{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T18:25:40.515Z","url":"https://verifymcp.io/servers/space-markets-hq-smx-mcp/smx-mcp","markdownUrl":"https://verifymcp.io/servers/space-markets-hq-smx-mcp/smx-mcp.md","server":{"slug":"space-markets-hq-smx-mcp","name":"SMX by Space Markets (testnet)","registryName":"io.github.Space-Markets-HQ/smx-mcp","description":"SMX (Space Markets) testnet event markets and the Space Markets Index (SMI). Base Sepolia only.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"smx-mcp","type":"npm","identifier":"smx-mcp","withdrawn":false,"url":"https://verifymcp.io/servers/space-markets-hq-smx-mcp/smx-mcp","version":"0.1.2","transport":"stdio","scoredAt":"2026-11-05T10:29:50.247Z"},"score":{"total":80,"tier":"high trust","status":"scored","weekDelta":2,"history":[{"date":"2026-11-05","total":80},{"date":"2026-11-04","total":80},{"date":"2026-11-03","total":80},{"date":"2026-11-02","total":80},{"date":"2026-11-01","total":80},{"date":"2026-10-31","total":79},{"date":"2026-10-30","total":79},{"date":"2026-10-29","total":78},{"date":"2026-10-28","total":75},{"date":"2026-10-27","total":74},{"date":"2026-10-26","total":74},{"date":"2026-10-25","total":74},{"date":"2026-10-24","total":73},{"date":"2026-10-23","total":75},{"date":"2026-10-22","total":75},{"date":"2026-10-21","total":74},{"date":"2026-10-20","total":74},{"date":"2026-10-19","total":74},{"date":"2026-10-18","total":73},{"date":"2026-10-17","total":73},{"date":"2026-10-16","total":72},{"date":"2026-10-15","total":72},{"date":"2026-10-14","total":71},{"date":"2026-10-13","total":66},{"date":"2026-10-12","total":66},{"date":"2026-10-11","total":66},{"date":"2026-10-07","total":66},{"date":"2026-10-04","total":66},{"date":"2026-10-03","total":66},{"date":"2026-10-02","total":51}]},"categories":[{"name":"Supply Chain Security","score":99,"verdict":"partial","reasons":["No malware found by supply-chain analysis.","No known CVEs affecting this package version or its production dependencies.","No install/post-install scripts declared.","30 of 111 dependencies flagged as unhealthy."],"codes":[{"code":"supplychain.malware_clean","args":{}},{"code":"cve.none","args":{}},{"code":"installscript.none","args":{}},{"code":"dephealth.assessed","args":{"deps":"111","unhealthy":"30"}}]},{"name":"Provenance & Transparency","score":19,"verdict":"fail","reasons":["Repository check failed: no source repository is declared.","Provenance check failed: no build-provenance attestation is published.","Clear OSI-approved license (MIT).","Actively maintained (last published 13 days ago).","Disclosure check failed: no security disclosure policy was found in the source repository."],"codes":[{"code":"provenance.repo_none","args":{}},{"code":"provenance.none","args":{}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"13"}},{"code":"disclosure.absent","args":{}}]},{"name":"Schema Quality & AI Usability","score":78,"verdict":"fail","reasons":["AI-judged instruction clarity (excellent).","Context-footprint check failed: tool/resource definitions use about 1623 tokens (~135/item across 12 items; 12 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"excellent"}},{"code":"schema.footprint_heavy","args":{"avg":"135","items":"12","tools":"12","tokens":"1623","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":100,"verdict":"pass","reasons":["No destabilizing schema changes in the last 30 days."],"codes":[{"code":"stability.stable","args":{}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 12 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 13 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"12"}},{"code":"toolsafety.manipulation_clean","args":{"units":"13","judged":"13"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"smx-mcp","type":"npm","identifier":"smx-mcp","withdrawn":false,"score":80,"current":true,"url":"https://verifymcp.io/servers/space-markets-hq-smx-mcp/smx-mcp","markdownUrl":"https://verifymcp.io/servers/space-markets-hq-smx-mcp/smx-mcp.md"}],"facts":[{"label":"Registry","value":"npm"},{"label":"Package","value":"smx-mcp"},{"label":"Version","value":"0.1.2"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"smi_get_latest","title":"SMI: latest print","description":"Space Markets Index (SMI), published by Space Markets, Inc.: the latest weekly print. Returns the headline figure (SMI Launch Cadence, with its formula) and a one-line summary of each sub-index: launch and access, compute and energy in orbit, connectivity and data, spectrum and filings, deep space and the Moon. Includes print id, data dates, rules links and the GCAT attribution. Information only; contains no market prices. Free, no key. Pass sub_index to get one sub-index in full.","inputs":[{"name":"sub_index","type":"string","required":false,"description":"Return this sub-index in full instead of the summary."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":135},{"name":"smi_get_methodology","title":"SMI: methodology","description":"Space Markets Index (SMI) methodology, published by Space Markets, Inc.: version, change log, conflicts statement, the headline formula and the counting rules for each sub-index. Free, no key. Pass section to get one part.","inputs":[{"name":"section","type":"string","required":false,"description":"Return only this section."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":70},{"name":"smx_list_markets","title":"SMX: list markets","description":"List SMX event markets on Base Sepolia testnet, read directly from the on-chain MarketRegistry with the same listing rules as the SMX agent API. Per market: id, title, state (Open/Resolved), status, outcome, best bid and ask, YES midpoint in basis points (5000 = 50 cents) and minimum order. Free, no key. Test USDC, no monetary value.","inputs":[{"name":"include_unlisted","type":"boolean","required":false,"description":"Also return drills, superseded versions and other unlisted registry entries, with the reason."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":121},{"name":"smx_get_market","title":"SMX: market detail and order book","description":"One SMX testnet market: question, state, outcome if resolved, best bid and ask, YES midpoint, minimum order, contract addresses and the resting order book aggregated by price level (read from chain). Free, no key. Test USDC, no monetary value.","inputs":[{"name":"id","type":"string","required":true,"description":"Market id from smx_list_markets, e.g. moon-race-us-china-test-v2."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":93},{"name":"smx_trading_guide","title":"SMX: how to trade from your own wallet","description":"How to place, cancel and claim SMX testnet orders from your own wallet on Base Sepolia. This server cannot trade; it returns the exact steps, contract addresses, order rules and the claim-before-cancel safety rule. Free, no key.","inputs":[{"name":"id","type":"string","required":false,"description":"Optional market id; fills in that market's order book address."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":82},{"name":"smx_check_cancel_safety","title":"SMX: check an order for unclaimed fills","description":"Before cancelling SMX testnet orders from your own wallet, check each order for unclaimed fills. Returns safeToCancel=false and the claim calls to make if any fill is unclaimed (cancelling it would forfeit the fill on the current contracts). Read-only; never cancels or claims. Free, no key. Read-only check of on-chain state at the time of the call, provided as-is. Verify before acting.","inputs":[{"name":"id","type":"string","required":true,"description":"Market id from smx_list_markets."},{"name":"order_ids","type":"array","required":true,"description":"Your order ids on that market's order book."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":132},{"name":"smi_get_history","title":"SMI: weekly history (paid)","description":"Space Markets Index (SMI), published by Space Markets, Inc.: weekly orbital launch counts for the year so far, with totals and GCAT attribution. Information only; contains no market prices. Paid: $0.01 in Circle testnet USDC on Base Sepolia via x402, testnet USDC, no real value, charged to your own wallet key in X402_PRIVATE_KEY (without it the tool makes no call). Errors (400/404) are not charged.","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":108},{"name":"smi_get_launch","title":"SMI: one launch record (paid)","description":"Space Markets Index (SMI), published by Space Markets, Inc.: one orbital launch by GCAT launch id (e.g. 2026-221): date, rocket, mission, agency, payloads and mass status. Information only. Paid: $0.01 in Circle testnet USDC on Base Sepolia via x402, testnet USDC, no real value, charged to your own wallet key in X402_PRIVATE_KEY (without it the tool makes no call). Errors (400/404) are not charged.","inputs":[{"name":"launch_id","type":"string","required":true,"description":"GCAT launch id, e.g. 2026-221."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":139},{"name":"smi_get_print","title":"SMI: one print (paid)","description":"Space Markets Index (SMI), published by Space Markets, Inc.: one archived weekly print by print id (e.g. 2026-W39.r7). Information only; contains no market prices. Paid: $0.01 in Circle testnet USDC on Base Sepolia via x402, testnet USDC, no real value, charged to your own wallet key in X402_PRIVATE_KEY (without it the tool makes no call). Errors (400/404) are not charged.","inputs":[{"name":"print_id","type":"string","required":true,"description":"Print id, e.g. 2026-W39.r7."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":131},{"name":"smx_paid_list_markets","title":"SMX: market list from the agent API (paid)","description":"SMX agent API market list (GET /agent/markets): the listed SMX testnet markets with status, outcome, midpoint (midBps and midPriceCents) and minimum order, as served by the SMX agent API. Same data as smx_list_markets, which is free. Paid: $0.01 in Circle testnet USDC on Base Sepolia via x402, testnet USDC, no real value, charged to your own wallet key in X402_PRIVATE_KEY (without it the tool makes no call). Errors (400/404) are not charged.","inputs":[{"name":"all","type":"boolean","required":false,"description":"Include unlisted registry markets with the reason (?all=1)."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":152},{"name":"smx_paid_get_market","title":"SMX: market detail from the agent API (paid)","description":"SMX agent API market detail (GET /agent/markets/{id}): status, outcome, midpoint, minimum order and a book summary for one SMX testnet market. Paid: $0.01 in Circle testnet USDC on Base Sepolia via x402, testnet USDC, no real value, charged to your own wallet key in X402_PRIVATE_KEY (without it the tool makes no call). Errors (400/404) are not charged.","inputs":[{"name":"id","type":"string","required":true,"description":"Market id from smx_list_markets."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":121},{"name":"smx_paid_get_mid","title":"SMX: market midpoint from the agent API (paid)","description":"SMX agent API midpoint (GET /v1/markets/{id}/mid) for one SMX testnet market: midBps (5000 = 50 cents), midPriceCents, source and status. Note: the legacy field midCents is in basis points. Paid: $0.01 in Circle testnet USDC on Base Sepolia via x402, testnet USDC, no real value, charged to your own wallet key in X402_PRIVATE_KEY (without it the tool makes no call). Errors (400/404) are not charged.","inputs":[{"name":"id","type":"string","required":true,"description":"Market id from smx_list_markets."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":143}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T10:29:50.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"none","label":"No attestation","reason":null,"reasonLabel":null,"discovery":null,"discoveryLabel":null,"sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":{"nodes":111,"partial":false,"deprecated":null,"stale":30,"noRepo":null}},"mismatches":[],"changelog":{"trackingSince":"2026-10-02","recent":[{"id":"chg_01a196a5-54c3-7c3a-8d93-276cec988d59","kind":"check.verdict","summary":"Stability (0.97 → pass)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/space-markets-hq-smx-mcp/smx-mcp#chg-chg_01a196a5-54c3-7c3a-8d93-276cec988d59"},{"id":"chg_01a196a5-54c5-70fb-9060-839c408904fc","kind":"score.total_changed","summary":"Trust score (79 → 80)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/space-markets-hq-smx-mcp/smx-mcp#chg-chg_01a196a5-54c5-70fb-9060-839c408904fc"},{"id":"chg_01a18c58-70d0-7df2-87ea-abef1cbc5ffa","kind":"score.total_changed","summary":"Trust score (78 → 79)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/space-markets-hq-smx-mcp/smx-mcp#chg-chg_01a18c58-70d0-7df2-87ea-abef1cbc5ffa"},{"id":"chg_01a1872f-ca30-750a-800d-6db8949637c3","kind":"check.verdict","summary":"Known CVEs (fail → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/space-markets-hq-smx-mcp/smx-mcp#chg-chg_01a1872f-ca30-750a-800d-6db8949637c3"},{"id":"chg_01a1872f-ca31-7a63-87eb-12953dc34140","kind":"advisory.resolved","summary":"CVE-2023-54404 no longer affects this package","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/space-markets-hq-smx-mcp/smx-mcp#chg-chg_01a1872f-ca31-7a63-87eb-12953dc34140"},{"id":"chg_01a1872f-ca32-71d8-9a47-038906d63dd6","kind":"score.total_changed","summary":"Trust score (75 → 78)","materiality":"functional","direction":"improvement","scoreDelta":3,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/space-markets-hq-smx-mcp/smx-mcp#chg-chg_01a1872f-ca32-71d8-9a47-038906d63dd6"},{"id":"chg_01a1820a-6473-7954-9bae-d70169dc3a6a","kind":"score.total_changed","summary":"Trust score (74 → 75)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-28","url":"https://verifymcp.io/servers/space-markets-hq-smx-mcp/smx-mcp#chg-chg_01a1820a-6473-7954-9bae-d70169dc3a6a"},{"id":"chg_01a17296-4a20-7233-9d1b-3c3271028f17","kind":"score.total_changed","summary":"Trust score (73 → 74)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/space-markets-hq-smx-mcp/smx-mcp#chg-chg_01a17296-4a20-7233-9d1b-3c3271028f17"},{"id":"chg_01a16d6f-e974-73df-aeda-c855e27b2f77","kind":"advisory.identified","summary":"CVE-2023-54404 affects this package (high)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-24","url":"https://verifymcp.io/servers/space-markets-hq-smx-mcp/smx-mcp#chg-chg_01a16d6f-e974-73df-aeda-c855e27b2f77"},{"id":"chg_01a16d6f-e975-762d-a246-e679ffef0765","kind":"check.verdict","summary":"Known CVEs (pass → fail)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-24","url":"https://verifymcp.io/servers/space-markets-hq-smx-mcp/smx-mcp#chg-chg_01a16d6f-e975-762d-a246-e679ffef0765"},{"id":"chg_01a16d6f-e975-7c2f-99d8-2fc908da904f","kind":"score.total_changed","summary":"Trust score (75 → 73)","materiality":"functional","direction":"regression","scoreDelta":-2,"occurredOn":"2026-10-24","url":"https://verifymcp.io/servers/space-markets-hq-smx-mcp/smx-mcp#chg-chg_01a16d6f-e975-7c2f-99d8-2fc908da904f"},{"id":"chg_01a16323-fe47-79de-9f8a-065ee2d5b14c","kind":"score.total_changed","summary":"Trust score (74 → 75)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-22","url":"https://verifymcp.io/servers/space-markets-hq-smx-mcp/smx-mcp#chg-chg_01a16323-fe47-79de-9f8a-065ee2d5b14c"},{"id":"chg_01a153ac-987b-7732-ae6c-216bc3aae376","kind":"score.total_changed","summary":"Trust score (73 → 74)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-19","url":"https://verifymcp.io/servers/space-markets-hq-smx-mcp/smx-mcp#chg-chg_01a153ac-987b-7732-ae6c-216bc3aae376"},{"id":"chg_01a1495f-06c7-78ec-9f53-69280b160f28","kind":"score.total_changed","summary":"Trust score (72 → 73)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-17","url":"https://verifymcp.io/servers/space-markets-hq-smx-mcp/smx-mcp#chg-chg_01a1495f-06c7-78ec-9f53-69280b160f28"},{"id":"chg_01a13f15-45bd-7b83-a8e7-e2998b5580aa","kind":"score.total_changed","summary":"Trust score (71 → 72)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-15","url":"https://verifymcp.io/servers/space-markets-hq-smx-mcp/smx-mcp#chg-chg_01a13f15-45bd-7b83-a8e7-e2998b5580aa"},{"id":"chg_01a139f0-9d52-704e-a661-a74ef766bc37","kind":"check.reverified","summary":"Stability (unverified → 0.40)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-14","url":"https://verifymcp.io/servers/space-markets-hq-smx-mcp/smx-mcp#chg-chg_01a139f0-9d52-704e-a661-a74ef766bc37"},{"id":"chg_01a139f0-9d9e-7a30-b7bf-cd7a0cbb79bf","kind":"score.total_changed","summary":"Trust score (66 → 71)","materiality":"functional","direction":"improvement","scoreDelta":5,"occurredOn":"2026-10-14","url":"https://verifymcp.io/servers/space-markets-hq-smx-mcp/smx-mcp#chg-chg_01a139f0-9d9e-7a30-b7bf-cd7a0cbb79bf"},{"id":"chg_01a12fc7-0f3a-7ac8-9f46-cfb803e9d22f","kind":"check.reverified","summary":"Security disclosure (unverified → fail)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-12","url":"https://verifymcp.io/servers/space-markets-hq-smx-mcp/smx-mcp#chg-chg_01a12fc7-0f3a-7ac8-9f46-cfb803e9d22f"},{"id":"chg_01a12d4f-a827-7c40-9280-37dcf38a2bcc","kind":"check.unverifiable","summary":"Security disclosure (fail → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-11","url":"https://verifymcp.io/servers/space-markets-hq-smx-mcp/smx-mcp#chg-chg_01a12d4f-a827-7c40-9280-37dcf38a2bcc"},{"id":"chg_01a1013f-dc5b-7c6e-82bd-14ae9d29a6dc","kind":"check.reverified","summary":"Malware scan (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-03","url":"https://verifymcp.io/servers/space-markets-hq-smx-mcp/smx-mcp#chg-chg_01a1013f-dc5b-7c6e-82bd-14ae9d29a6dc"}],"truncated":true,"feedUrl":"https://verifymcp.io/servers/space-markets-hq-smx-mcp/smx-mcp/changelog.json"},"links":{"html":"https://verifymcp.io/servers/space-markets-hq-smx-mcp/smx-mcp","markdown":"https://verifymcp.io/servers/space-markets-hq-smx-mcp/smx-mcp.md","changelogJson":"https://verifymcp.io/servers/space-markets-hq-smx-mcp/smx-mcp/changelog.json","changelogRss":"https://verifymcp.io/servers/space-markets-hq-smx-mcp/smx-mcp.xml","external":[{"label":"npm package","href":"https://www.npmjs.com/package/smx-mcp"},{"label":"Socket report","href":"https://socket.dev/npm/package/smx-mcp"},{"label":"Website","href":"https://smx.space/"}]}}