# Agentropolis (remote · agentropolis.io)

Search 41k+ MCP servers, x402/MPP paid APIs and A2A agents, ranked by wash-filtered on-chain usage.

- Trust score: 86/100 (high trust)
- Change this week: +6
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-11-05

## Components

- remote · `agentropolis.io`: 86/100 (this document), [markdown](https://verifymcp.io/servers/io-agentropolis-agentropolis/api-mcp.md), [page](https://verifymcp.io/servers/io-agentropolis-agentropolis/api-mcp)

## Channel facts

- Endpoint: `https://agentropolis.io/api/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `0.3.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-11-05.

- **Endpoint Security**: 80/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - No authorisation is required to call this server. Nothing on it is marked destructive, but we can't show that an anonymous caller can only read: full credit needs the server to list at least one tool and every tool to be verifiably read-only. We use a best-effort check of tool names and descriptions to tell read-only tools from tools that change things, so some genuinely read-only tools may not get full credit. Names that start with a read verb (get, list, read, search and similar) and accurate readOnlyHint annotations help. Meet that to earn full credit, or require authorisation.
  - HTTPS is enforced; there's no plaintext access path.
  - The HSTS (Strict-Transport-Security) header is present.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 69/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 2201 tokens (~220/item across 10 items; 10 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 100/100
  - No destabilizing schema changes in the last 30 days.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
  - Structured output schemas are declared (90% of tools); any adoption earns full credit.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - All 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.
  - An AI judge read all 11 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a current MCP spec version (2026-07-28).

## Install

### How do I install the Agentropolis MCP server?

Agentropolis is a hosted endpoint at https://agentropolis.io/api/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http io-agentropolis-agentropolis 'https://agentropolis.io/api/mcp'
```

### Cursor

```json
{
  "mcpServers": {
    "io-agentropolis-agentropolis": {
      "url": "https://agentropolis.io/api/mcp"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "io-agentropolis-agentropolis": {
      "type": "http",
      "url": "https://agentropolis.io/api/mcp"
    }
  }
}
```

### Codex

```toml
[mcp_servers.io-agentropolis-agentropolis]
url = "https://agentropolis.io/api/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "io-agentropolis-agentropolis": {
      "type": "remote",
      "url": "https://agentropolis.io/api/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add io-agentropolis-agentropolis --url 'https://agentropolis.io/api/mcp' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  io-agentropolis-agentropolis:
    url: "https://agentropolis.io/api/mcp"
```

### Netclaw

```json
{
  "McpServers": {
    "io-agentropolis-agentropolis": {
      "Transport": "http",
      "Url": "https://agentropolis.io/api/mcp"
    }
  }
}
```

### Vellum

```bash
assistant mcp add io-agentropolis-agentropolis -t streamable-http -u 'https://agentropolis.io/api/mcp'
```

### Other

```json
{
  "mcpServers": {
    "io-agentropolis-agentropolis": {
      "type": "http",
      "url": "https://agentropolis.io/api/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-11-04 (score 86, 0)

- [security] Tool “search_kits” rewrote its description, which is the text the model reads

### 2026-11-02 (score 86, +5)

- [security improvement] Stability: fail → pass

### 2026-11-01 (score 81, +1)

No change was recorded against any check on this day. Stability & Change Management went from 57 to 60.

### 2026-10-31 (score 80, 0)

- [security] Tool “search_kits” rewrote its description, which is the text the model reads
- [cosmetic] “search_kits” added an optional parameter “sponsored”

### 2026-10-29 (score 80, +1)

No change was recorded against any check on this day. Stability & Change Management went from 47 to 50.

### 2026-10-28 (score 79, 0)

- [security] Tool “search_kits” rewrote its description, which is the text the model reads

### 2026-10-27 (score 79, +1)

- [security] Tool “search_kits” rewrote its description, which is the text the model reads

### 2026-10-25 (score 78, +1)

No change was recorded against any check on this day. Stability & Change Management went from 33 to 37.

## MCP tools (10)

### `search_kits` (~563 tokens)

Search tools, paid APIs and MCP servers by task

Search the Agentropolis index of 52,146 agent-usable listings (MCP servers, x402/MPP pay-per-call HTTP APIs, A2A agents and kits) by task keywords, with optional filters. Use it first when you need a tool for a task; then use get_kit for one listing's trust evidence and price, or get_kit_manifest for how to call it. Not for browsing categories (list_categories) or market totals (get_market_snapshot). Read-only, no auth, never pays. Ranking: BM25 text relevance, boosted by payment-verified trust and the earned Live-Tested badge; trust.score null means no payment evidence (not a negative signal). results[] is organic; featured[] is a separate, labelled Agentropolis Pro row (today only our own first-party kits, no fee paid) and sponsored[] is a separate, labelled 'Sponsored' array of hand-approved paid placements (usually empty; never affects ranking or trust; pass sponsored:false to omit it). Listed prices are hints; the seller's live HTTP 402 challenge is authoritative. Each search is logged anonymously (query text, no raw IP). Example: {"q":"web search","rail":"x402","max_price_usd":0.01,"min_trust":40}.

Input parameters:

- `category` (string): Category id from list_categories, e.g. 'web_search' or 'crypto_onchain_data'. Comma-separate to allow several.
- `kind` (string): Restrict to one listing type: kit (packaged task API), http_api (pay-per-call HTTP API), mcp_server, a2a_agent. Omit for all.
- `limit` (integer): Number of organic results to return, 1-25 (default 10).
- `max_price_usd` (number): Only listings whose lowest listed price per call/unit is at most this many US dollars, e.g. 0.01. Listings without a known price are excluded when set.
- `min_trust` (number): Only listings with a payment-verified trust score of at least this value (0-100). Excludes listings with no payment evidence.
- `paid_only` (boolean): true = only listings that accept a payment rail (x402 or MPP).
- `q` (string, required): What the agent needs, in plain words: 'web search', 'transcribe audio with speakers', 'postgres', 'token honeypot check'. Keywords beat full sentences.
- `rail` (string): Only listings that accept this payment rail: x402 (USDC on-chain, per call) or mpp (Machine Payments Protocol).
- `sponsored` (boolean): Set false to omit the labelled sponsored[] array. Default true.

Output parameters:

- `featured` (array): Labelled Agentropolis Pro row, separate from organic results
- `featured_label` (string)
- `ranking` (string): How results were ranked
- `results` (array): Organic results: id, name, kind, summary, pricing, trust, badges, tiers, invoke, links (page, kit_manifest, call when relayable, go), buy (relay_x402 or link_out)
- `search_id` (string): Anonymous id for this search
- `sponsored` (array): Labelled Sponsored placements, hand-approved; separate from results; never affects ranking or trust. Usually empty.
- `total` (number): Organic matches before limit

### `get_kit` (~172 tokens)

Get one listing's details, trust evidence and price

Get the full Agentropolis record for one listing by id: summary, pricing, payment-verified trust evidence (verified buyers, settlements, wash flags, disclosed test sales), badge tiers, sources and links. Use it after search_kits to judge whether a listing is worth using; use get_kit_manifest instead when you need the machine-readable invoke contract (endpoints, schemas, payment offers). Read-only, no auth; logs an anonymous detail view for seller analytics. Unknown ids return an error result with error 'not_found'. Example: {"id":"seenly.seenly-token-preflight"}.

Input parameters:

- `id` (string, required): Listing id exactly as returned by search_kits results[].id, e.g. 'seenly.seenly-token-preflight' or 'mcp.io-github-owner-name'.

Output parameters:

- `badges` (array)
- `id` (string)
- `kind` (string)
- `name` (string)
- `tiers`: Badge tiers: earned (Verified, Live-Tested, Trusted) and paid/showcase (Agentropolis Pro)
- `trust`: Payment-verified trust; score null = no evidence

### `get_kit_manifest` (~205 tokens)

Get one listing's kit.json invoke contract

Get the kit.json v0.1 manifest for one listing: how to call it (HTTP, MCP or A2A endpoints), input/output schema references, payment offers (rail, network, asset, payTo, amount), discovery files and a trust summary. Use it when you are about to call a listing yourself; use get_kit for human-readable details and trust evidence, or call_kit to call an x402 listing through Agentropolis. Read-only, no auth. For seller-published kits this mirrors the seller's own kit.json; for seeded listings it is generated from public metadata and may be incomplete, so prefer the seller's live 402 challenge for exact prices. Example: {"id":"seenly.seenly-pitch-kit"}.

Input parameters:

- `id` (string, required): Listing id exactly as returned by search_kits results[].id, e.g. 'seenly.seenly-token-preflight' or 'mcp.io-github-owner-name'.

Output parameters:

- `id` (string)
- `invoke` (array)
- `kit` (string): Manifest version, '0.1'
- `offers` (array)

### `call_kit` (~512 tokens)

Call an x402 listing through the non-custodial pass-through

Send a request to a listing's x402 endpoint through Agentropolis and get the seller's raw response back (status, headers, body). Use it only for listings whose search result has buy='relay_x402' (links.call present); for any other listing, call the seller directly using get_kit_manifest. Flow: call without payment, receive HTTP 402 with the seller's payment requirements unchanged, sign a payment with your own wallet to the seller's payTo, then call again with payment_signature (x402 v2) or x_payment (v1). Agentropolis holds no keys or funds, never changes payTo or amount and charges no fee, but a signed payment you pass is forwarded and may be settled by the seller, so real money can move. Limits: seller's own https host only, 256 KB request, 2 MB response, 25 s timeout (longer for slow first-party kits), 20 calls/min per client. Example: {"id":"seenly.seenly-token-preflight","endpoint":"/api/token-preflight","method":"POST","body":{"chain":"base","tokenAddress":"0x4ed4E862860beD51a9570b96d89aF5E1B0Efefed"}}.

Input parameters:

- `body`: Request body. An object is sent as JSON; a string is sent as-is with content_type.
- `content_type` (string): Content-Type for a string body, e.g. 'text/plain'. Ignored for object bodies (sent as application/json).
- `endpoint` (string): Path (e.g. '/api/script') or full https URL on the seller's own host. Defaults to the listing's primary endpoint.
- `id` (string, required): Listing id exactly as returned by search_kits results[].id, e.g. 'seenly.seenly-token-preflight' or 'mcp.io-github-owner-name'.
- `method` (string): HTTP method; defaults to POST when a body is given, else GET.
- `payment_signature` (string): Signed PAYMENT-SIGNATURE header value (x402 v2) from your own wallet; forwarded unchanged. Omit on the first call.
- `query` (object): Query-string parameters to append, e.g. {"q":"news"}.
- `x_payment` (string): Signed X-PAYMENT header value (x402 v1) from your own wallet; forwarded unchanged. Omit on the first call.

### `list_categories` (~96 tokens)

List index categories with listing counts

List every category in the Agentropolis index with its listing count, largest first (about 18 snake_case ids such as web_search, crypto_onchain_data, llm_inference). Use it to pick a valid value for search_kits' category filter or to see what the index covers; for paid-usage numbers per category use get_market_snapshot. Read-only, no parameters. Category pages with prices and verified buyers: /categories.

Output parameters:

- `categories` (array)

### `list_sources` (~93 tokens)

List data sources, licenses and exclusions

List the registries and directories Agentropolis ingests or deliberately excludes, with each source's license or terms decision, robots handling and listing count (e.g. Official MCP Registry CC0, x402-list.com CC BY 4.0; Coinbase Bazaar link-out only). Use it to check provenance or the attribution required before citing results; it does not search listings (use search_kits). Read-only, no parameters.

Output parameters:

- `meta` (object)
- `sources` (array)

### `get_trust_method` (~97 tokens)

Explain how trust scores and ranking work

Explain how Agentropolis computes trust scores (method hub-trust-v0.1) and ranks search results: which payment evidence counts, wash-trading exclusions, low-sample caps, why our own test purchases never count, and what a null score means. Use it to interpret the trust and badge fields from search_kits or get_kit; it returns the method, not any listing's score. Read-only, no parameters.

Output parameters:

- `exclusions` (array)
- `method` (string)
- `ranking` (string)
- `score` (string)

### `get_bazaar_link` (~127 tokens)

Get a search link for Coinbase's x402 Bazaar

Build a URL that searches Coinbase's x402 Bazaar (Agentic.Market) for a query. Use it when you want x402 services that may be missing from the Agentropolis index; it only returns a link for you or your user to open. Agentropolis makes no request to Coinbase and does not cache or republish Bazaar data (their terms forbid it). Read-only. Example: {"q":"web search"}.

Input parameters:

- `q` (string): Search words to prefill on Agentic.Market, e.g. 'image generation'. Omit for the home page.

Output parameters:

- `links` (array)

### `get_market_snapshot` (~131 tokens)

Get wash-filtered x402 paid-usage stats by category

Get 30-day x402 paid-usage statistics per category, with wash trading filtered out: services with paid usage, verified buyers, settlements, median listed price and listings excluded for wash signals. Use it for market sizing or price benchmarking; to find individual tools use search_kits. Read-only, no parameters. Data: x402-list.com measured settlements (CC BY 4.0, attribute when quoting) plus Agentropolis wash filtering. Buyer counts are summed per service, so a wallet that pays several services is counted once per service. Same data as /stats and the weekly reports at /reports.

Output parameters:

- `attribution` (string)
- `caveat` (string)
- `generated_at` (string)
- `report` (string)
- `rows` (array)

### `get_roadmap` (~100 tokens)

List Agentropolis features and their status

List Agentropolis platform features with status (live, partial, stub, planned), endpoint and guardrails: badges, the x402 relay, seller claims and analytics, sponsored placement, market data, billing. Use it to check whether a platform capability exists before relying on it; it describes Agentropolis itself, not listings. Read-only, no parameters. Stub endpoints answer HTTP 501; payments_enabled shows whether Agentropolis charges for anything (currently false).

Output parameters:

- `items` (array)
- `payments_enabled` (boolean)

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/io-agentropolis-agentropolis/api-mcp#diagnostics

## Score history

- 2026-11-05: 86
- 2026-11-04: 86
- 2026-11-03: 86
- 2026-11-02: 86
- 2026-11-01: 81
- 2026-10-31: 80
- 2026-10-30: 80
- 2026-10-29: 80
- 2026-10-28: 79
- 2026-10-27: 79
- 2026-10-26: 78
- 2026-10-25: 78
- 2026-10-24: 77
- 2026-10-23: 77
- 2026-10-22: 76
- 2026-10-21: 76
- 2026-10-20: 75
- 2026-10-19: 75
- 2026-10-18: 74
- 2026-10-17: 74
- 2026-10-16: 74
- 2026-10-15: 73
- 2026-10-14: 73
- 2026-10-13: 73
- 2026-10-12: 73
- 2026-10-10: 73
- 2026-10-04: 73
- 2026-10-03: 73
- 2026-10-02: 71

## Common questions

### What is the Agentropolis MCP server?

Agentropolis is an MCP server listed in the public MCP registry as io.agentropolis/agentropolis. Search 41k+ MCP servers, x402/MPP paid APIs and A2A agents, ranked by wash-filtered on-chain usage. This page covers its hosted endpoint (https://agentropolis.io/api/mcp).

### Is the Agentropolis MCP server safe to use?

Agentropolis scores 86 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the Agentropolis MCP server expose?

Agentropolis exposes 10 tools: search_kits, get_kit, get_kit_manifest, call_kit, list_categories, and 5 more. Their descriptions and schemas cost roughly 2,096 tokens of context every time the server is loaded.

### Does the Agentropolis MCP server require authentication?

No. We connected to Agentropolis without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

### Is the Agentropolis MCP server still maintained?

Agentropolis is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

### What did VerifyMCP test on the Agentropolis MCP server?

VerifyMCP ran 13 checks on Agentropolis, covering TLS certificate, Authorization, HTTPS, HSTS header and 9 more. Supply Chain Security and Provenance & Transparency do not apply to a hosted endpoint, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.

## Links

- Remote endpoint: https://agentropolis.io/api/mcp
- Website: https://agentropolis.io/
- Changelog RSS feed: https://verifymcp.io/servers/io-agentropolis-agentropolis/api-mcp.xml
- Changelog JSON feed: https://verifymcp.io/servers/io-agentropolis-agentropolis/api-mcp/changelog.json
- Trust report (JSON): https://verifymcp.io/servers/io-agentropolis-agentropolis/api-mcp.json
- HTML version of this page: https://verifymcp.io/servers/io-agentropolis-agentropolis/api-mcp