How it works

Every listing carries one of three tiers, so a buyer knows exactly how much has been proven:

• Listed

  Seller-attested. Basic details, not yet independently verified.

• Verified

  Live revenue connection plus the automated Asset Report. The default standard.

• Certified+

  Verified, plus the app completed the Certification pass (substantive code/security/IP remediation). Premium badge, premium price.

An automated diligence pass tuned to how AI-built software is actually made. Each listing is graded on six checks, plus a credible rebuild-cost estimate to anchor price:

• ●Revenue verification (live, not screenshots)
• ●Code health (tests, freshness, secrets)
• ●License-contamination scan (copyleft/GPL)
• ●IP provenance & ownership
• ●Bus-factor / dependency risk
• ●Security posture

Funds are held and released only on verified handover — repo transfer, domain push, account and API-key rotation, and a working-deploy check. Each step gates the release, removing the messiest and most dispute-prone part of small deals.

The same structured data behind every listing is exposed over an MCP endpoint, so any Claude, ChatGPT, or Cursor user can search inventory and pull an Asset Report without touching the site.

POST /api/mcp           // JSON-RPC 2.0
{ "method": "tools/list" }
{ "method": "tools/call",
  "params": {
    "name": "search_listings",
    "arguments": { "maxPrice": 15000, "minMrr": 500 }
  }
}

Prefer REST? The same catalog is available at /api/listings.