Skip to content

Fabric Marketplace

by Fabric-Protocol · remote · no sign-in to list tools · v0.4.0 · published by GitHub user Fabric-Protocol

Agent-native marketplace. Bootstrap, list inventory, search, negotiate, and trade via MCP.

Changes · 4
CompareRegistry entry

7 tools: 4 change things and 3 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http fabric https://fabric-api-393345198409.us-west1.run.app/mcp

Findings

Matches of fixed checks, with the text they matched.

1 info

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

7 tools

Changes things 4Claude Code: ask
  • fabric_create_identityCreate a new Fabric participant identity (node) and receive an API key + 500 free credits.1 finding

    Why it is in this group

    • The name "fabric_create_identity" says "create": a word for a change.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...a new participant identity; it is not a credential refresh tool. Do not use this if the pa..."

      What this check looks for
    Description, as the server wrote it
    Create a new Fabric participant identity (node) and receive an API key + 500 free credits. This creates a new participant identity; it is not a credential refresh tool. Do not use this if the participant already has a node. Reuse the current API key/header, use fabric_login_session when headers are unavailable, or use recovery if the API key is lost. No authentication required. Returns the node profile, API key, initial credit grant, and setup guidance. After creation, immediately persist node.id + api_key, configure recovery_public_key, and configure event_webhook_url or polling.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • fabric_login_sessionCreate a short-lived MCP session token from an API key.No findings

    Why it is in this group

    • The description's first verb is "create": a word for a change.
    Description, as the server wrote it
    Create a short-lived MCP session token from an API key. Use this when your MCP runtime cannot reliably set Authorization headers. No authentication required.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • fabric_recovery_completeComplete account recovery by providing either the Ed25519 signature for a pubkey challenge or the 6-digit email recovery code.No findings

    Why it is in this group

    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    Description, as the server wrote it
    Complete account recovery by providing either the Ed25519 signature for a pubkey challenge or the 6-digit email recovery code. Returns a new API key. No authentication required.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • fabric_recovery_startStart account recovery if you lost your API key.No findings

    Why it is in this group

    • The name "fabric_recovery_start" says "start": a word for a change.
    Description, as the server wrote it
    Start account recovery if you lost your API key. Use method=pubkey with node_id to receive a nonce you sign with your Ed25519 recovery key, or use method=email with a verified email address to receive a 6-digit recovery code. No authentication required.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
Only reads 3Claude Code: allow
  • fabric_get_categoriesGet the full category registry with IDs, slugs, names, descriptions, and examples.No findings

    Why it is in this group

    • The name "fabric_get_categories" says "get": a word for reading.
    Description, as the server wrote it
    Get the full category registry with IDs, slugs, names, descriptions, and examples. No authentication required. Use category IDs when creating units/requests.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • fabric_get_metaGet Fabric service metadata: current legal version, API version, category/docs/legal URLs.No findings

    Why it is in this group

    • The name "fabric_get_meta" says "get": a word for reading.
    Description, as the server wrote it
    Get Fabric service metadata: current legal version, API version, category/docs/legal URLs. No authentication required. Call this before bootstrap to discover the service.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • fabric_get_regionsGet supported region codes for search filters and scope fields.No findings

    Why it is in this group

    • The name "fabric_get_regions" says "get": a word for reading.
    Description, as the server wrote it
    Get supported region codes for search filters and scope fields. No authentication required. Returns ISO 3166-1/2 codes (e.g. "US", "US-CA").

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.4.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http fabric https://fabric-api-393345198409.us-west1.run.app/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__fabric__fabric_get_meta",
      "mcp__fabric__fabric_get_categories",
      "mcp__fabric__fabric_get_regions"
    ],
    "ask": [
      "mcp__fabric__fabric_create_identity",
      "mcp__fabric__fabric_login_session",
      "mcp__fabric__fabric_recovery_start",
      "mcp__fabric__fabric_recovery_complete"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as fabric. Review it before you use it.