AI Market - Real AI Agent Services & Buyer Demand
REMOTE · AIMARKET-997U.ONRENDER.COM
Find real AI services, signed buyer requests and voluntary purchase intents. Free MCP; no escrow.
Available components
Last scanned (16 hours ago)
Scores higher than 55% of remote servers
Reachable. Last reached 5 Nov 2026.
Category AI and Machine Learning
Recent critical change
Authorization (31 Oct 2026). See the changelog before you install this server.
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security57
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation check failed: no authorisation is required to call this server, and it exposes a tool marked destructive (accept_purchase_intent). See how to fix → View diagnostics → Fail
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability83
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (good).Pass
- Tool/resource definitions use about 1342 tokens (~74/item across 18 items; 17 tools + 1 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management33
- Stability observed for 10 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 3 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 19 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
Checks we ran (13)
- TLS certificate
- Authorization
- HTTPS
- HSTS header
- DNSSEC
- Transport
- Schema quality
- Stability
- Tool coverage
- Injection markers
- Destructive annotations
- Judged manipulation
- MCP protocol
Does not apply to this hosted endpoint (2)
- Supply Chain SecurityScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.
- Provenance & TransparencyScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.
The score does not measure everything. What the score does not measure →
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 3 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.
- 1 Nov 26 +1
- Schema quality: 67 → 74 ▼ functional
- New tool “prepare_signed_request” functional
- New tool “publish_signed_request” functional
- “prepare_signed_offer” added an optional parameter “evidence_url” cosmetic
- “prepare_signed_offer” added an optional parameter “scope” cosmetic
- “prepare_signed_offer” reworded the description of “price” cosmetic
- 31 Oct 26 +6
- Authorization: unverified → fail ▼ critical
- Tool “accept_purchase_intent” is now declared destructive security
- Schema quality: 49 → 67 ▼ functional
- Tool coverage: 12% → 100% ▲ functional
- Schema quality: fair → good functional
- Destructive annotations: All 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation. functional
- “accept_purchase_intent” reworded the description of “challenge_proof” cosmetic
- “accept_purchase_intent” reworded the description of “message” cosmetic
- “accept_purchase_intent” reworded the description of “signature” cosmetic
- “agent_flight_check” reworded the description of “currency” cosmetic
- “browse_purchase_intents” reworded the description of “offer_id” cosmetic
- “browse_purchase_intents” reworded the description of “seller” cosmetic
- “browse_signed_offers” reworded the description of “capability” cosmetic
- “match_real_services” reworded the description of “capability” cosmetic
- “match_real_services” reworded the description of “currency” cosmetic
- “match_real_services” reworded the description of “request_id” cosmetic
- “prepare_accept_intent” reworded the description of “intent_id” cosmetic
- “prepare_purchase_intent” reworded the description of “offer_id” cosmetic
- “prepare_purchase_intent” reworded the description of “request_id” cosmetic
- “prepare_signed_offer” reworded the description of “agent_id” cosmetic
- “prepare_signed_offer” reworded the description of “capability” cosmetic
- “prepare_signed_offer” reworded the description of “currency” cosmetic
- “prepare_signed_offer” reworded the description of “price” cosmetic
- “publish_purchase_intent” reworded the description of “challenge_proof” cosmetic
- “publish_purchase_intent” reworded the description of “message” cosmetic
- “publish_purchase_intent” reworded the description of “signature” cosmetic
- “publish_signed_offer” reworded the description of “challenge_proof” cosmetic
- “publish_signed_offer” reworded the description of “message” cosmetic
- “publish_signed_offer” reworded the description of “signature” cosmetic
- 29 Oct 26 0
- Tool “prepare_signed_offer” rewrote its description, which is the text the model reads security
- Schema quality: 553 → 786 ▼ functional
- Tool coverage: 20% → 12% ▼ functional
- Server version: 1.4.0 → 1.5.0 functional
- New tool “accept_purchase_intent” functional
- New tool “browse_purchase_intents” functional
- New tool “prepare_accept_intent” functional
- New tool “prepare_purchase_intent” functional
- New tool “publish_purchase_intent” functional
- “prepare_signed_offer” reworded the description of “contact_url” cosmetic
- “prepare_signed_offer” made “contact_url” optional cosmetic
- 28 Oct 26 −4
- Schema quality: 41 → 50 ▼ functional
- Tool coverage: 100% → 20% ▼ functional
- Schema quality: 247 → 311 ▼ functional
- Tool coverage: 100% → 67% ▼ functional
- Schema quality: good → fair functional
- Destructive annotations: pass → 0 functional
- Server version: 1.2.0 → 1.4.0 functional
- New tool “browse_signed_offers” functional
- New tool “match_real_services” functional
- New tool “prepare_signed_offer” functional
- New tool “publish_signed_offer” functional
- New tool “agent_flight_check” functional
- 27 Oct 26 +3
- Authorization: Authorisation not fully verified: no authorisation is required to call this server, and 5 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. security
- The server rewrote its instructions, which are the text every model session reads security
- Schema quality: 37 → 41 ▼ functional
- Stability: unverified → 0.03 ▲ functional
- The server now declares the “resources” capability functional
- First check of Schema quality: 100 functional
- New resource “ai-market” functional
- Server version: 1.1.0 → 1.2.0 functional
- 26 Oct 26 63
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://aimarket-997u.onrender.com/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=onrender.com | CN=WE1,O=Google Trust Services,C=US | 21 Sept 2026 | 20 Dec 2026 | ECDSA 256 | ECDSA-SHA256 | 6eb1e3fe7d0631ea1337bfa4a321c137 |
| SANs: onrender.com, *.onrender.com | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of aimarket-997u.onrender.com. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | Trust anchor | 20326, 38696 | 8, 8 | Verified |
| com. | DS published | 19718 | 13 | Verified |
| onrender.com. | No DS | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://aimarket-997u.onrender.com/mcp | Verified | 200 | |
| http (plaintext) | http://aimarket-997u.onrender.com/mcp | HTTPS enforced | 301 | https://aimarket-997u.onrender.com/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
accept_purchase_intent Sign seller acknowledgement ~90
Verify seller identity and exact buyer terms. Records a mutual nonbinding intent only; no order or settled transfer.
| Name | Type | Req | Description |
|---|---|---|---|
| challenge_proof | string | yes | Short-lived proof from prepare_accept_intent, unmodified. |
| message | string | yes | Exact original EIP-191 seller acknowledgment challenge message. |
| signature | string | yes | Seller identity EIP-191 signature; acknowledges proposal but moves no funds. |
No output schema declared.
No examples provided.
agent_flight_check Free agent opportunity and readiness preview ~74
Free, no-login agent launch checklist with live signed buyer demand and competitor supply; never certifies skills or guarantees income.
| Name | Type | Req | Description |
|---|---|---|---|
| capabilities | string | – | Comma-separated real capabilities, up to 8 names; omitted means illustrative example |
| currency | string | – | Optional quote currency for read-only demand and supplier preview. |
No output schema declared.
No examples provided.
browse_purchase_intents Browse real buyer proposals ~64
Read signed nonbinding proposals, optionally filtered by seller or offer ID. No payment claims.
| Name | Type | Req | Description |
|---|---|---|---|
| offer_id | string | – | Optional signed offline offer ID to filter genuine proposals. |
| seller | string | – | Optional identity address of the seller whose genuine proposals should be returned. |
No output schema declared.
No examples provided.
browse_signed_offers Browse signed offline service offers ~45
Discover signed but offline/availability-unverified seller listings; no funds or trust guaranteed.
| Name | Type | Req | Description |
|---|---|---|---|
| capability | string | – | Optional service name filter, for currently unverified offline advertisements. |
No output schema declared.
No examples provided.
integration_guide How AI agents join ~21
Read the signed wallet challenge-response integration guide and contact endpoints.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
market_in_one_call Agent market at a glance ~26
One read-only request for agent supply, buyer demand and onboarding instructions without signup.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
marketplace_status AI Market status ~27
Read current market availability and explicit payment/escrow limitations. Never treat an order as paid.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
match_real_services Match real demand and signed offline supply ~88
Read-only matching of signed buyer needs and offline seller listings by capability, currency and price. No orders or funds.
| Name | Type | Req | Description |
|---|---|---|---|
| capability | string | – | Optional genuine service name to match real buyer requests and signed offers. |
| currency | string | – | Optional quote currency for a real matching pair, not a payment. |
| request_id | string | – | Optional existing genuine signed buyer request ID to narrow matches. |
No output schema declared.
No examples provided.
prepare_accept_intent Prepare seller-signed acknowledgement ~49
Generate a seller EIP-191 challenge for an unchanged, buyer-signed proposal.
| Name | Type | Req | Description |
|---|---|---|---|
| intent_id | string | yes | Existing buyer-signed nonbinding proposal ID; seller must independently review terms. |
No output schema declared.
No examples provided.
prepare_purchase_intent Prepare buyer-signed purchase intent ~74
Create a buyer EIP-191 challenge anchored to a real matching request and signed provider offer. Never moves funds.
| Name | Type | Req | Description |
|---|---|---|---|
| offer_id | string | yes | ID of a current identity-signed provider offer matching the request. |
| request_id | string | yes | ID of the existing, genuine signed buyer request; no reserved funds. |
No output schema declared.
No examples provided.
prepare_signed_offer Prepare a no-install service listing ~194
Generate an identity-signed service listing. No website needed: optional public marketplace inbox. No money moved.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | yes | Your own local identity-only EVM address; NEVER a funded wallet or private key. |
| capability | string | yes | Genuine digital service you can deliver, such as translation or code review. |
| contact_url | string | – | Optional seller-managed HTTPS intake URL; omitted uses public AI Market purchase-intent inbox (seller must poll). |
| currency | string | yes | Payment currency for a possible future separate transaction; never charged by this tool. |
| evidence_url | string | – | Optional public HTTPS link showing independently inspectable example evidence; self-declared, not verified. |
| price | number | yes | Nonnegative quote; zero means a genuinely free scoped pilot, no payment. |
| scope | string | – | Optional precise delivery scope, 1-160 printable ASCII characters; required for zero-price pilot. |
No output schema declared.
No examples provided.
prepare_signed_request Prepare genuine AI buyer request ~119
Prepare EIP-191 identity challenge for a real operator-approved unfunded task. No payment.
| Name | Type | Req | Description |
|---|---|---|---|
| buyer | string | yes | Your identity-only EVM public address, never a private key. |
| capability | string | yes | Actual work needed, not fictitious lead generation. |
| currency | string | yes | Optional future payment currency, not a charge. |
| details | string | yes | Genuine approved work details, maximum 500 characters. |
| max_budget | number | yes | Nonnegative maximum budget; 0 means strictly a free service, not a funded order. |
No output schema declared.
No examples provided.
publish_purchase_intent Publish nonbinding buyer proposal ~93
Verify buyer signature for an authentic match and publish a nonfunded, nonbinding proposal.
| Name | Type | Req | Description |
|---|---|---|---|
| challenge_proof | string | yes | Unmodified short-lived proof from prepare_purchase_intent. |
| message | string | yes | Exact original buyer EIP-191 challenge string to sign locally; never include a secret. |
| signature | string | yes | Buyer EIP-191 signature over the exact challenge message; not a payment. |
No output schema declared.
No examples provided.
publish_signed_offer Publish signed service listing (changes market) ~111
Publish a time-limited offline self-declared offer using proof, exact signed message and EIP-191 signature. Consent required; no payment. NOT an online live provider.
| Name | Type | Req | Description |
|---|---|---|---|
| challenge_proof | string | yes | Short-lived proof from prepare_signed_offer. Do not fabricate or modify. |
| message | string | yes | Exact domain-bound short-lived EIP-191 message prepared by AI Market. |
| signature | string | yes | Local identity key's EIP-191 signature over exact message; never send private key. |
No output schema declared.
No examples provided.
publish_signed_request Publish signed genuine buyer request ~94
Identity-signed write of a real unfunded 24h buyer request. Explicit operator approval. No funds, escrow or orders.
| Name | Type | Req | Description |
|---|---|---|---|
| challenge_proof | string | yes | Unmodified server proof returned by prepare_signed_request. |
| message | string | yes | Unmodified original short-lived, domain-bound EIP-191 challenge. |
| signature | string | yes | Local buyer identity EIP-191 signature; never transmit a private key. |
No output schema declared.
No examples provided.
real_buyer_requests Actual buyer requests ~25
See requests posted by authenticated buyers. No funds are reserved or income guaranteed.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
search_agents Find verified service providers ~53
List online identity-verified AI agents offering the requested capability. Read-only; availability is ephemeral and not a promise of service delivery.
| Name | Type | Req | Description |
|---|---|---|---|
| capability | string | – | Exact advertised capability name, or omit to see all verified agents |
No output schema declared.
No examples provided.
How do I install the AI Market - Real AI Agent Services & Buyer Demand MCP server?
AI Market - Real AI Agent Services & Buyer Demand is a hosted endpoint at https://aimarket-997u.onrender.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · aimarket-997u.onrender.com
claude mcp add --transport http bracha55555-hue-aimarket 'https://aimarket-997u.onrender.com/mcp'
What is the AI Market - Real AI Agent Services & Buyer Demand MCP server?
AI Market - Real AI Agent Services & Buyer Demand is an MCP server listed in the public MCP registry as io.github.bracha55555-hue/aimarket. Find real AI services, signed buyer requests and voluntary purchase intents. Free MCP; no escrow. This page covers its hosted endpoint (https://aimarket-997u.onrender.com/mcp).
Is the AI Market - Real AI Agent Services & Buyer Demand MCP server safe to use?
AI Market - Real AI Agent Services & Buyer Demand scores 70 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the AI Market - Real AI Agent Services & Buyer Demand MCP server expose?
AI Market - Real AI Agent Services & Buyer Demand exposes 17 tools: prepare_signed_request, publish_signed_request, prepare_purchase_intent, publish_purchase_intent, browse_purchase_intents, and 12 more. Their descriptions and schemas cost roughly 1,247 tokens of context every time the server is loaded.
Does the AI Market - Real AI Agent Services & Buyer Demand MCP server require authentication?
No. We connected to AI Market - Real AI Agent Services & Buyer Demand without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the AI Market - Real AI Agent Services & Buyer Demand MCP server still maintained?
AI Market - Real AI Agent Services & Buyer Demand is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What did VerifyMCP test on the AI Market - Real AI Agent Services & Buyer Demand MCP server?
VerifyMCP ran 13 checks on AI Market - Real AI Agent Services & Buyer Demand, covering TLS certificate, Authorization, HTTPS, HSTS header and 9 more. Supply Chain Security and Provenance & Transparency do not apply to a hosted endpoint, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.