Skip to content
ProtocolProbe
Explore

MCP servers › ai.ciphyr.agentmart › agentmart

MCP server · registry snapshot 2026-10-23 · last tested 2026-10-23

ai.ciphyr.agentmart/agentmart

Webhook inbox, memory, wake-up calls, uptime watch and code kits for AI agents. Prepaid balance. — the publisher's description

5 of 5 record checks metRead-only · tools listed 2026-10-23Topic: ai-and-ml · AI-classifiedversion 1.3.0streamable HTTP112 tools

Summary

ai.ciphyr.agentmart/agentmart is a remote MCP server listed in the official MCP registry at version 1.3.0. On 2026-10-23 ProtocolProbe connected to it in read-only mode and read its inventory: 112 tools, 1 resource and 0 prompts.

Record checks

5 of 5 record checks met · 4 do not apply

  • met: Registry entry is active and says how to run it
  • met: Source repository link opens
  • met: Repository is not archived
  • met: Code pushed to the repository in the 90 days before our check
  • met: Repository publishes a security policy (SECURITY.md)
  • not applicable: Package names its licence with a standard (SPDX) identifier
  • not applicable: The version the registry lists can be installed and is not withdrawn
  • not applicable: npm package carries build provenance (attestation)
  • not applicable: No known critical or high advisory in the package or its dependencies
  • Not ranked by downloads: a remote server publishes no download figure
  • Not ranked by stars: 0 stars (ranked from 10)

From public records, not a safety rating. Each check with its reason · Is it safe to install?

Key facts

Runs
remote (hosted by the publisher)
Transport
streamable HTTP
Sign-in
none needed to open a session
Repository
public
Tools
112
Described as changing data
70 of 112 toolsAI-classified
Mainly works on
money, payments or trading; files and code on the machine it runs on; accounts and data in outside web servicesAI-classified
Topic
ai-and-mlAI-classified
Last tested
2026-10-23

Add to your client

Observed fact

This server accepted a session without any credential and lists 48 tools whose name or declaration suggests they change data (create_passport, remove_passport, leave_owner, rotate_token, revoke_passport and 43 more). That is our reading of the names; we did not call them. Source: our connection, 2026-10-23.

Worth knowing before you connect it

  • 70 tools are described as changing something (create_passport, invite_agent, join_owner, …): our AI model's reading of the descriptions, not something we tested, and the server opened a session without any credential. We did not call them.

Each line comes from a section below, with its source and date.

How fresh this is

Live-tested
yes, a real session (not a text-only review)
Last tested
2026-10-23
Mode
read-only (no tool calls)
Latest version
1.3.0, published 2026-10-18 (registry, as of the 2026-10-23 snapshot)
First listed version
2026-10-04 (earliest version still in the registry; older removed versions would be earlier)
Version history
4 versions listed, 2026-10-04 to 2026-10-18; 4 in the 90 days before the 2026-10-23 snapshot.
Most recent 4 versions
  • 1.3.0 · 2026-10-18
  • 1.2.0 · 2026-10-14
  • 1.1.3 · 2026-10-14
  • 1.0.0 · 2026-10-04
(versions still listed in the registry only)
Registry data
snapshot 2026-10-23
Package and repository
checked 2026-10-22
Engine
mcp-runtime-engine@0.1.0 · sdk@1.32.0

Changes since the last refresh

New in the registry: not in the list of 2026-10-04, listed on 2026-10-23 with version 1.3.0 (published 2026-10-18).

Source: the official MCP Registry list on 2026-10-04 and on 2026-10-23.

What it is

What does this server offer?

Observed inventory
112tools
1resources
0prompts

What it mainly works on, as our AI model read its tool descriptions: money, payments or trading; files and code on the machine it runs on; accounts and data in outside web services.

70 of 112 tools are described as changing something (creating, editing, deleting, sending or running). For 1 the reading was uncertain, so no mark is shown.

  • create_passportcreates or changes datadescribed as changing data

    “Only for MCP apps that cannot sign in to AgentMart: create your passport (your identity here).”

    Publisher declares: read-only no · destructive no · idempotent no · open-world no

    2 inputs
    • nicknamestring“A name for this agent, shown to your owner's other agents.”
    • passport_tokenstring“Not needed on this public tool; accepted and ignored.”
  • whoamion 178 other serversreads or searches

    “Your passport, how strong this sign-in is (credential), balance (owner.balance_expires_at: when it expires without a top-up or purchase; tell your human in time), spend limit, notices, pending review…”

    Publisher declares: read-only yes · destructive no · open-world no

    1 input
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • invite_agenton 2 other serverscreates or changes datadescribed as changing data

    “Make a single-use invite code (valid 15 minutes) so ANOTHER agent of your own human can share your owner's balance and utilities: it calls join_owner with the code.”

    Publisher declares: read-only no · destructive no · idempotent no · open-world no

    1 input
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • join_ownercreates or changes datadescribed as changing data

    “Join your human's owner with an invite code from one of their other agents (invite_agent).”

    Publisher declares: read-only no · destructive no · idempotent no · open-world no

    2 inputs, 1 required
    • codestringrequired“The invite code your own human's other agent made with invite_agent.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • list_passportson 1 other serverreads or searches

    “The passports (agents) that share your owner: short id, nickname, created, last used, revoked.”

    Publisher declares: read-only yes · destructive no · open-world no

    1 input
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • remove_passportdeletesdescribed as changing data

    “Unlink an agent that joined your owner's account AFTER you (list_passports shows removable), for example a stranger who joined with a leaked invite code.”

    Publisher declares: read-only no · destructive yes · idempotent no · open-world no

    2 inputs, 1 required
    • passportstringrequired“id_prefix from list_passports”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • confirm_owner_emailsends messagesdescribed as changing data

    “Send your owner the one-time confirmation email now ("Allow your AI agent to email you?"): until they press Confirm in it, emails from your utilities (Ask my human, alerts, reminders, approvals) do n…”

    Publisher declares: read-only no · destructive no · idempotent yes · open-world yes

    1 input
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • leave_ownerdeletesdescribed as changing data

    “Detach your passport from its owner, for example when whoami shows that a stranger paid your top-up.”

    Publisher declares: read-only no · destructive yes · idempotent no · open-world no

    2 inputs
    • confirmboolean“true: leave even as the last agent of an owner with money left.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • rotate_tokenon 4 other serverscreates or changes datadescribed as changing data

    “Replace your passport bearer token (for example after it leaked).”

    Publisher declares: read-only no · destructive yes · idempotent no · open-world no

    1 input
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • revoke_passportdeletesdescribed as changing data

    “End your passport for good: its token, sessions and app sign-ins stop working at once and cannot be restored.”

    Publisher declares: read-only no · destructive yes · idempotent yes · open-world no

    1 input
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • search_catalogon 88 other serversreads or searches

    “Search the shelves.”

    Publisher declares: read-only yes · destructive no · open-world no

    5 inputs
    • querystring“What you need, in a few words.”
    • qstring“The same as query (the REST name); query wins when both are given.”
    • shelfstring“utility: always-on services; kit: tested code to download; human: work by AgentMart's own team.”
    • max_price_centsinteger“Only items whose smallest order costs at most this, in US cents (price_cents).”
    • passport_tokenstring“Not needed on this public tool; accepted and ignored.”
  • get_itemon 37 other serversreads or searches

    “Full details of one item by slug.”

    Publisher declares: read-only yes · destructive no · open-world no

    2 inputs, 1 required
    • slugstringrequired“Item slug from search_catalog.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
Show 88 more tools
  • top_upon 7 other serversmoves moneydescribed as changing data

    “Create a payment link to fund your balance.”

    Publisher declares: read-only no · destructive no · idempotent no · open-world yes

    3 inputs, 1 required
    • amount_centsnumberrequired“500, 1000, 2000, 5000 or 10000 US cents.”
    • for_agent_walletboolean“true only when your own agent wallet pays (machine payment): the answer then also holds url.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • top_up_statusreads or searches

    “Check whether a top-up was paid.”

    Publisher declares: read-only yes · destructive no · open-world no

    2 inputs, 1 required
    • topup_idstringrequired“topup_id from top_up.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • buyon 15 other serversmoves moneydescribed as changing data

    “Buy an item from your balance.”

    Publisher declares: read-only no · destructive yes · idempotent no · open-world no

    8 inputs, 1 required
    • itemstringrequired“Item slug from search_catalog”
    • idempotency_keystring“Reuse to retry safely without paying twice”
    • instance_idstring“To renew: the utility instance id you own.”
    • max_price_centsinteger“The most this order may cost, in US cents: a higher price (as we count it) is refused and nothing is taken.”
    • inbox_instance_idstring“One of your owner's webhook inboxes: what happens to this order (approved, declined, expired) and its job is written there.”
    • briefobject“Human services only: what our team needs, in the service's schema (get_item shows details.brief_schema).”
    • secretstring“Human services only: a test login or access key.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • get_orderon 56 other serversreads or searches

    “One of your orders, with its receipt.”

    Publisher declares: read-only yes · destructive no · open-world no

    2 inputs, 1 required
    • order_idstringrequired“Order id from buy (order_id).”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • list_orderson 35 other serversreads or searches

    “Your owner's orders, newest first, a page at a time: order_id, item, amount, status and created_at (get_order for one in full).”

    Publisher declares: read-only yes · destructive no · open-world no

    3 inputs
    • limitinteger“How many (default 20).”
    • beforestring“next_before of the page before.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • list_jobson 44 other serversreads or searches

    “Your owner's human service jobs (done by AgentMart's own team), newest first: status, due time, price and credits.”

    Publisher declares: read-only yes · destructive no · open-world no

    2 inputs
    • statusstring“Only jobs in this status.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • get_jobon 138 other serversreads or searches

    “One human service job in full: status (needs_verification, queued, assigned, in_progress, needs_info, delivered, accepted, disputed, refunded), due_at in our team's working hours, verification (websi…”

    Publisher declares: read-only yes · destructive no · open-world no

    3 inputs, 1 required
    • job_idstringrequired“Job id (job_...) from buy (delivery.job_id) or list_jobs.”
    • briefboolean“false: leave the brief out of the answer (default true).”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • answer_job_questionon 1 other servercreates or changes datadescribed as changing data

    “Answer our team's open question on a job (status needs_info); the clock starts again.”

    Publisher declares: read-only no · destructive no · idempotent no · open-world no

    5 inputs, 2 required
    • job_idstringrequired“Job id (job_...) from buy (delivery.job_id) or list_jobs.”
    • question_idstring“question.question_id from get_job.”
    • answerstringrequired“Your answer, plain text.”
    • secretstring“Write-only: a test login or key the team asked for.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • verify_job_sitescreates or changes datadescribed as changing data

    “A website test starts only when each of its sites is proved yours: publish the job's verification.token (get_job) for every site as a file at https://<site>/.well-known/agentmart-verify.txt, a DNS TX…”

    Publisher declares: read-only no · destructive no · idempotent yes · open-world yes

    2 inputs, 1 required
    • job_idstringrequired“Job id (job_...) from buy (delivery.job_id) or list_jobs.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • quote_human_servicereads or searches

    “What a human service order would cost, free: our count ("70 words, English to Turkish", "40 lines of code"), price_cents, the promise, daily_limit (whether it fits what is left of your owner's limit …”

    Publisher declares: read-only yes · destructive no · open-world no

    8 inputs, 1 required
    • itemstringrequired“A human service slug (search_catalog with shelf human).”
    • briefobject“The whole brief, exactly as you will order it.”
    • textstring“Per-word services: exactly the text you will order.”
    • item_countinteger“Labels: how many items.”
    • source_languagestring
    • target_languagestring
    • languagestring
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • cancel_jobon 21 other serversdeletesdescribed as changing data

    “Cancel a website test still waiting for its sites' proof (status needs_verification): the whole price comes back to your owner's balance as store credit at once, the job closes (closed_reason cancell…”

    Publisher declares: read-only no · destructive yes · idempotent yes · open-world no

    2 inputs, 1 required
    • job_idstringrequired“Job id (job_...) from buy (delivery.job_id) or list_jobs.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • accept_jobcreates or changes datadescribed as changing data

    “Accept a delivered job: it closes, no dispute is possible after it, and its secret is deleted.”

    Publisher declares: read-only no · destructive yes · idempotent yes · open-world no

    2 inputs, 1 required
    • job_idstringrequired“Job id (job_...) from buy (delivery.job_id) or list_jobs.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • dispute_jobcreates or changes datadescribed as changing data

    “Dispute items of a delivered job (ids from disputable_items: bugs, findings, rows, translation lines l1, l2 ...) or, without item_ids, the whole result, within 7 days of delivery.”

    Publisher declares: read-only no · destructive no · idempotent no · open-world no

    4 inputs, 2 required
    • job_idstringrequired“Job id (job_...) from buy (delivery.job_id) or list_jobs.”
    • item_idsarray“Items you dispute; leave out to dispute the whole result.”
    • reasonstringrequired“What is wrong, for our staff (plain text).”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • check_emailson 1 other serverdescribed as changing data

    “Check up to 1000 of your owner's own email addresses before sending ($1 for up to 100 addresses, $4 for up to 1,000, counted by different entries; a list where no address needs the mail server costs …”

    Publisher declares: read-only no · destructive yes · idempotent no · open-world yes

    7 inputs, 1 required
    • emailsarrayrequired“Your owner's own contacts, plain addresses.”
    • consentstring“Required: "own_opt_in_contacts", your statement, only when it is true.”
    • idempotency_keystring“Reuse with the same list to retry safely without paying twice.”
    • labelstring“Your own short name for the list (a plain name, up to 60 characters), shown to your owner in the approval email.”
    • inbox_instance_idstring“One of your owner's webhook inboxes: the completion event (counts only) is written there.”
    • max_price_centsinteger“The most this may cost, in US cents.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • get_email_checkreads or searches

    “One email check: status (checking, completed, expired, pending_approval, cancelled), counts, credited_cents, credits (each store credit with its kind and why) and, once completed, every address as {e…”

    Publisher declares: read-only yes · destructive no · open-world no

    3 inputs, 1 required
    • check_idstringrequired“Check id (ec_...) from check_emails or list_email_checks.”
    • resultsboolean“false: leave the results out (default true).”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • list_email_checksreads or searches

    “Your owner's email checks, newest first: check_id, status, counts and credited_cents (get_email_check for the results).”

    Publisher declares: read-only yes · destructive no · open-world no

    2 inputs
    • limitinteger“How many (default 20).”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • new_download_linkcreates or changes datadescribed as changing data

    “Issue a fresh single-use download link for a kit you bought.”

    Publisher declares: read-only no · destructive no · idempotent no · open-world no

    2 inputs, 1 required
    • order_idstringrequired“Order id from buy (order_id).”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • list_utilitieson 1 other serverreads or searches

    “Your utilities (inbox, locker, wake-up calls, share links, form inboxes, ask-my-human plans, uptime watches, blueprints, heartbeat monitors, owner reminders, inbox pro plans, queues, unsubscribe list…”

    Publisher declares: read-only yes · destructive no · open-world no

    2 inputs
    • kindstring“Only utilities of this kind.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • get_utilityreads or searches

    “One utility with its endpoints and usage.”

    Publisher declares: read-only yes · destructive no · open-world no

    2 inputs, 1 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • inbox_messagesreads or searches

    “Read messages that arrived at your webhook inbox, oldest first.”

    Publisher declares: read-only yes · destructive no · open-world no

    5 inputs, 1 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • afterinteger or string“next_after of your previous call, as it came: only messages after it.”
    • limitinteger“Messages per call, 1 to 100 (default 20).”
    • unreadboolean“true: only messages not acknowledged (marked read) yet.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • inbox_ackon 1 other servercreates or changes datadescribed as changing data

    “Mark one message of your webhook inbox read (acknowledged): inbox_messages with unread: true then leaves it out.”

    Publisher declares: read-only no · destructive no · idempotent yes · open-world no

    3 inputs, 2 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • message_idinteger or stringrequired“The message's id from inbox_messages.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • inbox_deleteon 1 other serverdeletesdescribed as changing data

    “Delete one message of your webhook inbox for good.”

    Publisher declares: read-only no · destructive yes · idempotent yes · open-world no

    3 inputs, 2 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • message_idinteger or stringrequired“The message's id from inbox_messages.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • locker_puton 1 other servercreates or changes datadescribed as changing data

    “Store a value in your memory locker under a key (survives between sessions).”

    Publisher declares: read-only no · destructive yes · idempotent yes · open-world no

    8 inputs, 2 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • keystringrequired“Key, 1 to 200 characters from A-Z a-z 0-9 .”
    • valuestring“The value as text (UTF-8).”
    • value_base64string“The value as bytes, in standard base64 with = padding.”
    • content_typestring“Stored and returned on read.”
    • if_matchstring“Store only if the current value has this etag (from locker_get or locker_put); "*": only if the key exists.”
    • if_none_matchstring“"*": store only if the key does not exist yet (create only), else 412 precondition_failed.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • locker_geton 1 other serverreads or searches

    “Read a value from your memory locker, with its etag (pass it as if_match to locker_put to replace exactly this value).”

    Publisher declares: read-only yes · destructive no · open-world no

    3 inputs, 2 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • keystringrequired“Key, 1 to 200 characters from A-Z a-z 0-9 .”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • locker_listreads or searches

    “List keys in your memory locker (sorted, up to limit per call).”

    Publisher declares: read-only yes · destructive no · open-world no

    5 inputs, 1 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • prefixstring“Only keys starting with this, e.g.”
    • afterstring“next_after of your previous call: only keys after it.”
    • limitinteger“Keys per call, 1 to 1000 (default 200).”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • locker_deletedeletesdescribed as changing data

    “Delete a key from your memory locker.”

    Publisher declares: read-only no · destructive yes · idempotent yes · open-world no

    3 inputs, 2 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • keystringrequired“Key, 1 to 200 characters from A-Z a-z 0-9 .”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • wakeup_schedulecreates or changes datadescribed as changing data

    “Schedule a wake-up call: at the given time we deliver your payload to your inbox or to an https url.”

    Publisher declares: read-only no · destructive no · idempotent no · open-world yes

    5 inputs, 3 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • atstringrequired“ISO 8601 time, e.g.”
    • targetobjectrequired“Where we deliver: your inbox, or an https URL.”
    • payloadobject“Any JSON object, up to 8 KB, delivered as it is.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • wakeup_listreads or searches

    “List your wake-up calls with their status: scheduled, retrying (a try failed and the next one is coming), firing, fired, failed or canceled.”

    Publisher declares: read-only yes · destructive no · open-world no

    2 inputs, 1 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • wakeup_canceldescribed as changing data

    “Cancel a wake-up call that has not fired yet (scheduled or retrying).”

    Publisher declares: read-only no · destructive yes · idempotent yes · open-world no

    3 inputs, 2 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • wakeup_idstringrequired“wakeup_id from wakeup_schedule or wakeup_list.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • ask_humanon 7 other serverssends messagesdescribed as changing data

    “Ask your human owner a question by email (needs an ask-my-human utility from buy).”

    Publisher declares: read-only no · destructive no · idempotent no · open-world yes

    8 inputs, 2 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • questionstringrequired“Up to 500 characters of plain words.”
    • optionsarray“2 to 6 distinct labels, up to 60 characters each.”
    • free_textboolean“true: your owner writes the answer.”
    • expires_in_hoursinteger“1 to 168, default 72.”
    • inbox_instance_idstring“One of your webhook inboxes: the answer is also delivered there.”
    • idempotency_keystring“Your own id for this question: a retry with the same key returns the same ask.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • get_askon 2 other serversreads or searches

    “Check a question you asked your owner: status pending, answered, expired or withdrawn.”

    Publisher declares: read-only yes · destructive no · open-world no

    3 inputs, 2 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • ask_idstringrequired“ask_id from ask_human.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • withdraw_askdescribed as changing data

    “Withdraw a question to your owner that is still waiting for an answer, because you no longer need it.”

    Publisher declares: read-only no · destructive yes · idempotent yes · open-world no

    3 inputs, 2 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • ask_idstringrequired“ask_id from ask_human.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • delete_askdeletesdescribed as changing data

    “Delete an answered or expired question to your owner, with its answer, for good.”

    Publisher declares: read-only no · destructive yes · idempotent yes · open-world no

    4 inputs, 2 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • ask_idstringrequired“ask_id from ask_human.”
    • older_tooboolean“true: also delete every older answered or expired ask.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • delete_utility_datadeletesdescribed as changing data

    “Delete everything one of your utilities stores, at once and for good (messages, locker items, shared content, wake-ups, form entries, questions and answers, watched URLs, blueprint stages, an unsubsc…”

    Publisher declares: read-only no · destructive yes · idempotent yes · open-world no

    2 inputs, 1 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • uptime_adddescribed as changing data

    “Watch an https URL of your live app with your uptime-watch (up to 3 URLs).”

    Publisher declares: read-only no · destructive no · idempotent no · open-world yes

    4 inputs, 2 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • urlstringrequired“Public https URL, at most 2048 characters, e.g.”
    • inbox_instance_idstring“One of your webhook inboxes, to be woken there when the URL goes down or comes back.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • uptime_statusreads or searches

    “Your watched URLs: status (unknown, up, down), the last results, uptime percent over 24 hours and 7 days, and incidents with what we told your inbox and your owner.”

    Publisher declares: read-only yes · destructive no · open-world no

    2 inputs, 1 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • uptime_removedeletesdescribed as changing data

    “Stop watching a URL.”

    Publisher declares: read-only no · destructive yes · idempotent yes · open-world no

    3 inputs, 2 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • check_idstringrequired“check_id from uptime_add or uptime_status.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • schedule_createon 1 other serverdescribed as changing data

    “Repeat a wake-up call on your wake-up-calls plan: every N minutes (at least 5), hourly, daily or weekly at a time in a time zone.”

    Publisher declares: read-only no · destructive no · idempotent no · open-world yes

    8 inputs, 3 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • repeatobjectrequired“When it repeats.”
    • time_zonestring“IANA time zone, for example Europe/Istanbul.”
    • targetobjectrequired“Where each run is delivered.”
    • payloadobject“Any JSON object, up to 8 KB, sent with every run.”
    • alert_inbox_instance_idstring“One of your inboxes for missed-run messages.”
    • namestring“Your own label.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • schedule_liston 2 other serversreads or searches

    “Your repeating wake-ups with next_run_at and run counts; with schedule_id, that one with its recent runs (status, attempts, errors).”

    Publisher declares: read-only yes · destructive no · open-world no

    4 inputs, 1 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • schedule_idstring“Only this rule, with its recent runs.”
    • runsinteger“With schedule_id: how many recent runs (default 20).”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • schedule_updateon 1 other serverdescribed as changing data

    “Change a repeating wake-up (repeat, time_zone, target, payload, alert inbox, name: the same checks as creating it; its history stays), or pause it ("paused": waiting runs are canceled) or resume it (…”

    Publisher declares: read-only no · destructive no · idempotent yes · open-world yes

    10 inputs, 2 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • schedule_idstringrequired“schedule id (wsc_...) from schedule_create or schedule_list.”
    • statusstring“paused: stop it; active: run it again.”
    • repeatobject“When it repeats.”
    • time_zonestring“New IANA time zone, for example Europe/Istanbul.”
    • targetobject“Where each run is delivered.”
    • payloadobject“New JSON sent with every run (up to 8 KB).”
    • alert_inbox_instance_idstring or null“One of your inboxes for missed-run messages, or null for the target inbox.”
    • namestring or null“Your own label, or null.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • schedule_runruns code or commandsdescribed as changing data

    “Send one test run of a repeating wake-up now (within about a minute): exactly like a real run, with "test": true in the body and the header x-agentmart-schedule-test.”

    Publisher declares: read-only no · destructive no · idempotent no · open-world yes

    3 inputs, 2 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • schedule_idstringrequired“schedule id (wsc_...) from schedule_create or schedule_list.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • schedule_deleteon 1 other serverdeletesdescribed as changing data

    “Delete a repeating wake-up and its runs.”

    Publisher declares: read-only no · destructive yes · idempotent yes · open-world no

    3 inputs, 2 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • schedule_idstringrequired“schedule id (wsc_...) from schedule_create or schedule_list.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • heartbeat_adddescribed as changing data

    “Watch a job (backup, cron run, pipeline) with your heartbeat-monitor.”

    Publisher declares: read-only no · destructive no · idempotent no · open-world no

    7 inputs, 3 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • namestringrequired“What the job is.”
    • period_minutesintegerrequired“How often the job runs.”
    • grace_minutesinteger“Extra time before it counts as late (default 5).”
    • inbox_instance_idstring“One of your inboxes for the alerts.”
    • email_ownerboolean“Also email your owner (only once they confirmed their address).”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • heartbeat_statusreads or searches

    “Your heartbeat checks: status (waiting, up, late, down, paused), last ping, deadline, ping_url, recent incidents, and owner_email (whether owner emails reach your owner now).”

    Publisher declares: read-only yes · destructive no · open-world no

    2 inputs, 1 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • heartbeat_testdescribed as changing data

    “Put one test alert (event "test") in a heartbeat check's inbox, to check your handling before a job really stops.”

    Publisher declares: read-only no · destructive no · idempotent no · open-world no

    3 inputs, 2 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • heartbeat_idstringrequired“heartbeat id (hbc_...) from heartbeat_add or heartbeat_status.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • heartbeat_updatedescribed as changing data

    “Change a heartbeat check (name, period, grace, inbox, email_owner), or pause it (never alerts) or resume it (a fresh deadline).”

    Publisher declares: read-only no · destructive no · idempotent yes · open-world no

    9 inputs, 2 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • heartbeat_idstringrequired“heartbeat id (hbc_...) from heartbeat_add or heartbeat_status.”
    • namestring“New label.”
    • period_minutesinteger“New period in minutes.”
    • grace_minutesinteger“New grace in minutes.”
    • inbox_instance_idstring or null“Another inbox, or null for none.”
    • email_ownerboolean“Owner emails on or off.”
    • statusstring“paused: never alerts; active: a fresh deadline from now.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • heartbeat_removedeletesdescribed as changing data

    “Stop watching a job.”

    Publisher declares: read-only no · destructive yes · idempotent yes · open-world no

    3 inputs, 2 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • heartbeat_idstringrequired“heartbeat id (hbc_...) from heartbeat_add or heartbeat_status.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • reminder_createsends messagesdescribed as changing data

    “Set a repeating reminder email to your own human (daily or weekly at a time in their time zone).”

    Publisher declares: read-only no · destructive no · idempotent no · open-world yes

    5 inputs, 3 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • textstringrequired“Up to 500 characters of plain words.”
    • repeatobjectrequired“Daily or weekly.”
    • time_zonestring“IANA time zone, for example Europe/Istanbul.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • reminder_liston 1 other serverreads or searches

    “Your reminders to your human with next_run_at and the last result (sent, or why not), and whether email reaches them now.”

    Publisher declares: read-only yes · destructive no · open-world no

    2 inputs, 1 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • reminder_updatedescribed as changing data

    “Pause or resume a reminder, or change its text, rule or time zone.”

    Publisher declares: read-only no · destructive no · idempotent yes · open-world yes

    7 inputs, 2 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • reminder_idstringrequired“reminder id (rem_...) from reminder_create or reminder_list.”
    • statusstring“paused: no emails; active: from the next time after now.”
    • textstring“New text, same rules.”
    • repeatobject“New rule: daily or weekly.”
    • time_zonestring“New IANA time zone, for example Europe/Istanbul.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • reminder_deleteon 1 other serverdeletesdescribed as changing data

    “Delete a reminder to your human.”

    Publisher declares: read-only no · destructive yes · idempotent yes · open-world no

    3 inputs, 2 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • reminder_idstringrequired“reminder id (rem_...) from reminder_create or reminder_list.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • inbox_pro_getreads or searches

    “Your webhook inbox pro settings: the upgraded inbox, forwarding (with counts), signature preset and handshakes.”

    Publisher declares: read-only yes · destructive no · open-world no

    2 inputs, 1 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • inbox_pro_setcreates or changes datadescribed as changing data

    “Set your webhook inbox pro plan: inbox_instance_id (the inbox to upgrade, same address), forward ({url} or null), verify ({preset: github|stripe|slack|zoom|hmac, secret, ...} or null), handshakes ({s…”

    Publisher declares: read-only no · destructive yes · idempotent yes · open-world yes

    7 inputs, 1 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • inbox_instance_idstring“The inbox to upgrade (one of yours).”
    • forwardobject or null“Where to forward every message; null turns it off.”
    • rotate_forward_secretboolean“true: a new forwarding key (returned once).”
    • verifyobject or null“Sender signature check; null turns it off.”
    • handshakesobject“Answer the Slack, Zoom or Meta URL checks.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • inbox_bulkdeletesdescribed as changing data

    “Webhook inbox pro: acknowledge (mark read) or delete many messages of an upgraded inbox at once.”

    Publisher declares: read-only no · destructive yes · idempotent yes · open-world no

    5 inputs, 2 required
    • instance_idstringrequired“The inbox (inb_...).”
    • actionstringrequired“ack: mark read; delete: delete.”
    • idsarray“ack only: these message ids.”
    • throughinteger“A message id.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • queue_putdescribed as changing data

    “Put 1 to 100 messages (any JSON, up to 64 KB each) in a queue of your durable-queue plan; the queue is made on first use.”

    Publisher declares: read-only no · destructive no · idempotent no · open-world no

    4 inputs, 3 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • queuestringrequired“Queue name: 1 to 64 characters from a-z 0-9 .”
    • messagesarrayrequired“The messages to put.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • queue_claim

    “Claim up to max messages from a queue, each with a lease.”

    Publisher declares: read-only no · destructive no · idempotent no · open-world no

    5 inputs, 2 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • queuestringrequired“Queue name: 1 to 64 characters from a-z 0-9 .”
    • maxinteger“Default 1.”
    • visibility_timeout_secondsinteger“This claim's lease.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • queue_ackon 3 other serversdeletesdescribed as changing data

    “Done: the messages of these leases are deleted.”

    Publisher declares: read-only no · destructive yes · idempotent yes · open-world no

    4 inputs, 3 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • queuestringrequired“Queue name: 1 to 64 characters from a-z 0-9 .”
    • leasesarrayrequired“Leases from queue_claim.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • queue_nackon 2 other serversdescribed as changing data

    “Not done: the messages go back to the queue after delay_seconds, or to the dead-letter list after max_attempts claims.”

    Publisher declares: read-only no · destructive no · idempotent no · open-world no

    6 inputs, 3 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • queuestringrequired“Queue name: 1 to 64 characters from a-z 0-9 .”
    • leasesarrayrequired“Leases from queue_claim.”
    • delay_secondsinteger“Wait this long before it can be claimed again.”
    • errorstring“Your short reason.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • queue_extenddescribed as changing data

    “More time for long work: each lease that has not run out ends visibility_timeout_seconds from now.”

    Publisher declares: read-only no · destructive no · idempotent yes · open-world no

    5 inputs, 4 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • queuestringrequired“Queue name: 1 to 64 characters from a-z 0-9 .”
    • leasesarrayrequired“Leases from queue_claim.”
    • visibility_timeout_secondsintegerrequired“The lease ends this many seconds from now.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • queue_statuson 2 other serversreads or searches

    “Your queues with ready, delayed, leased and dead counts; with queue, that one queue and its settings.”

    Publisher declares: read-only yes · destructive no · open-world no

    3 inputs, 1 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • queuestring“Only this queue, with its settings.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • queue_settingsdescribed as changing data

    “Create a queue or change its settings (lease, max_attempts before dead letter, max_messages), or delete it with all its messages (delete: true).”

    Publisher declares: read-only no · destructive yes · idempotent yes · open-world no

    7 inputs, 2 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • queuestringrequired“Queue name: 1 to 64 characters from a-z 0-9 .”
    • visibility_timeout_secondsinteger“Default lease in seconds.”
    • max_attemptsinteger“Claims before a message goes to the dead letters.”
    • max_messagesinteger“Size limit of the queue.”
    • deleteboolean“true: delete the queue and its messages.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • queue_deaddescribed as changing data

    “A queue's dead letters (messages claimed max_attempts times without an ack): list them, redrive them back to the queue (ids, or all), or purge them.”

    Publisher declares: read-only no · destructive yes · idempotent no · open-world no

    8 inputs, 3 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • queuestringrequired“Queue name: 1 to 64 characters from a-z 0-9 .”
    • actionstringrequired“list, redrive (back to the queue) or purge (delete).”
    • idsarray“redrive: these messages.”
    • allboolean“redrive: every dead letter.”
    • afterstring“list: next_after of the previous page.”
    • limitinteger“list: how many (default 20).”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • check_senderdescribed as changing data

    “Check how the domain your owner sends email from is set up ($1 per domain, from the balance): MX, SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI, reverse DNS and a blocklist.”

    Publisher declares: read-only no · destructive yes · idempotent no · open-world yes

    7 inputs, 1 required
    • domainstringrequired“The sending domain, like example.com.”
    • providerstring“Your sending provider, if you know it: adds its selectors and return path to the search.”
    • dkim_selectorsarray“Your DKIM selectors (the part before ._domainkey); for Amazon SES, the three Easy DKIM tokens.”
    • idempotency_keystring“Reuse with the same domain, provider and selectors to retry safely without paying twice; a retry without it is a new purchase.”
    • inbox_instance_idstring“One of your owner's webhook inboxes: the completion event (domain, score, counts) is written there.”
    • max_price_centsinteger“The most this may cost, in US cents.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • get_sender_checkreads or searches

    “One sender check: status (checking, completed, failed, expired, pending_approval, cancelled) and, while kept (7 days), the report.”

    Publisher declares: read-only yes · destructive no · open-world no

    2 inputs, 1 required
    • check_idstringrequired“Check id (sc_...) from check_sender or list_sender_checks.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • list_sender_checksreads or searches

    “Your owner's sender checks, newest first: check_id, domain, status, score and counts (get_sender_check for the report).”

    Publisher declares: read-only yes · destructive no · open-world no

    2 inputs
    • limitinteger“How many (default 20).”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • unsubscribe_linkscalculates or converts

    “Signed one-click unsubscribe links for your unsubscribe-list, one per recipient, with the exact List-Unsubscribe and List-Unsubscribe-Post headers to add to that email.”

    Publisher declares: read-only yes · destructive no · open-world no

    3 inputs, 2 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • emailsarrayrequired“Plain addresses, up to 1000.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • suppression_checkreads or searches

    “Before sending: which of these addresses are on your unsubscribe list (unsubscribed, bounced, complained or added by you).”

    Publisher declares: read-only yes · destructive no · open-world no

    3 inputs, 2 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • emailsarrayrequired“Plain addresses, up to 1000.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • suppression_addcreates or changes datadescribed as changing data

    “Add your own addresses to your unsubscribe list (stored as keyed hashes).”

    Publisher declares: read-only no · destructive no · idempotent yes · open-world no

    5 inputs, 2 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • emailsarrayrequired“Plain addresses, up to 1000.”
    • reasonstring“Why (default manual).”
    • keep_addressboolean“Also keep the address sealed for export (default false: hash only).”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • suppression_removedeletesdescribed as changing data

    “Take addresses off your unsubscribe list, with a reason (resubscribed, added_by_mistake, bounce_resolved, other).”

    Publisher declares: read-only no · destructive yes · idempotent yes · open-world no

    4 inputs, 3 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • emailsarrayrequired“Plain addresses, up to 1000.”
    • reasonstringrequired“Why they come off.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • suppression_exportreads or searches

    “Your unsubscribe list, oldest first, a page at a time: each entry's hash, reason, source and time, and the address only where you added it with keep_address.”

    Publisher declares: read-only yes · destructive no · open-world no

    4 inputs, 1 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • afterinteger“next_after of the last page.”
    • limitinteger“Entries per page (default 500).”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • suppression_settingscreates or changes datadescribed as changing data

    “Set your unsubscribe-list's page name (site_name), the inbox for suppression events, and the bounce and complaint webhooks of your providers: resend {signing_secret}, sendgrid {public_key}, ses {topi…”

    Publisher declares: read-only no · destructive yes · idempotent yes · open-world no

    5 inputs, 1 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • site_namestring or null“The name your unsubscribe page shows (a plain name, null clears it).”
    • inbox_instance_idstring or null“One of your owner's webhook inboxes for suppression events (null: none).”
    • providersobject“The providers to set up.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • start_freecreates or changes datadescribed as changing data

    “For a passport without an owner: ask for a free start for your human ($5 starter credit for utilities and code kits, 30 days, once per inbox, while the offer lasts).”

    Publisher declares: read-only no · destructive no · idempotent no · open-world yes

    2 inputs, 1 required
    • emailstringrequired“Your human's email address.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • starter_statusreads or searches

    “Your free start: whether the offer is open, a link still waiting for your human, and, once they pressed Yes, what is left of the starter credit and until when.”

    Publisher declares: read-only yes · destructive no · open-world no

    1 input
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • share_setcreates or changes datadescribed as changing data

    “Publish content on your share link so a human can see it (HTML, plain text, Markdown, PNG, JPEG or PDF, up to 4 MB).”

    Publisher declares: read-only no · destructive yes · idempotent yes · open-world yes

    7 inputs, 2 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • content_typestringrequired“What you publish.”
    • contentstring“Text content (HTML, plain text, Markdown).”
    • content_base64string“Image or PDF bytes, in standard base64 with = padding.”
    • titlestring“Page title humans see in the browser tab and link previews.”
    • langstring“Markdown: the language of your text as a language tag (en, de, pt-BR), for screen readers.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • share_getreads or searches

    “Read back what is published on your share link (text as text, images and PDFs as base64).”

    Publisher declares: read-only yes · destructive no · open-world no

    2 inputs, 1 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • form_submissionsreads or searches

    “Read the entries a website's form sent to your form inbox, oldest first, up to limit per call (default 20).”

    Publisher declares: read-only yes · destructive no · open-world no

    6 inputs, 1 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • afterinteger or string“Only entries after this entry id (next_after of the previous call, as it came).”
    • limitinteger“Default 20: tool answers stay small.”
    • formatstring“Default json.”
    • separatorstring“With format csv: the cell separator (default comma; semicolon for spreadsheets set up for a decimal comma).”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • delete_form_submissionsdeletesdescribed as changing data

    “Delete form inbox entries for good: every entry up to and including through (an entry id), for example after you exported them.”

    Publisher declares: read-only no · destructive yes · idempotent yes · open-world no

    3 inputs, 2 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • throughinteger or stringrequired“Entry id: this one and all older ones are deleted.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • set_form_digestcreates or changes datadescribed as changing data

    “Change your form inbox's settings: the daily digest email to your owner (digest on or off: at most one email a day for all their forms, only while new entries arrive) and the site name its thank-you …”

    Publisher declares: read-only no · destructive no · idempotent yes · open-world yes

    4 inputs, 1 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • digestboolean“true: daily digest email on; false: off.”
    • site_namestring or null“The name of your site, shown as plain text on the thank-you page after a visitor sends the form.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • claim_refunddescribed as changing data

    “Claim store credit for a purchase that did not work.”

    Publisher declares: read-only no · destructive no · idempotent no · open-world no

    4 inputs, 1 required
    • order_idstringrequired“Order id from buy (order_id).”
    • test_outputstring“For a kit: the failing test output.”
    • detailstring“What did not work, in plain words.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • reviewon 12 other serverscreates or changes datadescribed as changing data

    “Review a purchase after you used or tested it (verified purchases only, one per order, editable for 7 days).”

    Publisher declares: read-only no · destructive no · idempotent yes · open-world no

    9 inputs, 3 required
    • order_idstringrequired“Order id from buy (order_id).”
    • workedstringrequired“Did it do what you bought it for?”
    • ratingintegerrequired“1 (bad) to 5 (great).”
    • tokens_savedinteger“Your estimate of tokens you did not have to spend.”
    • minutes_savedinteger“Your estimate of minutes you did not have to spend.”
    • commentstring“Plain words: no links, code or instructions.”
    • agent_modelstring“ASCII letters, digits, spaces and .”
    • agent_platformstring“ASCII letters, digits, spaces and .”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • list_reviewson 16 other serversreads or searches

    “Read verified agent reviews for an item (newest first): worked, rating, savings.”

    Publisher declares: read-only yes · destructive no · open-world no

    6 inputs, 1 required
    • itemstringrequired“Item slug.”
    • workedstring“Only reviews with this answer.”
    • limitinteger“Reviews per call, 1 to 50.”
    • cursorstring“next_cursor of your previous call.”
    • include_commentsboolean“Default false.”
    • passport_tokenstring“Not needed on this public tool; accepted and ignored.”
  • trustreads or searches

    “AgentMart's public track record: paying owners, verified reviews, how often purchases worked, tokens and minutes saved.”

    Publisher declares: read-only yes · destructive no · open-world no

    1 input
    • passport_tokenstring“Not needed on this public tool; accepted and ignored.”
  • blueprint_methodreads or searches

    “The Project Blueprint method (free, no passport needed): six planning stages (concept, features, pages, database, tech_spec, tasks), each with instructions, a JSON Schema and a worked example.”

    Publisher declares: read-only yes · destructive no · open-world no

    2 inputs
    • stagestring“Stage name, in order: concept, features, pages, database, tech_spec, tasks.”
    • passport_tokenstring“Not needed on this public tool; accepted and ignored.”
  • blueprint_put_stagecreates or changes datadescribed as changing data

    “Save one stage of your blueprint, in order: concept, features, pages, database, tech_spec, tasks.”

    Publisher declares: read-only no · destructive yes · idempotent yes · open-world no

    4 inputs, 3 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • stagestringrequired“Stage name, in order: concept, features, pages, database, tech_spec, tasks.”
    • dataobjectrequired“The stage JSON, shaped like the stage's schema in blueprint_method.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • blueprint_delete_stagedeletesdescribed as changing data

    “Delete one stage of your blueprint and every later stage (they are built on it), for good.”

    Publisher declares: read-only no · destructive yes · idempotent yes · open-world no

    3 inputs, 2 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • stagestringrequired“Stage name, in order: concept, features, pages, database, tech_spec, tasks.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • blueprint_tasksreads or searches

    “Mission control for your blueprint: every task with its status, the progress, and the next task to work on.”

    Publisher declares: read-only yes · destructive no · open-world no

    2 inputs, 1 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • blueprint_update_taskcreates or changes datadescribed as changing data

    “Set a blueprint task to doing when you start it and done when its tests pass (todo undoes).”

    Publisher declares: read-only no · destructive no · idempotent yes · open-world no

    4 inputs, 3 required
    • instance_idstringrequired“Utility instance id from buy or list_utilities.”
    • task_idstringrequired“Task id from blueprint_tasks.”
    • statusstringrequired“doing when you start, done when its tests pass, todo to undo.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”
  • make_wishon 1 other servercreates or changes datadescribed as changing data

    “Tell us what you looked for and did not find, and what you would pay.”

    Publisher declares: read-only no · destructive no · idempotent no · open-world no

    3 inputs, 1 required
    • querystringrequired“What you looked for, in plain words.”
    • would_pay_centsinteger“What it would be worth to you, in US cents.”
    • passport_tokenstring“Your amp_ token, only if your app has no sign-in and cannot send it as an Authorization header.”

Each quoted sentence is the first sentence of the publisher’s own description. The kind of tool and the “changes data” mark are our AI model’s reading of that description, not something we tested: two differently worded runs had to agree, otherwise no label is shown, and nobody has checked them by hand. A tool without the “changes data” mark is described as only reading, searching or calculating, or the two runs did not agree. No tool was called. Read the publisher’s full description before relying on it. “Publisher declares” lists the hints the server itself sends with the tool (MCP annotations: read-only, destructive, idempotent, open-world); they are the publisher's claims, not checked by us. Inputs are the parameters in the tool's own input schema: name, declared type, whether it is required, and the first sentence of its description. The first 100 of 112 tools are listed. Read 2026-10-23.

How well are its tools described?

Features #4 and #5

How clearly this server's own tool descriptions say what a tool does, and how consistent its tool list is. The first part is an AI model's yes/no reading of each description; the second part is counted. We do not turn it into a grade.

Descriptions

AI reading of each description

Says what the tool does
100% of 112 tools
Says what it returns
54% of 103 tools
States limits, defaults or errors
24% of 99 tools
Says when to use it
14% of 80 tools
Items covered per tool
2.1 of 4 on average

Counted from the listing

Parameters with a description
99% of 420
Tools with a description
100% of 112
Typical description length
297 characters

The tool set

Counted from the listing

Tools
112
Size of the list
about 36,369 tokens for an agent to load (characters ÷ 4)
Naming
107 of 112 names use snake_case

AI reading: easy to mix up

No pair found.

The AI items cover 112 of 112 tools: for a tool where two differently worded runs disagreed, that item is left out. They were not checked by hand, and no tool was called. “Easy to mix up” means two tools whose names or descriptions overlap without saying how they differ; the AI found none, comparing tools within groups of 40. We do not rate whether the tool set is complete or whether side effects are spelled out, because our AI reading of those was not reliable enough.

How do I add it to my client?

Config from the registry entry

From the remote endpoint (Streamable HTTP)

We connected to this URL on 2026-10-23 (a read-only session: no tool was called).

Add to CursorAn install link in the format Cursor documents, holding the Cursor config below.

Claude Desktop or claude.ai
Settings → Connectors → Add custom connector, then paste:
https://agentmart.ciphyr.ai/mcp
Cursor · .cursor/mcp.json in a project, or ~/.cursor/mcp.json
{
  "mcpServers": {
    "agentmart": {
      "url": "https://agentmart.ciphyr.ai/mcp"
    }
  }
}
VS Code · .vscode/mcp.json
{
  "servers": {
    "agentmart": {
      "type": "http",
      "url": "https://agentmart.ciphyr.ai/mcp"
    }
  }
}
VS Code (command line) · Bash or zsh terminal (macOS, Linux)
code --add-mcp '{"name":"agentmart","type":"http","url":"https://agentmart.ciphyr.ai/mcp"}'
Claude Code
claude mcp add --transport http agentmart https://agentmart.ciphyr.ai/mcp
Try it in the MCP Inspector · runs on your machine, opens in your browser · Node 22.19+
npx @modelcontextprotocol/inspector@2.11.0 --server-url https://agentmart.ciphyr.ai/mcp --transport http
  • The server runs on the operator's infrastructure; it may ask you to sign in when you first connect.
  • The MCP Inspector lists the server's tools, resources and prompts; a tool you call there runs for real.

Built from the server's registry entry with each client's documented format (checked 2026-10-14; the Cursor link and the VS Code command 2026-10-19; the MCP Inspector command 2026-10-21). Values in < > are yours to fill in; this page never contains a key. Where the server needs a setting the entry does not declare, it can still fail to start.

Does the registry listing match what we found?

Feature #6

The registry verifies a package once, when it is published, and does not re-check it. A difference below is about the listing, not a judgement of the publisher.

Registry saysWe foundResultSource · date
Remote endpoint agentmart.ciphyr.ai/mcpSession openedmatchesour test · 2026-10-23
No credential declared as requiredOpened a session without any credentialmatchesour test · 2026-10-23
Repository github.com/mustafaakmese/agentmart-pluginsOpens publiclymatchesapi.github.com · 2026-10-22

Who made it?

Feature #7 · lineage

Facts about the publisher. We do not turn them into a trust score.

Namespace
ai.ciphyr.agentmart
GitHub owner
a personal account (mustafaakmese)
Repository
github.com/mustafaakmese/agentmart-plugins
Stars
0
Repository age
0–30 days
Last push
0–30 days ago
Archived
no
Security policy
SECURITY.md

Source: the registry entry and api.github.com · 2026-10-22; security policy read from GitHub · 2026-10-23.

Publish this server? Run these checks against it yourself before release, from your own machine: a server the command starts, or your own server at its URL after a one-time proof that you control it: npx protocolprobe-selftest.

Choosing

Record checks

Public records · not a safety rating

5 of 5 record checks met · 4 do not apply

  • Not ranked by downloads: a remote server publishes no download figure
  • Not ranked by stars: 0 stars (ranked from 10)
  • MetRegistry entry is active and says how to run itActive, with a package or a remote address.
  • MetSource repository link opensThe linked GitHub repository is public.
  • MetRepository is not archivedNot archived.
  • MetCode pushed to the repository in the 90 days before our checkLast push 0-30 days before our check.
  • MetRepository publishes a security policy (SECURITY.md)SECURITY.md found.
  • Does not applyPackage names its licence with a standard (SPDX) identifierRemote server: it ships no package.
  • Does not applyThe version the registry lists can be installed and is not withdrawnRemote server: it ships no package.
  • Does not applynpm package carries build provenance (attestation)Remote server: it ships no package.
  • Does not applyNo known critical or high advisory in the package or its dependenciesRemote server: it ships no package.

Read from public records only: the registry entry, npm/PyPI, GitHub and advisory databases, checked 2026-10-22. No tool was called. Only “met” and “not met” are counted, so the total differs between servers; a check that does not apply or that we could not run is listed, never counted against it. It is not a safety rating. How each check works · Leaderboards

Common questions about ai.ciphyr.agentmart/agentmart

Answered from the data above

Is ai.ciphyr.agentmart/agentmart safe to install?

We do not rate servers as safe or unsafe. 5 of its 5 applicable record checks are met (facts from public records, each listed on this page). What the records show: Its source repository opens publicly. Its repository had a push in the last 90 days. 70 of its tools describe changing data (our AI model's reading of the descriptions). These are facts with their sources on this page, not a safety guarantee, and we did not run its tools.

Does ai.ciphyr.agentmart/agentmart need an API key or sign-in?

It opened a session without any credential on 2026-10-23. The registry entry declares no required credential; no declaration is not a guarantee.

Has ai.ciphyr.agentmart/agentmart been security tested?

Partly. 4 of the 15 checks that apply to it were exercised. It accepted a session without any credential and lists tools whose names suggest they change data. We did not call them. No security verdict is published before verification.

What can ai.ciphyr.agentmart/agentmart do?

It lists 112 tools. In our AI model's reading of their descriptions (two runs had to agree, nobody checked it by hand), they include tools that read or search, create or change data, delete, send messages, run code or commands and move money and more. We did not call any tool, so this describes the text, not the behaviour.

Can ai.ciphyr.agentmart/agentmart change or delete data?

70 of its tools say in their description that they create, edit, delete, send or run something (our AI model's reading). We did not call any tool, so we cannot say what actually happens.

Does ai.ciphyr.agentmart/agentmart publish a security policy?

Yes: its repository has a public security policy (github.com/mustafaakmese/agentmart-plugins/blob/HEAD/SECURITY.md). That is the publisher's statement, not permission for us to test the server, and we call none of its tools.

Where is the source code of ai.ciphyr.agentmart/agentmart?

In github.com/mustafaakmese/agentmart-plugins, which opens publicly.

Found this page useful?

Anonymous · no sign-in

A quick, anonymous reaction — no account, no email. One per kind from your browser. The tally updates when the page is next refreshed, and it is only a rough count, never a safety rating or a measured number of people.

Similar servers

Same topic · AI-read

Active servers whose topic is also “ai-and-ml” and that have at least one tool of the same kind; most kinds in common first, then most GitHub stars. The topic and the tool kinds are an AI model's reading of the publishers' descriptions, not checked by hand. Similar is not a recommendation.

Compare with another server

Side by side: registry entry, our read-only session, the tools and the 18 classification fields. Same values as each page; no score.

Security testing

What did we test, and what did we leave out?

18 checks · features #1, #2

Open without sign-in

It accepted a session without any credential and lists tools whose names suggest they change data. We did not call them. No security score is given; a check we did not run is never counted as passed.

The 18 checks at a glanceour test · 2026-10-23
  1. Inventory: exercised
  2. Hidden instructions: exercised
  3. Real execution: not run · our policy
  4. Secret leak: not run · nothing to check it against
  5. Internal addresses: not run · our policy
  6. Unconfirmed changes: not run · our policy
  7. Bad input: not run · our policy
  8. Model requests: not run · nothing to check it against
  9. Sensitive questions: not run · nothing to check it against
  10. Folder boundary: not run · our policy
  11. Log leaks: not run · nothing to check it against
  12. Hidden content: exercised
  13. Fake assistant turns: not applicable
  14. Token passthrough: not applicable
  15. Token audience: not applicable
  16. Sign-in redirect: not run · our policy
  17. Consent handling: not testable from outside
  18. Sign-in metadata: exercised

4 exercised11 not run (reason given)3 not applicable

Each check ends in exactly one state: exercised, not run (with the reason), or not applicable (with the reason). 4 of the 15 checks that apply to it were exercised. We do not publish security-check outcomes for named servers.

Exercised · 4
  • 1Inventory
    tool-list    Reads the declared tools, resources and prompts.exercised
  • 2Hidden instructions
    description-poisoning    Looks for hidden instructions in tool descriptions.exercised
  • 12Hidden content
    audience-hiding    Checks resources that hide content from the user.exercised
  • 18Sign-in metadata
    oauth-url-scheme    Checks the published sign-in metadata for unsafe URLs.exercised
Not run, with the reason · 11
  • 3Real execution
    real-execution    Calls a tool and checks what really happens.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
  • 4Secret leak
    canary-leak    Plants a fake secret and checks whether it leaks.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
  • 5Internal addresses
    ssrf    Checks whether a tool can be steered to internal addresses.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
  • 6Unconfirmed changes
    write-without-confirmation    Checks whether tools that change data act without asking.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
  • 7Bad input
    error-handling    Sends bad input and watches how the server answers.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
  • 8Model requests
    sampling    Checks whether the server asks the client's model to act for it.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
  • 9Sensitive questions
    elicitation-sensitive-data    Checks whether the server asks users for sensitive data.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
  • 10Folder boundary
    root-boundary    Checks whether the server reaches outside the folders it was given.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
  • 11Log leaks
    logging-side-channel    Checks whether log messages carry data they should not.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
  • 16Sign-in redirect
    open-redirect    Checks the sign-in redirect for abuse.Testing the sign-in redirect means sending probes to the operator's sign-in service, which we do not do.not run · our policy
  • 17Consent handling
    confused-deputy    Checks consent handling when one service acts for another.Depends on the operator's own consent screen, which differs per server and cannot be tested from outside.not testable from outside
Does not apply to this server · 3
  • 13Fake assistant turns
    fake-assistant-turn    Checks prompts that pose as the assistant's own words.The server exposes no prompts.not applicable
  • 14Token passthrough
    token-passthrough    Checks whether the server forwards a user's token to other services.The server opened a session without sign-in, so there is no token flow to check.not applicable
  • 15Token audience
    token-audience-validation    Checks whether tokens meant for another service are accepted.The server opened a session without sign-in, so there is no token flow to check.not applicable

Source: our own test, 2026-10-23, mcp-runtime-engine@0.1.0. Which checks count and why follows our published scoring model.

What happened during the test?

Feature #8

The steps in order, as the test record holds them.

  1. 0 msStarted a read-only session with the server's remote endpoint
  2. 1,166 msConnected after 0 redirects. No credential was sent or needed.
  3. Read the inventory: 112 tools, 1 resource, 0 prompts.
  4. 4,540 msFinished: 4 checks exercised.

Reference

How is it classified?

18 fields

One value per field, each with its source. Fields written by AI models are marked. A field with no value says why.

TopicAI-classified
ai-and-ml
AI-classified (Gemini + Claude agreed) · 2026-10-23
Pricing modelAI-classified
no value
The pages we read do not state how the product is priced.
Programming language
not stated
GitHub detects no source language in this repository (docs-only or empty)
Hosting type
remote (hosted by the publisher)
registry · 2026-10-23
MCP capability
resources, tools
our test · 2026-10-23
Transport
streamable HTTP
registry · 2026-10-23
Required credentials
none declared
registry · no declaration is not a guarantee
Package registry
does not apply
remote-only server: no package is shipped, so there is no package registry
Freshness
0–30 days
registry updatedAt · 2026-10-23
Lifecycle status
active
registry · 2026-10-23
License class
does not apply
remote-only server: ships no package, so there is nothing to look up in a package registry
Integrity hash
does not apply
remote-only server: ships no package, so there is nothing to look up in a package registry
Signature / provenance
does not apply
remote-only server: ships no package, so there is nothing to look up in a package registry
Dependency advisories
does not apply
ships no package, so there are no dependencies to audit
Popularity
does not apply
remote-only server: ships no package, so there is nothing to look up in a package registry
Publisher signals
owner: a personal account · repository age: 0–30 days · stars: 0–9
api.github.com · 2026-10-22
Maintenance
active
api.github.com · 2026-10-22
Environment
the publisher's infrastructure
where it runs, from the hosting type

“Not stated” means the source did not state it; “does not apply” means it does not apply to this kind of server; “our limit” means our own lookup failed. A linked value opens the directory filtered to the same value.

Cite or correct this page

Sources and corrections

Suggested citation

ProtocolProbe. “ai.ciphyr.agentmart/agentmart: MCP server record.” Data checked 2026-10-23. https://protocolprobe.com/mcp/servers/ai.ciphyr.agentmart/agentmart

Figures are valid for the date shown. Our facts on this page are CC BY 4.0: reuse them with a link and the check date. Quoted text (the publisher’s descriptions, website quotes, tool names) is not ours to license.

As JSON: this record in the API · API documentation.

Badge for your README

ProtocolProbe: 5 of 5 record checks met

[![ProtocolProbe](https://protocolprobe.com/api/v1/badge/ai.ciphyr.agentmart/agentmart)](https://protocolprobe.com/mcp/servers/ai.ciphyr.agentmart/agentmart)

It shows this server's record-check count: facts from public records, no tool called. It is not a security rating or a pass. It links here and updates after each data reload.

Something wrong, or is this yours?

If a fact here is wrong, tell us and we will re-check it. If you operate this server, you can run our checks on it yourself with the free self-test command; we call no server’s tools ourselves for anything shown here.

Write to hello@protocolprobe.com · corrections log · methodology