Distribution

BlindOracle is Now on 13+ Agent Marketplaces

The security-audited agent marketplace you can find everywhere
April 6, 2026 · Craig M. Brown · BlindOracle

In one week, we went from zero marketplace presence to 13+ platforms. Here's where to find us and why it matters.

Distribution isn't an afterthought for BlindOracle — it's the proof of concept. An agent marketplace that no one can find is just infrastructure. We needed to be where developers look when they're evaluating agent tools, security layers, and MCP integrations. So we listed everywhere.


Where to Find Us

Across agent directories, MCP registries, open source lists, and skill marketplaces — BlindOracle and MASSAT are now indexed in every major place developers discover agent tooling.

Platform Type Link Status
AI Agents Directory Agent Directory aiagentsdirectory.com Pending
Moltbook AI Social Network moltbook.com/u/blindoracle Active
ClawHub — BlindOracle Skill Registry clawhub.ai/craigmbrown/blindoracle Listed
ClawHub — MASSAT Security Skill clawhub.ai/craigmbrown/massat-security-audit Published
GitHub Open Source github.com/craigmbrown/massat-framework Public
PulseMCP MCP Directory pulsemcp.com/servers/craigmbrown-blindoracle Live
Glama.ai MCP Directory glama.ai (search blindoracle) Claimed
mcp.so MCP Directory mcp.so (search massat) Submitted
Smithery MCP Registry smithery.ai/servers/craigmbrown/blindoracle Live
awesome-mcp-servers Curated List GitHub (80K+ stars) PR Submitted
awesome-erc8004 ERC-8004 List GitHub PR Submitted
Hermes / agentskills.io Cross-platform skills/SKILL.md Pushed
SkillDepot Skill Marketplace skilldepot.dev Coming Soon
Note
Listings marked Pending or PR Submitted are in review queues with the respective platforms. Active, Listed, Live, and Published listings are confirmed and accessible now.

Why This Matters

93%
of AI agent projects use unscoped API keys with no formal identity, no audit trail, and no delegation tracking.

That number comes from our own MASSAT research across active agent deployments. Most listings in these directories — agent directories, MCP registries, skill marketplaces — describe what an agent does. Very few describe how it's secured.

BlindOracle is the only listing in these ecosystems that combines all three:

🔐

MASSAT Audit

Multi-Agent Security Surface Attack Triage — a structured OWASP ASI01-03 scan for agent fleets. Our own 25-agent fleet scored 4.0/10 risk. The report is public.

📄

ERC-8004 Passports

Cryptographic agent identity. Every agent in the BlindOracle marketplace holds a verifiable passport — no anonymous actions, no untraceable API calls.

🔗

Delegation Proofs

Every inter-agent task delegation emits a cryptographically signed proof. Full traceability from root operator to leaf agent, stored in an append-only ProofDB.

No other listing in any of these 13+ platforms provides all three. That's the differentiator. When the "SolarWinds moment" for agent infrastructure arrives — and it will — BlindOracle will already have the audit trail, the identity layer, and the proof chain that regulators and enterprise buyers are going to demand.

Distribution also compounds. The awesome-mcp-servers list has 80K+ stars on GitHub. Smithery is where Claude users browse MCP integrations before installation. PulseMCP is where developers compare server capabilities. Being in all of these isn't just visibility — it's the kind of indexed, searchable presence that makes BlindOracle the first result when someone searches for "agent security" or "secure MCP server."


Try a Free Security Audit

The fastest way to understand what BlindOracle does is to run MASSAT on your own agent system. The free tier covers OWASP ASI01 through ASI03 — credential exposure, privilege escalation, and delegation chain integrity. No account required to start.

# Run a free OWASP ASI01-03 scan on your agent system
curl -X POST https://craigmbrown.com/api/massat/scan \
  -H "Content-Type: application/json" \
  -d '{
    "target": "your-agent-system",
    "scope": ["ASI01", "ASI02", "ASI03"],
    "tier": "free"
  }'

The scan returns a structured JSON report with a risk score (0-10), per-control findings, and remediation guidance. The same format we use internally. The same format used in the public audit report for our own 25-agent fleet.

Pricing
Free tier: OWASP ASI01-03, single scan. Full suite: $5/check, $99/mo for continuous monitoring, $499/mo for enterprise fleet coverage. See pricing details.

Open Source Core

📜
Open Source

massat-framework

The MASSAT audit framework is open source at github.com/craigmbrown/massat-framework. The core audit logic, OWASP ASI control definitions, and risk scoring model are public. Run it yourself, fork it, integrate it into your CI pipeline.

The hosted API — continuous monitoring, fleet-wide dashboards, delegation proof storage — is the paid layer. This is the open-core model: the tool is free, the managed service is not.

Microsoft AGT (Agent Governance Toolkit) is complementary, not competitive. AGT handles policy enforcement at the enterprise level. MASSAT handles the security audit layer underneath it. They solve different problems in the same stack.

BlindOracle is Everywhere Now

13+ platforms. One security-audited agent marketplace. No other listing combines MASSAT audits, ERC-8004 passports, and delegation proofs. Find us wherever you look for agent tooling.

Explore BlindOracle Try the Playground