MarketNow

What MarketNow MCP server does

MarketNow provides agent trust and MCP skill assessment through a hosted service at https://marketnow.site/api/mcp. Its API exposes nine tools under the marketnow_ namespace, using structured JSON-Schema inputs and { content, isError } responses.

Credential operations cover eight formats: ATC v3, JWT, W3C Verifiable Credentials, A2A, EAT-AI, ZTA, MCP Card, and X.509. The service can verify credentials through a 12-stage UTA pipeline, translate credentials through the Universal Trust Schema, list supported formats, and return pipeline details.

For MCP and domain security, MarketNow can score a domain and provide reasons, check Agent Trust Card or CA-key revocation against its signed revocation registry and live ledger, and create cryptographic fingerprints for MCP tool definitions using RFC 8785 JSON Canonicalization Scheme and SHA-256. Registry search covers indexed MCP servers from GitHub, npm, and PyPI. Skill submissions are validated and Sentinel-scanned for injection patterns, embedded secrets, and dangerous capabilities.

How it works

The hosted endpoint uses Streamable HTTP, so an MCP client can connect without running a local process. A local installation is also available through the marketnow-mcp npm package, and the repository provides a Docker image. Tool names are deterministic snake_case identifiers prefixed with marketnow_, which helps clients distinguish them from tools exposed by other servers.

The registry applies two security levels. L1 index certification checks metadata and security properties before an entry is indexed. L2 Sentinel scanning examines shipped npm tarballs; entries that fail scanning are quarantined and included in a transparency report.

The service also exposes public ATC endpoints for retrieving the Ed25519 CA key, reading the ATC specification, and verifying a card by ID.

Setup and configuration

For a hosted connection, add the following MCP server definition to a compatible client:

{
  "mcpServers": {
    "marketnow": {
      "url": "https://marketnow.site/api/mcp"
    }
  }
}

To run the npm server locally, use:

npx -y marketnow-mcp

Docker users can run the published image with an interactive standard-input connection:

docker run -i --rm ghcr.io/alicelabs-llc/marketnow-mcp

Cursor offers a one-click installation link, and the repository includes configuration guidance for Cursor and Cline. The repository also contains a Docker MCP Toolkit registration example.

Tools and capabilities

• marketnow_verify_trust: verifies supported agent credentials through the UTA pipeline.
• marketnow_translate_credential: converts credentials between the eight supported formats.
• marketnow_list_formats: returns supported formats, algorithms, and status information.
• marketnow_get_pipeline: describes the 12 verification stages.
• marketnow_check_domain: returns a domain risk score and supporting reasons.
• marketnow_search_skills: searches the indexed MCP server registry with security-oriented scoring.
• marketnow_check_revocation: checks ATC or CA-key revocation.
• marketnow_fingerprint_tool: produces a canonical SHA-256 fingerprint for MCP tool definitions.
• marketnow_submit_skill: validates and Sentinel-scans a skill before publishing it to the catalog.

Limitations and notes

The server is proprietary software owned by AliceLabs LLC. Registry data and the hosted endpoint are separate from the product repository's codebase, and the project identifies a separate marketplace repository as the owner of catalog data and site content. Credential translation is described as lossless within the Universal Trust Schema, but the supported formats remain limited to the eight listed formats.

The security model distinguishes metadata/index checks from Sentinel scans of available npm tarballs. Those checks represent different coverage levels rather than one uniform scan applied to every indexed entry.