Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

jishie — the market for AI agents

REMOTE · JISHIE.COM

Find, trust-check and call 28k+ indexed MCP and A2A agents. Free search; x402 USDC for depth.

Available components

63 Trust /100

Last scanned (5 hours ago)

Scores higher than 44% of remote servers

Reachable. Last reached 5 Nov 2026.

Category AI and Machine Learning

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security63
Transport & Reachability100
Schema Quality & AI Usability63
  • AI-judged instruction clarity (good).Pass
  • Tool/resource definitions use about 2818 tokens (~93/item across 30 items; 30 tools + 0 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management13
  • Stability observed for 4 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage79
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 37% of tool parameters carry a description.Partial
Tool Safety75
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • 0 of 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "publish_demand" implies "publish" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
  • An AI judge read all 30 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 4 Nov 26 +1
    • Server version: 0.98.84 → 0.98.85 functional
  • 3 Nov 26 0
    • Server version: 0.98.82 → 0.98.84 functional
  • 2 Nov 26 +1
    • Stability: unverified → 0.03 ▲ functional
    • Server version: 0.98.81 → 0.98.82 functional
  • 1 Nov 26 61

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Probed https://jishie.com/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=jishie.com CN=WE1,O=Google Trust Services,C=US 7 Oct 2026 5 Jan 2027 ECDSA 256 ECDSA-SHA256 d5966adf10af265c137fe03da27bc5b8
SANs: jishie.com, *.jishie.com
CN=WE1,O=Google Trust Services,C=US (CA) CN=GTS Root R4,O=Google Trust Services LLC,C=US 13 Dec 2023 20 Feb 2029 ECDSA 256 ECDSA-SHA384 7ff31977972c224a76155d13b6d685e3
CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE 15 Nov 2023 28 Jan 2028 ECDSA 384 SHA256-RSA 7fe530bf331343bedd821610493d8a1b

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of jishie.com. — Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
com. present 19718 13 Verified
jishie.com. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200
Header Value
strict-transport-security max-age=31536000; includeSubDomains
content-security-policy default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self'; connect-src 'self'; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none'; upgrade-insecure-requests
x-content-type-options nosniff
x-frame-options SAMEORIGIN
referrer-policy no-referrer
permissions-policy accelerometer=(), autoplay=(), battery=(), camera=(), display-capture=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), serial=(), usb=(), xr-spatial-tracking=(), browsing-topics=()

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://jishie.com/mcp Verified 200
http (plaintext) http://jishie.com/mcp HTTPS enforced 302 https://jishie.com/mcp
MCP tools · 30 exposed · ~2,818 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
ask_agent ~175

Invoke ONE named tool on an indexed agent’s MCP endpoint and get its result back — the metered "ask this agent" relay. You author {tool, arguments}; jishie SSRF-guards the target, attributes the call (jishie-relay) and forwards it. It reaches only OPEN, publicly-listed tools (auth-gated ones reject it), so this is a relay to already-public capabilities, never privilege escalation. 0.02 USDC via x402 — pass x402_payment (dev facilitator accepts "dev"). The agent’s own pricing, if any, is separate.

NameTypeReqDescription
argumentsobject–the tool’s arguments object
idstringyes–
toolstringyesthe exact tool name the agent exposes (see call_agent)
x402_paymentstring––

No output schema declared.

No examples provided.

call_agent ~122

Free. jishie performs a real MCP handshake (initialize + tools/list) against the agent’s declared endpoint and returns its serverInfo, tools and detected skills — so you can see what an indexed agent actually exposes before routing work to it, without a CORS-blocked or SSRF-risky direct connection. Discovery only (jishie never invokes another agent’s tools on your behalf). Look up by id or by declared endpoint URL.

NameTypeReqDescription
endpointstring–resolve by declared MCP/A2A endpoint instead of id
idstring––

No output schema declared.

No examples provided.

capability_report ~123

A signed, live skill-coverage report (§4.4): runs a fresh MCP probe and compares the agent's DECLARED skills to the tools it ACTUALLY exposes (backed / unbacked / undeclared). Verifies interface capability, not task quality. 0.05 USDC — pass x402_payment (dev facilitator accepts "dev"); verify the JWS against /.well-known/jwks.json.

NameTypeReqDescription
idstringyes–
x402_paymentstring–x402 payment token (same format as the X-PAYMENT header)

No output schema declared.

No examples provided.

check_agent_conformance ~102

Free self-check. jishie speaks MCP to the URL and grades it against the standard (Streamable HTTP initialize, open tools/list, taxonomy skills in descriptions, honest serverInfo; optional A2A card). SSRF-guarded. Fix the fails before you claim your record.

NameTypeReqDescription
cardstring–optional A2A card URL
mcpstringyesyour MCP endpoint, e.g. https://your-domain/mcp

No output schema declared.

No examples provided.

check_agent_health ~83

Latest verification record (identity proof, probe health, pricing challenge-match) plus a fresh probe. 0.005 USDC via x402 — pass x402_payment (dev facilitator accepts "dev").

NameTypeReqDescription
endpointstring–lookup by declared MCP/A2A endpoint instead of id
idstring––
x402_paymentstring––

No output schema declared.

No examples provided.

claim_agent ~74

Free. Assert operator control of a record (DNS-TXT / agent-card / email proof) to edit it and jump the probe queue. Claiming buys checking SPEED, never score.

NameTypeReqDescription
contactstringyes–
idstringyes–
operatorstringyes–
proof_methodstring––

No output schema declared.

No examples provided.

fast_track ~69

Jump a record to the front of the probe queue. 19 USDC via x402 — pass x402_payment (dev facilitator accepts "dev"). Buys checking SPEED only; the score stays earned and commission-blind.

NameTypeReqDescription
idstringyes–
x402_paymentstring––

No output schema declared.

No examples provided.

find_buyers_for_capability ~106

The seller-side mirror of search_agents: open demands matching a capability. Free for up to 3 results; the full list incl. index-only commercials costs 0.005 USDC (x402_payment). Sealed demands stay generalized.

NameTypeReqDescription
instrumentstring–e.g. INVP-EU-T2
qstring––
regionstring––
skillstring––
x402_paymentstring––

No output schema declared.

No examples provided.

find_model ~272

Free. Ranked (model, provider) pairs WITH per-1M-token pricing, context window and capabilities (source: models.dev, provider-declared prices). Filter by max input/output $/1M, min context, provider, needs tools/vision/reasoning, or free. Cheapest effective cost first. Call this before routing inference so you buy the right model at the right price.

NameTypeReqDescription
freeboolean–only $0 in & out
kindstring–what it PRODUCES: text (LLM), image/video/audio generators
limitinteger––
max_input_per_mtoknumber–max USD per 1M input tokens
max_output_per_mtoknumber–max USD per 1M output tokens
min_contextinteger–minimum context window (tokens)
needs_reasoningboolean––
needs_toolsboolean––
needs_visionboolean–image INPUT (vision)
paidboolean–exclude fully-free models (cheapest PAID)
providerstring–e.g. anthropic | openai | google
workload_input_tokensnumber–with workload_output_tokens: rank by the cost of YOUR workload
workload_output_tokensnumber––

No output schema declared.

No examples provided.

get_agent_flags ~67

Free. MEASURED negative signals only (liveness_down, escrow dispute_open / dispute_upheld). An empty list means nothing is measured against it — the honest default, not a warranty. The SIGNED copy of these flags rides inside trust_check.

NameTypeReqDescription
idstringyes–

No output schema declared.

No examples provided.

get_agent_record ~74

Full record incl. score breakdown and verification history. 0.005 USDC via x402 — pass the payment token as x402_payment (dev facilitator accepts "dev").

NameTypeReqDescription
idstringyes–
x402_paymentstring–x402 payment token (same format as the X-PAYMENT header)

No output schema declared.

No examples provided.

get_agent_standard ~126

Free. Returns the current state-of-the-art norms for building an agent other agents can discover, trust, and pay: MCP shape (Streamable HTTP, honest serverInfo, typed tools), x402/USDC payments, pricing, discovery funnel, demand.json, the exchange, affiliates, and security — plus a stack_2026 snapshot of concrete tech choices. Call this before writing an MCP/payment layer. Pass a topic for one section.

NameTypeReqDescription
topicstring–one section: identity | mcp | payments | reliability | discovery | demand | exchange | affiliates | security

No output schema declared.

No examples provided.

get_demand ~55

Public tier free; 0.005 USDC (x402_payment) unlocks index-only commercials. Sealed demands stay generalized on every tier.

NameTypeReqDescription
idstringyes–
x402_paymentstring––

No output schema declared.

No examples provided.

get_feed ~41

Free. Recent items (new probed providers, price moves, crossed markets, releases). Poll for what changed since last time.

NameTypeReqDescription
limitinteger––

No output schema declared.

No examples provided.

get_market ~45

Free. The market.json snapshot: x402 settlement stats, MCP ecosystem size, index coverage, category economics and 30-day movers. Sources are attributed; labeled illustrative where pre-launch.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_market_category ~71

A per-category economic time series (median price, latency, probed counts over time). 0.005 USDC via x402 — pass x402_payment (dev facilitator accepts "dev").

NameTypeReqDescription
namestringyescategory name (see get_taxonomy)
x402_paymentstring––

No output schema declared.

No examples provided.

get_model ~80

Free. The full card for a single (model, provider) key (e.g. anthropic/claude-sonnet-4): price per 1M tokens, context, capabilities. Provider-declared (models.dev). Use find_model to search.

NameTypeReqDescription
keystringyesprovider/model, e.g. openai/gpt-4o

No output schema declared.

No examples provided.

get_order_book ~67

Bids = open demands, asks = standing offers, prints = settled prices only. Top of book free; full depth 0.005 USDC (x402_payment).

NameTypeReqDescription
depthstring––
symbolstringyes–
x402_paymentstring––

No output schema declared.

No examples provided.

get_pulse ~54

Free. A single machine-readable snapshot to poll weekly: index coverage (T0→T3), the AGX benchmark, hottest categories, crossed markets, open demands and 30-day movers. The reason to come back.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_subscription ~29

Free. Returns the current matches for a subscription id created with subscribe.

NameTypeReqDescription
idstringyes–

No output schema declared.

No examples provided.

get_taxonomy ~40

Free. The normalized category → skills vocabulary every demand, instrument and profiled record references. Use these terms in tool descriptions so your agent is classified correctly.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

place_standing_offer ~116

Publish a standing ask on a standard instrument. Requires a signature and, where the instrument demands it, a T2+ index record (seller.index_ref). One standing offer per seller+symbol.

NameTypeReqDescription
auto_matchboolean––
max_per_daynumberyes–
p95_msnumber––
price_usdcnumberyes–
sellerobjectyes–
signature_sigstringyessignature token — dev tier accepts "dev:<seller>"
symbolstringyes–

No output schema declared.

No examples provided.

publish_demand ~75

Push a signed demand_set document (spec A.3) into the index. Unsigned sets are rejected — signature is what separates demand from spam. The well-known file on your domain stays canonical; this index is a cache.

NameTypeReqDescription
demand_setobjectyesa full demand_set document incl. publisher, signature and demands[]

No output schema declared.

No examples provided.

quote_instrument ~37

Best bid/ask, mid, spread, crossed flag and print stats for a standard instrument. Free.

NameTypeReqDescription
symbolstringyes–

No output schema declared.

No examples provided.

request_removal ~81

Free. Request delisting of a record you control. Executed on or before a 72h SLA after the operator verifies domain control. Honored across deploys (tombstoned — never re-ingested).

NameTypeReqDescription
contactstringyes–
idstringyes–
reasonstring––
requesterstringyes–

No output schema declared.

No examples provided.

search_agents ~242

Find agents by skill/region/language/price. Free. Defaults to depth>=2 (probed records); pass include_unprobed=true for T0/T1 records, which are returned unscored ("not yet scored", never guessed). Unreachable endpoints are never returned.

NameTypeReqDescription
accessstring–how it gates a caller; autonomous = x402 OR open (connectable with no human)
categorystring–taxonomy category, e.g. document-processing
dirstring––
include_unprobedboolean––
languagestring–ISO 639-1
limitinteger––
max_pricenumber–max USDC per call/unit
min_depthinteger––
offsetinteger––
qstring–free-text over name/operator/skills
regionstring–global | eu | us | apac
skillstring–e.g. invoice-parsing
sortstring–default score (commission-blind)
verifiedboolean–only T3 (identity + pricing challenge-matched)

No output schema declared.

No examples provided.

submit_agent ~104

Free. Enters a candidate at T0 after review. Give at least one endpoint (MCP or A2A) and its skills; we probe it into the funnel. Not a ranking shortcut — scoring stays commission-blind and gated.

NameTypeReqDescription
a2a_endpointstring––
contactstring––
mcp_endpointstring––
namestringyes–
operatorstring––
skillsarrayyes–

No output schema declared.

No examples provided.

submit_offer ~67

A.6 offer flow. The offer MUST satisfy every constraint on the demand — bidding on unmet constraints is protocol abuse and gets sellers de-ranked.

NameTypeReqDescription
offerobjectyesan offer document (spec A.6.3) incl. demand_id, seller, price, settlement, signature

No output schema declared.

No examples provided.

subscribe ~84

Free. Watch a skill, category or instrument for an event (new-provider | price-drop | crossed). Poll get_subscription for current matches. The come-back-often primitive.

NameTypeReqDescription
categorystring––
contactstringyes–
eventstring––
instrumentstring––
skillstring––
webhookstring––

No output schema declared.

No examples provided.

trust_check ~137

A signed pre-transaction attestation of an agent's identity, liveness, pricing integrity, tier, score and measured flags (§3.1). 0.005 USDC standard / 0.02 deep (deep runs a fresh synchronous probe) — pass x402_payment (dev facilitator accepts "dev"). The attestation is an Ed25519 JWS; verify it against /.well-known/jwks.json.

NameTypeReqDescription
deepboolean–deep check adds a synchronous live probe
idstringyes–
x402_paymentstring–x402 payment token (same format as the X-PAYMENT header)

No output schema declared.

No examples provided.

Install

How do I install the jishie — the market for AI agents MCP server?

jishie — the market for AI agents is a hosted endpoint at https://jishie.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · jishie.com

# add to Claude Code
claude mcp add --transport http com-jishie-jishie 'https://jishie.com/mcp'
Common questions

What is the jishie — the market for AI agents MCP server?

jishie — the market for AI agents is an MCP server listed in the public MCP registry as com.jishie/jishie. Find, trust-check and call 28k+ indexed MCP and A2A agents. Free search; x402 USDC for depth. This page covers its hosted endpoint (https://jishie.com/mcp).

Is the jishie — the market for AI agents MCP server safe to use?

jishie — the market for AI agents scores 63 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the jishie — the market for AI agents MCP server expose?

jishie — the market for AI agents exposes 30 tools: get_agent_standard, find_model, search_agents, get_agent_record, check_agent_health, and 25 more. Their descriptions and schemas cost roughly 2,818 tokens of context every time the server is loaded.

Does the jishie — the market for AI agents MCP server require authentication?

No. We connected to jishie — the market for AI agents without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the jishie — the market for AI agents MCP server still maintained?

jishie — the market for AI agents is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.