Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

com.market0x/marketplace

REMOTE · WWW.MARKET0X.COM

Buy, sell and bid on vote-escrow NFTs and .base.eth names. Non-custodial, settles on Seaport.

Available components

0 this week 77 Trust /100

Last scanned (10 hours ago)

Scores higher than 69% of remote servers

Reachable. Last reached 5 Nov 2026.

Category Crypto and Web3

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security63
Transport & Reachability100
Schema Quality & AI Usability69
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 1679 tokens (~129/item across 13 items; 13 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
  • No destabilizing schema changes in the last 30 days.Pass
Tool Coverage81
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 42% of tool parameters carry a description.Partial
Tool Safety75
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • 0 of 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "unsubscribe_notifications" implies "delete" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
  • An AI judge read all 13 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 3 Nov 26 0
    • Tool “prepare_offer” rewrote its description, which is the text the model reads security
  • 31 Oct 26 0
    • “prepare_listing” reworded the description of “currencySymbol” cosmetic
    • “prepare_offer” reworded the description of “currencySymbol” cosmetic

    2 cosmetic changes on this day. Switch on “Show cosmetic changes” to see them.

  • 19 Oct 26 +2
    • Stability: fail → pass ▲ security
  • 28 Sept 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 25 Sept 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 19 Sept 26 0
    • Stability: 0.77 → fail ▼ security
    • A breaking change shipped without a version bump: still 0.1.0 ▼ security
    • Tool “prepare_finalize” was removed ▼ security
    • Tool “search_names” was removed ▼ security
    • Tool “prepare_listing” rewrote its description, which is the text the model reads security
    • Tool “prepare_offer” rewrote its description, which is the text the model reads security
    • Tool coverage: 52% → 42% ▼ functional
    • Schema quality: 130 → 114 ▲ functional
    • “get_listings” reworded the description of “minDiscountPct” cosmetic
  • 27 Aug 26 0
    • Stability: unverified → 0.03 ▲ functional
  • 26 Aug 26 0

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Probed https://www.market0x.com/api/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=www.market0x.com CN=YR2,O=Let's Encrypt,C=US 9 Oct 2026 7 Jan 2027 RSA 2048 SHA256-RSA 50847268c5d21159022307655ed823c3b71
SANs: www.market0x.com
CN=YR2,O=Let's Encrypt,C=US (CA) CN=Root YR,O=ISRG,C=US 3 Sept 2025 2 Sept 2028 RSA 2048 SHA256-RSA 4ebd24947e24d394802d84a52fd5b319
CN=Root YR,O=ISRG,C=US (CA) CN=ISRG Root X1,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 RSA 4096 SHA256-RSA f24b6d17f9d9ad7cb1c9fea78782699f

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of www.market0x.com. — Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
com. present 19718 13 Verified
market0x.com. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200
Header Value
strict-transport-security max-age=63072000; includeSubDomains; preload
x-content-type-options nosniff
x-frame-options DENY
referrer-policy strict-origin-when-cross-origin
permissions-policy camera=(), microphone=(), geolocation=()

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://www.market0x.com/api/mcp Verified 200
http (plaintext) http://www.market0x.com/api/mcp HTTPS enforced 308 https://www.market0x.com/api/mcp
MCP tools · 13 exposed · ~1,679 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
get_listing_details ~46

Full detail for one order including a FRESH live-contents snapshot (principal, claimable rewards, voting/earning power, as_of_block).

NameTypeReqDescription
orderHashstringyes–

No output schema declared.

No examples provided.

get_listings ~184

Active listings/auctions for a market. Each row carries the ask and the position's underlying contents priced at current market (published formula: /docs#data-sources), plus discountPct (the difference between them). Sorted by discount percentage, descending.

NameTypeReqDescription
kindstring––
limitnumber––
marketIdstringyesmarket id, e.g. 'vehydx'
minDiscountPctnumber–only return orders at >= this discount %. IGNORED on markets whose asset has no priced underlying, where there is nothing to compare the ask against — the response says so in `note` rather than retur…
nameContainsstring–case-insensitive substring match on the listing's label (the name on name markets, e.g. 'alice'; 'veAERO #123' elsewhere)

No output schema declared.

No examples provided.

get_orders ~54

List orders created by an address (its listings, auctions, offers). Status is reconciled by the background worker — treat as advisory until checked at fill.

NameTypeReqDescription
offererstringyes–
statusstring––

No output schema declared.

No examples provided.

get_owned_positions ~46

List the positions an address owns in a market, with listability (voted/attached positions can't transfer).

NameTypeReqDescription
marketIdstringyes–
ownerstringyes–

No output schema declared.

No examples provided.

get_recent_trades ~108

Recently settled sales for a market. `amount` is the EXACT settled total (incl. fee) from the on-chain fill where the indexer recorded it, with `settledAt` the block time and `exact: true`; otherwise it falls back to the listed ask with `exact: false` (a decayed Dutch auction settles BELOW its listed amount, so treat inexact rows as an upper bound).

NameTypeReqDescription
limitnumber––
marketIdstringyes–

No output schema declared.

No examples provided.

list_micro_markets ~25

List the markets this marketplace facilitates (asset, chain, currencies, fee).

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_subscriptions ~31

List a wallet's notification subscriptions (webhook URLs redacted to origin).

NameTypeReqDescription
walletstringyes–

No output schema declared.

No examples provided.

prepare_cancel ~75

Prepare the on-chain Seaport cancel transaction for an active order. Only the order's offerer can execute it (Seaport enforces msg.sender == offerer), so the calldata is safe to return. After it confirms, POST { txHash } to the confirm endpoint to update the book.

NameTypeReqDescription
orderHashstringyes–

No output schema declared.

No examples provided.

prepare_listing ~292

Prepare a SELL listing or Dutch auction. Verifies the seller OWNS the position and it's transferable (not voted/attached), builds the Seaport order with the Interface fee injected by the server, and returns the one-time NFT approval + EIP-712 typed data to sign. Never signs or holds keys.

NameTypeReqDescription
askstring–listing: price the seller nets — must be positive
currencySymbolstringyesone of the market's settlementCurrencies (see list_micro_markets). A symbol resolves per market, so the same symbol can name different contracts: 'AERO' is the NEW Aero token (0x3f5b…a4Ee) on saero a…
durationDaysnumber––
endAskstring–dutch_auction: floor price (must be below the start)
kindstringyes–
marketIdstringyes–
namestring–name markets only, e.g. 'alice' or 'alice.base.eth' — tokenId is derived
sellerstringyes–
startAskstring–dutch_auction: starting (high) price
tokenIdstring–required for token markets (e.g. vehydx)

No output schema declared.

No examples provided.

prepare_offer ~308

Prepare a BID/offer on a position: returns the Seaport order to sign (EIP-712), the currency approval needed, and how to submit it. The agent reads its Seaport counter, signs, and POSTs the signed order — settlement stays on Seaport. The buyer wallet must hold the offer's outlay (price + its fee share) when it submits; an unfunded offer is rejected (insufficient_balance), and one that later loses its funds or allowance is hidden from the book until they return.

NameTypeReqDescription
buyerstringyes0x address that will sign and fund the offer
currencySymbolstringyesone of the market's settlementCurrencies (see list_micro_markets). A symbol resolves per market, so the same symbol can name different contracts: 'AERO' is the NEW Aero token (0x3f5b…a4Ee) on saero a…
durationDaysnumber––
marketIdstringyes–
namestring–name markets only, e.g. 'alice' or 'alice.base.eth' — tokenId is derived
offerAmountstringyeshuman amount the seller nets, e.g. '750' — must be positive
tokenIdstring–required for token markets (e.g. vehydx)

No output schema declared.

No examples provided.

prepare_purchase ~136

Prepare the non-custodial transaction package to BUY a listing (or accept an offer): ordered approvals + Seaport fulfillOrder calldata + a fresh contents snapshot. prepared.summary quotes the CURRENT price (Dutch auctions interpolate, asOf says when); the approval grants approveBaseUnits — slightly above the quote on a decaying order, never above maxTotalBaseUnits — and Seaport charges the exact interpolated amount at fill. On auctions, prepared.cleanup is an optional post-settlement tx that zeroes the residual allowance. The agent's own wallet signs and submits — this never signs or holds keys.

NameTypeReqDescription
orderHashstringyes–

No output schema declared.

No examples provided.

subscribe_notifications ~274

Subscribe a wallet to push notifications (order_filled / offer_received / saved_search) via an HMAC-signed webhook — the agent-native alternative to polling. Two-step: call WITHOUT `signature` to get the exact message to sign (EIP-191 personal_sign), then call again WITH the signature. `chainId` is signed over and the signature is verified on THAT chain, so pass the chain the wallet actually signs on (smart-wallet signatures do not validate cross-chain). Each signed message is SINGLE-USE: resending the same body returns 409 replayed_signature — retry with a fresh timestamp and a new signature. The response includes the webhook HMAC secret ONCE (verify x-market0x-signature = hex(HMAC-SHA256(rawBody, secret))).

NameTypeReqDescription
chainIdintegeryeschain the wallet signs on; it is part of the signed message
channelstringyes–
eventsarrayyes–
savedSearchobject––
signaturestring–EIP-191 signature of the canonical message; omit to receive the message to sign
timestampnumberyesunix seconds; must be within 10 minutes of now
walletstringyes–
webhookUrlstring–https URL; required for the webhook channel

No output schema declared.

No examples provided.

unsubscribe_notifications ~100

Delete a notification subscription. Two-step like subscribe_notifications: call without `signature` to get the message to sign. `chainId` is signed over and verified on that chain. Signed messages are single-use.

NameTypeReqDescription
chainIdintegeryeschain the wallet signs on; it is part of the signed message
signaturestring––
subscriptionIdstringyes–
timestampnumberyes–
walletstringyes–

No output schema declared.

No examples provided.

Install

How do I install the com.market0x/marketplace MCP server?

com.market0x/marketplace is a hosted endpoint at https://www.market0x.com/api/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · www.market0x.com

# add to Claude Code
claude mcp add --transport http com-market0x-marketplace 'https://www.market0x.com/api/mcp'
Common questions

What is the com.market0x/marketplace MCP server?

com.market0x/marketplace is an MCP server listed in the public MCP registry as com.market0x/marketplace. Buy, sell and bid on vote-escrow NFTs and .base.eth names. Non-custodial, settles on Seaport. This page covers its hosted endpoint (https://www.market0x.com/api/mcp).

Is the com.market0x/marketplace MCP server safe to use?

com.market0x/marketplace scores 77 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the com.market0x/marketplace MCP server expose?

com.market0x/marketplace exposes 13 tools: list_micro_markets, get_listings, get_listing_details, get_recent_trades, prepare_purchase, and 8 more. Their descriptions and schemas cost roughly 1,679 tokens of context every time the server is loaded.

Does the com.market0x/marketplace MCP server require authentication?

No. We connected to com.market0x/marketplace without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the com.market0x/marketplace MCP server still maintained?

com.market0x/marketplace is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.