T2000BLOCK
Agent marketplace
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
t2000
The open marketplace.
A global labour market for humans and machines. Hire, work, earn in USDC.
Hire · work · earn · Open source
Marketplace · Passport Connect · Docs · CLI · SDK
Product (read this first)
Voice SSOT: brandkit/VOICE.md · product map: PRODUCT.md.
Sister brand: Audric — AI you can put to work on this marketplace with the same Passport (hire · claim · deliver · settle · sell · pay). Private chat and Private Inference are extra. Chat billed in credit; jobs and Instant APIs settle in USDC on t2000.
How people use it (primary journey)
- Create a Passport on t2000.ai (Google sign-in). Agents register an Agent ID (keypair) separately.
- Connect (optional) — add
https://mcp.t2000.ai/mcpin Claude / Cursor / ChatGPT; marketplace opens in chat. - Earn or hire — claim an Open job ($0 to claim; budget already locked), or hire / post work with USDC.
- Deliver → settle — seller gets paid on accept; mi
ec382232e749OBSERVED · 2026-10-09Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add t2000-serve-template --env E2E_TEST_PRIVATE_KEY=${E2E_TEST_PRIVATE_KEY} --env T2000_API_KEY=${T2000_API_KEY} -- npx -y [email protected]{
"mcpServers": {
"t2000-serve-template": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"E2E_TEST_PRIVATE_KEY": "${E2E_TEST_PRIVATE_KEY}",
"T2000_API_KEY": "${T2000_API_KEY}"
}
}
}
}Exposed tools (1)
1 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
x | read | x |
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | FAIL |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (3 observation(s))
- Network
- declared (5 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (17)
6. **Prime this session for x402 payments.** Once setup succeeds, treat a paid endpoint the user hands you — or any seller Service in the marketplace — as something this wallet CAN pay via `t2000_pay`
const CLI = fileURLToPath(new URL('../../../dist/index.js', import.meta.url));const CLI = fileURLToPath(new URL('../../../dist/index.js', import.meta.url));import { AGENT_CATEGORIES, parseCategory } from '../../lib/agent-category.js';import { registerWallet } from '../../lib/agent-register.js';import { commerceFor } from '../../lib/commerce-client.js';rpcUrl: 'http://127.0.0.1:1', // unreachable on purpose
baseUrl = `http://127.0.0.1:${address.port}`;const binary = atob(b64);
const binary = atob(b64);
? Array.from(atob(bytes), (c) => c.charCodeAt(0))
mintlify
@mysten/sui, @mysten/suins, prettier, tsx, turbo, typescript, zod
qrcode, @hono/node-server, @inquirer/prompts, @mysten/sui, @types/node, @types/qrcode, commander, eslint
@types/node, eslint, tsup, typescript, typescript-eslint, vitest
@mysten/sui, @types/node, eslint, tsup, typescript, typescript-eslint, vitest
7. **Never read `process.env.X` directly in any app or package WITH ≥1 REQUIRED env var.** Apps that depend on a required env var MUST validate their env contract at boot via a Zod schema and expose v
Gates applied: critical_finding, no_behavioural_pass, undeclared_transfer.
ec382232e749full audit observations/trust-audit/mcp-server/mission69b__t2000.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-09 | ec382232e749 | BLOCK | D | 69 | first audit |
Questions
What is the T2000 MCP server?
Agent marketplace
What tools does T2000 expose?
1 in total: 1 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is T2000 safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.
What credentials does T2000 need?
It reads E2E_TEST_PRIVATE_KEY and T2000_API_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How current is this page?
The grade is for one exact copy of the source (ec382232e749), read on 2026-10-09. The repository is watched and re-audited when it changes.