SourcePost

Working Security A

dev.sourcepost/directoryv0.1.0 Domain verified

A directory where AI agents find suppliers, services, APIs and data sources. No key needed.

Web Search

Watch Website

Registry entry

Open in the registry

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-11-08T11:44:23.023062Z",
      "publishedAt": "2026-11-08T11:44:23.023062Z",
      "statusChangedAt": "2026-11-08T11:44:23.023062Z"
    }
  },
  "server": {
    "name": "dev.sourcepost/directory",
    "title": "SourcePost",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "remotes": [
      {
        "url": "https://sourcepost.dev/mcp",
        "type": "streamable-http"
      }
    ],
    "version": "0.1.0",
    "websiteUrl": "https://sourcepost.dev/",
    "description": "A directory where AI agents find suppliers, services, APIs and data sources. No key needed."
  }
}

Maintain this server? Claim it

Try it

Call this server's tools from your browser. Nothing to install.

https://sourcepost.dev/mcp

Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.

Tool list from our last check. Connect live to refresh it.

get_listing

One active listing by id (from search_listings), in the requested language.

listing_idstring, required

Listing id.

langstring

Response language: en (default) or es.

This tool isn't marked read-only, so it may change something on the server or in an account you connected.

I understand, run it anyway

Install

Pick your client. Values in capitals, like YOUR_TOKEN, are yours to fill in.

One click: Add to Cursor Add to VS Code Add to LM Studio Add to Goose

Run in a terminal

claude mcp add --transport http directory https://sourcepost.dev/mcp

Tools (3)

get_listing

One active listing by id (from search_listings), in the requested language.

Argument	Type	Description
lang	any	Response language: en (default) or es.
listing_id*	string	Listing id.

Input schema (JSON)

{
  "type": "object",
  "title": "get_listingArguments",
  "required": [
    "listing_id"
  ],
  "properties": {
    "lang": {
      "anyOf": [
        {
          "type": "string",
          "maxLength": 8
        },
        {
          "type": "null"
        }
      ],
      "title": "Lang",
      "default": null,
      "description": "Response language: en (default) or es."
    },
    "listing_id": {
      "type": "string",
      "title": "Listing Id",
      "maxLength": 100,
      "description": "Listing id."
    }
  }
}

search_listings

Search active listings: suppliers, services, APIs and data sources. Free text in English or Spanish. Paid placements come only in sponsored_results (at most 3). The response includes an invitation to tell the hub what you did not find.

Argument	Type	Description
q	any	Free text.
lang	any	Response language: en (default) or es.
limit	integer	Results per page.
offset	integer	Results to skip.
category	any	Category id of the active niche.
offer_type	any	Only this kind.
verified_only	boolean	Only verified listings.

Input schema (JSON)

{
  "type": "object",
  "$defs": {
    "OfferType": {
      "enum": [
        "api",
        "dataset",
        "supplier",
        "tool",
        "service"
      ],
      "type": "string",
      "title": "OfferType"
    }
  },
  "title": "search_listingsArguments",
  "properties": {
    "q": {
      "anyOf": [
        {
          "type": "string",
          "maxLength": 200
        },
        {
          "type": "null"
        }
      ],
      "title": "Q",
      "default": null,
      "description": "Free text."
    },
    "lang": {
      "anyOf": [
        {
          "type": "string",
          "maxLength": 8
        },
        {
          "type": "null"
        }
      ],
      "title": "Lang",
      "default": null,
      "description": "Response language: en (default) or es."
    },
    "limit": {
      "type": "integer",
      "title": "Limit",
      "default": 20,
      "maximum": 50,
      "minimum": 1,
      "description": "Results per page."
    },
    "offset": {
      "type": "integer",
      "title": "Offset",
      "default": 0,
      "maximum": 1000,
      "minimum": 0,
      "description": "Results to skip."
    },
    "category": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "title": "Category",
      "default": null,
      "description": "Category id of the active niche."
    },
    "offer_type": {
      "anyOf": [
        {
          "$ref": "#/$defs/OfferType"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "description": "Only this kind."
    },
    "verified_only": {
      "type": "boolean",
      "title": "Verified Only",
      "default": false,
      "description": "Only verified listings."
    }
  }
}

send_interest

Tell the hub what you (or your owner) offer, or what you searched and did not find. kind: 'offer' or 'missing'. Free text, English or Spanish, 10 to 2000 characters. Stored for the hub team and NEVER published. No personal data.

Argument	Type	Description
kind*	any	'offer' or 'missing'.
lang	any	Response language: en (default) or es.
text*	string	Your own message, 10 to 2000 characters.
contact_url	any	Optional public page to follow up.

Input schema (JSON)

{
  "type": "object",
  "$defs": {
    "InterestKind": {
      "enum": [
        "offer",
        "missing"
      ],
      "type": "string",
      "title": "InterestKind"
    }
  },
  "title": "send_interestArguments",
  "required": [
    "kind",
    "text"
  ],
  "properties": {
    "kind": {
      "$ref": "#/$defs/InterestKind",
      "description": "'offer' or 'missing'."
    },
    "lang": {
      "anyOf": [
        {
          "type": "string",
          "maxLength": 8
        },
        {
          "type": "null"
        }
      ],
      "title": "Lang",
      "default": null,
      "description": "Response language: en (default) or es."
    },
    "text": {
      "type": "string",
      "title": "Text",
      "description": "Your own message, 10 to 2000 characters."
    },
    "contact_url": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "title": "Contact Url",
      "default": null,
      "description": "Optional public page to follow up."
    }
  }
}

Security checkA100/100

We read every tool's name, description and inputs the way the model will, looking for instructions hidden from you. A clean result means no warning signs, not a guarantee. Scanned Nov 8, 2026.

Hidden or reordered text
Overriding the model's instructions
Hiding actions from the user
Reading keys or credentials
Fake system tags
Steering other servers' tools
Pulling in the conversation
Smuggling parameters
Demanding to be used for everything
Steering away from web search
Download-and-run commands
Encoded blobs
Invisible characters
Credentials as tool arguments
Very long descriptions
Read and write hintsNote1 found
No readOnlyHint / destructiveHint annotations, so clients can't tell a read from a write without asking.
- server · annotations
  3 of 3 tools: search_listings, get_listing, send_interest
Fix: Add annotations to each tool, e.g. { readOnlyHint: true } for tools that only read.

How the security check works

Try it

Call this server's tools from your browser. Nothing to install.

https://sourcepost.dev/mcp

Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.

Tool list from our last check. Connect live to refresh it.

get_listing

One active listing by id (from search_listings), in the requested language.

listing_idstring, required

Listing id.

langstring

Response language: en (default) or es.

This tool isn't marked read-only, so it may change something on the server or in an account you connected.

I understand, run it anyway

Install

Pick your client. Values in capitals, like YOUR_TOKEN, are yours to fill in.

One click: Add to Cursor Add to VS Code Add to LM Studio Add to Goose

Run in a terminal

claude mcp add --transport http directory https://sourcepost.dev/mcp

Tools (3)

get_listing

One active listing by id (from search_listings), in the requested language.

Argument	Type	Description
lang	any	Response language: en (default) or es.
listing_id*	string	Listing id.

Input schema (JSON)

{
  "type": "object",
  "title": "get_listingArguments",
  "required": [
    "listing_id"
  ],
  "properties": {
    "lang": {
      "anyOf": [
        {
          "type": "string",
          "maxLength": 8
        },
        {
          "type": "null"
        }
      ],
      "title": "Lang",
      "default": null,
      "description": "Response language: en (default) or es."
    },
    "listing_id": {
      "type": "string",
      "title": "Listing Id",
      "maxLength": 100,
      "description": "Listing id."
    }
  }
}

search_listings

Argument	Type	Description
q	any	Free text.
lang	any	Response language: en (default) or es.
limit	integer	Results per page.
offset	integer	Results to skip.
category	any	Category id of the active niche.
offer_type	any	Only this kind.
verified_only	boolean	Only verified listings.

Input schema (JSON)

{
  "type": "object",
  "$defs": {
    "OfferType": {
      "enum": [
        "api",
        "dataset",
        "supplier",
        "tool",
        "service"
      ],
      "type": "string",
      "title": "OfferType"
    }
  },
  "title": "search_listingsArguments",
  "properties": {
    "q": {
      "anyOf": [
        {
          "type": "string",
          "maxLength": 200
        },
        {
          "type": "null"
        }
      ],
      "title": "Q",
      "default": null,
      "description": "Free text."
    },
    "lang": {
      "anyOf": [
        {
          "type": "string",
          "maxLength": 8
        },
        {
          "type": "null"
        }
      ],
      "title": "Lang",
      "default": null,
      "description": "Response language: en (default) or es."
    },
    "limit": {
      "type": "integer",
      "title": "Limit",
      "default": 20,
      "maximum": 50,
      "minimum": 1,
      "description": "Results per page."
    },
    "offset": {
      "type": "integer",
      "title": "Offset",
      "default": 0,
      "maximum": 1000,
      "minimum": 0,
      "description": "Results to skip."
    },
    "category": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "title": "Category",
      "default": null,
      "description": "Category id of the active niche."
    },
    "offer_type": {
      "anyOf": [
        {
          "$ref": "#/$defs/OfferType"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "description": "Only this kind."
    },
    "verified_only": {
      "type": "boolean",
      "title": "Verified Only",
      "default": false,
      "description": "Only verified listings."
    }
  }
}

send_interest

Argument	Type	Description
kind*	any	'offer' or 'missing'.
lang	any	Response language: en (default) or es.
text*	string	Your own message, 10 to 2000 characters.
contact_url	any	Optional public page to follow up.

Input schema (JSON)

{
  "type": "object",
  "$defs": {
    "InterestKind": {
      "enum": [
        "offer",
        "missing"
      ],
      "type": "string",
      "title": "InterestKind"
    }
  },
  "title": "send_interestArguments",
  "required": [
    "kind",
    "text"
  ],
  "properties": {
    "kind": {
      "$ref": "#/$defs/InterestKind",
      "description": "'offer' or 'missing'."
    },
    "lang": {
      "anyOf": [
        {
          "type": "string",
          "maxLength": 8
        },
        {
          "type": "null"
        }
      ],
      "title": "Lang",
      "default": null,
      "description": "Response language: en (default) or es."
    },
    "text": {
      "type": "string",
      "title": "Text",
      "description": "Your own message, 10 to 2000 characters."
    },
    "contact_url": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "title": "Contact Url",
      "default": null,
      "description": "Optional public page to follow up."
    }
  }
}

Security checkA100/100

We read every tool's name, description and inputs the way the model will, looking for instructions hidden from you. A clean result means no warning signs, not a guarantee. Scanned Nov 8, 2026.

Hidden or reordered text

Overriding the model's instructions

Hiding actions from the user

Reading keys or credentials

Fake system tags

Steering other servers' tools

Pulling in the conversation

Smuggling parameters

Demanding to be used for everything

Steering away from web search

Download-and-run commands

Encoded blobs

Invisible characters

Credentials as tool arguments

Very long descriptions

Read and write hintsNote1 found

No readOnlyHint / destructiveHint annotations, so clients can't tell a read from a write without asking.

server · annotations
3 of 3 tools: search_listings, get_listing, send_interest

Fix: Add annotations to each tool, e.g. { readOnlyHint: true } for tools that only read.

How the security check works