Skip to content
Agentmart
Submit a tool

Changelog

Every user-facing change to Agent Mart, newest first. Follow along with the Atom feed.

AllDataTrustSearchSiteAPICLI

  1. · Site, Trust

    A leaderboard home page and rank on every listing

    The home page now leads with the leaderboard: an animated view of the current top 12, a ranked board with a tab for each kind of listing, and a section showing the real weights that move a tool up. Cards show their rank score, with their position when a list is sorted by rank. Each listing page opens with a rank panel: its position among visible listings of its type, its score and the five inputs behind it. Marketplace ratings now count only when backed by enough reviews, so a single five-star rating no longer moves a plugin.

  2. · Data, Trust

    See a server's tools before you install it

    Connector pages now have a Tools section listing the tools an MCP server offers, with each tool's description. For hosted servers we ask the server for its tool list; for local servers we read it from the source code. Tools the server marks as read-only, or as able to change or delete data, are labelled. Invisible or direction-changing characters in descriptions are shown as visible codes, so nothing in a tool description is hidden from you. We also check tool descriptions for hidden instructions aimed at your agent.

  3. · Trust

    Security scanning has started (grades come later)

    We have started scanning the source of connectors, skills and plugins for known vulnerable dependencies, leaked secrets, risky install scripts and obfuscated code. Scans read the exact published version and never install or run it. Results are not shown as grades yet: listings keep showing a dash until we publish the full method on the trust page. If a scan finds a real problem in someone's tool, we contact the maintainer privately first. Public pages will only ever show grades and counts, not exploit details.

  4. · Trust, Search

    Permissions panel and safer-by-default filters

    Listing pages now have a Permissions panel that sums up what a connector, skill or plugin asks for: its tools grouped into read, write and destructive, the secrets and environment variables it needs, the network hosts and file paths it touches, and whether it runs code on install. Cards show a Read-only chip where that applies. Three new filters, "Read-only tools only", "No secrets required" and "Up now", help you find tools that are easier to trust. The same filters work in the API.

  5. · Trust, Data

    Daily availability checks for hosted servers

    We now check every hosted MCP server once a day with a plain connection handshake, without credentials. Listing pages show an Availability panel with a 30-day strip, uptime and response time, and cards show a Down chip when a server failed its latest check. Servers that ask for sign-in count as alive. A server that stays unreachable for 7 days drops into low quality, and one that stays down for 30 days is hidden; it comes back automatically when it answers again.

  6. · Data, Trust

    Spam, test entries and duplicates leave the default results

    Every listing now gets a quality tier. Test entries, spam and near-empty listings drop out of search, browse pages and the home page by default; choose "Include low-quality results" if you want to see everything. Duplicates point to the main listing for the same project instead of competing with it, and hidden pages explain why they are hidden with a link to ask for a correction. Servers published by the company behind the product carry an Official badge, and the new "Official only" filter shows just those.

  7. · Trust, Data

    Fairer freshness grades and ranking

    Freshness grades now use the latest of three dates: the last commit (or the last commit to the listing's own folder in a larger repository), the last GitHub release and the last package publish. A means updated in the last 30 days, B 90, C 180, D a year, and F older or archived. Ranking changed too: adoption now blends relative and absolute popularity, so a 60k-star project is no longer tied with a 7k-star one, and a repository linked by many unrelated publishers only counts for its real owner. How it works is on the trust page.