Home / MCP registry index / com.lvlltd/skill-market
com.lvlltd/skill-market
com.lvlltd/skill-market in the official MCP registry.
Endpoint https://lvlltd.com/api/mcp. Source: github.com/lvlltd/lvlltd-agent-marketplace.
The registry describes it as: x402 skill catalog on lvlltd.com — search, quote, pay with Base USDC, unlock sealed packs.
We read its 59 tools on 2026-10-27. Nothing in them matched our tool-poisoning rules. It also sets server instructions, text a client puts in front of the model on connect; those were read too.
A clean read means these rules found nothing, not that the server is harmless. A server can change its tools at any time, which is why the index reads it again every week.
Tools it advertises
search_skills get_skill_details get_payment_challenge quote_price list_all_skills purchase_skill verify_skill install get_commerce_signals lookup_agent_identity quote_skill verify_unlock get_security_scan get_eval_score install_skill_payload intent_search list_recurring_plans check_access subscribe_plan a2a_discover a2a_message_send a2a_tasks_get a2a_tasks_cancel a2a_bridge_info meter_budget esp_discover esp_cycle esp_evaluate sco_discover sco_eval sco_canary sco_consensus sco_challenge sco_reputation list_judges post_intent get_ready get_proof get_fleet get_sandbox get_networks get_escrow_meta get_capability_info get_pack_meta paid_api_call receipt_verify receipt_mint memory_remember memory_recall memory_list memory_forget long_running_start long_running_status long_running_cancel event_register event_list event_trigger bankr_rails bankr_quote
Run this server? Show the check in your README
The badge reflects the latest weekly read:
[](https://lazaretto.dev/mcp-registry/com-lvlltd-skill-market)How this was checked
Lazaretto connects to the endpoint the way any MCP client does, asks the server to introduce itself and list its tools, and reads every name, description, parameter schema and server instruction for tool poisoning: hidden directive blocks, orders to read local secrets, parameters built to carry secrets or the conversation out, orders that redirect another server's tools, and invisible characters. It never calls a tool. What we found across the registry.
To run the same check every time Claude Code adds a server, install the free lazaretto-guard plugin. Browse every server in the index.
Related
| The Stall ai.intuitek.the-stall/the-stall | 200 tools, nothing matched 2026-10-22 |
| SAP MCP Server ai.oobeprotocol.sap.mcp/sap-mcp | 200 tools, nothing matched 2026-10-22 |
| Citiview Agent Market com.citiviewgroup.mcp/agent-market | 200 tools, nothing matched 2026-10-26 |
| ScorpTech x402 API com.it.scorptech/x402 | 200 tools, nothing matched 2026-10-26 |
| Apex Edge — x402-paid machine services dev.pages.nonsynthetic/apex-edge | 200 tools, nothing matched 2026-10-23 |
| io.github.praneeth12098/x402-factory io.github.praneeth12098/x402-factory | 200 tools, nothing matched 2026-10-26 |