DEV Community

Edison Flores
Edison Flores

Posted on

How to submit your MCP server to a marketplace (5 minutes, free)

#mcp #ai #beginners #tutorial

You built an MCP server. Now how do people find it? Heres how to list it on MarketNow in 5 minutes — with a free 9-layer security audit.

Step 1: Make sure your repo is MCP-compatible

Your GitHub repo needs:

  • A package.json with a start command (npx, node, python, etc.)
  • A README.md describing what your server does
  • Ideally: an MCP manifest (tools, resources, prompts)

Step 2: Submit to MarketNow

Option A: Web UI

  1. Go to https://marketnow.site/submit
  2. Enter your GitHub repo URL
  3. Click Submit
  4. Sentinel runs a 9-layer audit (takes 1-5 minutes)
  5. Your skill gets a signed certificate with a score (0-10)
  6. It appears in the marketplace

Option B: Via MCP server (for agents)

If you have marketnow-mcp installed, your agent can submit directly:

Ask your agent: Submit my MCP server at github.com/user/my-server to MarketNow

The agent calls the submit_skill tool:

Tool: submit_skill
Arguments: {
repo_url: https://github.com/user/my-server,
name: My Awesome MCP Server,
description: Does X, Y, and Z
}

MarketNow responds with next steps and a direct submit URL.

Step 3: Get your Sentinel certificate

Every skill gets audited by 9 layers:

  • L1.5: 6 metadata checks (auth, injection, CORS)
  • L1.6: 18 Semgrep rules + 18 secret patterns + OSV
  • L1.7: Binary/malware detection (opens your package zip)
  • L1.8: 28 malware family signatures (Emotet, Cobalt Strike, etc.)
  • L2: gVisor sandbox (runs your server, captures behavior)
  • L3: Continuous re-audit (weekly drift detection)
  • WAF: 40 attack signatures
  • Honeypot: 50+ fake paths
  • Threat Intel: abuse.ch feeds

Your certificate includes:

  • Overall score (0-10)
  • Risk level (low/medium/high/critical)
  • Which layers passed/failed
  • Signed SHA-256 hash
  • 90-day validity

Step 4: Share your certificate

Your certificate URL: https://marketnow.site/skill/YOUR_SKILL_ID

You can:

  • Add a badge to your README
  • Share on social media
  • Link from your npm page
  • Show in your MCP manifest

Step 5: Get discovered

Once listed, your skill is discoverable by:

  • Web search on marketnow.site
  • The marketnow-mcp MCP server (agents can search directly)
  • The recommend_skills tool (agents describe a task, get matching skills)
  • Google (we have sitemap.xml + structured data)
  • The MCP Registry (registry.modelcontextprotocol.io)

FAQ

Is it free?
Yes. Listing is free. Audit is free. Certificate is free. All 8,845 skills are free to install.

Can I sell my skill?
Yes — the seller program lets you set a price. MarketNow takes 20% commission. But the default is free.

What if my skill gets a low score?
The score is transparent. You can fix the issues and re-submit. The audit methodology is public at /trust.

Do I need to be a developer?
You need a GitHub repo with an MCP server. If you can write a Node.js or Python script, you can build an MCP server.

Try it now

https://marketnow.site/submit

Or install the MCP server and ask your agent to submit:

npx -y marketnow-mcp

Edison Flores, AliceLabs LLC

Top comments (0)