← Back to search

AIMarket MCP Packager

alexar76 Scanned 1d ago

Stdio MCP packager: AIMarket hub plugins into self-hosted MCP server products.

C
60.5 / 100

Versions

2.0.1latest
first seen Jul 8, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 25

get_random
annotations: none low

Draw unbiasable, Ed25519-signed verifiable randomness (Platon). Use this when you need randomness an autonomous agent cannot bias or predict and that a third party can verify — fair selection, sampling, raffles, commit-reveal, anti-MEV ordering. The oracle signs the value, so you (or anyone) can verify it offline against the published signer key. Returns: The standard envelope (see server instructions). `result` contains: - `random_hex`: the random bytes, hex-encoded (`num_bytes` long). - `proof`: `{state_hash, tick, timestamp, entropy_commitment}` binding the value to the oracle's chaotic state at draw time. - `signature`: Ed25519 signature over the value+proof (verify with `verify_random`/the signer key in the Hub manifest). `verifiable.signed` will be true. Cost ~$0.004 USDC, charged per call. Example: get_random(num_bytes=32, client_seed="0xdeadbeef")

num_bytes NumBytes client_seed ClientSeed
get_randomness_beacon
annotations: none low

Fetch the round's public randomness beacon (Platon) — one shared value all callers in the round observe, useful as a common coin / shared seed. Returns: The standard envelope; `result` has the same `{random_hex, proof, signature}` shape as `get_random`, but the value is the round-wide beacon (not caller-specific). Cost ~$0.004 USDC. Example: get_randomness_beacon()

ask_oracle
annotations: none low

Ask the Platon oracle for a grounded, entropy-derived read-only answer. Use for lightweight oracle-mediated decisions (e.g. an unbiased pick among options). Read-only — no side effects, no state change. Returns: The standard envelope; `result` carries the oracle's answer payload. Cost ~$0.003 USDC. Example: ask_oracle(question="Pick one at random: red, green, or blue?")

question Question
verify_random
annotations: none low

Verify a Platon randomness draw without re-running it (Platon verify). Pass `random_hex`, `proof`, and `signature` exactly as returned by `get_random` / `get_randomness_beacon`. Confirms the Ed25519 signature over the canonical (random_hex, proof) against the signer's published public key — so you trust the math, not the service. Returns: The standard envelope; `result` is `{valid: <bool>}` (plus `error` if the input was malformed). Cost ~$0.001 USDC. Example: verify_random(random_hex="0x9f2c…", proof={"scheme": "platon-chaos-vrf/v1", …}, signature={"algorithm": "ed25519", "public_key": "<b64>", "value": "<b64>"})

proof RandProof signature RandSignature random_hex RandomHex
compute_vdf
annotations: none low

Evaluate a Verifiable Delay Function (Chronos) — proof that real sequential work elapsed. Use when you need provable, unforgeable elapsed time / sequential work: timed reveals, fair ordering, proof-of-elapsed-time, randomness that cannot be precomputed. Producing the output requires `T` sequential squarings over an RSA-2048 modulus (no shortcut), so a valid proof attests the delay actually happened. Verify cheaply with `verify_vdf`. Returns: The standard envelope; `result` contains: - `scheme`, `g`, `y` (= g^(2^T) mod N), `proof` (`{pi, l}`, Wesolowski), `modulus`. `verifiable.has_proof` will be true. Cost ~$0.01 USDC. Example: compute_vdf(seed="0x1234abcd", difficulty=100000)

seed VdfSeed difficulty Difficulty
verify_vdf
annotations: none low

Verify a Chronos VDF proof in a single exponentiation. Pass the `g`, `y`, `T`, and `proof` returned by `compute_vdf` (or by any party claiming a VDF result). Confirms `y = g^(2^T) mod N` without redoing the T squarings. Returns: The standard envelope; `result` is `{valid: <bool>}`. Cost ~$0.001 USDC. Example: verify_vdf(g="0x03", y="0x9f2a…", T=100000, proof={"pi": "0x1a2b…", "l": "0x65"})

T VdfT g VdfG y VdfY proof VdfProof
get_reputation_scores
annotations: none low

Compute PageRank/EigenTrust trust scores over a directed trust graph you supply (LUMEN). Use to rank agents/entities by trust when you have who-trusts-whom edges: counterparty selection, sybil-dampened weighting, prioritization. You provide the graph; the oracle returns a normalized score per node plus convergence info. Returns: The standard envelope; `result` contains: - `scores`: array of `nodes` floats that sum to 1 (±1e-6) — node i's trust share. - `iterations`, `converged`: power-iteration convergence info. Cost ~$0.005 USDC (scales with graph size). Example: get_reputation_scores(nodes=3, edges=[[0,1,1.0],[1,2,0.5],[2,0,0.5]], damping=0.85)

edges GraphEdges nodes GraphNodes damping Damping
get_blue_noise
annotations: none low

Blue-noise point set via Mitchell best-candidate (Turing). Evenly spaced points with large minimum distance — spawn placement, dithering, sensor layout. Omit seed for os.urandom (reported back). Cost ~$0.002 USDC per call.

seed string count string candidates string
get_agent_trust
annotations: none low

Trust score, rank, and percentile of ONE node in a trust graph you supply (LUMEN). A single-agent reputation lookup over the same PageRank as `get_reputation_scores` — use when you only care about one counterparty's standing. Returns: The standard envelope; `result` is `{target_node, score, rank (1=highest), of, percentile, graph_commitment}`. Cost ~$0.003 USDC. Example: get_agent_trust(nodes=3, edges=[[0,1,1.0],[1,2,0.5],[2,0,0.5]], target_node=1)

edges GraphEdges nodes GraphNodes damping Damping target_node TargetNode
verify_reputation
annotations: none low

Verify LUMEN reputation scores by re-deriving PageRank over the supplied graph (LUMEN verify). Pass the graph and the `scores` (and optionally the `graph_commitment`) from a `get_reputation_scores` result; confirms they are the correct PageRank of exactly that graph. Returns: The standard envelope; `result` is `{valid: <bool>, max_abs_diff, [commitment_match]}`. Cost ~$0.002 USDC. Example: verify_reputation(nodes=3, edges=[[0,1,1.0],[1,2,0.5],[2,0,0.5]], scores=[0.33,0.33,0.34])

edges GraphEdges nodes GraphNodes scores ClaimedScores damping Damping graph_commitment GraphCommitment
list_oracle_capabilities
annotations: none low

List every oracle tool with capabilityId, price, category, and optional subscription tiers. Call this first to discover what's available and what each call costs before invoking. Returns: JSON with `tools` (flat catalog) and `categories` (group labels). Example: list_oracle_capabilities()

aggregate_values
annotations: none low

Robust consensus aggregation of multi-agent estimates (Murmuration). Combines median, trimmed mean, Tukey biweight, and DeGroot consensus — resistant to outliers and a few Byzantine agents. Use for multi-agent debate resolution, ensemble aggregation, DAO voting, and distributed anomaly consensus. Cost ~$0.002 USDC per call.

trim TrimFraction values ValuesList
audit_compute_cost
annotations: none low

Thermodynamic compute-cost audit via Landauer's principle (Landauer). Counts irreversible bit erasures in an operation DAG, derives the energy floor (erasures · k_B·T·ln2), efficiency, and hot gates. Use for LLM cost optimization, carbon reporting, ESG compliance, and EU AI Act energy disclosure. Cost ~$0.01 USDC per call.

ops GateOps temperature_k string
verify_compute_cost
annotations: none low

Trustless replay of a Landauer thermodynamic audit (Landauer verify). Recomputes erasures and energy floor from the ops DAG and checks claims. Cost ~$0.001 USDC.

ops GateOps temperature_k float energy_floor_j string irreversible_bits string
compute_least_time_route
annotations: none low

Least-time routing with eikonal potentials + dual certificate (Fermat). Finds the minimum-time path on a weighted graph and returns potentials T(v) as an optimality certificate. Use for multi-agent task routing, supply chain, logistics, and data-pipeline optimization. Cost ~$0.01 USDC per call.

goal NodeLabel blend string edges RouteEdges start NodeLabel
verify_least_time_route
annotations: none low

Trustless certificate check for a Fermat least-time route (Fermat verify). Confirms feasibility on every edge and tightness on the path in O(E) time. Cost ~$0.001 USDC.

goal NodeLabel path string blend string edges RouteEdges start NodeLabel total string potentials string
analyze_cascade_risk
annotations: none low

Systemic cascade-risk analysis via abelian sandpile / SOC (Ablation). Returns avalanche-size distribution, power-law exponent tau, VaR/CVaR tail risk, and trigger nodes. Use for financial contagion, supply-chain resilience, and microservices failure analysis. Cost ~$0.01 USDC per call.

edges GraphEdges nodes string nonce string s_min string sinks string grains string capacities string dissipation string
verify_cascade_risk
annotations: none low

Trustless replay of an Ablation cascade analysis (Ablation verify). Re-runs the sandpile and checks tau / topple_total claims. Cost ~$0.001 USDC.

seed string edges GraphEdges nonce str s_min int grains int claimed_tau string dissipation int claimed_topple_total string
get_quasirandom_sequence
annotations: none low

Halton low-discrepancy quasi-random sequence (Lattice). Fills [0,1)^dim more evenly than RNG — faster QMC convergence for integration, pricing, and space-filling search. Deterministic from (count, dim, skip). Cost ~$0.002 USDC per call.

dim string skip string count string
optimize_route
annotations: none low

Euclidean TSP tour with optimality gap certificate (Colony). Returns tour, length, admissible lower bound, and gap = how far from optimal. Use for routing, scheduling, and logistics with a quality proof. Cost ~$0.005 USDC per call.

points Points2D iterations string
analyze_network_resilience
annotations: none low

Percolation threshold and network resilience analysis (Percola). Returns critical attack fraction f_c, collapse curves P_inf(f), robustness scalar, and keystone nodes. Use before joining exposure graphs or multi-hop agent routes. Cost ~$0.01 USDC per call.

edges GraphEdges nodes string nonce string attack string samples string
verify_network_resilience
annotations: none low

Trustless replay of a Percola percolation threshold (Percola verify). Recomputes the attack sweep and checks the claimed f_c. Cost ~$0.001 USDC.

f_c string seed string edges GraphEdges nonce str attack string samples int
package_capability
annotations: none low

Build a complete self-hosted MCP server package for an AIMarket capability. Use this first. It assembles everything needed to ship the capability as a standalone MCP server: the Docker image name, the MCP manifest (server + tool definition), subscription/pricing tiers, and a connection string. Returns: A JSON object (string) with keys: - `docker_image`: the image name to build/run. - `mcp_manifest`: the full MCP manifest (server metadata + tools). - `subscription_tiers`: pricing tiers derived for the capability. - `connection_string`: how a client connects to the running server. Example: package_capability( capability_id="translate.multi@v2", product_id="prod-translate", name="Lyra Translator", description="Translate text into multiple languages.", input_schema={"type": "object", "properties": {"text": {"type": "string"}}, "required": ["text"]}, )

name ServerName registry Registry product_id ProductId description ServerDescription input_schema InputSchema capability_id CapabilityId
generate_dockerfile
annotations: none low

Generate a ready-to-build Dockerfile for the packaged MCP server. Takes the same capability inputs as `package_capability` and returns the Dockerfile text that builds the self-hosted MCP server image for it. Returns: The Dockerfile contents as plain text — write it to `Dockerfile` and run `docker build` to produce the image named in `package_capability`'s `docker_image` field. Example: generate_dockerfile( capability_id="translate.multi@v2", product_id="prod-translate", name="Lyra Translator", )

name ServerName registry Registry product_id ProductId description ServerDescription input_schema InputSchema capability_id CapabilityId
generate_claude_desktop_config
annotations: none low

Generate a claude_desktop_config.json snippet for the packaged MCP server. Takes the same capability inputs as `package_capability` and returns the `mcpServers` entry that registers the docker-run MCP server with Claude Desktop (or any MCP host that reads this config format). Returns: A JSON object (string) containing an `mcpServers` block — merge it into the user's existing `claude_desktop_config.json` and restart the host. Example: generate_claude_desktop_config( capability_id="translate.multi@v2", product_id="prod-translate", name="Lyra Translator", )

name ServerName registry Registry product_id ProductId description ServerDescription input_schema InputSchema capability_id CapabilityId

Permissions 4

network medium
Server uses network capabilities via: httpx, urllib
filesystem low
Server uses filesystem capabilities via: os, pathlib, tempfile
database medium
Server uses database capabilities via: sqlite3
env_vars low
Server uses env_vars capabilities via: os.environ, os.getenv()

Scan Findings 73

low
Tool 'get_random' has no annotations annotation_checker · 100%
low
Tool 'get_randomness_beacon' has no annotations annotation_checker · 100%
low
Tool 'ask_oracle' has no annotations annotation_checker · 100%
low
Tool 'verify_random' has no annotations annotation_checker · 100%
low
Tool 'compute_vdf' has no annotations annotation_checker · 100%
low
Tool 'verify_vdf' has no annotations annotation_checker · 100%
low
Tool 'get_reputation_scores' has no annotations annotation_checker · 100%
low
Tool 'get_agent_trust' has no annotations annotation_checker · 100%
low
Tool 'verify_reputation' has no annotations annotation_checker · 100%
low
Tool 'list_oracle_capabilities' has no annotations annotation_checker · 100%
low
Tool 'aggregate_values' has no annotations annotation_checker · 100%
low
Tool 'audit_compute_cost' has no annotations annotation_checker · 100%
low
Tool 'verify_compute_cost' has no annotations annotation_checker · 100%
low
Tool 'compute_least_time_route' has no annotations annotation_checker · 100%
low
Tool 'verify_least_time_route' has no annotations annotation_checker · 100%
low
Tool 'analyze_cascade_risk' has no annotations annotation_checker · 100%
low
Tool 'verify_cascade_risk' has no annotations annotation_checker · 100%
low
Tool 'get_quasirandom_sequence' has no annotations annotation_checker · 100%
low
Tool 'optimize_route' has no annotations annotation_checker · 100%
low
Tool 'get_blue_noise' has no annotations annotation_checker · 100%
low
Tool 'analyze_network_resilience' has no annotations annotation_checker · 100%
low
Tool 'verify_network_resilience' has no annotations annotation_checker · 100%
low
Tool 'package_capability' has no annotations annotation_checker · 100%
low
Tool 'generate_dockerfile' has no annotations annotation_checker · 100%
low
Tool 'generate_claude_desktop_config' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: mcp@1.6,<4 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.6,<4 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.6,<4 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.6,<4 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.6,<4 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.6,<4 (PYSEC-2026-1616) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.6,<4 (PYSEC-2026-1617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.6,<4 (PYSEC-2026-1618) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.6,<4 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.6,<4 (PYSEC-2026-3483) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2 (GHSA-mr82-8j83-vxmv) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2 (PYSEC-2026-1812) dependency_analyzer · 95%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: get_random manifest_parser · 90%
info
Tool: get_randomness_beacon manifest_parser · 90%
info
Tool: ask_oracle manifest_parser · 90%
info
Tool: verify_random manifest_parser · 90%
info
Tool: compute_vdf manifest_parser · 90%
info
Tool: verify_vdf manifest_parser · 90%
info
Tool: get_reputation_scores manifest_parser · 90%
info
Tool: get_agent_trust manifest_parser · 90%
info
Tool: verify_reputation manifest_parser · 90%
info
Tool: list_oracle_capabilities manifest_parser · 90%
info
Tool: aggregate_values manifest_parser · 90%
info
Tool: audit_compute_cost manifest_parser · 90%
info
Tool: verify_compute_cost manifest_parser · 90%
info
Tool: compute_least_time_route manifest_parser · 90%
info
Tool: verify_least_time_route manifest_parser · 90%
info
Tool: analyze_cascade_risk manifest_parser · 90%
info
Tool: verify_cascade_risk manifest_parser · 90%
info
Tool: get_quasirandom_sequence manifest_parser · 90%
info
Tool: optimize_route manifest_parser · 90%
info
Tool: get_blue_noise manifest_parser · 90%
info
Tool: analyze_network_resilience manifest_parser · 90%
info
Tool: verify_network_resilience manifest_parser · 90%
info
Tool: package_capability manifest_parser · 90%
info
Tool: generate_dockerfile manifest_parser · 90%
info
Tool: generate_claude_desktop_config manifest_parser · 90%
info
Required env vars (14) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 70%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
critical
Tool poisoning in 'list_oracle_capabilities': Cross-tool sequencing directive poisoning · 85%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%