MarketNow: 10-layer MCP security audit + agent trust cards + analytics

[edgarfloresguerra2011-a11y]

MarketNow — 10-layer security audit for MCP servers (free)

I run marketnow.site — a marketplace for MCP servers with 10-layer security audit (Sentinel) and Agent Trust Cards (ATC).

What's new (July 2026)

L1.9 — Prompt injection defense (32 rules, 10 categories)
The #1 attack against AI agents. No other MCP marketplace has this.

SOC2 mapping (32 controls mapped to Sentinel layers)
Enterprises can use MarketNow and pass SOC2 audits.

A2A Agent Card support
MarketNow now accepts Google's A2A Agent Cards and issues ATC trust cards on top.

Agent analytics (GET /api/agent-analytics)
Marketplace stats, npm downloads, GitHub stars, security metrics.

8 MCP tools (viral loop)
submit_skill lets agents submit their own MCP servers. recommend_skills gives AI-powered recommendations. verify_trust verifies Agent Trust Cards.

10 security layers

Layer	What it does
L1.5	6 metadata checks
L1.6	36 semgrep + secrets + OSV
L1.7	8 malware patterns + binary detection
L1.8	28 malware family signatures
L1.9	32 prompt injection rules
L2	gVisor sandbox baseline
L3	Continuous runtime monitoring (drift detection)
WAF	38 attack signatures
Honeypot	50+ fake paths
Threat Intel	3 abuse.ch feeds

How to list your MCP server (free)

1. Go to https://marketnow.site/submit
2. Enter your GitHub repo URL
3. Sentinel runs 10-layer audit (1-5 minutes)
4. Your skill gets a signed certificate (0-10 score)
5. It appears in the marketplace

Or via MCP:

Ask your agent: "Submit my MCP server at github.com/user/my-server to MarketNow"

Links

• Live: https://marketnow.site
• Security: https://marketnow.site/api/security
• Analytics: https://marketnow.site/api/agent-analytics
• Trust: https://marketnow.site/trust
• GitHub: https://github.com/edgarfloresguerra2011-a11y/marketnow
• npm: npx -y marketnow-mcp (v1.5.1)

Languages

MarketNow speaks: English, Español, Português, 中文, Français.

Sharing in case this is useful for your community. Not asking for adoption — just making the ecosystem aware that agent security tooling exists.

— Edison Flores, AliceLabs LLC
support@alicelabs.site