Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Zero to Hundred marketplace

REMOTE · ZEROTOHUNDRED.AI

Search live software, compare listings, and prepare owned drafts. Publishing stays on the website.

Available components

69 Trust /100

Last scanned (4 hours ago)

Scores higher than 59% of remote servers

Reachable. Last reached 18 Oct 2026.

Category E-commerce

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security66
Transport & Reachability100
Schema Quality & AI Usability75
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 2609 tokens (~260/item across 10 items; 9 tools + 1 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management7
  • Stability observed for 2 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
  • Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 9 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 11 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a current MCP spec version (2026-07-28).Pass
  • Supports UI / widget rendering.Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 18 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.

  • 17 Oct 26 0
    • Tool “z2h_compare_marketplace_listings” rewrote its description, which is the text the model reads security
    • Tool “z2h_request_source_upload” rewrote its description, which is the text the model reads security
    • Schema quality: 220 → 260 ▼ functional
    • Stability: unverified → 0.03 ▲ functional
    • Schema quality: good → excellent functional
    • “z2h_compare_marketplace_listings” reworded the description of “slugs” cosmetic
    • “z2h_create_draft_listing” reworded the description of “domains” cosmetic
    • “z2h_create_draft_listing” reworded the description of “shortDescription” cosmetic
    • “z2h_create_draft_listing” reworded the description of “sourceCodeIncluded” cosmetic
    • “z2h_create_draft_listing” reworded the description of “title” cosmetic
    • “z2h_get_listing” reworded the description of “slug” cosmetic
    • “z2h_list_my_listings” reworded the description of “cursor” cosmetic
    • “z2h_list_my_listings” reworded the description of “limit” cosmetic
    • “z2h_search_marketplace” reworded the description of “domains” cosmetic
    • “z2h_search_marketplace” reworded the description of “limit” cosmetic
    • “z2h_search_marketplace” reworded the description of “mode” cosmetic
    • “z2h_search_marketplace” reworded the description of “operatingStatus” cosmetic
    • “z2h_search_marketplace” reworded the description of “search” cosmetic
    • “z2h_search_marketplace” reworded the description of “type” cosmetic
    • “z2h_show_marketplace” reworded the description of “search” cosmetic
    • “z2h_update_draft_listing” reworded the description of “domains” cosmetic
    • “z2h_update_draft_listing” reworded the description of “operatingStatus” cosmetic
    • “z2h_update_draft_listing” reworded the description of “shortDescription” cosmetic
    • “z2h_update_draft_listing” reworded the description of “sourceCodeIncluded” cosmetic
    • “z2h_update_draft_listing” reworded the description of “title” cosmetic
    • Tool “z2h_compare_marketplace_listings” changed its title: Compare Zero to Hundred software → Compare marketplace software cosmetic
    • Tool “z2h_search_marketplace” changed its title: Search Zero to Hundred marketplace → Search marketplace software cosmetic
    • Tool “z2h_show_marketplace” changed its title: Show Zero to Hundred marketplace → Show marketplace software cosmetic
  • 16 Oct 26 68

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 18 Oct 2026 · Probed https://zerotohundred.ai/api/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=zerotohundred.ai CN=YR2,O=Let's Encrypt,C=US 20 Aug 2026 18 Nov 2026 RSA 2048 SHA256-RSA 6a5ca1d9dff1db44c8daedc86fbd4098a6f
SANs: zerotohundred.ai
CN=YR2,O=Let's Encrypt,C=US (CA) CN=Root YR,O=ISRG,C=US 3 Sept 2025 2 Sept 2028 RSA 2048 SHA256-RSA 4ebd24947e24d394802d84a52fd5b319
CN=Root YR,O=ISRG,C=US (CA) CN=ISRG Root X1,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 RSA 4096 SHA256-RSA f24b6d17f9d9ad7cb1c9fea78782699f

Background: What to check on a remote MCP endpoint →

DNSSEC secure

Validation of zerotohundred.ai. — Secure

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
ai. present 3799 8 Verified
zerotohundred.ai. present 2371 13 Verified
zerotohundred.ai. Verified address RRset verified with the apex keys
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200
Header Value
strict-transport-security max-age=63072000
content-security-policy frame-ancestors 'self'
x-content-type-options nosniff
x-frame-options SAMEORIGIN
referrer-policy strict-origin-when-cross-origin
permissions-policy camera=(), microphone=(), geolocation=(), browsing-topics=()

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://zerotohundred.ai/api/mcp Verified 200
http (plaintext) http://zerotohundred.ai/api/mcp HTTPS enforced 308 https://zerotohundred.ai/api/mcp
MCP tools · 9 exposed · ~2,527 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
z2h_compare_marketplace_listings ~91

Compare a shortlist of public software from marketplace search. Returns current public descriptions, USD license prices, types and tech stacks. Unavailable software is omitted without disclosing its status. This tool cannot purchase software or access private source.

NameTypeReqDescription
slugsarrayyesListing identifiers to compare, in the order the Buyer wants them presented. Copy each slug from z2h_search_marketplace.
NameTypeReqDescription
hasMorebooleanyesThis response contains the complete refreshed selection.
nextCursornullyesSelection refreshes do not paginate. Use marketplace search for paging.
resultsarrayyesCurrent live software, in selection order when slugs were supplied.
unavailableSlugsarrayyesRequested slugs unavailable publicly. Their private status is never disclosed.

No examples provided.

z2h_confirm_source_upload ~211

After the signed PUT succeeds, verify and attach the archive to the owned draft. Confirm that the Builder accepted "I own or have the rights to sell the codebase I am about to upload."; pass ownershipAccepted=true and ownershipVersion=2026-09-27. The server records the accepted wording with the source change. Final review and publishing stay in the web wizard.

NameTypeReqDescription
contentTypestringyesArchive MIME type, used unchanged for PUT and confirmation.
objectKeystringyesStorage key returned by z2h_request_source_upload. Pass it unchanged.
ownershipAcceptedbooleanyesTrue only after the Builder explicitly accepts the statement in this tool description.
ownershipVersionstringyesVersion of the ownership statement explicitly accepted by the Builder.
sizeBytesintegeryesExact archive size in bytes. Must match the uploaded file.
slugstringyesOwned listing slug from z2h_list_my_listings or z2h_create_draft_listing.
NameTypeReqDescription
okbooleanyesThe archive was verified and attached, or this same archive was already attached. Publishing remains in the web wizard.

No examples provided.

z2h_create_draft_listing ~604

Create an invisible draft and return editUrl and publishUrl. Price and source inclusion are Builder decisions. Set sourceCodeIncluded only after confirmation; omitted values default to false. Requires listings:write. Returns the draft identity and web edit/review links. Check z2h_list_my_listings before retrying, because creation is not idempotent. Source delivery, review and publishing continue in the web wizard.

NameTypeReqDescription
askingPricenumber–USD license price confirmed by the Builder. Omit if undecided.
associatedListingIdsarray–IDs of related listings owned by this Builder, obtained from z2h_list_my_listings.
demoUrlstring–Public HTTP or HTTPS demo URL. Omit when no demo is available.
documentationLevelstring–Documentation supplied with the software.
domainsarray–Industry tags for the software. Choose keys from the Zero to Hundred taxonomy: ai, analytics, art-design, auth-identity, cms, conference, developer-tools, devops, e-commerce-marketplace, education, e…
externalDependenciesarray–Third-party services a Buyer must provision. Common values: Supabase, PostgreSQL, MySQL, MongoDB, Redis, Upstash, Firebase, PlanetScale, Neon, Clerk, Auth0, Stripe, PayPal, Plaid, Resend, SendGrid, P…
faqsarray–Supplying FAQs disables the automatic FAQ draft.
imageUrlsarray–HTTP or HTTPS screenshot URLs. The first image becomes the thumbnail.
longDescriptionstringyesWhat the software does, who it helps, and what the Buyer receives.
maintenanceLevelstring–Maintenance commitment the Builder offers.
operatingStatusstringyesState of the software itself, independent of the listing publication status.
shortDescriptionstringyesBuyer-facing summary shown on marketplace cards.
sourceCodeIncludedboolean–Whether the sale includes source code. Omission records false. Set true only after the Builder confirms that source code is included.
sourceRepoUrlstring–GitHub repository URL. Connecting and verifying source continues in the web wizard.
techStackarray–Frameworks and languages used by the software.
thumbnailUrlstring–HTTP or HTTPS image URL for the marketplace thumbnail.
titlestringyesName Buyers will see on the software listing.
typestringyesSoftware category that best matches its main use.
videoUploadUrlstring–A YouTube or Loom demo URL.
NameTypeReqDescription
createdAtstring–ISO creation timestamp, returned when creating a draft.
editUrlstringyesWeb wizard URL for editing this listing.
idstringyesListing ID for related-listing references.
publishUrlstringyesWeb review step where the Builder finishes publishing.
slugstringyesListing identifier used by the other Builder tools.
statusstringyesListing publication state. Only drafts can be edited through MCP.
termsAcceptanceobject–Present when the Builder needs to accept terms before publishing.

No examples provided.

z2h_get_listing ~107

Read one owned listing before editing it. Requires listings:read. Use a slug from z2h_list_my_listings. Returns descriptions, pricing, software attributes, source attachment state and web edit links. Missing listings and listings owned by someone else both return not found. This does not download source code.

NameTypeReqDescription
slugstringyesIdentifies one of the authenticated Builder's listings. Copy slug from z2h_list_my_listings or z2h_create_draft_listing.
NameTypeReqDescription
askingPrice–yesUSD license price, or null when unset.
createdAtstringyesISO creation timestamp.
createdViastringyesRecorded creation channel.
demoUrl–yesPublic demo URL, or null.
documentationLevel–yesDocumentation supplied, or null when unset.
domainsarrayyesIndustry domain taxonomy keys.
editUrlstringyesWeb wizard URL for editing this listing.
externalDependenciesarrayyesServices the Buyer must provision. Legacy records may contain service names as strings.
idstringyesListing ID for related-listing references.
imageUrlsarrayyesListing screenshot URLs.
longDescriptionstringyesFull software description.
maintenanceLevel–yesBuilder maintenance commitment, or null when unset.
operatingStatusstringyesOperating state of the software, independent of listing publication.
publishUrlstringyesWeb review step where the Builder finishes publishing.
shortDescriptionstringyesMarketplace card summary.
slugstringyesListing identifier used by the other Builder tools.
sourceCodeIncludedbooleanyesWhether the Builder included source code.
sourceKind–yesSource attachment method, or null before attachment.
sourceRepoUrl–yesSource repository URL, or null.
statusstringyesListing publication state. Only drafts can be edited through MCP.
techStackarrayyesFrameworks and languages used.
testEnvInstructions–yesLegacy stored demo instructions, or null.
testEnvUrl–yesLegacy stored demo URL, or null.
thumbnailUrl–yesMarketplace thumbnail URL, or null.
titlestringyesSoftware name.
typestringyesSoftware category.
updatedAtstringyesISO last-update timestamp.

No examples provided.

z2h_list_my_listings ~129

Find the authenticated Builder's drafts and live listings before creating another draft. Requires listings:read. Returns items with slugs, publication state, USD prices, edit links, and nextCursor. Pass nextCursor to continue paging; null ends the list. An invalid or expired token requires sign-in again.

NameTypeReqDescription
cursorstring–Continue after the last listing in the preceding result. Use that response's nextCursor; omission starts at the newest listing.
limitinteger–Number of owned listings to return per page. Omission uses 25, with newest listings first.
NameTypeReqDescription
itemsarrayyesThe authenticated Builder's listings, newest first.
nextCursor–yesOpaque cursor for the next page, or null at the end.

No examples provided.

z2h_request_source_upload ~224

For an owned draft, get a short-lived signed archive URL. Ask the Builder to explicitly accept this exact statement: "I own or have the rights to sell the codebase I am about to upload." Pass ownershipAccepted=true and ownershipVersion=2026-09-27 only after they accept. Returns signedUrl for the archive PUT, objectKey for confirmation, and contentType for the upload header. Keep signedUrl private. PUT up to 100 MB to signedUrl, then call z2h_confirm_source_upload. This does not publish.

NameTypeReqDescription
contentTypestringyesArchive MIME type, used unchanged for PUT and confirmation.
ownershipAcceptedbooleanyesTrue only after the Builder explicitly accepts the statement in this tool description.
ownershipVersionstringyesVersion of the ownership statement explicitly accepted by the Builder.
sizeBytesintegeryesExact archive size in bytes. Must match the uploaded file.
slugstringyesOwned listing slug from z2h_list_my_listings or z2h_create_draft_listing.
NameTypeReqDescription
contentTypestringyesContent-Type to use for the archive PUT and confirmation.
objectKeystringyesStorage key to pass unchanged to z2h_confirm_source_upload.
signedUrlstringyesShort-lived signed PUT URL. Keep it private and upload the archive before confirmation.

No examples provided.

z2h_search_marketplace ~375

Find live software by keyword before building from scratch. Public, no sign-in needed. Returns descriptions, USD license prices, tech stacks and listing links. Example: {"search": "invoice", "limit": 5}. Empty search browses recent software. When hasMore is true without nextCursor, narrow the search. Matching is lexical. Errors set isError; retry a rate limit later. Use z2h_compare_marketplace_listings for a shortlist or z2h_show_marketplace for cards. A result does not guarantee suitability or purchase availability.

NameTypeReqDescription
cursorstring–Opaque nextCursor from the previous page. Keep the same filters and sort.
domainsarray–Industry tags for the software. Choose keys from the Zero to Hundred taxonomy: ai, analytics, art-design, auth-identity, cms, conference, developer-tools, devops, e-commerce-marketplace, education, e…
limitinteger–Number of listings to return in this page. Omission uses 20.
modearray–Filter by the listing's sale model. Omission leaves the sale model unfiltered.
operatingStatusarray–Filter by software readiness or existing commercial operation, rather than listing publication state.
searchstring–Keywords describing the software the Buyer needs.
sortstring–Result order. Defaults to relevance for a search, otherwise newest.
typearray–Categories matching the kind of software the Buyer wants. Omission searches across categories.
NameTypeReqDescription
hasMorebooleanyesMore matches exist. If nextCursor is null, narrow the search instead of paging.
nextCursor–yesCursor for the next page, or null if cursor paging is unavailable or finished.
resultsarrayyesLive public software matching the filters.
searchModestringyesText uses keyword matching, not semantic similarity.

No examples provided.

z2h_show_marketplace ~152

Show public software cards and an interactive comparison panel. First search with z2h_search_marketplace, then pass the public slugs to display, and the search text you used as `search` so the panel shows what the cards are for. Without slugs, shows the newest live software. Prices and availability are refreshed on the server. Listing links open the Zero to Hundred website.

NameTypeReqDescription
searchstring–Text to prefill the panel's search box. Use the query that produced the supplied slugs. Cards are selected by slugs; this text does not filter them.
slugsarray–Search-result slugs to show. Omit to display the newest live software.
NameTypeReqDescription
hasMorebooleanyesThis response contains the complete refreshed selection.
nextCursornullyesSelection refreshes do not paginate. Use marketplace search for paging.
resultsarrayyesCurrent live software, in selection order when slugs were supplied.
unavailableSlugsarrayyesRequested slugs unavailable publicly. Their private status is never disclosed.

No examples provided.

z2h_update_draft_listing ~634

Update an owned draft. Omitted fields stay unchanged; nullable fields accept null to clear them. Live listings cannot be edited through this tool. Requires listings:write. Returns the draft identity and web edit/review links. On conflict, read the listing again before retrying.

NameTypeReqDescription
askingPrice––Builder-confirmed USD license price. Null clears it; omission keeps it.
associatedListingIdsarray–IDs of related listings owned by this Builder, obtained from z2h_list_my_listings.
demoUrl––Public HTTP or HTTPS demo URL. Null clears it; omission keeps it.
documentationLevelstring–Documentation supplied with the software.
domainsarray–Industry tags for the software. Choose keys from the Zero to Hundred taxonomy: ai, analytics, art-design, auth-identity, cms, conference, developer-tools, devops, e-commerce-marketplace, education, e…
externalDependenciesarray–Third-party services a Buyer must provision. Common values: Supabase, PostgreSQL, MySQL, MongoDB, Redis, Upstash, Firebase, PlanetScale, Neon, Clerk, Auth0, Stripe, PayPal, Plaid, Resend, SendGrid, P…
faqsarray–Supplying FAQs disables the automatic FAQ draft.
imageUrlsarray–HTTP or HTTPS screenshot URLs. The first image becomes the thumbnail.
longDescriptionstring–What the software does, who it helps, and what the Buyer receives.
maintenanceLevelstring–Maintenance commitment the Builder offers.
modestring–Non-exclusive license listing mode. Omit to keep it unchanged.
operatingStatusstring–Software readiness or commercial operating state, independent of listing publication. Omission keeps the current state.
shortDescriptionstring–Replacement summary for marketplace cards. Omission keeps the current summary.
slugstringyesListing slug returned by z2h_list_my_listings or z2h_create_draft_listing.
sourceCodeIncludedboolean–Whether the sale includes source code, as confirmed by the Builder. Omission keeps the current choice.
sourceRepoUrl––GitHub repository URL. Null clears it; omission keeps it.
techStackarray–Frameworks and languages used by the software.
thumbnailUrl––HTTP or HTTPS thumbnail URL. Null clears it; omission keeps it.
titlestring–Replacement name Buyers will see on the software listing. Omission keeps the current name.
typestring–Software category that best matches its main use.
videoUploadUrl––YouTube or Loom demo URL. Null clears it; omission keeps it.
NameTypeReqDescription
createdAtstring–ISO creation timestamp, returned when creating a draft.
editUrlstringyesWeb wizard URL for editing this listing.
idstringyesListing ID for related-listing references.
publishUrlstringyesWeb review step where the Builder finishes publishing.
slugstringyesListing identifier used by the other Builder tools.
statusstringyesListing publication state. Only drafts can be edited through MCP.
termsAcceptanceobject–Present when the Builder needs to accept terms before publishing.

No examples provided.

Install

How do I install the Zero to Hundred marketplace MCP server?

Zero to Hundred marketplace is a hosted endpoint at https://zerotohundred.ai/api/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · zerotohundred.ai

# add to Claude Code
claude mcp add --transport http zerotohundred-admin-marketplace 'https://zerotohundred.ai/api/mcp'
Common questions

What is the Zero to Hundred marketplace MCP server?

Zero to Hundred marketplace is an MCP server listed in the public MCP registry as io.github.zerotohundred-admin/marketplace. Search live software, compare listings, and prepare owned drafts. Publishing stays on the website. This page covers its hosted endpoint (https://zerotohundred.ai/api/mcp).

Is the Zero to Hundred marketplace MCP server safe to use?

Zero to Hundred marketplace scores 69 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Zero to Hundred marketplace MCP server expose?

Zero to Hundred marketplace exposes 9 tools: z2h_search_marketplace, z2h_create_draft_listing, z2h_list_my_listings, z2h_get_listing, z2h_update_draft_listing, and 4 more. Their descriptions and schemas cost roughly 2,527 tokens of context every time the server is loaded.

Does the Zero to Hundred marketplace MCP server require authentication?

No. We connected to Zero to Hundred marketplace without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the Zero to Hundred marketplace MCP server still maintained?

Zero to Hundred marketplace is still listed as active in the MCP registry. We last reached this channel on 18 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.