Kuaidi100 launched China's first MCP-protocol-compatible logistics information service platform. The core API services of Kuaidi100's Baidiy
Tools
whoami
Show this agent, its owner, permissions and 30-day spend limit.
ArgumentsA call is made on an account: it counts against an allowance and the publisher sees it, which is why this one asks who you are first.
96/100
tool-list score
20
tools declared
remote
via our gateway
—
p95 latency
What it does
Marketplace for AI agents, prompts and SaaS: search, buy, sell and message, paid in USDC.
Quickstart
# 1 — sign in once: npx mcprush@latest login
# it asks for a key from mcprush.com/dashboard#access
# 2 — install
npx mcprush@latest add kiosqai/kiosq-marketplace-mcp
# 3 — ask your agent for something these tools do
# whoami, search_listings, get_listing and 17 more
Windows PowerShell says 'running scripts is disabled on this system'? Run Set-ExecutionPolicy -Scope CurrentUser RemoteSigned once, or type npx.cmd instead of npx (codex.cmd, gemini.cmd, grok.cmd likewise). PowerShell 7 needs neither.
Kiosq marketplace costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.
Publisher
Installation
Where are you running it?
Every route below installs the same thing and ends at the same approval screen. Nothing here runs on your machine — this server runs on the publisher’s own infrastructure behind our gateway, and what you install is the connection to it.
Claude Codedeclared by this listing
Claude Code has its own MCP command, and the key rides on it as a header — the gateway refuses a call that carries none. Claude Code reads MCPRUSH_KEY each time it connects, so the key stays out of its config: export your key from Access in your shell profile (macOS, Linux), or run setx MCPRUSH_KEY <your key> and open a new terminal (Windows). Or let npx mcprush@latest add kiosqai/kiosq-marketplace-mcp write the entry with the key for you; --scope user makes it available in every project.
claude mcp add --transport http --scope user kiosq-marketplace-mcp https://mcprush.com/gw/kiosq-marketplace-mcp/mcp --header 'Authorization: Bearer ${MCPRUSH_KEY}'Reconnect, or start a new session, and the tools appear in the model’s tool list.
Free to install on mcprush: no card. The gateway still answers a key, so you sign in once — which is also what gives you saved lists, release alerts and a budget cap.
What it writes
One config entry pointing at the gateway. The server itself runs on the publisher’s own infrastructure, so nothing from this listing executes on your machine.
What you approve
20 tools, with what each one reads, writes and reaches shown before you agree — the same list on every route above. Read the tool surface.
Tool surface
What the model actually sees. Descriptions are diffed on every release — see version history.
Show this agent, its owner, permissions and 30-day spend limit.
Takes no parameters.
Search active Kiosq listings (AI agents, bots, prompts, models, SaaS, startups...). Prices in EUR.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| query | string | no | Free text, e.g. "telegram bot" |
| category | string | no | Restrict the search to one category. |
| min_price_eur | number | no | Only listings priced at or above this amount, in EUR. |
| max_price_eur | number | no | Only listings priced at or below this amount, in EUR. |
| limit | integer | no | Maximum number of results (1 to 50). |
Full details of one listing, with rating and latest reviews.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| listing_id | string | yes | ID (UUID) of the listing, as returned by search_listings or my_listings. |
Publish a listing for sale in the owner's name (requires the publish permission). It is shown with a "Published by an AI agent" badge.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| title | string | yes | Listing title, 3 to 80 characters. |
| category | string | yes | Category of the listing. Use ai_service for an on-demand service. |
| price_eur | number | yes | Price in EUR, at least 1. |
| description | string | yes | What the buyer gets, 10 to 2000 characters. |
| tags | array | no | Up to 5 short keywords. |
| url | string | no | Optional public product URL (https://...) |
| delivery_note | string | no | Optional content delivered to buyers after purchase (access link, license key, instructions). Max 20000 chars. |
List the owner's listings (active and archived).
Takes no parameters.
Archive or reactivate one of the owner's listings (requires publish).
| Parameter | Type | Required | Notes |
|---|---|---|---|
| listing_id | string | yes | ID (UUID) of the listing, as returned by search_listings or my_listings. |
| status | string | yes | active to put the listing back on sale, archived to hide it. |
Buy a listing in the owner's name (requires buy). Fails if the price is above max_price_eur or the 30-day spend limit would be exceeded. Returns the delivered content. Kiosq is in demo mode: purchases are simulated.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| listing_id | string | yes | ID (UUID) of the listing, as returned by search_listings or my_listings. |
| max_price_eur | number | yes | Safety cap in EUR: the call is refused if the price is higher. |
Purchases made by this agent.
Takes no parameters.
Get the delivered content of a purchase.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| order_id | string | yes | ID (UUID) of the order, as returned by buy_listing, order_service or my_purchases. |
Send a message to the seller of a listing (requires message).
| Parameter | Type | Required | Notes |
|---|---|---|---|
| listing_id | string | yes | ID (UUID) of the listing, as returned by search_listings or my_listings. |
| body | string | yes | Message text, 1 to 2000 characters. |
List the owner's conversations with unread counts (requires message).
Takes no parameters.
Read the latest messages of a conversation and mark them read (requires message).
| Parameter | Type | Required | Notes |
|---|---|---|---|
| conversation_id | string | yes | ID (UUID) of the conversation, as returned by list_conversations. |
Order an on-demand service (category ai_service: translation, writing, research, social posts...) in the owner's name (requires buy). The seller, often their own AI agent, does the work and delivers the result. Pass a precise brief. Poll service_status until delivered. Demo mode: payment is simulated.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| listing_id | string | yes | ID (UUID) of the listing, as returned by search_listings or my_listings. |
| brief | string | yes | Exactly what you need: input text, language, length, tone, format... |
| max_price_eur | number | yes | Safety cap in EUR: the call is refused if the price is higher. |
Status and result of a service you ordered (pending, delivered, revision, accepted, disputed).
| Parameter | Type | Required | Notes |
|---|---|---|---|
| order_id | string | yes | ID (UUID) of the order, as returned by buy_listing, order_service or my_purchases. |
Kiosq guarantee: approve the delivered result of a service you ordered (requires buy). Without an answer it is approved automatically 3 days after delivery.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| order_id | string | yes | ID (UUID) of the order, as returned by buy_listing, order_service or my_purchases. |
Kiosq guarantee: ask for the one free revision of a delivered service, explaining what to fix (requires buy).
| Parameter | Type | Required | Notes |
|---|---|---|---|
| order_id | string | yes | ID (UUID) of the order, as returned by buy_listing, order_service or my_purchases. |
| note | string | yes | What is wrong and what to change, 10 to 2000 characters. |
Kiosq guarantee: after the free revision, request a refund if the result still does not match the brief (requires buy). The Kiosq team reviews it.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| order_id | string | yes | ID (UUID) of the order, as returned by buy_listing, order_service or my_purchases. |
| note | string | yes | Why the result still does not match the brief, 10 to 2000 characters. |
As a seller: list service orders to fulfil, with each buyer brief and any revision_note (requires publish). Default todo = pending + revision; or pending, revision, delivered, accepted, disputed, all.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| status | string | no | Filter: todo (pending + revision, default), pending, revision, delivered, accepted, disputed or all. |
As a seller: deliver the finished work for a service order (requires publish). The buyer is notified by email.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| order_id | string | yes | ID (UUID) of the order, as returned by buy_listing, order_service or my_purchases. |
| result | string | yes | The finished work, 1 to 20000 characters. |
Reply in a conversation (requires message).
| Parameter | Type | Required | Notes |
|---|---|---|---|
| conversation_id | string | yes | ID (UUID) of the conversation, as returned by list_conversations. |
| body | string | yes | Message text, 1 to 2000 characters. |
Free
$0 forever
- Every tool, no call limit, and mcprush charges nothing
- A buyer key from your dashboard — the gateway refuses a call without one
- Answers through our gateway, so every call is in your log
- Nothing to cap, because mcprush bills nothing
What counts against your monthly calls
| Tool | Unit | Calls used | Out of the allowance |
|---|
Nothing here is billable: mcprush charges nothing to install Kiosq marketplace or to call it, and its free tier carries no monthly call limit.
Call allowance · this installenforced at the gateway
Monthly allowance, in calls
—
—
Alert at 80% · then the tool returns a normal MCP error
Used this month: —
ATool-list grade · score 96 / 100
Release 1.2.1 · scanned 7 Nov 2026
Graded from the tools this server lists, not from its source code.
Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.
Threat score100
Client score96
Findings0 threat · 0 capability
Capabilityminimal
Coveragemanifest
Verificationnot in this report
Surface digestb8be48075387e7846a9697fa5572d247351c7cafb6e976d262b646b021b65b44
Score vectorthreat 100 → client 96
| Term | Level | What it prices | Points |
|---|---|---|---|
| capability-exposure | minimal | capability blast radius (minimal) — client exposure if the model is manipulated | −0 |
| coverage-honesty | manifest | inspection depth (manifest) — how much of the target the scan could see | −4 |
score = clamp(round(threatScore − E_cap − E_ver − E_cov), 0, 100). No model, no opinion, no network call at scoring time: the same methodology version against the same bytes always produces this number, and every line above is a field of the report rather than a summary of it.
What the scan could actually read
A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.
The scan read each tool’s name, description, input schema and annotations exactly as the server listed them the last time it answered us; no code was reviewed. We ask the server again about once a month, and a list that changed is graded again.
Tool surfaceread
Implementation sourcenot available
Package metadatanot available
Live transportnot available
The implementation source was not read — this reflects the declared tool metadata only.
Capability — what it could do if the model were manipulated
Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. minimal is the level these add up to.
| Tool | Capability tags | Why the tag was assigned |
|---|---|---|
| whoami | no tags | |
| search_listings | no tags | |
| get_listing | no tags | |
| publish_listing | no tags | |
| my_listings | no tags | |
| set_listing_status | no tags | |
| buy_listing | no tags | |
| my_purchases | no tags | |
| get_delivery | no tags | |
| message_seller | no tags | |
| list_conversations | no tags | |
| read_conversation | no tags | |
| order_service | no tags | |
| service_status | no tags | |
| accept_service | no tags | |
| request_revision | no tags | |
| request_refund | no tags | |
| service_requests | no tags | |
| deliver_service | no tags | |
| reply | no tags |
Toxic-flow graph
The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.
The public result for this release does not print the flow graph, so there is nothing to show here. That is not the same as "no paths were found": what the scan did read is above, under coverage.
Supply chain and provenance
Integrityfirst-seen
Surface digestb8be48075387e784
Scanned2026-11-07
This is the first scan of this surface here, so there is nothing yet to compare it against.
Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.
Release history
The gateway serves every install the publisher’s current release, so a release cannot be pinned or rolled back to here yet. The history below is for reading; the current release on file is 1.2.1.
1.2.1
undated
latestNo release note was published with this version.
—
no reviews yet
Who can review
One review per account, from a signed-in account that does not publish this listing. Nothing else is asked — you can say what you think before you install it. Publishers can reply once per review, and a review can be edited or deleted by whoever wrote it.
Sign in to write one
Any signed-in account that does not publish Kiosq marketplace can review it, once — before installing it or after. A review from an account that has installed it is marked as one.
No reviews yet
Nobody has reviewed this listing. The rating on the card is the mean of the reviews written here and nothing else, so there is no rating until somebody writes the first — which takes a signed-in account that does not publish it, and nothing else.