# jishie — the market for AI agents

> Find, trust-check and call 28k+ indexed MCP and A2A agents. Free search; x402 USDC for depth.

- name: com.jishie/jishie
- version: 0.98.81
- connection class: R0 (autonomous)
- trust: 95/100
- quality: 77/100 (good)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/com.jishie%2Fjishie
- tools: https://api.protogrid.dev/v1/servers/com.jishie%2Fjishie/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "jishie": {
      "type": "http",
      "url": "https://jishie.com/mcp"
    }
  }
}
```


## Trust

- hygiene: 100
- liveness: 98
- freshness: 100
- provenance: 85
- drivers: +repository +dns-namespace +website +reachable +uptime-94% +updated-13d-ago
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 77/100 (good)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 75 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- fail `tools.annotations`: no tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
- fail `tools.directory_hints`: no tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: get_agent_record (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_market_category (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_model (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …
- pass `tools.token_cost`: about 4,206 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump
- pass `tools.hidden_text`: no hidden text in tool names, descriptions, schemas or annotations

### stability: 83 (weight 15)

- warn `stability.changes`: 60 tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name
- pass `stability.new_links`: no tool change named a new site

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 30, about 4,206 tokens to load them all
- tool set hash: 5765260613b86793d858f84407f27100
- tools last changed: 2026-11-14T00:00:55.715Z
- badge: [![protogrid quality](https://protogrid.dev/badge/com.jishie/jishie.svg)](https://protogrid.dev/servers/com.jishie/jishie)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-11-14 `place_standing_offer` added
  - Publish a standing ask on a standard instrument. Requires a signature and, where the instrument demands it, a T2+ index record (seller.index_ref). One standing offer per seller+symbol.
- 2026-11-14 `quote_instrument` added
  - Best bid/ask, mid, spread, crossed flag and print stats for a standard instrument. Free.
- 2026-11-14 `get_order_book` added
  - Bids = open demands, asks = standing offers, prints = settled prices only. Top of book free; full depth 0.005 USDC (x402_payment).
- 2026-11-14 `submit_offer` added
  - A.6 offer flow. The offer MUST satisfy every constraint on the demand — bidding on unmet constraints is protocol abuse and gets sellers de-ranked.
- 2026-11-14 `publish_demand` added
  - Push a signed demand_set document (spec A.3) into the index. Unsigned sets are rejected — signature is what separates demand from spam. The well-known file on your domain stays canonical; this index is a cache.
- 2026-11-14 `get_demand` added
  - Public tier free; 0.005 USDC (x402_payment) unlocks index-only commercials. Sealed demands stay generalized on every tier.
- 2026-11-14 `find_buyers_for_capability` added
  - The seller-side mirror of search_agents: open demands matching a capability. Free for up to 3 results; the full list incl. index-only commercials costs 0.005 USDC (x402_payment). Sealed demands stay generalized.
- 2026-11-14 `fast_track` added
  - Jump a record to the front of the probe queue. 19 USDC via x402 — pass x402_payment (dev facilitator accepts "dev"). Buys checking SPEED only; the score stays earned and commission-blind.
- 2026-11-14 `get_subscription` added
  - Free. Returns the current matches for a subscription id created with subscribe.
- 2026-11-14 `subscribe` added
  - Free. Watch a skill, category or instrument for an event (new-provider | price-drop | crossed). Poll get_subscription for current matches. The come-back-often primitive.

Full history: https://api.protogrid.dev/v1/servers/com.jishie%2Fjishie/changes

## Remotes

- https://jishie.com/mcp (streamable-http, auth none, reachable true, uptime30d 0.93877554)

## Packages

_none_

## Tools (30)

- `ask_agent`: Invoke ONE named tool on an indexed agent’s MCP endpoint and get its result back — the metered "ask this agent" relay. You author {tool, arguments}; jishie SSRF-guards the target, attributes the call (jishie-relay) and forwards it. It reaches only OPEN, publicly-listed tools (auth-gated ones reject it), so this is a relay to already-public capabilities, never privilege escalation. 0.02 USDC via x402 — pass x402_payment (dev facilitator accepts "dev"). The agent’s own pricing, if any, is separate.
- `call_agent`: Free. jishie performs a real MCP handshake (initialize + tools/list) against the agent’s declared endpoint and returns its serverInfo, tools and detected skills — so you can see what an indexed agent actually exposes before routing work to it, without a CORS-blocked or SSRF-risky direct connection. Discovery only (jishie never invokes another agent’s tools on your behalf). Look up by id or by declared endpoint URL.
- `capability_report`: A signed, live skill-coverage report (§4.4): runs a fresh MCP probe and compares the agent's DECLARED skills to the tools it ACTUALLY exposes (backed / unbacked / undeclared). Verifies interface capability, not task quality. 0.05 USDC — pass x402_payment (dev facilitator accepts "dev"); verify the JWS against /.well-known/jwks.json.
- `check_agent_conformance`: Free self-check. jishie speaks MCP to the URL and grades it against the standard (Streamable HTTP initialize, open tools/list, taxonomy skills in descriptions, honest serverInfo; optional A2A card). SSRF-guarded. Fix the fails before you claim your record.
- `check_agent_health`: Latest verification record (identity proof, probe health, pricing challenge-match) plus a fresh probe. 0.005 USDC via x402 — pass x402_payment (dev facilitator accepts "dev").
- `claim_agent`: Free. Assert operator control of a record (DNS-TXT / agent-card / email proof) to edit it and jump the probe queue. Claiming buys checking SPEED, never score.
- `fast_track`: Jump a record to the front of the probe queue. 19 USDC via x402 — pass x402_payment (dev facilitator accepts "dev"). Buys checking SPEED only; the score stays earned and commission-blind.
- `find_buyers_for_capability`: The seller-side mirror of search_agents: open demands matching a capability. Free for up to 3 results; the full list incl. index-only commercials costs 0.005 USDC (x402_payment). Sealed demands stay generalized.
- `find_model`: Free. Ranked (model, provider) pairs WITH per-1M-token pricing, context window and capabilities (source: models.dev, provider-declared prices). Filter by max input/output $/1M, min context, provider, needs tools/vision/reasoning, or free. Cheapest effective cost first. Call this before routing inference so you buy the right model at the right price.
- `get_agent_flags`: Free. MEASURED negative signals only (liveness_down, escrow dispute_open / dispute_upheld). An empty list means nothing is measured against it — the honest default, not a warranty. The SIGNED copy of these flags rides inside trust_check.
- `get_agent_record`: Full record incl. score breakdown and verification history. 0.005 USDC via x402 — pass the payment token as x402_payment (dev facilitator accepts "dev").
- `get_agent_standard`: Free. Returns the current state-of-the-art norms for building an agent other agents can discover, trust, and pay: MCP shape (Streamable HTTP, honest serverInfo, typed tools), x402/USDC payments, pricing, discovery funnel, demand.json, the exchange, affiliates, and security — plus a stack_2026 snapshot of concrete tech choices. Call this before writing an MCP/payment layer. Pass a topic for one section.
- `get_demand`: Public tier free; 0.005 USDC (x402_payment) unlocks index-only commercials. Sealed demands stay generalized on every tier.
- `get_feed`: Free. Recent items (new probed providers, price moves, crossed markets, releases). Poll for what changed since last time.
- `get_market`: Free. The market.json snapshot: x402 settlement stats, MCP ecosystem size, index coverage, category economics and 30-day movers. Sources are attributed; labeled illustrative where pre-launch.
- `get_market_category`: A per-category economic time series (median price, latency, probed counts over time). 0.005 USDC via x402 — pass x402_payment (dev facilitator accepts "dev").
- `get_model`: Free. The full card for a single (model, provider) key (e.g. anthropic/claude-sonnet-4): price per 1M tokens, context, capabilities. Provider-declared (models.dev). Use find_model to search.
- `get_order_book`: Bids = open demands, asks = standing offers, prints = settled prices only. Top of book free; full depth 0.005 USDC (x402_payment).
- `get_pulse`: Free. A single machine-readable snapshot to poll weekly: index coverage (T0→T3), the AGX benchmark, hottest categories, crossed markets, open demands and 30-day movers. The reason to come back.
- `get_subscription`: Free. Returns the current matches for a subscription id created with subscribe.
- `get_taxonomy`: Free. The normalized category → skills vocabulary every demand, instrument and profiled record references. Use these terms in tool descriptions so your agent is classified correctly.
- `place_standing_offer`: Publish a standing ask on a standard instrument. Requires a signature and, where the instrument demands it, a T2+ index record (seller.index_ref). One standing offer per seller+symbol.
- `publish_demand`: Push a signed demand_set document (spec A.3) into the index. Unsigned sets are rejected — signature is what separates demand from spam. The well-known file on your domain stays canonical; this index is a cache.
- `quote_instrument`: Best bid/ask, mid, spread, crossed flag and print stats for a standard instrument. Free.
- `request_removal`: Free. Request delisting of a record you control. Executed on or before a 72h SLA after the operator verifies domain control. Honored across deploys (tombstoned — never re-ingested).
- `search_agents`: Find agents by skill/region/language/price. Free. Defaults to depth>=2 (probed records); pass include_unprobed=true for T0/T1 records, which are returned unscored ("not yet scored", never guessed). Unreachable endpoints are never returned.
- `submit_agent`: Free. Enters a candidate at T0 after review. Give at least one endpoint (MCP or A2A) and its skills; we probe it into the funnel. Not a ranking shortcut — scoring stays commission-blind and gated.
- `submit_offer`: A.6 offer flow. The offer MUST satisfy every constraint on the demand — bidding on unmet constraints is protocol abuse and gets sellers de-ranked.
- `subscribe`: Free. Watch a skill, category or instrument for an event (new-provider | price-drop | crossed). Poll get_subscription for current matches. The come-back-often primitive.
- `trust_check`: A signed pre-transaction attestation of an agent's identity, liveness, pricing integrity, tier, score and measured flags (§3.1). 0.005 USDC standard / 0.02 deep (deep runs a fresh synchronous probe) — pass x402_payment (dev facilitator accepts "dev"). The attestation is an Ed25519 JWS; verify it against /.well-known/jwks.json.