Directory / AgentMart core tools

AgentMart core tools

Q: Is AgentMart core tools MCP server safe?

QAmcp's test on 25 Oct 2026: No hidden instructions were found in its tool descriptions. Its error messages showed no secrets or internal details. 5 of its 33 tools are labeled read-only; the others may change or send things. Overall it scored 96/100 on 25 Oct 2026. A test can only see what the server shows from outside, not what it does with your data behind the scenes. Connect servers from makers you trust.

by agentmart.ciphyr.ai · https://agentmart.ciphyr.ai/mcp/core

The AgentMart shop with a shorter tool list: the same sign-in, balance and items as /mcp.

33 tools✓ no account neededPricing: not listed

Visit website

96 /100

PASS · WITH NOTES

12 of 12 checks · 25 Oct 2026

Is AgentMart core tools MCP server safe?

No hidden instructions were found in its tool descriptions.
Its error messages showed no secrets or internal details.
5 of its 33 tools are labeled read-only; the others may change or send things.
Overall it scored 96/100 on 25 Oct 2026.

A test can only see what the server shows from outside, not what it does with your data behind the scenes. Connect servers from makers you trust.

What it can do

33 tools, in the server's own words.

create_passport

Only for MCP apps that cannot sign in to AgentMart: create your passport (your identity here).

whoamiread-only

Your passport, how strong this sign-in is (credential), balance (owner.balance_expires_at: when it expires without a top-up or purchase; tell your human in tim…

revoke_passport

End your passport for good: its token, sessions and app sign-ins stop working at once and cannot be restored.

search_catalogread-only

Search the shelves.

get_itemread-only

Full details of one item by slug.

top_up

Create a payment link to fund your balance.

buy

Buy an item from your balance.

cancel_job

Cancel a website test still waiting for its sites' proof (status needs_verification): the whole price comes back to your owner's balance as store credit at onc…

check_emails

Check up to 1000 of your owner's own email addresses before sending ($1 for up to 100 addresses, $4 for up to 1,000, counted by different entries; a list where…

locker_put

Store a value in your memory locker under a key (survives between sessions).

locker_delete

Delete a key from your memory locker.

wakeup_cancel

Cancel a wake-up call that has not fired yet (scheduled or retrying).

withdraw_ask

Withdraw a question to your owner that is still waiting for an answer, because you no longer need it.

uptime_remove

Stop watching a URL.

schedule_delete

Delete a repeating wake-up and its runs.

heartbeat_remove

Stop watching a job.

reminder_delete

Delete a reminder to your human.

inbox_pro_set

Set your webhook inbox pro plan: inbox_instance_id (the inbox to upgrade, same address), forward ({url} or null), verify ({preset: github|stripe|slack|zoom|hma…

queue_ack

Done: the messages of these leases are deleted.

queue_extend

More time for long work: each lease that has not run out ends visibility_timeout_seconds from now (a shorter time than is left shortens it).

check_sender

Check how the domain your owner sends email from is set up ($1 per domain, from the balance): MX, SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI, reverse DNS and a b…

share_set

Publish content on your share link so a human can see it (HTML, plain text, Markdown, PNG, JPEG or PDF, up to 4 MB).

set_form_digest

Change your form inbox's settings: the daily digest email to your owner (digest on or off: at most one email a day for all their forms, only while new entries …

claim_refund

Claim store credit for a purchase that did not work.

and 9 more

Test results

Safe mode: only tools labeled read-only were run. How the test works

!
Tools work with good inputs
1 warning
- –whoami: Needs you to sign in, so it was not tested (not counted against the server)
- !search_catalog: Answered with about 109 KB of text. Many AI apps cut off tool answers this big, so the AI may never see the end of it.
- –agentmart_read: Needs you to sign in, so it was not tested (not counted against the server)
- –create_passport: Not run: labeled as changing data
- –revoke_passport: Not run: labeled dangerous
- –top_up: Not run: labeled as changing data
- –buy: Not run: labeled dangerous
- –cancel_job: Not run: labeled dangerous
- and 25 more
note
✓
ConnectsConnected in 307 ms
pass
✓
Ready for the newest MCP versionUses the latest MCP version (2026-07-28)
pass
✓
Lists its toolsFound 33 tools
pass
✓
Every tool is describedAll 33 tools and their inputs are described
pass
✓
Tools are labeled safe or dangerousEvery tool has a safety label
pass
✓
No hidden instructionsNo hidden instructions found in tool descriptions
pass
✓
Bad inputs give a clean error
All good
- –whoami: Needs you to sign in, so bad inputs were not tested
- ✓search_catalog: Refused wrong type for "query" with a clear error
- ✓get_item: Refused missing required input "slug" with a clear error
- ✓get_item: Refused wrong type for "slug" with a clear error
- ✓agentmart_tools: Refused wrong type for "words" with a clear error
- –agentmart_read: Needs you to sign in, so bad inputs were not tested
pass
✓
Tools work togethersearch_catalog → get_item: get_item found what search_catalog returned (slug = "owner-reminders")
pass
✓
Fast enough
All good
- ✓Connecting took 307 ms
- ✓Listing tools took 185 ms
- ✓Average tool answer: 186 ms
- ✓search_catalog: Slowest tool: search_catalog (423 ms)
pass
✓
No secrets leakedChecked 11 error messages: no secrets or internal details
pass
✓
Resources and prompts work
All good (1 resource)
- ✓Opened 1 of 1 resources
- ✓An address that does not exist gets a clean "not found" error
pass

Test it yourself

Free and open source. Same checks, same score.

npx qamcp-cli https://agentmart.ciphyr.ai/mcp/core

Score over time

25 Oct 202696

One test so far. New tests will show here.

Reviews

Coming soon: reviews from people who use AgentMart core tools, signed in with GitHub, one per person. Reviews never change the score.

Is this your server?

Soon you can claim this page: re-test it from here, reply to results, and show a "Tested by QAmcp" badge.

Have a concern, or want it removed? Ask us and we'll take it off the list. How the directory works