supership-scan

Predeploy security scanner for AI code. 80+ patterns. Runs locally. x402 attestation.

Documentation

supership

The search engine and clearing house for the agent economy. Built by Crest Deployment Systems.

supership indexes the entire x402 economy -- 52,000 services -- so an AI agent can find the right data and fetch it with a receipt. Reading the menu is free. Fetching through supership returns the goods plus a signed delivery receipt: proof of what you got, from where, settled on-chain. That is the part going direct can never give you.

Install

npm install -g supership-scan

Published on npm as supership-scan (the original name; kept for install continuity).

Requires Node.js 18+.

MCP server

npx -y -p supership-scan supership-mcp

Or wire it into any MCP client (Claude Code, Cursor, Windsurf):

{
  "mcpServers": {
    "supership": {
      "command": "npx",
      "args": ["-y", "-p", "supership-scan", "supership-mcp"]
    }
  }
}

Tools

ToolWhat it does
manifestSearch the whole x402 economy (52,000 services) for what you need. Ranked by distinct payers -- real adoption, not call counts. Free.
procureFetch any source. supership fronts payment across any chain, delivers the goods, and returns a signed receipt. No wallet needed on the seller's chain. First runs free.
list_catalogBrowse a curated catalog of procurable sources.
scan_directoryScan a local directory for security issues before you ship.

Free menu, paid kitchen

  • The menu is free. manifest shows the real market: every relevant source, free or paid, ranked by who actually paid for it. That ranking is the part you cannot compute yourself -- it takes the whole index and the payment history.
  • The kitchen is the product. When you procure, supership crosses to the source (on whatever chain it lives), pays, takes delivery, and hands you the goods plus a signed delivery receipt -- an Ed25519 record of what was delivered (source, SHA-256 of the goods, settlement tx, timestamp), verifiable at /api/pubkey. That receipt is the provenance going direct cannot give you.

HTTP API

EndpointPriceDescription
/manifest?need=FreeSearch the economy; ranked by real payers
/catalogFreeCurated procurable sources
/sample?url=FreeFetch one source on the house -- with a signed receipt
/procure?url=per-callFetch any source; goods + signed receipt

API base: https://supership.crestsystems.ai

Discovery: agent.json | llms.txt | OpenAPI

What supership does not do

  • It does not sell the data. It indexes the market and delivers what you ask for, with a receipt.
  • It does not hold your funds. The MCP server holds no keys and moves no money locally.
  • It does not give investment advice.

License

Apache 2.0.