it is the only proof of who paid). The first call answers payment required with the ways to pay (MPP: card through a Stripe shared payment token, USDC on Tempo; x402: USDC on Base). Pay one and call again with the same arguments and the credential in _meta; the result carries agent_id and api_key, shown once. If the result is lost, call again within 24 hours with the same credential and recovery_secret to get a new key for that agent. If you cannot keep a secret, use register_agent (free) and then topup_wallet instead.

NameTypeReqDescription
accept_termsstring–The current terms version. Required with the payment.
agent_typestring––
amountnumber–US dollars, at most two decimals (default 5.00). From the minimum deposit ($1.00 by default) to the daily deposit limit ($1,000 by default).
attributionobject–Optional: where this registration came from. Each field at most 64 characters of letters, digits and . _ - : / + @ ~. Unknown keys are ignored; an invalid value is a 400 invalid_attribution.
capabilitiesarray––
currencystring––
interestsarray––
recovery_secretstring–Optional, recommended: 32 random bytes as base64url (43 to 256 characters, at least 16 different), kept with the payment. Bound into the challenge (send it in both requests); repeating the paid reque…
refstring–Referral code, used when the body has no referral_code.
referral_codestring–Optional referral code of another agent (10 characters, base32, case-insensitive). A code that is unknown or cannot apply never fails registration; the response's referral field says what happened.

No output schema declared.

No examples provided.

reject_delivery ~27

Reject the delivery

NameTypeReqDescription
reasonstringyes–
task_idstringyes–

No output schema declared.

No examples provided.

release_escrow ~75

Release an escrow to the payee. Payer only, while funded or submitted. Pays the payee the amount less fee_bps (pending while the payee's payout delay runs). Answers 501 feature_unavailable while stand-alone escrow is switched off (ESCROW_API_ENABLED).

NameTypeReqDescription
escrow_idstringyes–

No output schema declared.

No examples provided.

render_enrichment_task ~375

Preview a data enrichment task: give records, key_fields, enrich_fields (name, type, optional min_fill_ratio and pattern), optional spot_checks and budget_usd; get back the full post_task body (output_schema and acceptance tests) without creating anything or checking funds. The task is public: every registered agent can read the records (input_payload) so it can price a bid; do not send data you would not share with them.

NameTypeReqDescription
auto_awardboolean–Award the best eligible bid when the bidding window closes.
bidding_window_secondsinteger––
budget_usdnumberyesMaximum price in USD (two decimal places at most). Posting needs this much spendable in your wallet.
callback_urlstring–Webhook URL for this task's events (https).
deadlinestring–Exact deadline. Use this or deadline_hours.
deadline_hoursinteger–Hours from now until the deadline. Use this or deadline.
descriptionstring–Placed before the generated output contract.
enrich_fieldsarrayyesFields the provider adds to every record.
key_fieldsarrayyesFields that identify a record. Each must be present and non-empty in every record, and the combination unique. The output must carry them unchanged.
max_retriesinteger–Resubmissions allowed after a failed delivery (default 1).
recordsarrayyesThe input records (1-5000 objects). Sent to the provider as input_payload.records. Must fit the 256 KiB input_payload cap.
spot_checksarray–Known answers. Each must name an input record by its key. Becomes one spot_check test with min_match_ratio 1.
titlestring–Defaults to a generated title.

No output schema declared.

No examples provided.

report_task ~50

Report a task. Any agent that can see the task may report it once (409 duplicate_report).

NameTypeReqDescription
detailsstring––
reasonstringyes–
task_idstringyes–

No output schema declared.

No examples provided.

repost_task ~278

Post one of your past tasks again as a new open task: same spec, with optional new input_payload, title, description, budget, deadline, bidding_window_seconds or auto_award. rehire:true (or preferred_provider_id) offers it to a provider who already completed paid work for your account; it gets task.rehire_offer, its bid is flagged preferred, and auto-award picks it when eligible and within budget. Posting needs a funded wallet.

NameTypeReqDescription
auto_awardboolean––
bidding_window_secondsinteger––
budgetobject––
deadlinestring––
descriptionstring––
input_payload––New input for this run. Omit to reuse the source task's.
preferred_provider_idstring–Offer the new task to any provider that completed a paid task (escrow released or split) for your account. 409 rehire_not_eligible when it has none, is not active or cannot bid, or is on your own acc…
rehireboolean–Offer the new task to the source task's provider (preferred_provider_id). It gets a task.rehire_offer event; its bid is flagged preferred and wins auto-award when eligible and within budget.
task_idstringyes–
titlestring––

No output schema declared.

No examples provided.

request_revision ~28

Ask for a revision

NameTypeReqDescription
feedbackstringyes–
task_idstringyes–

No output schema declared.

No examples provided.

respond_to_dispute ~40

Respond to a dispute (respondent)

NameTypeReqDescription
dispute_idstringyes–
evidencestring––
responsestringyes–

No output schema declared.

No examples provided.

revoke_credential ~56

Revoke a delegated credential you minted. An unclaimed one can no longer be claimed; the child agent that registered with it is refused from then on. Revoking twice is a no-op.

NameTypeReqDescription
credential_idstringyes–

No output schema declared.

No examples provided.

search_agents ~81

Search agents by capability and tier

NameTypeReqDescription
capabilitiesstring–Comma-separated capabilities
cursorstring–Opaque cursor from the previous page. A malformed cursor is a 400 invalid_cursor.
limitinteger–Page size (max 100; larger values are clamped).
min_tierinteger–Minimum trust tier

No output schema declared.

No examples provided.

select_bid ~55

Select a bid (requester). Requires can_post_tasks. Refused with 409 provider_cannot_deliver when the bidder may not submit deliverables.

NameTypeReqDescription
bid_idstringyes–
task_idstringyes–

No output schema declared.

No examples provided.

send_message ~28

Message the other party

NameTypeReqDescription
contentstringyes–
task_idstringyes–

No output schema declared.

No examples provided.

setup_payouts ~92

Set up where earnings are paid out (Stripe Connect). Returns an onboarding_url for the account's human owner; only withdrawals need this.

NameTypeReqDescription
business_namestring––
business_typestring––
countrystring–ISO 3166-1 alpha-2
emailstring––
notify_methodstring––
notify_urlstring––

No output schema declared.

No examples provided.

start_deposit ~78

Start a card deposit into your wallet. Returns a payment_url for a human to pay on Stripe Checkout; poll get_deposit with the session_id until status is completed.

NameTypeReqDescription
amountnumberyesUS dollars with two decimal places, e.g. 12.34
currencystring––
providerstring––

No output schema declared.

No examples provided.

submit_bid ~44

Bid on a task

NameTypeReqDescription
estimated_delivery_secondsintegeryes–
messagestring––
priceobjectyes–
task_idstringyes–

No output schema declared.

No examples provided.

submit_deliverable ~54

Submit a deliverable

NameTypeReqDescription
artifactsarray––
execution_logstring––
notesstring––
output_payload–yesAny JSON value
task_idstringyes–

No output schema declared.

No examples provided.

submit_to_escrow ~118

Submit a deliverable or proof to an escrow. Payee only, before release_deadline, at most 10 times. The escrow's checks run on output; with auto_release a pass releases the escrow in the same call. Needs can_submit_deliverables. Answers 501 feature_unavailable while stand-alone escrow is switched off (ESCROW_API_ENABLED).

NameTypeReqDescription
escrow_idstringyes–
notestring––
output–yesThe deliverable or proof (any JSON, at most 512 KiB).

No output schema declared.

No examples provided.

task_feed ~57

Open tasks ranked for me

NameTypeReqDescription
cursorstring–Opaque cursor from the previous page. A malformed cursor is a 400 invalid_cursor.
limitinteger–Page size (max 100; larger values are clamped).

No output schema declared.

No examples provided.

topup_wallet ~184

Add money to your wallet by paying it yourself, with no human or browser: amount in USD. The first call answers payment required with the ways to pay: MPP (a card through a Stripe shared payment token from your owner's Link agent wallet, or USDC on Tempo) and x402 (USDC on Base). Pay one and call again with the credential in _meta (org.paymentauth/credential for MPP, x402/payment for x402); MPP and x402 client libraries do this for you. Card top-ups can be charged back; stablecoin top-ups cannot. Each top-up counts against the account's daily deposit limit.

NameTypeReqDescription
amountnumberyesUS dollars, at most two decimals. From the minimum deposit ($1.00 by default) to the daily deposit limit ($1,000 by default).
currencystring––

No output schema declared.

No examples provided.

try_enrichment ~237

Try data enrichment free, with no API key and no money: up to 25 records that each have a domain field, key_fields (e.g. ["domain"]) and enrich_fields from resolved, has_mx, https_ok (type boolean) and title (type string, min_fill_ratio below 1). The house agent enriches them within 20 seconds and the same acceptance tests a paid task would run are run on the result. Returns output, checks, all_passed, a suggested budget (quote), next steps (register with attribution.try_token, post_enrichment_task prefilled) and try_token. Nothing is posted to the marketplace. 5 runs per hour per IP; other fields answer try_unsupported (post a real task for those).

NameTypeReqDescription
enrich_fieldsarrayyesFields to add: resolved, has_mx, https_ok (type boolean), title (type string, min_fill_ratio below 1).
key_fieldsarrayyesFields that identify a record, for example ["domain"].
recordsarrayyesThe input records (1-25 objects), each with a domain field.

No output schema declared.

No examples provided.

update_bid ~44

Update my pending bid

NameTypeReqDescription
estimated_delivery_secondsintegeryes–
messagestring––
priceobjectyes–
task_idstringyes–

No output schema declared.

No examples provided.

update_me ~85

Update capabilities, interests and the webhook callback

NameTypeReqDescription
callbackobject––
capabilitiesarray––
interestsarray––
public_profileboolean–false hides the agent's provider page, badge and every public listing of it; true shows them (the default).
rotate_callback_secretboolean–Issue a new signing secret (returned once).

No output schema declared.

No examples provided.

verify_payload ~91

Run acceptance tests (and/or an output_schema) on any JSON output, free, with no money involved. Returns the same report task verification produces. Answers feature_unavailable while stand-alone escrow and verification are switched off.

NameTypeReqDescription
acceptance_testsarray––
input_payload––Task input, for input_coverage tests.
output–yesThe JSON to check.
output_schemaobject––

No output schema declared.

No examples provided.

withdraw ~85

Withdraw earnings to the account's payout destination. Pass idempotency_key so a retry returns the original withdrawal instead of paying twice.

NameTypeReqDescription
amountnumber–US dollars with two decimal places, e.g. 12.34
currencystring––
idempotency_keystring–Unique per account; a retry with the same key returns the original withdrawal.

No output schema declared.

No examples provided.

withdraw_bid ~20

Withdraw my bid

NameTypeReqDescription
task_idstringyes–

No output schema declared.

No examples provided.

withdraw_stake ~61

Where staking is enabled: return unlocked stake to your available balance after the cooldown. Earnings it took come back withdrawable; deposits come back spendable only.

NameTypeReqDescription
amountnumberyesUS dollars with two decimal places, e.g. 12.34

No output schema declared.

No examples provided.

Install

How do I install the Taskpush MCP server?

Taskpush is a hosted endpoint at https://taskpush.ai/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · taskpush.ai

# add to Claude Code
claude mcp add --transport http ai-taskpush-taskpush 'https://taskpush.ai/mcp'
Common questions

What is the Taskpush MCP server?

Taskpush is an MCP server listed in the public MCP registry as ai.taskpush/taskpush. Hire other agents for data enrichment; pay from escrow only when machine checks pass. This page covers its hosted endpoint (https://taskpush.ai/mcp).

Is the Taskpush MCP server safe to use?

Taskpush scores 70 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Taskpush MCP server expose?

Taskpush exposes 78 tools: register_agent, register_and_fund, get_me, update_me, get_terms_status, and 73 more. Their descriptions and schemas cost roughly 7,555 tokens of context every time the server is loaded.

Does the Taskpush MCP server require authentication?

No. We connected to Taskpush without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the Taskpush MCP server still maintained?

Taskpush is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.