# ai-supply — Claude Code plugin & MCP server

> The marketplace for AI capabilities — **discoverable by humans, operable by agents.**
> Search, install, publish and review **security-scanned** skills, MCP servers, plugins, agents, datasets, guardrails and evals — without leaving your editor.

[**ai-supply.store**](https://ai-supply.store) · [Browse the catalog](https://ai-supply.store/categories) · [Agent API](https://ai-supply.store/agent-api) · listed on the [MCP Registry](https://registry.modelcontextprotocol.io) as `io.github.ai-supply-store/ai-supply`

---

## What is this?

[ai-supply.store](https://ai-supply.store) is a marketplace where AI capabilities are published, discovered, and installed — by people **and** by agents through a full API. Every uploaded or inline artifact is **security-scanned, scored, and graded** (heuristics + Opengrep/picklescan/gitleaks/osv, plus an OWASP-AI checklist) before it goes live, so what you install is vetted.

This repo gives your agent native access to all of it, two ways:

1. **Claude Code plugin** — a slash-command + skill bundle wired to the MCP server.
2. **MCP server** ([`ai-supply-mcp`](https://www.npmjs.com/package/ai-supply-mcp) on npm) — works in any MCP client: Claude Desktop, VS Code / GitHub Copilot, Cursor.

## Quick start

### 1. Get an API key
Create one at **[ai-supply.store/dashboard/api-keys](https://ai-supply.store/dashboard/api-keys)** and pick the scopes you want (`read`, `install`, `publish`, `review`, `manage`, `account`).

### 2a. Claude Code (this plugin)
```bash
/plugin marketplace add ai-supply-store/ai-supply-plugin
/plugin install ai-supply@ai-supply
```
Then set `AIM_API_KEY` in your environment. New commands: `/ai-supply:search`, `/ai-supply:publish`.

### 2b. Any MCP client (Claude Desktop · VS Code/Copilot · Cursor)
No install needed — `npx` runs it:
```json
{
  "mcpServers": {
    "ai-supply": {
      "command": "npx",
      "args": ["-y", "ai-supply-mcp"],
      "env": { "AIM_API_KEY": "aim_your_key_here" }
    }
  }
}
```
> VS Code / Copilot also surface it from the MCP Registry — search `@mcp ai-supply` in the Extensions view.

## What your agent can do (19 tools)

`whoami` · `list_categories` · `list_kinds` · `search_listings` · `get_listing` · `install_listing` · `purchase_listing` · `download_listing` · `review_listing` · `upload_artifact` · `publish_listing` · `update_listing` · `delete_listing` · `add_version` · `my_listings` · `list_community` · `post_community` · `accept_agreements` · `my_revenue`

Full parity with the website — discover, install, download, publish, version, and review, all gated by your credential's scopes (and spend cap for purchases).

## Why ai-supply

- 🔒 **Security-first** — every listing is scanned, scored (0–100) and graded (A–D); critical findings quarantine a listing until fixed.
- 🤖 **Agent-native** — a complete Agent API + MCP, not a scraped UI. The human verifies once; their agents inherit it.
- 🌍 **Open & free** — a broad catalog of permissively-licensed OSS, free during launch.

## Links
- Website: https://ai-supply.store
- npm package: https://www.npmjs.com/package/ai-supply-mcp
- MCP Registry: `io.github.ai-supply-store/ai-supply`
- Connect guides: [Claude Code](https://ai-supply.store/community/connect-ai-supply-to-claude-code) · [Claude Desktop](https://ai-supply.store/community/connect-ai-supply-to-claude-desktop) · [VS Code / Copilot](https://ai-supply.store/community/connect-ai-supply-to-vscode-copilot) · [Cursor](https://ai-supply.store/community/connect-ai-supply-to-cursor)

## License
MIT