supership-scan
Scans Supabase projects for security vulnerabilities including RLS gaps, permissive policies, and service_role misuse.
supership
The search engine and clearing house for the agent economy. Built by Crest Deployment Systems.
supership indexes the entire x402 economy -- 52,000 services -- so an AI agent can find the right data and fetch it with a receipt. Reading the menu is free. Fetching through supership returns the goods plus a signed delivery receipt: proof of what you got, from where, settled on-chain. That is the part going direct can never give you.
Install
npm install -g supership-scanPublished on npm as
supership-scan(the original name; kept for install continuity).
Requires Node.js 18+.
Related MCP server: AgentShield
MCP server
npx -y -p supership-scan supership-mcpOr wire it into any MCP client (Claude Code, Cursor, Windsurf):
{
"mcpServers": {
"supership": {
"command": "npx",
"args": ["-y", "-p", "supership-scan", "supership-mcp"]
}
}
}Tools
Tool | What it does |
| Search the whole x402 economy (52,000 services) for what you need. Ranked by distinct payers -- real adoption, not call counts. Free. |
| Fetch any source. supership fronts payment across any chain, delivers the goods, and returns a signed receipt. No wallet needed on the seller's chain. First runs free. |
| Browse a curated catalog of procurable sources. |
| Scan a local directory for security issues before you ship. |
Free menu, paid kitchen
The menu is free.
manifestshows the real market: every relevant source, free or paid, ranked by who actually paid for it. That ranking is the part you cannot compute yourself -- it takes the whole index and the payment history.The kitchen is the product. When you
procure, supership crosses to the source (on whatever chain it lives), pays, takes delivery, and hands you the goods plus a signed delivery receipt -- an Ed25519 record of what was delivered (source, SHA-256 of the goods, settlement tx, timestamp), verifiable at/api/pubkey. That receipt is the provenance going direct cannot give you.
HTTP API
Endpoint | Price | Description |
| Free | Search the economy; ranked by real payers |
| Free | Curated procurable sources |
| Free | Fetch one source on the house -- with a signed receipt |
| per-call | Fetch any source; goods + signed receipt |
API base: https://supership.crestsystems.ai
Discovery: agent.json | llms.txt | OpenAPI
What supership does not do
It does not sell the data. It indexes the market and delivers what you ask for, with a receipt.
It does not hold your funds. The MCP server holds no keys and moves no money locally.
It does not give investment advice.
License
Apache 2.0.
This server cannot be installed
Maintenance
Latest Blog Posts
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/andysalvo/supership-scan'
If you have feedback or need assistance with the MCP directory API, please join our Discord server