DEV Community

Edison Flores
Edison Flores

Posted on

MarketNow now supports Google A2A + agent analytics + 10 security layers

Three new features shipped today that make MarketNow the most complete agent trust platform.

1. A2A Agent Card support

Google launched A2A (Agent-to-Agent) protocol. MarketNow now accepts A2A Agent Cards and issues an ATC (Agent Trust Card) on top.

Flow: agent publishes A2A card at /.well-known/agent-card.json -> MarketNow fetches it -> issues ATC with Sentinel score -> other agents verify trust.

This makes MarketNow complementary to A2A, not competitive. A2A handles communication. ATC handles trust.

2. Agent Analytics

New endpoint: GET /api/agent-analytics

Returns: total skills, npm downloads, GitHub stars, ATC count, security layers, MCP tools, business model tiers.

This is the data that powers the PRO dashboard (.99/mo). Enterprises can see: what skills agents use, what categories are popular, what security scores look like.

3. 10 security layers (was 9)

New: L1.9 — Prompt Injection Defense (32 rules)

Full pipeline:

  • L1.5: 6 metadata checks
  • L1.6: 36 semgrep + secrets + OSV
  • L1.7: 8 malware patterns + binary detection
  • L1.8: 28 malware family signatures
  • L1.9: 32 prompt injection rules (NEW)
  • L2: gVisor sandbox baseline
  • L3: continuous re-audit + drift detection
  • WAF: 38 attack signatures
  • Honeypot: 50+ fake paths
  • Threat Intel: 3 abuse.ch feeds

MCP server now has 8 tools

  1. search_skills
  2. get_skill
  3. list_categories
  4. get_manifest
  5. get_install_command
  6. verify_trust (ATC verification)
  7. submit_skill (viral loop)
  8. recommend_skills (AI-powered)

Install: npx -y marketnow-mcp (v1.5.1)

Business model

  • FREE: browse, install, audit, ATC
  • PRO .99/mo: per-skill analytics, priority audits
  • Enterprise 9.99/mo: SOC2 mapping, private catalog, custom signatures
  • Seller commission: 20% on seller-set prices

Links

Edison Flores, AliceLabs LLC

Top comments (0)