trackmcp
Back to directory
andysalvo

supership-scan

View on GitHub

Retired. Predeploy security scanner for agent services, 74 rule checks across auth, config, injection, logging, secrets and Supabase. The hosted API no longer runs; kept public for reference.

0 stars JavaScriptOthers Updated Aug 29, 2026

Documentation

supership

The search engine and clearing house for the agent economy. Built by Crest Deployment Systems.

supership indexes the entire x402 economy -- 52,000 services -- so an AI agent can find the right data and fetch it with a receipt. Reading the menu is free. Fetching through supership returns the goods plus a signed delivery receipt: proof of what you got, from where, settled on-chain. That is the part going direct can never give you.

Install

bash
npm install -g supership-scan

> Published on npm as `supership-scan` (the original name; kept for install continuity).

Requires Node.js 18+.

MCP server

bash
npx -y -p supership-scan supership-mcp

Or wire it into any MCP client (Claude Code, Cursor, Windsurf):

json
{
  "mcpServers": {
    "supership": {
      "command": "npx",
      "args": ["-y", "-p", "supership-scan", "supership-mcp"]
    }
  }
}

Tools

ToolWhat it does
`manifest`Search the whole x402 economy (52,000 services) for what you need. Ranked by distinct payers -- real adoption, not call counts. Free.
`procure`Fetch any source. supership fronts payment across any chain, delivers the goods, and returns a signed receipt. No wallet needed on the seller's chain. First runs free.
`list_catalog`Browse a curated catalog of procurable sources.
`scan_directory`Scan a local directory for security issues before you ship.

Free menu, paid kitchen

  • The menu is free. `manifest` shows the real market: every relevant source, free or paid, ranked by who actually paid for it. That ranking is the part you cannot compute yourself -- it takes the whole index and the payment history.
  • The kitchen is the product. When you `procure`, supership crosses to the source (on whatever chain it lives), pays, takes delivery, and hands you the goods plus a signed delivery receipt -- an Ed25519 record of what was delivered (source, SHA-256 of the goods, settlement tx, timestamp), verifiable at `/api/pubkey`. That receipt is the provenance going direct cannot give you.

HTTP API

EndpointPriceDescription
`/manifest?need=`FreeSearch the economy; ranked by real payers
`/catalog`FreeCurated procurable sources
`/sample?url=`FreeFetch one source on the house -- with a signed receipt
`/procure?url=`per-callFetch any source; goods + signed receipt

API base: `https://supership.crestsystems.ai`

Discovery: agent.json | llms.txt | OpenAPI

What supership does not do

  • It does not sell the data. It indexes the market and delivers what you ask for, with a receipt.
  • It does not hold your funds. The MCP server holds no keys and moves no money locally.
  • It does not give investment advice.

License

Apache 2.0.

Frequently asked questions

What is supership-scan?

supership-scan is Retired. Predeploy security scanner for agent services, 74 rule checks across auth, config, injection, logging, secrets and Supabase. The hosted API no longer runs; kept public for reference.

How do I install supership-scan?

Open the GitHub repository and follow its README. Most MCP servers are added to your client's MCP config, then called by your agent.

Is supership-scan open source?

Yes — it is hosted on GitHub at https://github.com/andysalvo/supership-scan.

Related MCP tools

Run your own MCP server? See who uses it and what to fix.

Measure it with TrackMCP