FluxA AgentMarket vs Nevermined API + MCP

FluxA AgentMarket 12

Graded as a hosted service, the discovery gateway on agentmarket.fluxapay.xyz and the proxy and LLM endpoints on router.fluxapay.xyz, from the vendor's pages. Nothing was called. No status page is linked from the site, the footer, llms.txt or the guides, and no status host was checked (0). With no readable incident history the record takes the default (5). Listing pages show a health count with no history, such as '10/10 endpoints healthy' on Minifetch. No rate limit with numbers was found in llms.txt, the guides or the CLI help. The only cap is a per-key spending limit (0). The Balance guide says to retry a 503 shortly without minting a new credential, replays of a settled top-up finalize call are idempotent, a failed order answers 409, and the card flow says 'a retry is a new order'. No 429 or Retry-After guidance was found. Termix earned 8 for the same kind of guidance with idempotency keys on writes (7 of 15). No SLA was found, and the terms supply the service 'as is' (0). The about page labels the product 'v.01 / Beta' (0). Total 12.

Nevermined API + MCP 63

Hosted lines, graded on the Catalog MCP server (which carries the Router's route_by_intent, quote_service and pay_service) and the REST API, the surfaces both graders used. status.nevermined.ai is an Upptime page built from the public nevermined-io/uptime repository, with history for five root URLs (website, app, docs, and the sandbox and live API roots). It doesn't monitor mcp.live.nevermined.app or any Router route. At 16:50 UTC on 17 October 2026 the repository's newest commit was the daily summary of 6 October, and its daily response-time records stop on 5 September, so the page had recorded nothing for 11 days. Snipcart earned 15 for an Upptime page that checks root URLs and is still running, and Brave's page earned 10 with its components unmonitored (10 of 20). The record from 28 July (when the API monitors started) to 6 October shows both APIs clean and one docs outage, 502s from 20:09 UTC on 2 September to 05:39 UTC on 3 September, about 9.5 hours. The docs aren't a surface an agent calls, so minor incidents only (20). The Router documents per-key, per-slug and IP-keyed global 429 buckets without request-rate numbers, plus a default of 10 concurrent routed requests per user and about 60 device-flow polls a minute per IP. Paid earned 7 for limits described without numbers, and the published figures add 1 (8 of 15). 429s carry Retry-After, the global bucket adds Retry-After-short, Retry-After-long and RateLimit headers, every error carries a retryable flag, and payments take a requestId, with documented handling of indeterminate and duplicate payments (15). No SLA in the terms or on the pricing page (0). The Catalog MCP and the Router carry no beta or preview label (10).

FluxA AgentMarket 32

The editorial half. The marketplace, proxy and gateway are closed. The terms (effective 14 January 2026) cover pricing, refunds and acceptable use but name no governing law, termination terms, liability for third-party listings or creator obligations, and the company appears only in the footer. The CLI is Apache-2.0 (8 of 30). The privacy policy (14 January 2026) lists account, payment and usage data and says identity isn't shared with model providers. It says nothing on prompts, API payloads, retention, training or data location (6 of 30). No deprecation policy or dated notice was found, and the terms may change 'at any time' (0 of 20). The policy names Stripe and 'OpenAI/Anthropic API' as a non-exhaustive list, while the models page lists AIHubMix, UnifyLLM and Baidu AI Cloud as providers. No locations are given (4 of 20). Total 18. The provenance half is computed from the provenance block.

Nevermined API + MCP 70

The editorial half. The SDKs are Apache-2.0, while the platform, API and MCP server are closed (the registry names a private repository, nevermined-io/nvm-monorepo). The terms at nevermined.ai/legal/terms are published but undated, are written for a wallet-connected app that 'does not transfer any Crypto Assets', don't mention cards, Delegations, the Router or the Subscription, and let Nevermined end the agreement without notice. Paid earned 17 for a closed platform under an undated agreement with open SDKs (17 of 30). The Data Policy on nevermined.app gives retention by category (account and transaction records ten years, audit logs five, usage data 24 months, analytics 12 months, masked session recordings 30 days, paid call responses 24 hours), which agrees with the MCP tools' 24-hour result window, and says stored responses aren't used for training. The older policy the nevermined.ai footer links is a generic notice for the marketing site, naming visitor identification partners (retention.com, RB2B), and the Data Policy says that site has its own notice, so the two don't conflict on the platform. The Data Policy is undated (24 of 30). The versioning page is a deprecation policy, with the 1.0 floor supported indefinitely, no forced sunsets and breaking changes gated behind pins, and the SDK changelogs carry dated deprecations such as the environment option. The Router refuses legacy API keys (403 BCK.ROUTER.0008) with no date or notice found (16 of 20). Annex B lists seven sub-processors with locations and transfer mechanisms and promises 60 days' notice of changes, hosting is in the EU or Switzerland, and product analytics run on PostHog's EU instance with a documented opt-out. The cloud host and compliance platform aren't named, and Privy (sign-in) and Braintree (cards), which the auth manifest and docs name, aren't listed (14 of 20). The provenance half is computed from the provenance block.

FluxA AgentMarket 53

No OpenAPI file was found. llms.txt names none and the documentation site, docs.fluxapay.xyz, couldn't be read because its robots.txt couldn't be. The discovery response has documented fields (apiServers, skills, models, pagination), a GET on each listing's urls.access returns its endpoints and prices as JSON per the skill-creation guide, and the LLM endpoints follow the OpenAI and Anthropic formats (8 of 25). llms.txt and Markdown guides (getting-started.md, currency.md, create-skill.md, the APIs and Balance guides) written for agents (10). The guides say when to use search against query, that the external catalogues are a last resort and which rail fits which job. Listing descriptions come from creators and 17 of the first 50 skills have none (12 of 20). type is an enum that answers 400 to unknown values, limit is bounded at 1,000, and the chat and messages bodies follow published formats. Listing endpoints are described by each creator (9 of 15). curl examples for discovery, models and payment, a status table in the Balance guide with the action for 401, 503, 404, 402 and 409, and seven named mandate errors in the APIs guide (11 of 15). Paths carry /llm/v1/ and llms.txt names minimum CLI versions, but no changelog was found (3 of 15). Total 53.

Nevermined API + MCP 85

Every one of the 12 Catalog MCP tools has a typed JSON Schema input (tools/list read without a credential on 17 October 2026). llms.txt links three public OpenAPI files, openapi.json (OpenAPI 3.1, 39 paths including 11 Router routes), oauth-openapi.json (12 paths) and organizations-openapi.json (65 paths). POST /router/select, the REST side of route_by_intent, and the /api/v1/mpp/challenge and /api/v1/mpp/settle routes in the MPP seller guide aren't in any of them. The catalogue's REST reads answer 403 to outside callers by design, so they aren't counted. Missing routes cost 3, as for Presidio and ComplyCube (22 of 25). llms.txt with a Markdown twin of every page, and a Docs MCP server (10). The descriptions state purpose and when to use each tool instead of its neighbour, such as route_by_intent 'instead of search_services when you want the right service for a task', and when not to, such as autoPay suiting only single-endpoint services. They are long, which ergonomics counts (18 of 20). Enums on protocol and funding, bounds on pageSize, limit and maxTotalCents, a uuid format on paymentId and additionalProperties: false, but body has no type, headers is a free string map, method a free string and from and to plain strings with no date format. Paid earned 12 for enums and required flags beside free-form maps, and an untyped body sits below that (11 of 15). Each tool page has request and response examples and a refusals table, and the API error model documents a stable BCK.* code, message, hint and retryable flag, with a full code list (15). The API is versioned by MAJOR.MINOR with a Nevermined-Version header, per-key pins and a written compatibility policy. The SDKs keep dated CHANGELOG files and there's a dated product update of 15 October 2026, but no changelog for the platform, API or MCP server was found. Paid earned 7 for versioning with no API changelog, and the SDK changelogs add 2 (9 of 15).

FluxA AgentMarket 51

fxa_live_ keys are created by a person at /keys and shown once, each with a spending limit in Units that changes within seconds, and are revoked immediately over DELETE /llm/keys/<id>, with written rotation steps. Key management needs a 5-minute Agent VC, never a key, and creation can be set to need a person's approval. No permission scopes beyond the spending limit were found, and no secret in a URL (24 of 30). Wallet payments need a mandate a person signs with a USDC budget and an expiry, and the Balance guide says to confirm every top-up with the user. The APIs guide tells agents not to ask before paying within a signed mandate, and no read-only key was found (14 of 20). The marketplace returns content from third-party APIs and installs third-party skills. Results carry a fluxa or bazaar source tag, but entries named ssrf1, keyprobe and tooltest1 are tagged fluxa, no review of uploads is described, and no guidance on treating responses or skills as untrusted was found (2 of 15). The balance endpoint returns available, spent, burn per day and owed, the ledger lists spend and purchases per merchant, and the wallet skill reads an X-LLM-Cost header on model calls (11 of 15). No disclosure policy, bug bounty, certification or advisory was found. security.txt couldn't be read and is scored absent, and the privacy policy says only 'industry-standard security measures' (0 of 20). Total 51.

Nevermined API + MCP 74

Plain API keys are bearer credentials per environment, accepted only in the Authorization header (the auth manifest rules out a query parameter), with Admin and member roles and no scopes found, and an admin key can move organisation funds. MCP hosts can use OAuth 2.1 with PKCE and the commerce scope, whose short-lived credential spends only from the Delegation a person approved, with one-time refresh tokens and revocation at /oauth/revoke. The device flow mints a key for one agent's plan. OpenRouter earned 25 for bearer keys and OAuth PKCE with no permission scopes, the same kind of model (25 of 30). Delegations carry a hard cap, transaction count and expiry, are revocable and are never widened or extended in place. An agent can't set its own cap, since setup_delegation hands a person one URL, and Visa delegations need a passkey. Recipient scope is optional and unset means any merchant, there's no read-only key, and nothing asks before a paid call within the cap. Composio earned 16 with read-only filters and optional approvals, and here caps a person sets stand in for the missing read-only mode (16 of 20). pay_service relays merchant responses unchanged. Listing text is sanitised and moderated, route_by_intent ranks without a model reading listings and get_service marks docs examples as unverified provider documentation, but no guidance on treating merchant responses as untrusted was found (6 of 15). Per-payment records with delivery status in list_payments, an organisation activity feed (GET /organizations/{orgId}/activity), an x-correlation-id on every response, connected agents that can be listed and revoked, and audit logs of actions under Agentic Tokens kept five years per the Data Policy. Unpaid tool calls leave no record the operator can read (14 of 15). security.txt is valid on nevermined.app (security@nevermined.io, expires 2 May 2027) and missing on nevermined.ai. The certifications page and pricing page claim SOC 2 Type II, ISO/IEC 27001:2022 and PCI SAQ-D, while the Data Policy's section 8.5 calls the ISO 27001 programme in progress with Stage 2 scheduled. The Trust Center renders only with JavaScript and wasn't read, no bug bounty was found, and GitHub advisories couldn't be read because GitHub's API refused us. Composio earned 12 for SOC 2 Type II and private reporting without security.txt (13 of 20).

FluxA AgentMarket 64

Read for a closed service. No changelog or dated release notes were found. The models page says the catalogue was 'last updated November 5, 2026', and @fluxa-pay/fluxa-wallet 0.6.0, the CLI that carries the market commands llms.txt relies on, was published on 6 November 2026 (30). The CLI had eight releases between 10 August and 6 November 2026, 0.4.12 to 0.6.0 (20). Support is a Discord server and support.fluxapay@fluxapay.xyz, neither tested, and GitHub issues couldn't be read because the GitHub API refused us (3 of 15). No AgentMarket SDK. The TypeScript CLI is the official client and the LLM endpoints take OpenAI and Anthropic SDKs. Not an MCP server, so the registry line reads as SDKs (7 of 15). The CLI repository has 7 test files and no CI workflow, and the npm package declares no repository. @fluxa-pay/fluxa-connect-mcp points to a repository that isn't public (4 of 10). Total 64.

Nevermined API + MCP 81

Read for a hosted service with open SDKs. The MCP server reports version 1.69.0, published to the official registry on 15 October 2026, the day of Nevermined's product update on the Subscription, Readiness scoring and the Router (30). 14 registry versions between 29 September and 15 October, and SDK releases 1.11.0 to 1.13.0 (TypeScript) and 1.16.1 to 1.18.0 (Python) between 18 August and 9 September (20). The platform is closed and GitHub's API and web pages refused our reader, so the issue queues are unread and the 0 to 15 scale for closed services applies, as in the Paid dossier. Dated SDK changelogs that link fixes to issues (#422 fixed by #423 in 1.11.2 on 1 September), a dated product update and Discord support on the Free plan, not tested (8 of 15). io.github.nevermined-io/catalog is active in the official MCP registry under a GitHub-verified namespace, and the SDKs are current in TypeScript and Python (15). The SDK repositories run test, lint, release and docs workflows with Dependabot and lockfiles. CI results weren't read (8 of 10).

FluxA AgentMarket 66

Graded on the HTTP API. Discovery takes limit up to 1,000, type and tags filters and a Markdown format, with no field selection, and listing responses vary by creator (15 of 25). limit, offset and nextOffset on discovery, search and query modes, and the ledger takes kind, limit (maximum 100) and offset. llms.txt says filters ignore limit and offset (16 of 20). The Balance guide's status table gives an action for each status, the APIs guide names insufficient_balance, mandate_budget_exceeded, agent_not_registered and others, and a model served only on Messages answers 400 on chat (15 of 20). finalize replays are idempotent and a dead order answers 409 with the instruction to start a new one. No idempotency key on paid calls was found (10 of 20). The LLM endpoints accept any OpenAI or Anthropic client, discovery needs no parameters, and the only official client is the TypeScript wallet CLI (10 of 15). Total 66.

Nevermined API + MCP 76

Graded on the Catalog MCP server, with the REST API where a line covers it. Twelve tools put it in the 11 to 30 band, with no toolsets or read-only subsets. The definitions come to about 41,000 characters (pay_service alone about 9,800), and the band is read without a size deduction, as openmetadata (16 tools, 49,602 characters) and plane (30 tools, about 67,000) were (15 of 25). search_services takes pageSize 1 to 100 but returns only the first page, since its pageToken can't be passed back, route_by_intent's shortlist takes limit 1 to 20, and list_payments filters by Delegation and date and stops at 1,000 records with no cursor (14 of 20). Refusals come back as JSON with error, code, retryable and instructions, often naming the next tool, such as no_delegation pointing to setup_delegation (20). A repeated paid call with the same requestId is answered from the stored result for 24 hours, and payment_indeterminate and already_paid are documented. None of the 12 tools carries readOnlyHint or destructiveHint, though each declares a securitySchemes entry (noauth, or oauth2 with the commerce scope). Composio earned 15 with annotations and no idempotency keys, so the reverse case takes 12 (12 of 20). Most tools need one argument or none, autoPay defaults to off, and official SDKs ship in TypeScript and Python (15).