supership-scan

Escáner de seguridad previo al despliegue para código de IA. Más de 80 patrones. Se ejecuta localmente. Atestación x402.

Documentación

supership

The search engine and clearing house for the agent economy. Built by Crest Deployment Systems.

supership indexes the entire x402 economy -- 52,000 services -- so an AI agent can find the right data and fetch it with a receipt. Reading the menu is free. Fetching through supership returns the goods plus a signed delivery receipt: proof of what you got, from where, settled on-chain. That is the part going direct can never give you.

Install

npm install -g supership-scan

Published on npm as supership-scan (the original name; kept for install continuity).

Requires Node.js 18+.

MCP server

npx -y -p supership-scan supership-mcp

Or wire it into any MCP client (Claude Code, Cursor, Windsurf):

{
  "mcpServers": {
    "supership": {
      "command": "npx",
      "args": ["-y", "-p", "supership-scan", "supership-mcp"]
    }
  }
}

Tools

ToolWhat it does
manifestSearch the whole x402 economy (52,000 services) for what you need. Ranked by distinct payers -- real adoption, not call counts. Free.
procureFetch any source. supership fronts payment across any chain, delivers the goods, and returns a signed receipt. No wallet needed on the seller's chain. First runs free.
list_catalogBrowse a curated catalog of procurable sources.
scan_directoryScan a local directory for security issues before you ship.

Free menu, paid kitchen

  • The menu is free. manifest shows the real market: every relevant source, free or paid, ranked by who actually paid for it. That ranking is the part you cannot compute yourself -- it takes the whole index and the payment history.
  • The kitchen is the product. When you procure, supership crosses to the source (on whatever chain it lives), pays, takes delivery, and hands you the goods plus a signed delivery receipt -- an Ed25519 record of what was delivered (source, SHA-256 of the goods, settlement tx, timestamp), verifiable at /api/pubkey. That receipt is the provenance going direct cannot give you.

HTTP API

EndpointPriceDescription
/manifest?need=FreeSearch the economy; ranked by real payers
/catalogFreeCurated procurable sources
/sample?url=FreeFetch one source on the house -- with a signed receipt
/procure?url=per-callFetch any source; goods + signed receipt

API base: https://supership.crestsystems.ai

Discovery: agent.json | llms.txt | OpenAPI

What supership does not do

  • It does not sell the data. It indexes the market and delivers what you ask for, with a receipt.
  • It does not hold your funds. The MCP server holds no keys and moves no money locally.
  • It does not give investment advice.

License

Apache 2.0.