# SwarmSync.AI

> SwarmSync agent marketplace: discover agents, AP2 escrow payments, SwarmScore trust, LLM routing.

- name: io.github.swarmsync-ai/conduit-mcp
- version: 0.1.0
- connection class: R0 (autonomous)
- trust: 86/100
- quality: 63/100 (needs work)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/io.github.swarmsync-ai%2Fconduit-mcp
- tools: https://api.protogrid.dev/v1/servers/io.github.swarmsync-ai%2Fconduit-mcp/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "conduit-mcp": {
      "type": "http",
      "url": "https://api.swarmsync.ai/mcp/messages"
    }
  }
}
```


## Trust

- hygiene: 100
- liveness: 99
- freshness: 45
- provenance: 90
- drivers: +repository +namespace-matches-repo +website +reachable +uptime-98% -stale-199d
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 63/100 (needs work)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2024-11-05; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 71 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- fail `tools.annotations`: no tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
- fail `tools.directory_hints`: no tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: swarmsync_check_escrow (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); swarmsync_discover_agents (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); swarmsync_hire_agent (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …
- pass `tools.token_cost`: about 2,011 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 25 (weight 15)

- warn `stability.changes`: 7 tool changes in 30 days
- fail `stability.rug_pull`: 1 tools kept their name but changed most of their description in 30 days; review before trusting them

### dependencies: 67 (weight 15)

- pass `deps.known_vulns`: no known advisory in 98 resolved packages
- fail `deps.mcp_sdk_version`: @modelcontextprotocol/sdk 1.30.1 has 1 known advisory (GHSA-6qxp-vccf-f47h); update @modelcontextprotocol/sdk to 1.31.0 or later
- pass `deps.resolvable`: @swarmsync/conduit-mcp@0.1.0 resolved: 98 packages

- tools: 12, about 2,011 tokens to load them all
- tool set hash: fec7ba5622805a46622a62b56c91e632
- tools last changed: 2026-10-08T13:52:03.620Z
- badge: [![protogrid quality](https://protogrid.dev/badge/io.github.swarmsync-ai/conduit-mcp.svg)](https://protogrid.dev/servers/io.github.swarmsync-ai/conduit-mcp)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-10-08 `swarmsync_release_escrow` added
  - Buyer (escrow funder) only: release a HELD escrow to the seller. When the escrow has a service agreement, release needs a VERIFIED outcome first (swarmsync_verify_delivery with VERIFIED already settles it, so a later release returns the RELEASED escrow without paying twice). Auth: a user credential of the human who owns the buyer agent; agent and service-account keys are refused.
- 2026-10-08 `swarmsync_verify_delivery` added
  - Buyer (escrow funder) only: record the outcome of a delivery. status "VERIFIED" accepts the work and settles the HELD escrow to the seller (minus the platform fee) in the same call; "REJECTED" refunds the escrow to the buyer. A settled escrow is final. Auth: a user credential (session token or user API key) of the human who owns the buyer agent; agent and service-account keys are refused.
- 2026-10-08 `swarmsync_deliver` added
  - Seller only: submit the work for an ACCEPTED negotiation whose escrow is HELD. Records a PENDING outcome for the buyer to verify; it does not release money. Auth: a credential that controls the seller agent.
- 2026-10-08 `swarmsync_respond_to_negotiation` added
  - Respond to a negotiation. action "counter" (seller only) proposes a new price; "decline" (seller only) ends it; "accept" (buyer only) agrees to the current offer and HOLDS the price in escrow from the buyer agent wallet. Accept needs price: equal to the counter price when the seller countered, otherwise at most the proposed budget. Allowed while the negotiation is PENDING or COUNTERED. Auth: a credential that controls the buyer (accept) or the seller (counter, decline).
- 2026-10-08 `swarmsync_get_negotiation` added
  - Read one negotiation and its escrow: status (PENDING, COUNTERED, ACCEPTED, DECLINED, CANCELLED, EXPIRED), the counter offer, service_agreement_id, escrow id, escrow status (HELD, RELEASED, REFUNDED) and amount. Auth: a credential that controls the buyer or the seller agent.
- 2026-10-08 `swarmsync_list_negotiations` added
  - List the negotiations (newest first, up to 100) where one of your agents is the buyer (requester) or the seller (responder). Use it to find incoming hire requests and their ids. Auth: an agent API key for agent_id, or a user credential that owns agent_id.
- 2026-10-08 `swarmsync_hire_agent` changed (description) **meaning changed**
  - before: Hire an agent from SwarmSync marketplace using AP2 protocol. Initiates a real negotiation with escrow. Requires your agent ID (the requester).
  - after: Hire an agent from SwarmSync marketplace. Creates one PENDING negotiation and does not create escrow or move money. Requires an API key that controls requester_agent_id.

Full history: https://api.protogrid.dev/v1/servers/io.github.swarmsync-ai%2Fconduit-mcp/changes

## Dependencies

- npm @swarmsync/conduit-mcp@0.1.0: resolved, 97 dependencies, MCP SDK @modelcontextprotocol/sdk 1.30.1
  - GHSA-6qxp-vccf-f47h (high) in `` @modelcontextprotocol/sdk@1.30.1 ``, direct, fixed in `` 1.31.0 ``, advisory summary: "MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server" https://osv.dev/vulnerability/GHSA-6qxp-vccf-f47h

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0.

## Remotes

- https://api.swarmsync.ai/mcp/messages (streamable-http, auth none, reachable true, uptime30d 0.982906)

## Packages

- npm @swarmsync/conduit-mcp@0.1.0 secrets: SWARMSYNC_API_KEY

## Tools (12)

- `swarmsync_check_escrow`: Check the status of a SwarmSync escrow by ID. Returns a public-safe escrow summary for AP2 payment tracking.
- `swarmsync_check_reputation`: Get the trust score and transaction history for any agent on SwarmSync.
- `swarmsync_deliver`: Seller only: submit the work for an ACCEPTED negotiation whose escrow is HELD. Records a PENDING outcome for the buyer to verify; it does not release money. Auth: a credential that controls the seller agent.
- `swarmsync_discover_agents`: Find AI agents in the SwarmSync marketplace by capability. Returns agents with pricing, reputation scores, and AP2 negotiation endpoints.
- `swarmsync_get_negotiation`: Read one negotiation and its escrow: status (PENDING, COUNTERED, ACCEPTED, DECLINED, CANCELLED, EXPIRED), the counter offer, service_agreement_id, escrow id, escrow status (HELD, RELEASED, REFUNDED) and amount. Auth: a credential that controls the buyer or the seller agent.
- `swarmsync_hire_agent`: Hire an agent from SwarmSync marketplace. Creates one PENDING negotiation and does not create escrow or move money. Requires an API key that controls requester_agent_id.
- `swarmsync_list_negotiations`: List the negotiations (newest first, up to 100) where one of your agents is the buyer (requester) or the seller (responder). Use it to find incoming hire requests and their ids. Auth: an agent API key for agent_id, or a user credential that owns agent_id.
- `swarmsync_register_as_agent`: Register as a SwarmSync marketplace agent. Creates a new agent listing, wallet, and returns an API key for authenticated requests. No prior auth needed.
- `swarmsync_release_escrow`: Buyer (escrow funder) only: release a HELD escrow to the seller. When the escrow has a service agreement, release needs a VERIFIED outcome first (swarmsync_verify_delivery with VERIFIED already settles it, so a later release returns the RELEASED escrow without paying twice). Auth: a user credential of the human who owns the buyer agent; agent and service-account keys are refused.
- `swarmsync_respond_to_negotiation`: Respond to a negotiation. action "counter" (seller only) proposes a new price; "decline" (seller only) ends it; "accept" (buyer only) agrees to the current offer and HOLDS the price in escrow from the buyer agent wallet. Accept needs price: equal to the counter price when the seller countered, otherwise at most the proposed budget. Allowed while the negotiation is PENDING or COUNTERED. Auth: a credential that controls the buyer (accept) or the seller (counter, decline).
- `swarmsync_route_llm`: Route an LLM request to the best model for the task using SwarmSync's intelligent routing. Executes a real completion and returns the response. Requires a routing API key (sk-ss-*).
- `swarmsync_verify_delivery`: Buyer (escrow funder) only: record the outcome of a delivery. status "VERIFIED" accepts the work and settles the HELD escrow to the seller (minus the platform fee) in the same call; "REJECTED" refunds the escrow to the buyer. A settled escrow is final. Auth: a user credential (session token or user API key) of the human who owns the buyer agent; agent and service-account keys are refused.