Agentic Swarm Marketplace (Hobie1Kenobi/agentic-crypto-swarm-prototype) is an MCP server listed on the M8ven Trust Index. It scores 74 out of 100, grade C. It declares 5 tools. No publisher has claimed this listing.

Emerging

74/100

9 days ago

Agentic Swarm Marketplace

Item: Agentic Swarm Marketplace
Rating: 74
Author: M8ven

MCP server that exposes T54 x402 seller SKUs from OpenAPI as tools: contract triage, audit, and monitoring plus T54 commerce tools. HTTP 402 invoices are paid via x402_broker_client (XRPL / Base USDC depending on env); stdio for Cursor/Claude, Streamable HTTP for hosted use.

→ Hobie1Kenobi/agentic-crypto-swarm-prototype · listed on glama

Emerging. No concerning findings. Grades remain capped until the project builds reputation through adoption. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every push why connect →

Who stands behind it

Hobie1Kenobi

Source: Glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

⚡ Connect GitHub for Live Monitored

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Secret credentials may flow to a network call

3 flows detected: SMITHERY_API_KEY, AGORAGENTIC_API_KEY. We can’t prove the destination matches the brand the credential belongs to.

🔐

You'll be asked for 10 credentials: SMITHERY_API_KEY, AIRDROP_CLAIMANT_PRIVATE_KEY, ROOT_STRATEGIST_PRIVATE_KEY, AGORAGENTIC_API_KEY, PRIVATE_KEY, FINANCE_DISTRIBUTOR_PRIVATE_KEY, X402_BUYER_BASE_MAINNET_PRIVATE_KEY, WORKER_PRIVATE_KEY, VALIDATOR_PRIVATE_KEY, OLAS_EOA_PRIVATE_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// environment variables

To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.

configX402_MCP_OPENAPI_PATH

configX402_MCP_DRY_RUN

configX402_MCP_TIMEOUT_SEC

configX402_BROKER_PAY_MODE

configX402_PAY_MODE

configMCP_HTTP_DNS_REBINDING

configMCP_HTTP_ALLOWED_HOSTS

configMARKETPLACE_PUBLIC_BASE_URL

configX402_SELLER_PUBLIC_URL

configX402_MCP_SSE_HOST

configX402_MCP_STREAMABLE_PORT

configX402_MCP_SSE_PORT

configCHAIN_ID

configRPC_URLRPC: set or CELO_SEPOLIA_RPC_URL for Celo Sepolia; Alchemy optional for Base legacy

configUSE_ENV_LOCAL

configT54_SELLER_HOST

configT54_LOCAL_MERCHANT_HOST

configT54_SELLER_PORT

configT54_LOCAL_MERCHANT_PORT

configT54_SELLER_PUBLIC_URL

configOLAS_ENABLED

configOLAS_TEST_PROMPT

configOLAS_PRIORITY_MECH_ADDRESS

configOLAS_TOOL

configXRPL_RPC_URL

configT54_SELLER_PUBLIC_BASE_URLMulti-SKU paid GET routes with Pydantic-validated JSON and per-route prices in drops (see [packages/agents/config/t54_seller_skus.json](packages/agents/config/t54_seller_skus.json)): micropayment ping (/hello), short constitution-safe Q&A (/x402/v1/query), structured research brief (/x402/v1/research-brief), and heuristic prompt/ethics review (/x402/v1/constitution-audit). GET /health is free and lists SKUs. Discovery builds public resource_urls from T54_SELLER_PUBLIC_BASE_URL + each path ([x402_providers.json](packages/agents/config/x402_providers.json)).

configX402_DISCOVERY_ENABLED

configX402_SCOUT_CATALOG_ENABLED

configSMITHERY_QUALIFIED_NAME

🔐 secretSMITHERY_API_KEY

configX402_SELLER_PROBE_URL

configMCP_PROBE_USER_AGENT

configX402_SELLER_NETWORK

configX402_TEST_FACILITATOR_URL

🔐 secretAIRDROP_CLAIMANT_PRIVATE_KEY

configAIRDROP_CLAIM_ROUTING_JSON

configAIRDROP_CLAIM_QUEUE_DB

configAIRDROP_CLAIM_EXECUTION_ENABLED

configCLAIM_WALLET_ROLE

configAIRDROP_CLAIM_WALLET_ADDRESS

configCELO_SEPOLIA_RPC_URLRPC: set RPC_URL or for Celo Sepolia; Alchemy optional for Base legacy

configPRIVATE_RPC_URL

configPAYMENT_RAIL_MODEXRPL payment rail: =mock_payment or xrpl_x402_payment; run python scripts/run-multi-rail-demo.py --force-hybrid

configXRPL_ENABLED

configXRPL_PAYMENT_MODE

configMARKET_MODEPrivate settlement (Celo Sepolia): =private_celo

configCOMPUTE_WORKER_METADATA

configCOMPUTE_MINER_METADATA

configCUSTOMER_BALANCE_ENABLED

configCUSTOMER_BALANCE_DB_PATH

configREALISM_DURATION_HOURS

configREALISM_MAX_CYCLES

configXRPL_QUOTE_DRIVEN

configRECONCILIATION_ENABLED

configT54_XRPL_MODE

configT54_XRPL_DRY_RUN

configT54_X402_RESOURCE_URL

configX402_T54_RESOURCE_URL

configREVENUE_SERVICE_ADDRESSSimulation: Without it runs in dry-run (LLM only, log to simulation_log.txt). With contract address and a funded key, it sends real fulfillQuery txs.

🔐 secretROOT_STRATEGIST_PRIVATE_KEY

configAPI_402_BASE_URL

configX402_TEST_QUERY

configX402_DRY_RUN

🔐 secretAGORAGENTIC_API_KEY

configX402_SELLER_SMOKE_URL

configXRPL_DISCOVERY_CONFIG

configDISCOVERY_KEYWORD_CONFIG

configPUBLIC_API_ORIGIN

configMARKETPLACE_DASHBOARD_BUNDLE_PRICE_USD

configCELO_402_PUBLIC_URL

configMCP_SSE_PUBLIC_URL

configX402_INTAKE_RESALE_PUBLIC_URL

configAPI_402_PUBLIC_URL

configAPI_402_HOST

configAPI_402_PORT

configMARKETPLACE_HTTP_HOST

configMARKETPLACE_HTTP_PORT

configCOMPUTE_MARKETPLACE_ADDRESS

🔐 secretPRIVATE_KEY

configCOMPUTE_MINER_HOST

configCOMPUTE_MINER_PORT

configSIMULATION_NUM_USERS

configSIMULATION_PROFIT_THRESHOLD_ETHProfit distribution: when finance balance ≥ (default 0.005), simulation sends 60% to BENEFICIARY_ADDRESS and leaves 40% reinvested

configBENEFICIARY_ADDRESSProfit distribution: when finance balance ≥ SIMULATION_PROFIT_THRESHOLD_ETH (default 0.005), simulation sends 60% to and leaves 40% reinvested

configFINANCE_DISTRIBUTOR_ADDRESSTreasury / finance distributor: see in .env

🔐 secretFINANCE_DISTRIBUTOR_PRIVATE_KEY4. Set BENEFICIARY_ADDRESS and optionally for distribution.

configT54_SELLER_SKUS_JSON

configTASK_ESCROW_ETH

configTASK_MIN_VALIDATORS

configTASK_MIN_AVG_SCORE

configTASK_DEADLINE_SECONDS

configCOMPUTE_TASK_QUERY

configCOMPUTE_TASK_METADATA

configTASK_REQUESTER_ROLE

configTASK_WORKER_ROLE

configTASK_VALIDATOR_ROLE

configCOMPUTE_MINER_URLS

configPUBLIC_SITE_ORIGIN

configACP_PROTOCOL_VERSION

configX402_SELLER_PAY_TO

🔐 secretX402_BUYER_BASE_MAINNET_PRIVATE_KEY

configMCP_PROTOCOL_VERSION

configMCP_SERVER_IMPLEMENTATION_VERSION

configAGENT_SKILLS_CONTENT_DIR

configOAUTH_ISSUER

configOAUTH_RESOURCE_IDENTIFIER

configOAUTH_AUTHORIZATION_SERVERS

configOAUTH_AUTHORIZATION_ENDPOINT

configOAUTH_TOKEN_ENDPOINT

configOAUTH_JWKS_URI

configOAUTH_JWKS_JSON

configAIRDROP_CLAIM_ALLOW_UNLISTED

configAIRDROP_FARM_SCORE_THRESHOLD

configCHAIN_NAME

🔐 secretWORKER_PRIVATE_KEY

🔐 secretVALIDATOR_PRIVATE_KEY

configX402_USE_FACILITATOR

configX402_FACILITATOR_MAINNET

configX402_FACILITATOR_TESTNET

configX402_ALLOWED_NETWORKS

configMAX_USDC_SPEND_PER_TX_ATOMIC

configMAX_USDC_SPEND_PER_TX

configSELLER_ACCESS_LOG

configREPORT_OUTPUT_DIR

configPRICING_XRP_TO_WEI

configPRICING_XRP_TO_ETH

configPRICING_RLUSD_TO_WEI

configPRICING_RLUSD_TO_ETH

configOLAS_CHAIN_CONFIG

configOLAS_DELIVERY_TIMEOUT_SEC

🔐 secretOLAS_EOA_PRIVATE_KEY

configOLAS_MECHX_PATH

configPAYMENT_WEI

configRECONCILIATION_DB_PATH

configLLM_DRY_RUN

configOLLAMA_MODEL

configOLLAMA_BASE_URL

configPUBLIC_ADAPTER_PROMPT

configPYTHON

configTREASURY_ADDRESS

configAGENT_XRPL_WALLET_SEED

configXRPL_WALLET_SEED

configSWARM_AGENT_XRPL_SEED

configXRPL_PAYER_WALLET_SEED

configXRPL_SETTLEMENT_WALLET_SEED

configXRPL_RECEIVER_SEED

configMAX_XRP_SPEND_PER_TX_DROPS

configMAX_XRP_SPEND_PER_TX

configX402_BROKER_MAINNET_ACK

Deployment configuration, supplied by whoever hosts the server. Users are not asked for these.

deployPORT

// quality suggestions

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

6/6 tools missing one or more hints — t54_list_operations (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); t54_x402_request (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); contract_triage (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +3 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Tool test coverage

Only 0/6 tools referenced in tests (0%)

Write tests that reference each tool by name so every tool has at least one test.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail

The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.

// improvement guidance — verified publishers only

We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/hobie1kenobi/agentic-crypto-swarm-prototype)](https://m8ven.ai/mcp/hobie1kenobi/agentic-crypto-swarm-prototype)

Shows your grade and updates automatically. Prefer no grade? Append ?variant=verified to the badge URL.

commit: 99490c38349d3fdc41e4150c3d4138e45d0cb030

code hash: 4ef84d689470e88e453a56a38a03f3c929b33c8ca906267a5cb20711d37ae02a

verified: 9/1/2026, 6:41:16 PM

view raw JSON →

Check MCPs from inside your assistant

Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check

check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern

How to add it →Free · no account needed · works in any MCP client