# Zero to Hundred marketplace (remote · zerotohundred.ai)

Search live software, compare listings, and prepare owned drafts. Publishing stays on the website.

- Trust score: 69/100 (medium)
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-10-18

## Components

- remote · `zerotohundred.ai`: 69/100 (this document), [markdown](https://verifymcp.io/servers/zerotohundred-admin-marketplace/api-mcp.md), [page](https://verifymcp.io/servers/zerotohundred-admin-marketplace/api-mcp)

## Channel facts

- Endpoint: `https://zerotohundred.ai/api/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.1.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-10-18.

- **Endpoint Security**: 66/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation check failed: no authorisation is required to call this server, and it exposes a tool marked destructive (z2h_create_draft_listing).
  - HTTPS is enforced; there's no plaintext access path.
  - The HSTS (Strict-Transport-Security) header is present.
  - DNSSEC is configured correctly; the domain's records validate against the full chain to the root.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 75/100
  - 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 2609 tokens (~260/item across 10 items; 9 tools + 1 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 7/100
  - Stability observed for 2 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
  - Structured output schemas are declared (100% of tools); any adoption earns full credit.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - We read all 9 captured tool definition(s), and no name or description among them implies an irreversible operation.
  - An AI judge read all 11 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a current MCP spec version (2026-07-28).
  - Supports UI / widget rendering.

## Install

### How do I install the Zero to Hundred marketplace MCP server?

Zero to Hundred marketplace is a hosted endpoint at https://zerotohundred.ai/api/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http zerotohundred-admin-marketplace 'https://zerotohundred.ai/api/mcp'
```

### Cursor

```json
{
  "mcpServers": {
    "zerotohundred-admin-marketplace": {
      "url": "https://zerotohundred.ai/api/mcp"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "zerotohundred-admin-marketplace": {
      "type": "http",
      "url": "https://zerotohundred.ai/api/mcp"
    }
  }
}
```

### Codex

```toml
[mcp_servers.zerotohundred-admin-marketplace]
url = "https://zerotohundred.ai/api/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "zerotohundred-admin-marketplace": {
      "type": "remote",
      "url": "https://zerotohundred.ai/api/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add zerotohundred-admin-marketplace --url 'https://zerotohundred.ai/api/mcp' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  zerotohundred-admin-marketplace:
    url: "https://zerotohundred.ai/api/mcp"
```

### Netclaw

```json
{
  "McpServers": {
    "zerotohundred-admin-marketplace": {
      "Transport": "http",
      "Url": "https://zerotohundred.ai/api/mcp"
    }
  }
}
```

### Vellum

```bash
assistant mcp add zerotohundred-admin-marketplace -t streamable-http -u 'https://zerotohundred.ai/api/mcp'
```

### Other

```json
{
  "mcpServers": {
    "zerotohundred-admin-marketplace": {
      "type": "http",
      "url": "https://zerotohundred.ai/api/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-10-18 (score 69, +1)

No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-17 (score 68, 0)

- [security] Tool “z2h_compare_marketplace_listings” rewrote its description, which is the text the model reads
- [security] Tool “z2h_request_source_upload” rewrote its description, which is the text the model reads
- [functional regression] Schema quality: 220 → 260
- [functional improvement] Stability: unverified → 0.03
- [functional] Schema quality: good → excellent
- [cosmetic] “z2h_compare_marketplace_listings” reworded the description of “slugs”
- [cosmetic] “z2h_create_draft_listing” reworded the description of “domains”
- [cosmetic] “z2h_create_draft_listing” reworded the description of “shortDescription”
- [cosmetic] “z2h_create_draft_listing” reworded the description of “sourceCodeIncluded”
- [cosmetic] “z2h_create_draft_listing” reworded the description of “title”
- [cosmetic] “z2h_get_listing” reworded the description of “slug”
- [cosmetic] “z2h_list_my_listings” reworded the description of “cursor”
- [cosmetic] “z2h_list_my_listings” reworded the description of “limit”
- [cosmetic] “z2h_search_marketplace” reworded the description of “domains”
- [cosmetic] “z2h_search_marketplace” reworded the description of “limit”
- [cosmetic] “z2h_search_marketplace” reworded the description of “mode”
- [cosmetic] “z2h_search_marketplace” reworded the description of “operatingStatus”
- [cosmetic] “z2h_search_marketplace” reworded the description of “search”
- [cosmetic] “z2h_search_marketplace” reworded the description of “type”
- [cosmetic] “z2h_show_marketplace” reworded the description of “search”
- [cosmetic] “z2h_update_draft_listing” reworded the description of “domains”
- [cosmetic] “z2h_update_draft_listing” reworded the description of “operatingStatus”
- [cosmetic] “z2h_update_draft_listing” reworded the description of “shortDescription”
- [cosmetic] “z2h_update_draft_listing” reworded the description of “sourceCodeIncluded”
- [cosmetic] “z2h_update_draft_listing” reworded the description of “title”
- [cosmetic] Tool “z2h_compare_marketplace_listings” changed its title: Compare Zero to Hundred software → Compare marketplace software
- [cosmetic] Tool “z2h_search_marketplace” changed its title: Search Zero to Hundred marketplace → Search marketplace software
- [cosmetic] Tool “z2h_show_marketplace” changed its title: Show Zero to Hundred marketplace → Show marketplace software

### 2026-10-16 (score 68)

First indexed and scored.

## MCP tools (9)

### `z2h_search_marketplace` (~375 tokens)

Search marketplace software

Find live software by keyword before building from scratch. Public, no sign-in needed. Returns descriptions, USD license prices, tech stacks and listing links. Example: {"search": "invoice", "limit": 5}. Empty search browses recent software. When hasMore is true without nextCursor, narrow the search. Matching is lexical. Errors set isError; retry a rate limit later. Use z2h_compare_marketplace_listings for a shortlist or z2h_show_marketplace for cards. A result does not guarantee suitability or purchase availability.

Input parameters:

- `cursor` (string): Opaque nextCursor from the previous page. Keep the same filters and sort.
- `domains` (array): Industry tags for the software. Choose keys from the Zero to Hundred taxonomy: ai, analytics, art-design, auth-identity, cms, conference, developer-tools, devops, e-commerce-marketplace, education, e…
- `limit` (integer): Number of listings to return in this page. Omission uses 20.
- `mode` (array): Filter by the listing's sale model. Omission leaves the sale model unfiltered.
- `operatingStatus` (array): Filter by software readiness or existing commercial operation, rather than listing publication state.
- `search` (string): Keywords describing the software the Buyer needs.
- `sort` (string): Result order. Defaults to relevance for a search, otherwise newest.
- `type` (array): Categories matching the kind of software the Buyer wants. Omission searches across categories.

Output parameters:

- `hasMore` (boolean): More matches exist. If nextCursor is null, narrow the search instead of paging.
- `nextCursor`: Cursor for the next page, or null if cursor paging is unavailable or finished.
- `results` (array): Live public software matching the filters.
- `searchMode` (string): Text uses keyword matching, not semantic similarity.

### `z2h_create_draft_listing` (~604 tokens)

Create a Zero to Hundred draft listing

Create an invisible draft and return editUrl and publishUrl. Price and source inclusion are Builder decisions. Set sourceCodeIncluded only after confirmation; omitted values default to false. Requires listings:write. Returns the draft identity and web edit/review links. Check z2h_list_my_listings before retrying, because creation is not idempotent. Source delivery, review and publishing continue in the web wizard.

Input parameters:

- `askingPrice` (number): USD license price confirmed by the Builder. Omit if undecided.
- `associatedListingIds` (array): IDs of related listings owned by this Builder, obtained from z2h_list_my_listings.
- `demoUrl` (string): Public HTTP or HTTPS demo URL. Omit when no demo is available.
- `documentationLevel` (string): Documentation supplied with the software.
- `domains` (array): Industry tags for the software. Choose keys from the Zero to Hundred taxonomy: ai, analytics, art-design, auth-identity, cms, conference, developer-tools, devops, e-commerce-marketplace, education, e…
- `externalDependencies` (array): Third-party services a Buyer must provision. Common values: Supabase, PostgreSQL, MySQL, MongoDB, Redis, Upstash, Firebase, PlanetScale, Neon, Clerk, Auth0, Stripe, PayPal, Plaid, Resend, SendGrid, P…
- `faqs` (array): Supplying FAQs disables the automatic FAQ draft.
- `imageUrls` (array): HTTP or HTTPS screenshot URLs. The first image becomes the thumbnail.
- `longDescription` (string, required): What the software does, who it helps, and what the Buyer receives.
- `maintenanceLevel` (string): Maintenance commitment the Builder offers.
- `operatingStatus` (string, required): State of the software itself, independent of the listing publication status.
- `shortDescription` (string, required): Buyer-facing summary shown on marketplace cards.
- `sourceCodeIncluded` (boolean): Whether the sale includes source code. Omission records false. Set true only after the Builder confirms that source code is included.
- `sourceRepoUrl` (string): GitHub repository URL. Connecting and verifying source continues in the web wizard.
- `techStack` (array): Frameworks and languages used by the software.
- `thumbnailUrl` (string): HTTP or HTTPS image URL for the marketplace thumbnail.
- `title` (string, required): Name Buyers will see on the software listing.
- `type` (string, required): Software category that best matches its main use.
- `videoUploadUrl` (string): A YouTube or Loom demo URL.

Output parameters:

- `createdAt` (string): ISO creation timestamp, returned when creating a draft.
- `editUrl` (string): Web wizard URL for editing this listing.
- `id` (string): Listing ID for related-listing references.
- `publishUrl` (string): Web review step where the Builder finishes publishing.
- `slug` (string): Listing identifier used by the other Builder tools.
- `status` (string): Listing publication state. Only drafts can be edited through MCP.
- `termsAcceptance` (object): Present when the Builder needs to accept terms before publishing.

### `z2h_list_my_listings` (~129 tokens)

List my Zero to Hundred listings

Find the authenticated Builder's drafts and live listings before creating another draft. Requires listings:read. Returns items with slugs, publication state, USD prices, edit links, and nextCursor. Pass nextCursor to continue paging; null ends the list. An invalid or expired token requires sign-in again.

Input parameters:

- `cursor` (string): Continue after the last listing in the preceding result. Use that response's nextCursor; omission starts at the newest listing.
- `limit` (integer): Number of owned listings to return per page. Omission uses 25, with newest listings first.

Output parameters:

- `items` (array): The authenticated Builder's listings, newest first.
- `nextCursor`: Opaque cursor for the next page, or null at the end.

### `z2h_get_listing` (~107 tokens)

Get my Zero to Hundred listing

Read one owned listing before editing it. Requires listings:read. Use a slug from z2h_list_my_listings. Returns descriptions, pricing, software attributes, source attachment state and web edit links. Missing listings and listings owned by someone else both return not found. This does not download source code.

Input parameters:

- `slug` (string, required): Identifies one of the authenticated Builder's listings. Copy slug from z2h_list_my_listings or z2h_create_draft_listing.

Output parameters:

- `askingPrice`: USD license price, or null when unset.
- `createdAt` (string): ISO creation timestamp.
- `createdVia` (string): Recorded creation channel.
- `demoUrl`: Public demo URL, or null.
- `documentationLevel`: Documentation supplied, or null when unset.
- `domains` (array): Industry domain taxonomy keys.
- `editUrl` (string): Web wizard URL for editing this listing.
- `externalDependencies` (array): Services the Buyer must provision. Legacy records may contain service names as strings.
- `id` (string): Listing ID for related-listing references.
- `imageUrls` (array): Listing screenshot URLs.
- `longDescription` (string): Full software description.
- `maintenanceLevel`: Builder maintenance commitment, or null when unset.
- `operatingStatus` (string): Operating state of the software, independent of listing publication.
- `publishUrl` (string): Web review step where the Builder finishes publishing.
- `shortDescription` (string): Marketplace card summary.
- `slug` (string): Listing identifier used by the other Builder tools.
- `sourceCodeIncluded` (boolean): Whether the Builder included source code.
- `sourceKind`: Source attachment method, or null before attachment.
- `sourceRepoUrl`: Source repository URL, or null.
- `status` (string): Listing publication state. Only drafts can be edited through MCP.
- `techStack` (array): Frameworks and languages used.
- `testEnvInstructions`: Legacy stored demo instructions, or null.
- `testEnvUrl`: Legacy stored demo URL, or null.
- `thumbnailUrl`: Marketplace thumbnail URL, or null.
- `title` (string): Software name.
- `type` (string): Software category.
- `updatedAt` (string): ISO last-update timestamp.

### `z2h_update_draft_listing` (~634 tokens)

Update my Zero to Hundred draft

Update an owned draft. Omitted fields stay unchanged; nullable fields accept null to clear them. Live listings cannot be edited through this tool. Requires listings:write. Returns the draft identity and web edit/review links. On conflict, read the listing again before retrying.

Input parameters:

- `askingPrice`: Builder-confirmed USD license price. Null clears it; omission keeps it.
- `associatedListingIds` (array): IDs of related listings owned by this Builder, obtained from z2h_list_my_listings.
- `demoUrl`: Public HTTP or HTTPS demo URL. Null clears it; omission keeps it.
- `documentationLevel` (string): Documentation supplied with the software.
- `domains` (array): Industry tags for the software. Choose keys from the Zero to Hundred taxonomy: ai, analytics, art-design, auth-identity, cms, conference, developer-tools, devops, e-commerce-marketplace, education, e…
- `externalDependencies` (array): Third-party services a Buyer must provision. Common values: Supabase, PostgreSQL, MySQL, MongoDB, Redis, Upstash, Firebase, PlanetScale, Neon, Clerk, Auth0, Stripe, PayPal, Plaid, Resend, SendGrid, P…
- `faqs` (array): Supplying FAQs disables the automatic FAQ draft.
- `imageUrls` (array): HTTP or HTTPS screenshot URLs. The first image becomes the thumbnail.
- `longDescription` (string): What the software does, who it helps, and what the Buyer receives.
- `maintenanceLevel` (string): Maintenance commitment the Builder offers.
- `mode` (string): Non-exclusive license listing mode. Omit to keep it unchanged.
- `operatingStatus` (string): Software readiness or commercial operating state, independent of listing publication. Omission keeps the current state.
- `shortDescription` (string): Replacement summary for marketplace cards. Omission keeps the current summary.
- `slug` (string, required): Listing slug returned by z2h_list_my_listings or z2h_create_draft_listing.
- `sourceCodeIncluded` (boolean): Whether the sale includes source code, as confirmed by the Builder. Omission keeps the current choice.
- `sourceRepoUrl`: GitHub repository URL. Null clears it; omission keeps it.
- `techStack` (array): Frameworks and languages used by the software.
- `thumbnailUrl`: HTTP or HTTPS thumbnail URL. Null clears it; omission keeps it.
- `title` (string): Replacement name Buyers will see on the software listing. Omission keeps the current name.
- `type` (string): Software category that best matches its main use.
- `videoUploadUrl`: YouTube or Loom demo URL. Null clears it; omission keeps it.

Output parameters:

- `createdAt` (string): ISO creation timestamp, returned when creating a draft.
- `editUrl` (string): Web wizard URL for editing this listing.
- `id` (string): Listing ID for related-listing references.
- `publishUrl` (string): Web review step where the Builder finishes publishing.
- `slug` (string): Listing identifier used by the other Builder tools.
- `status` (string): Listing publication state. Only drafts can be edited through MCP.
- `termsAcceptance` (object): Present when the Builder needs to accept terms before publishing.

### `z2h_request_source_upload` (~224 tokens)

Request a draft source archive upload

For an owned draft, get a short-lived signed archive URL. Ask the Builder to explicitly accept this exact statement: "I own or have the rights to sell the codebase I am about to upload." Pass ownershipAccepted=true and ownershipVersion=2026-09-27 only after they accept. Returns signedUrl for the archive PUT, objectKey for confirmation, and contentType for the upload header. Keep signedUrl private. PUT up to 100 MB to signedUrl, then call z2h_confirm_source_upload. This does not publish.

Input parameters:

- `contentType` (string, required): Archive MIME type, used unchanged for PUT and confirmation.
- `ownershipAccepted` (boolean, required): True only after the Builder explicitly accepts the statement in this tool description.
- `ownershipVersion` (string, required): Version of the ownership statement explicitly accepted by the Builder.
- `sizeBytes` (integer, required): Exact archive size in bytes. Must match the uploaded file.
- `slug` (string, required): Owned listing slug from z2h_list_my_listings or z2h_create_draft_listing.

Output parameters:

- `contentType` (string): Content-Type to use for the archive PUT and confirmation.
- `objectKey` (string): Storage key to pass unchanged to z2h_confirm_source_upload.
- `signedUrl` (string): Short-lived signed PUT URL. Keep it private and upload the archive before confirmation.

### `z2h_confirm_source_upload` (~211 tokens)

Confirm a draft source archive upload

After the signed PUT succeeds, verify and attach the archive to the owned draft. Confirm that the Builder accepted "I own or have the rights to sell the codebase I am about to upload."; pass ownershipAccepted=true and ownershipVersion=2026-09-27. The server records the accepted wording with the source change. Final review and publishing stay in the web wizard.

Input parameters:

- `contentType` (string, required): Archive MIME type, used unchanged for PUT and confirmation.
- `objectKey` (string, required): Storage key returned by z2h_request_source_upload. Pass it unchanged.
- `ownershipAccepted` (boolean, required): True only after the Builder explicitly accepts the statement in this tool description.
- `ownershipVersion` (string, required): Version of the ownership statement explicitly accepted by the Builder.
- `sizeBytes` (integer, required): Exact archive size in bytes. Must match the uploaded file.
- `slug` (string, required): Owned listing slug from z2h_list_my_listings or z2h_create_draft_listing.

Output parameters:

- `ok` (boolean): The archive was verified and attached, or this same archive was already attached. Publishing remains in the web wizard.

### `z2h_compare_marketplace_listings` (~91 tokens)

Compare marketplace software

Compare a shortlist of public software from marketplace search. Returns current public descriptions, USD license prices, types and tech stacks. Unavailable software is omitted without disclosing its status. This tool cannot purchase software or access private source.

Input parameters:

- `slugs` (array, required): Listing identifiers to compare, in the order the Buyer wants them presented. Copy each slug from z2h_search_marketplace.

Output parameters:

- `hasMore` (boolean): This response contains the complete refreshed selection.
- `nextCursor` (null): Selection refreshes do not paginate. Use marketplace search for paging.
- `results` (array): Current live software, in selection order when slugs were supplied.
- `unavailableSlugs` (array): Requested slugs unavailable publicly. Their private status is never disclosed.

### `z2h_show_marketplace` (~152 tokens)

Show marketplace software

Show public software cards and an interactive comparison panel. First search with z2h_search_marketplace, then pass the public slugs to display, and the search text you used as `search` so the panel shows what the cards are for. Without slugs, shows the newest live software. Prices and availability are refreshed on the server. Listing links open the Zero to Hundred website.

Input parameters:

- `search` (string): Text to prefill the panel's search box. Use the query that produced the supplied slugs. Cards are selected by slugs; this text does not filter them.
- `slugs` (array): Search-result slugs to show. Omit to display the newest live software.

Output parameters:

- `hasMore` (boolean): This response contains the complete refreshed selection.
- `nextCursor` (null): Selection refreshes do not paginate. Use marketplace search for paging.
- `results` (array): Current live software, in selection order when slugs were supplied.
- `unavailableSlugs` (array): Requested slugs unavailable publicly. Their private status is never disclosed.

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/zerotohundred-admin-marketplace/api-mcp#diagnostics

## Score history

- 2026-10-18: 69
- 2026-10-17: 68
- 2026-10-16: 68

## Common questions

### What is the Zero to Hundred marketplace MCP server?

Zero to Hundred marketplace is an MCP server listed in the public MCP registry as io.github.zerotohundred-admin/marketplace. Search live software, compare listings, and prepare owned drafts. Publishing stays on the website. This page covers its hosted endpoint (https://zerotohundred.ai/api/mcp).

### Is the Zero to Hundred marketplace MCP server safe to use?

Zero to Hundred marketplace scores 69 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the Zero to Hundred marketplace MCP server expose?

Zero to Hundred marketplace exposes 9 tools: z2h_search_marketplace, z2h_create_draft_listing, z2h_list_my_listings, z2h_get_listing, z2h_update_draft_listing, and 4 more. Their descriptions and schemas cost roughly 2,527 tokens of context every time the server is loaded.

### Does the Zero to Hundred marketplace MCP server require authentication?

No. We connected to Zero to Hundred marketplace without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

### Is the Zero to Hundred marketplace MCP server still maintained?

Zero to Hundred marketplace is still listed as active in the MCP registry. We last reached this channel on 18 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://zerotohundred.ai/api/mcp
- Website: https://zerotohundred.ai/
- Changelog RSS feed: https://verifymcp.io/servers/zerotohundred-admin-marketplace/api-mcp.xml
- Changelog JSON feed: https://verifymcp.io/servers/zerotohundred-admin-marketplace/api-mcp.json
- HTML version of this page: https://verifymcp.io/servers/zerotohundred-admin-marketplace/api-mcp
