{"id":"upbound-marketplace-mcp-server","name":"marketplace-mcp-server","homepage":"https://docs.upbound.io","repo_url":"https://github.com/upbound/marketplace-mcp-server","category":"ai-ml","subcategories":[],"tags":["mcp","ai-agents","upbound","marketplace","crossplane","go","json-rpc-2.0"],"what_it_does":"An MCP server (with stdio and HTTP transports) that exposes tools for searching and retrieving package/repository metadata and assets from the Upbound Marketplace API, including support for both marketplace API v1 and v2 and UP CLI–based authentication for private resources.","use_cases":["Discover Upbound Marketplace packages by query and filters (provider/config/function)","Fetch package metadata such as CRDs, versions, and documentation pointers","Retrieve package assets (docs, readme, release notes, icons, SBOMs)","Browse repositories and apply advanced AIP-160 filters (v2)","Support Crossplane composition building by fetching examples/resources for specific group/kind/version/compositions","Automate marketplace analysis workflows in MCP-capable AI agents"],"not_for":["Direct production access to the Upbound Marketplace from the open internet without a local agent boundary (it is primarily an MCP server for agent tooling)","Use by agents that cannot use MCP JSON-RPC over stdio or the provided HTTP transport","Teams needing a dedicated managed API service with explicit SLAs and usage-based pricing"],"best_when":"You have an MCP-capable agent and want programmatic marketplace discovery/metadata retrieval (including private resources) using your existing UP CLI credentials.","avoid_when":"You need a multi-tenant SaaS with centralized auth, guaranteed uptime, published rate-limit guarantees, or first-class public REST/OpenAPI contracts beyond MCP JSON-RPC.","alternatives":["Use the Upbound Marketplace APIs directly (v1/v2) from your own backend or CLI tooling","Use UP CLI tooling for marketplace interactions, then have your agent parse results","Build a small MCP wrapper around marketplace REST endpoints tailored to your use case"],"af_score":59.5,"security_score":56.5,"reliability_score":25.0,"package_type":"mcp_server","discovery_source":["github"],"priority":"low","status":"evaluated","version_evaluated":null,"last_evaluated":"2026-04-04T19:37:30.483429+00:00","interface":{"has_rest_api":false,"has_graphql":false,"has_grpc":false,"has_mcp_server":true,"mcp_server_url":"http://localhost:8765/mcp","has_sdk":false,"sdk_languages":[],"openapi_spec_url":null,"webhooks":false},"auth":{"methods":["UP CLI authentication (uses mounted ~/.up/config.json inside the container)"],"oauth":false,"scopes":false,"notes":"Auth is delegated to the UP CLI configuration mounted into the server container. A dedicated 'reload_auth' tool is provided to switch profiles."},"pricing":{"model":null,"free_tier_exists":false,"free_tier_limits":null,"paid_tiers":[],"requires_credit_card":false,"estimated_workload_costs":null,"notes":"Open-source tooling; no pricing information in provided content."},"requirements":{"requires_signup":false,"requires_credit_card":false,"domain_verification":false,"data_residency":[],"compliance":[],"min_contract":null},"agent_readiness":{"af_score":59.5,"security_score":56.5,"reliability_score":25.0,"mcp_server_quality":78.0,"documentation_accuracy":75.0,"error_message_quality":0.0,"error_message_notes":null,"auth_complexity":60.0,"rate_limit_clarity":20.0,"tls_enforcement":60.0,"auth_strength":65.0,"scope_granularity":30.0,"dependency_hygiene":55.0,"secret_handling":70.0,"security_notes":"Credentials are provided by mounting a local UP CLI config directory into a container (read-only mount shown). The README does not describe TLS requirements for the HTTP MCP transport, token handling, or principle-of-least-privilege scope granularity. No explicit guidance is provided on logging redaction of secrets or on rate-limit/abuse handling.","uptime_documented":0.0,"version_stability":45.0,"breaking_changes_history":20.0,"error_recovery":35.0,"idempotency_support":"false","idempotency_notes":null,"pagination_style":"page (0-indexed) and size (max 500) parameters exposed for search/repository listing tools","retry_guidance_documented":false,"known_agent_gotchas":["HTTP interface is JSON-RPC 2.0 at /mcp and requires POST requests with appropriate params per tool.","The server relies on mounted UP CLI config; missing/incorrect mount will cause authentication failures.","Some tools reference v1 vs v2 marketplace behavior via use_v1; agents should choose the intended API version.","The example for get_package_version_resources appears to have a truncated version string in the README; use the version format shown elsewhere (e.g., v1.23.1) and validate arguments."]}}