Is io.github.kapoost/humanmcp-marketplace safe to use?

io.github.kapoost/humanmcp-marketplace has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.kapoost/humanmcp-marketplace?

io.github.kapoost/humanmcp-marketplace can be installed by cloning its GitHub repository and following the setup instructions in the README.

What can io.github.kapoost/humanmcp-marketplace do?

io.github.kapoost/humanmcp-marketplace provides 3 tools: search_marketplace, list_servers, get_server. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.kapoost/humanmcp-marketplace?

io.github.kapoost/humanmcp-marketplace is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.

Is io.github.kapoost/humanmcp-marketplace actively maintained?

io.github.kapoost/humanmcp-marketplace is actively maintained — last commit was 24 days ago.

io.github.kapoost/humanmcp-marketplace

Federated listings from personal humanMCP servers. Search offers, trades by humans.

3 tools GitHub

No known CVEs

No license

Actively maintained

Last commit 24d ago

Works with most clients

Transport:

3 tools

Grade F

Edit this pageView history

E-Commerce

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-kapoost-humanmcp-marketplace": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-kapoost-humanmcp-marketplace)](https://mcppedia.org/s/io-github-kapoost-humanmcp-marketplace)

Read me

What io.github.kapoost/humanmcp-marketplace does

A federated listings board across personal humanMCP servers. No accounts. No algorithms. Just humans and their offers.

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

28/100across 5 weighted dimensions

How we score →

0255075100

−72

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Inventory

Tools (3)

Click any tool to inspect its schema.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.kapoost/humanmcp-marketplace safe to use?: io.github.kapoost/humanmcp-marketplace has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.kapoost/humanmcp-marketplace?: io.github.kapoost/humanmcp-marketplace can be installed by cloning its GitHub repository and following the setup instructions in the README.
What can io.github.kapoost/humanmcp-marketplace do?: io.github.kapoost/humanmcp-marketplace provides 3 tools: search_marketplace, list_servers, get_server. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.kapoost/humanmcp-marketplace?: io.github.kapoost/humanmcp-marketplace is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is io.github.kapoost/humanmcp-marketplace actively maintained?: io.github.kapoost/humanmcp-marketplace is actively maintained — last commit was 24 days ago.

Similar servers

Others in ecommerce

View all →

Cob Shopify Mcp90

Production-grade MCP server and CLI tool for Shopify Admin GraphQL API — 49+ tools, YAML-extensible, dual auth, dual transport, Docker-ready

11 6

Commerce Mcp89

A command line tool for setting up commercetools MCP server

2 12

io.github.sailorpepe/undesirables-mcp-server89

35+ AI tools for TCG card grading, Monte Carlo pricing, 370K+ product search. BYOK.

Mcp Reference Server88

This is the reference implementation for the mcp server

32 12

MCP Security Weekly

Get CVE alerts and security updates for io.github.kapoost/humanmcp-marketplace and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

E-Commerce

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-kapoost-humanmcp-marketplace": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-kapoost-humanmcp-marketplace)](https://mcppedia.org/s/io-github-kapoost-humanmcp-marketplace)

Read me

What io.github.kapoost/humanmcp-marketplace does

A federated listings board across personal humanMCP servers. No accounts. No algorithms. Just humans and their offers.

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

README

humanMCP Marketplace

A federated listings board across personal humanMCP servers. No accounts. No algorithms. Just humans and their offers.

Live: https://marketplace.humanmcp.net MCP endpoint: POST https://marketplace.humanmcp.net/mcp

What it does

Every human can run their own humanMCP server — publishing listings, offers, and trades. The marketplace crawls these servers and builds a single searchable index of listings.

Think of it as a town square where every stall is independently owned. The marketplace doesn't host content — it indexes and links back to the origin.

Connect an agent

{
  "mcpServers": {
    "humanmcp-marketplace": {
      "type": "http",
      "url": "https://marketplace.humanmcp.net/mcp"
    }
  }
}

MCP Tools

Tool	Description
`search_marketplace`	Search listings across all servers — offers, trades, services
`list_servers`	All registered humanMCP instances
`get_server`	Server detail

REST API

GET  /servers              → list all registered servers
GET  /servers/{domain}     → server detail
GET  /search?q={query}     → full-text search across all listings
GET  /search?q=bread&type=trade → filter by listing type
GET  /feed                 → recent listings feed (JSON)
POST /register             → register a humanMCP instance
POST /mcp                  → MCP JSON-RPC 2.0 endpoint

Agent discovery

GET  /.well-known/agent.json  → agent profile card
GET  /openapi.json            → OpenAPI 3.1 spec
GET  /healthz                 → status + server/listing counts

Web UI

GET  /                  → homepage — listings + servers
GET  /q?q={query}       → search results
GET  /s/{domain}        → server page

Keyboard shortcuts: / search, j/k navigate, Enter open, d theme, ? help.

Register your server

Any humanMCP instance can join. No account needed — just your domain:

curl -X POST https://marketplace.humanmcp.net/register \
  -H "Content-Type: application/json" \
  -d '{"domain": "yourname-humanmcp.fly.dev"}'

The marketplace will:

Verify it's a real humanMCP (fetches /.well-known/agent.json)
Index all listings from /listings/feed.json
Add to crawl schedule (every 6 hours)

Requirements: your server must expose /.well-known/agent.json and /listings/feed.json.

How crawling works

Your humanMCP server
    ↓
Marketplace fetches /.well-known/agent.json (identity)
    ↓
Fetches /api/profile (author name, bio, tags)
    ↓
Fetches /listings/feed.json (listings)
    ↓
Indexes in SQLite + FTS5
    ↓
Searchable within minutes, re-crawled every 6 hours

Listings stay on your server. Marketplace keeps a search index only.

Configuration

Source	Name	Default	Description
env	`PORT`	`8080`	Listen port
env	`DB_PATH`	`./marketplace.db`	SQLite database path
env	`SEED_SERVER`	—	Domain to crawl on startup
flag	`--addr`	`:8080`	Listen address
flag	`--db`	`./marketplace.db`	Database path
flag	`--seed`	—	Seed server domain
flag	`--crawl-interval`	`6h`	Re-crawl interval

Stack

Go (stdlib + modernc.org/sqlite)
SQLite + FTS5 for full-text search
Fly.io single machine, 256MB
No JS framework — server-rendered HTML with keyboard navigation

Run locally

go build -o marketplace ./cmd/server/
./marketplace --seed kapoost.humanmcp.net
# open http://localhost:8080

Deploy

fly apps create humanmcp-marketplace
fly volumes create marketplace_data --size 1 --region ams
fly deploy

Key principles

Listings only — marketplace indexes offers, trades, services
No content hosting — index + link back, always
Attribution

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

28/100across 5 weighted dimensions

How we score →

0255075100

−72

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Inventory

Tools (3)

Click any tool to inspect its schema.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.kapoost/humanmcp-marketplace safe to use?: io.github.kapoost/humanmcp-marketplace has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.kapoost/humanmcp-marketplace?: io.github.kapoost/humanmcp-marketplace can be installed by cloning its GitHub repository and following the setup instructions in the README.
What can io.github.kapoost/humanmcp-marketplace do?: io.github.kapoost/humanmcp-marketplace provides 3 tools: search_marketplace, list_servers, get_server. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.kapoost/humanmcp-marketplace?: io.github.kapoost/humanmcp-marketplace is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is io.github.kapoost/humanmcp-marketplace actively maintained?: io.github.kapoost/humanmcp-marketplace is actively maintained — last commit was 24 days ago.