Qumge: Agent Capabilities & Skills
REMOTE · QUMGE.COM
Find, call and pay per call: the capability layer for agents, plus skills. One key or OAuth.
Available components
Last scanned (1 hour ago)
Scores higher than 64% of remote servers
Reachable. Last reached 5 Nov 2026.
Category AI and Machine Learning
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security63
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation not fully verified: no authorisation is required to call this server, and 22 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. See how to fix → View diagnostics → Unverified
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability62
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 5325 tokens (~242/item across 22 items; 22 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage98
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 92% of tool parameters carry a description.Partial
- Structured output schemas are declared (95% of tools); any adoption earns full credit.Pass
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "publish_cap" implies "publish" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 22 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities60
- Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 5 Nov 26 0
- Stability: 0.97 → pass security
- 4 Nov 26 0
- Stability: pass → 0.97 functional
- 30 Oct 26 0
- Tool “submit_cap” rewrote its description, which is the text the model reads security
- Tool coverage: 100% → 92% ▼ functional
- Tool coverage: 100% → 95% ▼ functional
- New tool “migrate_cap_contract” functional
- “call_cap” added an optional parameter “accepted_contract_digest” cosmetic
- “test_cap” added an optional parameter “price_version” cosmetic
- 28 Oct 26 +8
- Stability: fail → pass ▲ security
- 27 Oct 26 0
- Tool “publish_cap” rewrote its description, which is the text the model reads security
- New tool “delist_cap” functional
- New tool “relist_cap” functional
- “search_caps” added an optional parameter “offset” cosmetic
- “search_caps” reworded the description of “limit” cosmetic
- 26 Oct 26 −8
- Stability: pass → fail ▼ security
- Tool “publish_cap” rewrote its description, which is the text the model reads security
- Tool “search_caps” rewrote its description, which is the text the model reads security
- “publish_cap” added an optional parameter “icon_url” cosmetic
- “publish_cap” reworded the description of “manifest_url” cosmetic
- “search_caps” reworded the description of “max_price_usd” cosmetic
- 15 Oct 26 +4
- Stability: fail → pass ▲ security
- 12 Oct 26 0
- Tool “call_cap” rewrote its description, which is the text the model reads security
- Tool “publish_cap” rewrote its description, which is the text the model reads security
- Tool “submit_cap” rewrote its description, which is the text the model reads security
- Tool “test_cap” rewrote its description, which is the text the model reads security
- Schema quality: 3971 → 4497 ▼ functional
- New tool “get_cap_job” functional
- “call_cap” added an optional parameter “idempotency_key” cosmetic
- “publish_cap” added an optional parameter “connection_config” cosmetic
- “publish_cap” added an optional parameter “connection_id” cosmetic
- “publish_cap” reworded the description of “auth_mode” cosmetic
- “publish_cap” reworded the description of “base_url” cosmetic
- “publish_cap” reworded the description of “events” cosmetic
- “publish_cap” reworded the description of “manifest_url” cosmetic
- “publish_cap” reworded the description of “mcp_tools” cosmetic
- “publish_cap” reworded the description of “mcp_url” cosmetic
- “publish_cap” reworded the description of “metering” cosmetic
- “publish_cap” reworded the description of “name” cosmetic
- “publish_cap” reworded the description of “routes” cosmetic
- “publish_cap” reworded the description of “upstream_token” cosmetic
- “publish_cap” made “name” optional cosmetic
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://qumge.com/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=qumge.com | CN=WE1,O=Google Trust Services,C=US | 22 Oct 2026 | 20 Jan 2027 | ECDSA 256 | ECDSA-SHA256 | 7e2e249516f3c5530ee87c6447bc4e6f |
| SANs: qumge.com | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of qumge.com. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| qumge.com. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=63072000; includeSubDomains |
| x-content-type-options | nosniff |
| x-frame-options | SAMEORIGIN |
| referrer-policy | strict-origin-when-cross-origin |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://qumge.com/mcp | Verified | 200 | |
| http (plaintext) | http://qumge.com/mcp | HTTPS enforced | 301 | https://qumge.com/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
become_developer ~239
Open a developer account for the user (needs their qumge key). There is no review and no waiting: it takes effect immediately, and publish_cap works right after. Give a display name and an ISO country code; the country decides tax and payout rails later. Payout details and legal name are only needed when the user actually withdraws money.
| Name | Type | Req | Description |
|---|---|---|---|
| country | string | yes | ISO code like "US" or "CN" (a full country name also works). |
| display_name | string | yes | The name shown on their app pages. |
| entity_type | string | – | individual (default) or company. |
| qumge_key | string | – | Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes precedence over the header. Never echoed back. |
| social_links | array | – | Up to 6 public URLs (X, GitHub, LinkedIn, their website). The kind is guessed from the domain. |
| username | string | – | Required if the account has no username yet: 3–30 letters, digits, _ or -. It becomes the public page /u/<username>. |
| Name | Type | Req | Description |
|---|---|---|---|
| country | string | yes | – |
| display_name | string | yes | – |
| status | string | – | – |
No examples provided.
call_cap ~521
Call a Cap on the user's behalf and return its response. Use this when you cannot make the HTTP call yourself: qumge charges the user's qumge balance and forwards the call at the same price as calling it over HTTP through Qumge. Operations and prices come from get_cap. Prefer `operation` + `input`: when the operation declares an input_schema, `input` is validated against it before anything is charged or forwarded. For managed results, pass a stable idempotency_key when retrying; asynchronous calls return a platform job_id and get_cap_job reads cached progress and the final receipt for free. Needs the user's qumge key in the Authorization header. A 5xx from the Cap is free; a 402 means the user's balance or this Cap's monthly limit stopped it. (Older clients may still call this tool as call_app — it still works.)
| Name | Type | Req | Description |
|---|---|---|---|
| accept | string | – | Optional Accept header. |
| accepted_contract_digest | string | – | For a changed deliverable contract, pass the current get_cap contract_state.contract_digest only after confirming its deliverables, price and buyer spending authority. Do not silently reuse old permi… |
| body | object|string | – | Request body. An object is sent as JSON; a string is sent as-is. |
| content_type | string | – | Only needed when `body` is a string and the app expects a specific type. |
| idempotency_key | string | – | Stable key for retries of the same operation and input. Replays the original managed order; changed input is rejected. |
| input | object | – | Arguments for the operation. Validated against its input_schema when it has one — an invalid input is refused as a tool error (isError), and nothing is charged or forwarded. |
| method | string | – | HTTP method. Default GET — the routes and their methods are in get_cap. |
| operation | string | – | Operation name from get_cap (a route's `name`). Use with `input`; takes precedence over `path`/`method` when both are given. |
| path | string | – | The route path from get_cap, e.g. '/api/videos'. A query string may be appended or passed separately in `query`. |
| query | string | – | Query string without the leading '?'. |
| qumge_key | string | – | Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes precedence over the header. Never echoed back. |
| slug | string | yes | The Cap's slug, from search_caps. |
Structured output declared, but exposes no named fields.
No examples provided.
cap_status ~106
Check one of the developer's own capabilities: its status (draft / review / live / suspended) and how far the publishing checklist has got. Needs the developer's Qumge key. (Older clients may still call this tool as app_status.)
| Name | Type | Req | Description |
|---|---|---|---|
| qumge_key | string | – | Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes precedence over the header. Never echoed back. |
| slug | string | yes | The Cap's slug. |
| Name | Type | Req | Description |
|---|---|---|---|
| checks | object | yes | – |
| name | string | – | – |
| reviewer_note | string|null | – | – |
| slug | string | yes | – |
| status | string | yes | – |
No examples provided.
delist_cap ~154
Take one of the developer's own Caps down. It stops working the moment this returns: calls get a 404 (cap_delisted) and it disappears from the store. Nothing is deleted — price versions, reviews and earnings stay, and the public page stays up marked as delisted so existing links don't break. Confirm with the user before calling: anyone using it loses access immediately. relist_cap puts it back with no new review. Needs the developer's Qumge key.
| Name | Type | Req | Description |
|---|---|---|---|
| qumge_key | string | – | Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes precedence over the header. Never echoed back. |
| slug | string | yes | The Cap's slug. |
| Name | Type | Req | Description |
|---|---|---|---|
| slug | string | yes | – |
| status | string | yes | – |
No examples provided.
get_balance ~117
The user's Qumge balance, plus what each Cap has spent this month against its monthly limit. Call this before a paid call when the user asks whether they can afford it, and after a 402 that says the balance or a limit stopped the call — it returns the top-up link to hand to the user. Needs the user's qumge key.
| Name | Type | Req | Description |
|---|---|---|---|
| qumge_key | string | – | Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes precedence over the header. Never echoed back. |
| Name | Type | Req | Description |
|---|---|---|---|
| available_micro_usd | integer | yes | – |
| balance_micro_usd | integer | yes | – |
| caps | array | – | – |
| frozen_micro_usd | integer | – | – |
| topup_url | string | – | – |
| withdrawable_micro_usd | integer | yes | – |
No examples provided.
get_cap ~180
Fetch one Cap's operations, prices and how to call it, by the slug returned from search_caps. Call this before using a Cap: it lists each operation (by name), its input and output schema when the developer provided one, which routes are billable, the per-call maximum, when the call settles, and the error codes the caller may see. If the request carries the user's Qumge key, it also reports that user's monthly limit for this Cap. (Older clients may still call this tool as get_app — it still works.)
| Name | Type | Req | Description |
|---|---|---|---|
| qumge_key | string | – | Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes precedence over the header. Never echoed back. |
| slug | string | yes | The Cap's slug, e.g. 'autowhisper'. Comes from search_caps. |
| Name | Type | Req | Description |
|---|---|---|---|
| icon_url | string|null | – | – |
| monthly_limit_micro_usd | integer|null | – | – |
| name | string | yes | – |
| operations | array | yes | – |
| price_line | string | yes | – |
| slug | string | yes | – |
| spent_this_month_micro_usd | integer|null | – | – |
| summary | string|null | – | – |
No examples provided.
get_cap_job ~165
Read your managed Cap job's cached progress, complete result and receipt for free. Use the platform job_id returned by call_cap. Ordinary reads do not invoke the provider. Set refresh_result: true to explicitly request free renewal of declared result URLs after success; the optional private provider command does not generate new work or change the receipt. Existing orders remain readable after Cap revocation.
| Name | Type | Req | Description |
|---|---|---|---|
| job_id | string | yes | Platform job_id from call_cap, starting with ac_. |
| qumge_key | string | – | Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes precedence over the header. Never echoed back. |
| refresh_result | boolean | – | Optional explicit free renewal of result URLs, when the original Cap declares support; default false. |
| Name | Type | Req | Description |
|---|---|---|---|
| call_id | string | yes | – |
| cancellation | object | – | Optional timeout notification status; acknowledgement does not prove that provider work stopped. |
| deadline_at | string|null | – | – |
| delivery | object | – | The provider's declared retention commitment and optional free result URL renewal support. |
| error | object|null | – | – |
| error_omitted | boolean | – | The provider error is omitted from this tool response; read job_url for the full cached document. |
| job_id | string | yes | – |
| job_url | string | – | Free authenticated GET endpoint for the full cached job document. |
| next_action | object | – | – |
| next_poll_after_seconds | integer | – | – |
| receipt | object | yes | – |
| result | – | – | – |
| result_omitted | boolean | – | The complete result is omitted from this tool response; read job_url for the full cached document. |
| status | – | yes | – |
No examples provided.
get_earnings ~120
What a developer has earned and what is payable: the amount still inside the 30-day holdback, the amount sitting in their wallet (income from Caps — the only part that can be withdrawn), and what has already been paid out, with the most recent entries. Matured purchase amounts move into the wallet automatically. Needs the developer's Qumge key.
| Name | Type | Req | Description |
|---|---|---|---|
| qumge_key | string | – | Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes precedence over the header. Never echoed back. |
| Name | Type | Req | Description |
|---|---|---|---|
| entries | array | – | – |
| frozen_micro_usd | integer | – | – |
| next_payable_on | string|null | – | – |
| paid_gross_micro_usd | integer | – | – |
| paid_net_micro_usd | integer | – | – |
| payable_micro_usd | integer | yes | – |
| pending_micro_usd | integer | yes | – |
| pending_payouts | integer | – | – |
No examples provided.
get_skill ~159
Fetch the full SKILL.md content of one skill, by the slug returned from search_skills. Write the returned markdown to .claude/skills/<name>/SKILL.md (or the equivalent for the user's agent). If the reply says the skill ships more files (REFERENCE.md, scripts/…), call again with include_files: true to get them and write each next to SKILL.md.
| Name | Type | Req | Description |
|---|---|---|---|
| include_files | boolean | – | Also return the full text of the other files in the skill's folder. Off by default — they can be hundreds of KB. Use it when installing. |
| slug | string | yes | The skill's slug, e.g. 'AgriciDaniel/claude-seo/seo-google'. Comes from search_skills. |
| Name | Type | Req | Description |
|---|---|---|---|
| files | array | – | – |
| include_files | boolean | – | – |
| name | string|null | yes | – |
| skill_md | string | yes | – |
| skills_page_url | string | – | – |
| skipped_files | array | – | – |
| slug | string | yes | – |
| source_url | string | – | – |
No examples provided.
list_caps ~103
List the developer's own Caps with their status (draft / live / suspended) and slug. Use it before publishing to see what already exists, and after to check what went live. Needs the developer's qumge key. (Older clients may still call this tool as list_apps.)
| Name | Type | Req | Description |
|---|---|---|---|
| qumge_key | string | – | Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes precedence over the header. Never echoed back. |
| Name | Type | Req | Description |
|---|---|---|---|
| caps | array | yes | – |
No examples provided.
list_categories ~33
List the skill categories and how many skills are in each. Useful when the user is browsing rather than looking for something specific.
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| categories | array | yes | – |
| domains | array | yes | – |
No examples provided.
list_models ~97
List the models this gateway can route to, best first. Every one is reachable with the same Qumge key — no per-vendor signup. Only tool-calling models are listed: an agent cannot use the others.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | How many to return. Default 20, max 60. |
| query | string | – | Optional. Filter by name or vendor, e.g. 'claude', 'gemini'. |
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
| models | array | yes | – |
| total | integer | yes | – |
No examples provided.
list_wanted ~100
What agents searched for on Qumge and found nothing: the demand side of the store, in the searchers' own words, with how often each was searched in the last 7 and 30 days. Useful before building or publishing a Cap — it tells you what people already want. Only the search text is stored; no user and no IP.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | How many to return. Default 20, max 50. |
| Name | Type | Req | Description |
|---|---|---|---|
| wanted | array | yes | – |
No examples provided.
migrate_cap_contract ~166
Controlled same-price contract replacement for an owned live Cap. Prepare an explicit old-to-new mapping bound to the current and pending candidate versions/digest, test that candidate, then activate only its verified snapshot. Does not recharge, purchase, or perform real delivery. Changed deliverables require buyer confirmation for new orders; old orders keep their snapshots.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | – |
| candidate_digest | string | – | – |
| candidate_version | integer | – | – |
| migration_id | integer | – | – |
| qumge_key | string | – | Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes precedence over the header. Never echoed back. |
| replacements | object | – | – |
| slug | string | yes | – |
| source_version | integer | – | – |
No output schema declared.
No examples provided.
publish_cap ~1,627
Create or update a DRAFT Cap on the developer's behalf (requires the developer's Qumge key). Start with the complete buyer outcome, then inspect existing MCP, API and business functions. Reuse a single entry point only when it delivers the full result; otherwise compose partial steps on the provider server and mix MCP, API and internal functions when useful. The buyer agent must not orchestrate provider internals. If both interfaces exist, choose the least-change reliable path; the presence of MCP is not a reason to ignore API. Prefer manifest v2: pass manifest_url for the project's public qumge.json, and slug to select a Cap when needed. The file supplies the name, connection, operations and suggested prices; do not repeat name or override file fields. If the Cap is already published, publishing applies the file's changes directly — descriptions, operations and price cuts now, price rises after the notice period — and says so when the file matches what is live. Without manifest_url, give name and either connection_config, connection_id, base_url or mcp_url, plus the priced operations. Every billed operation must deliver one complete result for one clear input (e.g. product URL in → finished video out); helper steps such as job status are free, and a result that needs several calls is wrapped into one endpoint — never sell partial steps. Managed execution reserves a fixed price and charges only after valid complete delivery; queued acceptance is not delivery, and failed or expired orders cost nothing. Reuse existing tasks and durable request_id deduplication; providers need no Qumge-specific buyer, order, ledger or usage-reporting tables. Prefer execution.identity: order with self-contained inputs. Use trusted request_id to isolate tasks and private results. For buyer-owned state, explicitly choose identity: buyer and authorize the trusted buyer_key; a shared service account alone does not isolate buyers. Use connection_config or connection_id to share private cred…
| Name | Type | Req | Description |
|---|---|---|---|
| auth_mode | string | – | Manual service authentication; named connections declare it through connection_config.auth instead. signature (default) verifies signed requests; managed wrappers use trusted context, while legacy si… |
| balance_json_path | string | – | Only for balance_delta: where in that response. |
| balance_path | string | – | Only for balance_delta: where we read the balance. |
| base_url | string | – | Where the API lives. Must be https. For manual publication without manifest_url, connection_config, connection_id or mcp_url. Any path in it (https://host/v2) is part of what your server receives and… |
| connection_config | object | – | Reusable private service connection. Repeating the same developer/name reuses credentials when endpoint and authentication agree. |
| connection_id | string | – | Existing connection_id returned by publish_cap, belonging to this developer. Use instead of connection_config. |
| events | array | – | Manual price book. unit_price_usd is USD, e.g. 0.10. A managed operation uses one fixed-price event; advanced usage-based events belong to legacy integrations. |
| icon_url | string | – | Public HTTPS Cap icon, preferably a square 256px PNG or WebP. Required before a draft can go live. Reuse a suitable project asset or prepare one and deploy it with the project. With manifest_url, dec… |
| keywords | array | – | Other names for the same thing, any language, up to 20. Agents search with a request like "scrape trending TikTok videos" — the keywords are what makes that find this app. |
| manifest_url | string | – | Optional: publish from the project's qumge.json instead of passing everything by hand. Give https://<domain>/.well-known/qumge.json (or the service address). Its prices are suggestions unless already… |
| mcp_tools | array | – | Prices for the MCP tools you want listed. Include execution and result schemas for managed complete-result delivery. Tools you leave out are not published and are reported back to you. |
| mcp_url | string | – | Optional: publish an existing remote MCP server instead of an HTTP API. Must be https. The domain does not need to be verified to go live, but earnings stay frozen until verify_domain passes for it.… |
| metering | string | – | Legacy usage-based mode only: reported (provider reports usage) or balance_delta (Qumge reads its balance). Managed execution needs neither usage reporting nor a usage key. |
| name | string | – | Store name. Required only without manifest_url; manifest publication reads it from the file and ignores this duplicate field. |
| qumge_key | string | – | Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes precedence over the header. Never echoed back. |
| refund_policy_url | string | – | Their refund policy, if they have one. |
| routes | array | – | Manual HTTP operations. Managed routes include execution and input/output schemas; the referenced event supplies the fixed price. Legacy routes use hold_usd as a per-call ceiling. |
| skill_slug | string | – | Optional. Attach an existing skill from the catalog to this app (its documentation then shows on the app page). Ignored if the slug is unknown. |
| slug | string | – | Optional URL slug. Derived from the name when omitted. With manifest_url: picks which Cap in the file to publish. |
| social_links | array | – | Up to 6 public URLs for the developer (X, GitHub, LinkedIn, their website). Shown on every app page. The kind is guessed from the domain. |
| summary | string | – | One line describing what it does. |
| support_url | string | – | Where users ask for help. Shown on the app page. |
| unit_name | string | – | What users buy, e.g. credit. |
| upstream_token | string | – | The developer's own service key. Required for a new api_key or authenticated MCP connection, and legacy balance_delta. With manifest_url, provide it when the selected connection needs api_key authent… |
| Name | Type | Req | Description |
|---|---|---|---|
| connection_id | string|null | – | – |
| name | string | yes | – |
| price_book_version | integer|null | – | – |
| signing_secret | string|null | – | – |
| skipped_tools | array | – | – |
| slug | string | yes | – |
| status | string | yes | – |
| usage_key | string|null | – | – |
No examples provided.
relist_cap ~124
Put one of the developer's delisted Caps back online. There is no review: if the connection hasn't changed since it was delisted it goes live immediately. If the service address did change, it is retested first and the call fails with the test result until the new address passes. Needs the developer's Qumge key.
| Name | Type | Req | Description |
|---|---|---|---|
| qumge_key | string | – | Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes precedence over the header. Never echoed back. |
| slug | string | yes | The Cap's slug. |
| Name | Type | Req | Description |
|---|---|---|---|
| slug | string | yes | – |
| status | string | yes | – |
No examples provided.
request_payout ~153
Ask for a payout of the developer's payable balance (Cap income only — topped-up money cannot be withdrawn). Call it once without `confirmed` to get the estimate (amount, channel fee, withholding tax, what actually lands), show that to the user, and only then call again with confirmed: true. Needs the developer's Qumge key.
| Name | Type | Req | Description |
|---|---|---|---|
| amount_usd | number | yes | How much to withdraw, in US dollars. |
| confirmed | boolean | – | Set true only after the user has seen the estimate and agreed. |
| qumge_key | string | – | Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes precedence over the header. Never echoed back. |
| Name | Type | Req | Description |
|---|---|---|---|
| amount_micro_usd | integer | yes | – |
| fee_micro_usd | integer|null | – | – |
| net_micro_usd | integer|null | – | – |
| payout_id | integer|null | – | – |
| requested | boolean | yes | – |
| status | string|null | – | – |
| withholding_tax_micro_usd | integer|null | – | – |
No examples provided.
search_caps ~285
Search Qumge's Caps — paid services an agent can call, billed per call from the user's Qumge balance. A Cap (short for capability) is one finished job: somebody's API or MCP server with a price list; to you it is a set of operations. Use this when the user wants something done rather than a skill to install: 'make a promo video', 'transcribe this call'. Returns the best few with pricing, measured success rate and latency, and the slug to pass to get_cap. Results label declared direct or uncertain matches; partial_results are separate and never a complete-result replacement. Budget applies to the matched operation reservation ceiling. Publication checks are not proof of real delivery. (Older clients may still call this tool as search_apps — it still works.)
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | How many to return. Default 5, max 10. Use offset to page through a larger catalog. |
| max_price_usd | number | – | Maximum reservation for the matched operation in US dollars, not its unit price. Partial steps are returned separately and never replace a complete result. |
| offset | integer | – | Skip this many ranked results. The response reports total and offset; keep passing offset until returned is 0. |
| query | string | – | What the user wants done, in their own words. Omit to browse the most-used Caps. |
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
| notice | string | – | – |
| offset | integer | – | – |
| over_budget_count | integer | – | – |
| partial_results | array | – | – |
| query | string|null | – | – |
| results | array | yes | – |
| returned | integer | – | – |
| status | – | – | – |
| total | integer | – | – |
| uncertain_results | array | – | – |
No examples provided.
search_skills ~208
Search Qumge's curated catalog of agent skills (SKILL.md files) by what the user wants to accomplish. Use this whenever the user asks for a skill, tool, or Cap — e.g. 'find me a skill for social media automation', 'is there a skill for SEO audits'. Returns the best few, ranked by how useful they actually are (an LLM read each one), with a one-line summary and the exact slug to pass to get_skill.
| Name | Type | Req | Description |
|---|---|---|---|
| category | string | – | Optional. Narrow to one category. Call list_categories to see them. |
| limit | integer | – | How many to return. Default 5, max 10. |
| offset | integer | – | Skip this many results — for paging through a long list. |
| query | string | – | What the user wants to do, in their own words. e.g. 'automate posting to social media', 'extract tables from PDFs'. Omit it to browse the top-ranked skills instead. |
| Name | Type | Req | Description |
|---|---|---|---|
| category_scheme | – | yes | Which taxonomy the results' category values come from: "domain" for browse (no query), "fine" for a search. |
| has_more | boolean | – | – |
| limit | integer | – | – |
| offset | integer | – | – |
| results | array | yes | – |
| returned | integer | – | – |
| searched_in_english_as | string|null | – | – |
No examples provided.
submit_cap ~195
Take one of the developer's Caps live. Nothing is reviewed before launch and nobody approves it: when the applicable connection/operation checks and price book pass, with complete billed-operation docs, this lists a new Cap immediately. Existing Cap updates retain their effective version and notice period; submit_cap does not advance a pending contract. Run test_cap first (legacy checklist keys remain signature and end_to_end; the price book is recorded when it saves). Passing native connection checks or isolated fixtures does not verify real delivery. Qumge spot-checks docs and support afterwards and can suspend the Cap. Needs the developer's Qumge key. (Older clients may still call this tool as submit_app_review.)
| Name | Type | Req | Description |
|---|---|---|---|
| qumge_key | string | – | Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes precedence over the header. Never echoed back. |
| slug | string | yes | The Cap's slug. |
| Name | Type | Req | Description |
|---|---|---|---|
| slug | string | yes | – |
| status | string | yes | – |
No examples provided.
test_cap ~249
Run the applicable publication checks after publish_cap, before submit_cap. Managed qumge wrapper operations use authenticated isolated fixture hooks and validate the complete fixture result. Native managed API/MCP operations check HTTP OPTIONS or MCP tools/list for connection/schema evidence without invoking generation. The verification array distinguishes connection, fixture and real_delivery scopes; real delivery is not tested. Legacy integrations may call one free and one billable route, or each published MCP tool, directly with probe inputs; Qumge does not charge for these probes, but the developer may incur provider costs. Signed wrapper/legacy APIs also test /qumge/ping with valid, forged and stale signatures; legacy usage-reporting routes must report probe usage. Missing billed-operation docs block publishing. Needs the developer's Qumge key. (Older clients may still call this tool as test_app.)
| Name | Type | Req | Description |
|---|---|---|---|
| price_version | integer | – | Explicit candidate version; isolated checks do not activate it or overwrite current publication evidence. |
| qumge_key | string | – | Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes precedence over the header. Never echoed back. |
| slug | string | yes | The Cap's slug. |
| Name | Type | Req | Description |
|---|---|---|---|
| connection_passed | boolean|null | – | – |
| connection_summary | string|null | – | – |
| end_to_end_passed | boolean | yes | – |
| end_to_end_summary | string|null | – | – |
| missing | array | – | – |
| slug | string | yes | – |
| verification | array | yes | – |
No examples provided.
verify_domain ~224
Prove the developer owns the domain of their MCP server or API. Going live does not need it: an unverified Cap is live and charges callers, but the developer's earnings from it stay frozen until this passes — verifying releases them. Call with the service's https url: if the domain (or a parent domain) is already verified it says so; otherwise it returns a one-line file to serve at /.well-known/qumge-verify.txt on that host (or a DNS TXT record with the same line). Put the file into the project so it ships with the next deploy, then call again with check: true. Needs the developer's Qumge key.
| Name | Type | Req | Description |
|---|---|---|---|
| check | boolean | – | true = look for the line now (after the user deployed it). |
| qumge_key | string | – | Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes precedence over the header. Never echoed back. |
| url | string | yes | The service's https url, e.g. https://api.example.com/mcp |
| Name | Type | Req | Description |
|---|---|---|---|
| dns_txt | string|null | – | – |
| host | string | yes | – |
| put_at | string|null | – | – |
| verification_line | string|null | – | – |
| verified | boolean | yes | – |
No examples provided.
How do I install the Qumge: Agent Capabilities & Skills MCP server?
Qumge: Agent Capabilities & Skills is a hosted endpoint at https://qumge.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · qumge.com
claude mcp add --transport http com-qumge-skills 'https://qumge.com/mcp'
What is the Qumge: Agent Capabilities & Skills MCP server?
Qumge: Agent Capabilities & Skills is an MCP server listed in the public MCP registry as com.qumge/skills. Find, call and pay per call: the capability layer for agents, plus skills. One key or OAuth. This page covers its hosted endpoint (https://qumge.com/mcp).
Is the Qumge: Agent Capabilities & Skills MCP server safe to use?
Qumge: Agent Capabilities & Skills scores 75 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Qumge: Agent Capabilities & Skills MCP server expose?
Qumge: Agent Capabilities & Skills exposes 22 tools: migrate_cap_contract, search_skills, get_skill, list_categories, list_models, and 17 more. Their descriptions and schemas cost roughly 5,325 tokens of context every time the server is loaded.
Does the Qumge: Agent Capabilities & Skills MCP server require authentication?
No. We connected to Qumge: Agent Capabilities & Skills without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the Qumge: Agent Capabilities & Skills MCP server still maintained?
Qumge: Agent Capabilities & Skills is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.