Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Agentropolis

REMOTE · AGENTROPOLIS.IO

Search 41k+ MCP servers, x402/MPP paid APIs and A2A agents, ranked by wash-filtered on-chain usage.

Available components

+6 this week 86 Trust /100

Last scanned (16 hours ago)

Scores higher than 93% of remote servers

Reachable. Last reached 5 Nov 2026.

Category Search and Retrieval

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security80
  • The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
  • No authorisation is required to call this server. Nothing on it is marked destructive, but we can't show that an anonymous caller can only read: full credit needs the server to list at least one tool and every tool to be verifiably read-only. We use a best-effort check of tool names and descriptions to tell read-only tools from tools that change things, so some genuinely read-only tools may not get full credit. Names that start with a read verb (get, list, read, search and similar) and accurate readOnlyHint annotations help. Meet that to earn full credit, or require authorisation. See how to fix → View diagnostics → Partial
  • HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
  • The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
  • DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
Schema Quality & AI Usability69
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 2201 tokens (~220/item across 10 items; 10 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
  • No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
  • Structured output schemas are declared (90% of tools); any adoption earns full credit.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • All 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
  • An AI judge read all 11 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a current MCP spec version (2026-07-28).Pass
What we tested

Checks we ran (13)

  • TLS certificate
  • Authorization
  • HTTPS
  • HSTS header
  • DNSSEC
  • Transport
  • Schema quality
  • Stability
  • Tool coverage
  • Injection markers
  • Destructive annotations
  • Judged manipulation
  • MCP protocol

Does not apply to this hosted endpoint (2)

  • Supply Chain SecurityScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.
  • Provenance & TransparencyScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.

The score does not measure everything. What the score does not measure →

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 4 Nov 26 0
    • Tool “search_kits” rewrote its description, which is the text the model reads security
  • 2 Nov 26 +5
    • Stability: fail → pass ▲ security
  • 1 Nov 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 57 to 60.

  • 31 Oct 26 0
    • Tool “search_kits” rewrote its description, which is the text the model reads security
    • “search_kits” added an optional parameter “sponsored” cosmetic
  • 29 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 47 to 50.

  • 28 Oct 26 0
    • Tool “search_kits” rewrote its description, which is the text the model reads security
  • 27 Oct 26 +1
    • Tool “search_kits” rewrote its description, which is the text the model reads security
  • 25 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 33 to 37.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Probed https://agentropolis.io/api/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=*.agentropolis.io CN=YR2,O=Let's Encrypt,C=US 4 Oct 2026 2 Jan 2027 RSA 2048 SHA256-RSA 6f488fdda3c6ed5c0e271a07daced32a4af
SANs: *.agentropolis.io, agentropolis.io
CN=YR2,O=Let's Encrypt,C=US (CA) CN=Root YR,O=ISRG,C=US 3 Sept 2025 2 Sept 2028 RSA 2048 SHA256-RSA 4ebd24947e24d394802d84a52fd5b319
CN=Root YR,O=ISRG,C=US (CA) CN=ISRG Root X1,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 RSA 4096 SHA256-RSA f24b6d17f9d9ad7cb1c9fea78782699f

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of agentropolis.io. — Not signed

Zone DS Keys Algorithms Outcome
. Trust anchor 20326, 38696 8, 8 Verified
io. DS published 38690 8 Verified
agentropolis.io. No DS Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200
Header Value
strict-transport-security max-age=63072000

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://agentropolis.io/api/mcp Verified 200
http (plaintext) http://agentropolis.io/api/mcp HTTPS enforced 308 https://agentropolis.io/api/mcp
MCP tools · 10 exposed · ~2,096 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
call_kit ~512

Send a request to a listing's x402 endpoint through Agentropolis and get the seller's raw response back (status, headers, body). Use it only for listings whose search result has buy='relay_x402' (links.call present); for any other listing, call the seller directly using get_kit_manifest. Flow: call without payment, receive HTTP 402 with the seller's payment requirements unchanged, sign a payment with your own wallet to the seller's payTo, then call again with payment_signature (x402 v2) or x_payment (v1). Agentropolis holds no keys or funds, never changes payTo or amount and charges no fee, but a signed payment you pass is forwarded and may be settled by the seller, so real money can move. Limits: seller's own https host only, 256 KB request, 2 MB response, 25 s timeout (longer for slow first-party kits), 20 calls/min per client. Example: {"id":"seenly.seenly-token-preflight","endpoint":"/api/token-preflight","method":"POST","body":{"chain":"base","tokenAddress":"0x4ed4E862860beD51a9570b96d89aF5E1B0Efefed"}}.

NameTypeReqDescription
body––Request body. An object is sent as JSON; a string is sent as-is with content_type.
content_typestring–Content-Type for a string body, e.g. 'text/plain'. Ignored for object bodies (sent as application/json).
endpointstring–Path (e.g. '/api/script') or full https URL on the seller's own host. Defaults to the listing's primary endpoint.
idstringyesListing id exactly as returned by search_kits results[].id, e.g. 'seenly.seenly-token-preflight' or 'mcp.io-github-owner-name'.
methodstring–HTTP method; defaults to POST when a body is given, else GET.
payment_signaturestring–Signed PAYMENT-SIGNATURE header value (x402 v2) from your own wallet; forwarded unchanged. Omit on the first call.
queryobject–Query-string parameters to append, e.g. {"q":"news"}.
x_paymentstring–Signed X-PAYMENT header value (x402 v1) from your own wallet; forwarded unchanged. Omit on the first call.

No output schema declared.

No examples provided.

get_bazaar_link ~127

Build a URL that searches Coinbase's x402 Bazaar (Agentic.Market) for a query. Use it when you want x402 services that may be missing from the Agentropolis index; it only returns a link for you or your user to open. Agentropolis makes no request to Coinbase and does not cache or republish Bazaar data (their terms forbid it). Read-only. Example: {"q":"web search"}.

NameTypeReqDescription
qstring–Search words to prefill on Agentic.Market, e.g. 'image generation'. Omit for the home page.
NameTypeReqDescription
linksarrayyes–

No examples provided.

get_kit ~172

Get the full Agentropolis record for one listing by id: summary, pricing, payment-verified trust evidence (verified buyers, settlements, wash flags, disclosed test sales), badge tiers, sources and links. Use it after search_kits to judge whether a listing is worth using; use get_kit_manifest instead when you need the machine-readable invoke contract (endpoints, schemas, payment offers). Read-only, no auth; logs an anonymous detail view for seller analytics. Unknown ids return an error result with error 'not_found'. Example: {"id":"seenly.seenly-token-preflight"}.

NameTypeReqDescription
idstringyesListing id exactly as returned by search_kits results[].id, e.g. 'seenly.seenly-token-preflight' or 'mcp.io-github-owner-name'.
NameTypeReqDescription
badgesarrayyes–
idstringyes–
kindstringyes–
namestringyes–
tiers––Badge tiers: earned (Verified, Live-Tested, Trusted) and paid/showcase (Agentropolis Pro)
trust––Payment-verified trust; score null = no evidence

No examples provided.

get_kit_manifest ~205

Get the kit.json v0.1 manifest for one listing: how to call it (HTTP, MCP or A2A endpoints), input/output schema references, payment offers (rail, network, asset, payTo, amount), discovery files and a trust summary. Use it when you are about to call a listing yourself; use get_kit for human-readable details and trust evidence, or call_kit to call an x402 listing through Agentropolis. Read-only, no auth. For seller-published kits this mirrors the seller's own kit.json; for seeded listings it is generated from public metadata and may be incomplete, so prefer the seller's live 402 challenge for exact prices. Example: {"id":"seenly.seenly-pitch-kit"}.

NameTypeReqDescription
idstringyesListing id exactly as returned by search_kits results[].id, e.g. 'seenly.seenly-token-preflight' or 'mcp.io-github-owner-name'.
NameTypeReqDescription
idstringyes–
invokearray––
kitstringyesManifest version, '0.1'
offersarray––

No examples provided.

get_market_snapshot ~131

Get 30-day x402 paid-usage statistics per category, with wash trading filtered out: services with paid usage, verified buyers, settlements, median listed price and listings excluded for wash signals. Use it for market sizing or price benchmarking; to find individual tools use search_kits. Read-only, no parameters. Data: x402-list.com measured settlements (CC BY 4.0, attribute when quoting) plus Agentropolis wash filtering. Buyer counts are summed per service, so a wallet that pays several services is counted once per service. Same data as /stats and the weekly reports at /reports.

Input schema present but exposes no named parameters.

NameTypeReqDescription
attributionstringyes–
caveatstringyes–
generated_atstring––
reportstringyes–
rowsarrayyes–

No examples provided.

get_roadmap ~100

List Agentropolis platform features with status (live, partial, stub, planned), endpoint and guardrails: badges, the x402 relay, seller claims and analytics, sponsored placement, market data, billing. Use it to check whether a platform capability exists before relying on it; it describes Agentropolis itself, not listings. Read-only, no parameters. Stub endpoints answer HTTP 501; payments_enabled shows whether Agentropolis charges for anything (currently false).

Input schema present but exposes no named parameters.

NameTypeReqDescription
itemsarrayyes–
payments_enabledbooleanyes–

No examples provided.

get_trust_method ~97

Explain how Agentropolis computes trust scores (method hub-trust-v0.1) and ranks search results: which payment evidence counts, wash-trading exclusions, low-sample caps, why our own test purchases never count, and what a null score means. Use it to interpret the trust and badge fields from search_kits or get_kit; it returns the method, not any listing's score. Read-only, no parameters.

Input schema present but exposes no named parameters.

NameTypeReqDescription
exclusionsarrayyes–
methodstringyes–
rankingstringyes–
scorestringyes–

No examples provided.

list_categories ~96

List every category in the Agentropolis index with its listing count, largest first (about 18 snake_case ids such as web_search, crypto_onchain_data, llm_inference). Use it to pick a valid value for search_kits' category filter or to see what the index covers; for paid-usage numbers per category use get_market_snapshot. Read-only, no parameters. Category pages with prices and verified buyers: /categories.

Input schema present but exposes no named parameters.

NameTypeReqDescription
categoriesarrayyes–

No examples provided.

list_sources ~93

List the registries and directories Agentropolis ingests or deliberately excludes, with each source's license or terms decision, robots handling and listing count (e.g. Official MCP Registry CC0, x402-list.com CC BY 4.0; Coinbase Bazaar link-out only). Use it to check provenance or the attribution required before citing results; it does not search listings (use search_kits). Read-only, no parameters.

Input schema present but exposes no named parameters.

NameTypeReqDescription
metaobjectyes–
sourcesarrayyes–

No examples provided.

search_kits ~563

Search the Agentropolis index of 52,146 agent-usable listings (MCP servers, x402/MPP pay-per-call HTTP APIs, A2A agents and kits) by task keywords, with optional filters. Use it first when you need a tool for a task; then use get_kit for one listing's trust evidence and price, or get_kit_manifest for how to call it. Not for browsing categories (list_categories) or market totals (get_market_snapshot). Read-only, no auth, never pays. Ranking: BM25 text relevance, boosted by payment-verified trust and the earned Live-Tested badge; trust.score null means no payment evidence (not a negative signal). results[] is organic; featured[] is a separate, labelled Agentropolis Pro row (today only our own first-party kits, no fee paid) and sponsored[] is a separate, labelled 'Sponsored' array of hand-approved paid placements (usually empty; never affects ranking or trust; pass sponsored:false to omit it). Listed prices are hints; the seller's live HTTP 402 challenge is authoritative. Each search is logged anonymously (query text, no raw IP). Example: {"q":"web search","rail":"x402","max_price_usd":0.01,"min_trust":40}.

NameTypeReqDescription
categorystring–Category id from list_categories, e.g. 'web_search' or 'crypto_onchain_data'. Comma-separate to allow several.
kindstring–Restrict to one listing type: kit (packaged task API), http_api (pay-per-call HTTP API), mcp_server, a2a_agent. Omit for all.
limitinteger–Number of organic results to return, 1-25 (default 10).
max_price_usdnumber–Only listings whose lowest listed price per call/unit is at most this many US dollars, e.g. 0.01. Listings without a known price are excluded when set.
min_trustnumber–Only listings with a payment-verified trust score of at least this value (0-100). Excludes listings with no payment evidence.
paid_onlyboolean–true = only listings that accept a payment rail (x402 or MPP).
qstringyesWhat the agent needs, in plain words: 'web search', 'transcribe audio with speakers', 'postgres', 'token honeypot check'. Keywords beat full sentences.
railstring–Only listings that accept this payment rail: x402 (USDC on-chain, per call) or mpp (Machine Payments Protocol).
sponsoredboolean–Set false to omit the labelled sponsored[] array. Default true.
NameTypeReqDescription
featuredarrayyesLabelled Agentropolis Pro row, separate from organic results
featured_labelstringyes–
rankingstringyesHow results were ranked
resultsarrayyesOrganic results: id, name, kind, summary, pricing, trust, badges, tiers, invoke, links (page, kit_manifest, call when relayable, go), buy (relay_x402 or link_out)
search_idstring–Anonymous id for this search
sponsoredarrayyesLabelled Sponsored placements, hand-approved; separate from results; never affects ranking or trust. Usually empty.
totalnumberyesOrganic matches before limit

No examples provided.

Install

How do I install the Agentropolis MCP server?

Agentropolis is a hosted endpoint at https://agentropolis.io/api/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · agentropolis.io

# add to Claude Code
claude mcp add --transport http io-agentropolis-agentropolis 'https://agentropolis.io/api/mcp'
Common questions

What is the Agentropolis MCP server?

Agentropolis is an MCP server listed in the public MCP registry as io.agentropolis/agentropolis. Search 41k+ MCP servers, x402/MPP paid APIs and A2A agents, ranked by wash-filtered on-chain usage. This page covers its hosted endpoint (https://agentropolis.io/api/mcp).

Is the Agentropolis MCP server safe to use?

Agentropolis scores 86 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Agentropolis MCP server expose?

Agentropolis exposes 10 tools: search_kits, get_kit, get_kit_manifest, call_kit, list_categories, and 5 more. Their descriptions and schemas cost roughly 2,096 tokens of context every time the server is loaded.

Does the Agentropolis MCP server require authentication?

No. We connected to Agentropolis without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the Agentropolis MCP server still maintained?

Agentropolis is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What did VerifyMCP test on the Agentropolis MCP server?

VerifyMCP ran 13 checks on Agentropolis, covering TLS certificate, Authorization, HTTPS, HSTS header and 9 more. Supply Chain Security and Provenance & Transparency do not apply to a hosted endpoint, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.