Market intelligence for the AI agent economy: rankings, trust signals, liveness. 13 tools.
Do not connect
A critical issue was found. Do not connect this server as-is.
Scanned 1 month ago Due for re-check
A server can change after it's graded. Re-run the automated scan to refresh this report.
This grade is deterministic and reproducible: the same server surface always yields the same grade under a given algorithm version. It is a real automated assessment computed by the MCPGrade engine from what the probe actually observed — not a fabricated or opinion score. It is not a manual human pentest, so it can miss context-specific risks.
Every signal below was measured directly by the automated probe. The grade is derived only from evidence like this — nothing is assumed.
The AgentCrush MCP server exposes 14 tools, focused primarily on general-purpose capabilities. Its published description reads: "Market intelligence for the AI agent economy: rankings, trust signals, liveness". It communicates over Streamable HTTP using the 2026-07-28 protocol revision, and does not require authorization to connect. MCPGrade currently rates AgentCrush F — a critical issue was found and the server should not be connected as-is. Its most notable findings include "Cross-tool shadowing" and "Cross-tool shadowing". This report is a deterministic, reproducible automated assessment: the same observed surface always yields the same grade under a given algorithm version, and it is refreshed as new scans arrive and free to read — but it is not a substitute for a manual human security review. Always re-check AgentCrush's advertised tools, transport security, and authorization posture before connecting an autonomous agent or sharing sensitive context with it.
Add AgentCrush to an MCP client using the endpoint below. Review the grade and findings above before granting an autonomous agent access.
MCP endpoint
https://www.agentcrush.xyz/api/mcp/v1Streamable HTTP transport. This is the MCP endpoint, not a website — paste it into your MCP client server list rather than a browser.
Captured passively during the read-only scan. Click any value to find servers that match it.
The tools this server advertises via tools/list — names, purposes, and the parameters each accepts, exactly as enumerated read-only.
Search AI agents by name or keyword across AgentCrush's evidence-ranked index. Returns matching agents with category, tier, and rank info. Use the `filters` object for structured constraints; future v
Get full details for a specific AI agent including all category scores it qualifies for (model_family, tokenized, service, developer). Returns identity, raw signals, sub-scores, evidence-ready status.
Sorted worst-first. Each finding shows its severity, what it means, its OWASP MCP Top-10 mapping, and a recommended fix — the check id links to the exact methodology row that produced it.
tool: get_agent_details
A tool description tries to alter the model’s use of another tool.
"agent doesn't exist".RecommendationDescriptions must describe only their own tool.
tool: get_methodology
A tool description tries to alter the model’s use of another tool.
RecommendationDescriptions must describe only their own tool.
The server accepts tool enumeration (and likely invocation) with no authentication.
RecommendationRequire OAuth 2.1 authorization for any server exposing non-public tools.
tool: search_agents
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: get_agent_details
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: get_agent_history
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: compare_agents
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: list_categories
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: get_category_ranking
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: get_agent_trust
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: verify_counterparty
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: get_top_movers
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: get_protocol_adoption
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: get_agent_changes
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: get_ecosystem_summary
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: find_agents
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
Vantaj uptime monitoring via MCP — manage monitors, heartbeats, incidents, and status pages.
Unified gateway to Algeria's TKAWEN ecosystem: commerce, certification, and AI tools.
Provides access to the Cohereon Doctrine AI safety framework with governance components, tiered access, and agent onboarding.
Agentic rails for complex workflows with receipts, fees, and MCP tool access.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Get rank and score history for an AI agent over the past 1–90 days. Daily snapshots, deduplicated per calendar day. Returns trend summary (rising/falling/flat). Useful for showing how an agent's stand
Compare 2-5 AI agents side-by-side across all their categories. Returns full per-agent scoring data + comparison context. Use for "X vs Y" queries. AgentCrush does not declare a universal winner — com
List the 5 AgentCrush agent categories with tracked + evidence-ranked counts and current methodology versions. Use this for market-level discovery — what kinds of agents does AgentCrush track and how
Get the full ranking for one of the 5 categories. Returns agents ordered by composite score with all sub-scores visible. Defaults to evidence-ranked only.
Get the scoring methodology for one category — weights, signal sources, formulas, evidence-ready rule, and known limitations. **Methodology travels with data**: call this when explaining HOW a ranking
Single-call composite trust score (0-100) + classification (verified / provisional / unverified / low_trust) for delegation decisions. Combines confidence_tier, evidence tier, ERC-8004 verified identi
THE pre-transaction question in one free call: should my agent deal with this counterparty right now? Returns proceed / caution / reject with reasoning. Liveness-aware: an agent with no public activit
Returns the top weekly rank movers (up + down) computed from agents.weekly_delta. Useful for surfacing notable changes since last week. Default limit 10 per direction.
How many indexed agents touch each major protocol/surface (ERC-8004 verified, Virtuals tokens, Agentverse, x402/Bazaar, HuggingFace, GitHub). Useful for ecosystem-state questions.
Pairwise delta scan over an agent's recent snapshots. Reports material changes in score, rank, github_stars, follower_count, identity_type, etc. Mirror of GET /api/agent/{handle}/changes.
One-call ecosystem-level summary: counts (total, evidence-ranked, archived), category mix (model_family/tokenized/service/developer/mcp_server), category leaders, snapshot volume last 30 days. Mirror
Counterparty discovery: "which agents can do X and are safe to pay?" Returns the top 3 ranked candidates with liveness (30-day Ghost Index rule), trust tier, verified payment rails (x402/MCP/ERC-8004)