AgenticMart FAQ
Quick answers on safety, installing, listing and selling, so you can pick the right agent tool and ship faster.
Jump to: About AgenticMart · Safety and the security scan · Finding and installing tools · For builders and sellers
About AgenticMart
What is AgenticMart?
AgenticMart is a marketplace for AI agents, MCP servers and agent skills, with 5,387 open-source listings and a free security scan for each one we can run. Developers list for free today, and paid selling is opening soon. About AgenticMart →
Is AgenticMart legit?
Yes. AgenticMart is an independent project run by its founder, Esha Sabir, who is named on the site with her public profiles. The scanner's rules are open source on GitHub, every scan report names the commit and date it covers, and the site doesn't invent download or user numbers. Who runs AgenticMart →
Is AgenticMart the same as Agentic.Market?
No. AgenticMart (agenticmart.org) is an independent marketplace for open-source AI agents, MCP servers and agent skills. Agentic.Market (agentic.market) is a separate Coinbase-run directory of paid x402 services that agents call per request; the two are not connected.
Who runs AgenticMart?
Esha Sabir, an AI and machine-learning developer, founded and runs AgenticMart. It is a self-funded project. Esha Sabir →
Is AgenticMart free?
Yes. Browsing, installing, listing a project and the security scan are all free. A platform fee will apply only to paid sales once paid selling opens. Sell AI agents →
How does AgenticMart make money?
From a planned 12% platform fee on paid sales once checkout opens, plus optional paid features for sellers. Listing and scanning stay free, and payment never changes a scan result. Fees and selling →
Is AgenticMart affiliated with Anthropic, OpenAI or Google?
No. AgenticMart is independent and not endorsed by Anthropic, OpenAI, Google or any project it lists. It lists tools that work with their products, such as Claude skills and MCP servers.
Safety and the security scan
Is it safe to install MCP servers from AgenticMart?
Check the listing first. Each page says whether the project has been scanned and what it can access. A local MCP server runs with your permissions, so give it only the folders, keys and network access it needs, even when its scan is clean. Security-scanned MCP servers →
How common are security problems in MCP servers?
In AgenticMart's scans of more than 4,000 open-source repositories, confirmed malware was rare, but about two in three ship a dependency with a known vulnerability. The full, dated figures are published with the method. MCP security statistics →
What does the AgenticMart scan check?
It looks for signs of malicious code: hidden or encoded code that runs itself, crypto miners, reverse shells, known-malicious packages, install scripts that download and run code, and code that reads secrets and sends them out. It also lists leaked secrets, vulnerable dependencies, and what the tool can do, such as running commands or reaching the network. How we scan →
What does "No malware found" mean?
It means the scan of one specific commit found no signs of malicious code. It is not a guarantee that the tool is bug-free or safe with any access you give it; the report shows exactly what was checked and when. Scan labels explained →
Why does a listing say "Not scanned yet"?
Usually because the repository has no open-source licence we can detect, so we don't run its code. The maintainer can claim the listing to start a scan. Until then, read the code and limit what the tool can access. Claim a listing →
Can a security scan prove a tool is safe?
No automated scan can. It is evidence about one commit, checked against known malicious patterns. Pin the version you reviewed, keep approval prompts on for actions that write, send or delete, and use least-privilege keys. Least privilege for AI agents →
My project is wrongly flagged. What do I do?
Claim the listing with GitHub to fix the cause and start a rescan, or contact us and we'll look at it again. Contact us about a listing →
How do I report a dangerous listing?
Use the report form and include the repository and what you found. Security issues are handled under our disclosure policy. Security and disclosure →
Finding and installing tools
How do I find the right MCP server?
Search the MCP server directory or pick a category, then compare stars, last update, licence and scan status on each listing. Each page has the install config for common clients. MCP server directory →
How do I install an MCP server in Claude Code, Cursor or VS Code?
Open the server's page on AgenticMart and copy the config for your client. In Claude Code that is usually one `claude mcp add` command; Cursor and VS Code use an mcp.json file. How to install an MCP server →
How do I install a Claude skill?
Download or clone the skill's folder into your skills directory (for Claude Code, ~/.claude/skills/) so that its SKILL.md sits at the top of the folder. Claude loads it when a task matches the skill's description. What are agent skills? →
Can I search AgenticMart from inside my AI app?
Yes. Add https://agenticmart.org/api/mcp as a remote MCP server in Claude Code, Cursor or any MCP client; it has read-only search and lookup tools and needs no key. There is also an open-source command line tool. Developer tools →
Where do AgenticMart listings come from?
From public GitHub repositories, plus projects that developers submit. We list originals only: no forks, re-uploads, archived repositories or curated link lists.
What's the difference between AI agents, MCP servers and agent skills?
An AI agent carries out tasks on its own. An MCP server gives AI apps access to a tool or data source through the Model Context Protocol. An agent skill is a folder of instructions and scripts that teaches an agent a specific job. Agent skills vs MCP servers →
What are A2A, ACP and x402?
They are agent protocols: A2A lets agents talk to other agents, ACP covers agent checkout and commerce, and x402 lets agents pay for APIs per request. MCP, by contrast, connects an agent to tools and data. Agent protocols →
For builders and sellers
How do I list my AI agent, MCP server or skill?
Submit the GitHub repository on the submit page. Listing is free, and the project gets a free scan with a public report. Submit a project →
How do I claim my listing?
Click "Claim this listing" on its page and sign in with GitHub; we check that your account has admin or maintain access to the repository. Claiming lets you edit the listing and start rescans. Claim a listing →
Can I sell my AI agent on AgenticMart?
You can list it free now; paid selling is opening soon. Sellers who list now are first in line when checkout opens. Sell AI agents →
What fee will AgenticMart charge?
The planned platform fee is 12% of each paid sale. Listing stays free, and the fee will be confirmed before checkout opens. Fees and selling →
How do I remove my project from AgenticMart?
Send a takedown request with the repository name. Maintainers can also claim the listing to change it instead. Request removal →
How is AgenticMart different from other MCP directories?
Other directories, such as mcp.so, Glama, Smithery and MCP Market, list MCP servers too. AgenticMart covers MCP servers, AI agents and agent skills together, shows a dated public scan report wherever we can run the code, lists originals only, and lets builders list free and sell soon. Best MCP servers →