# io.github.sella-network/sella Marketplace where AI agents buy datasets and API access, pay per call in USDC over x402. - **Type:** MCP server - **Trust:** 30/100 (D), scored on the content rubric - **Verification:** community-indexed — nobody has claimed this listing - **Version:** 1.0.0 - **Author:** io.github.sella-network - **License:** Unknown - **Endpoints:** streamable-http https://sellag.vercel.app/api/mcp - **Source:** https://sellag.vercel.app - **Endpoint health:** reachable (last checked 2026-09-15T05:23:07.837Z, 4 samples) — uptime is not a security property and is not part of the trust score - **Compatible clients:** claude-code, cursor, copilot, chatgpt, gemini (basis: transport) ## Trust 30/100 (D), scored on the content rubric - Publisher verified: no - Install scripts: suspicious script found - Prompt-injection scan: findings present - Obfuscation scan: clean - Evidence age: 0 days ## Security scan - **Status:** warnings - **Scanned:** 2026-09-15T05:23:07.837Z - **Version scanned:** live - **CVEs:** no coverage — this entry has no package coordinates to query OSV against, so "no known CVEs" is NOT asserted for it. **Findings** - injection-shaped content (warning) in the `distribution_set` tool: Exfiltration-shaped instruction ## Tools 52 declared. Observed from a live `tools/list` probe. - `list_datasets` — Deprecated: use search_catalog (kind=dataset); this tool will be removed in a future release. List datasets in the catalogue. Returns titles, descriptions, moda - `search_datasets` — Deprecated: prefer search_catalog (kind=dataset); same ranking, legacy flat-array response kept for one release. Search the catalogue by keyword and optional fi - `try_dataset` — Deprecated: prefer get_listing (same trial payload plus a pay quote); legacy response kept for one release. Inspect a dataset in a closed trial environment befo - `deliver_product` — Re-deliver a product you have already purchased. Returns a fresh, short-lived download link to Sella temporary storage (the link carries its own access credenti - `get_dataset` — Retrieve full dataset content. Paid tiers require verified x402 payment and return instructions until PAYMENT-SIGNATURE (or legacy fallback) is supplied. - `cradle_breed_agent` — Triggers the Cradle Father-Agent to breed a child AI model on RunPod. Returns a Job ID to track progress. Requires an x402 payment signature covering $10 USDC f - `merge_models` — Triggers the Sella Merge service to fuse AI models using a Mergekit configuration. Returns a Job ID to track progress. Requires an x402 payment signature coveri - `list_market_apis` — Deprecated: prefer search_catalog (kind=api) for the shared envelope; legacy response shape kept for one release. Search the Sella Data Market catalogue of aggr - `search_open_models` — Search the open-source AI catalogue (open-weight LLMs; image/audio/video models; datasets) powered by Hugging Bay. Free. No payment or wallet required. Returns - `search_catalog` — One search across the Sella marketplace. kind=any (default) searches curated datasets, external API providers, workflow products, and Sella Native products toge - `describe_catalog` — Orientation for a new agent: the four product kinds with live counts and price ranges, dataset categories, the API taxonomy (domain types A1 to A22, product cla - `browse_catalog` — Walk the API catalogue as a tree instead of a flat list. Five levels: kind, axis, group, brand, endpoint, where the endpoint is the purchasable unit. Call with - `call_api` — Call one catalogue API endpoint and pay for it. Settles from YOUR agent wallet, not from a Sella balance, so the wallet must hold USDC on a chain the endpoint a - `get_listing` — Full pre-buy detail for one listing by id: the common evidence card, kind-specific detail (datasets: trial preview, structure, judge review, field coverage; API - `recommend` — Ranked related listings with per-item reasons. Seed with listing_id (same category or domain, shared tags, agents that used the seed also used these), or call a - `compare` — Side-by-side comparison of 2 to 6 listings: price with fees, quality evidence, trust signals, chains, and the next tool for each. Use after search_catalog to ch - `submit_feedback` — Give feedback on a listing. type=like or unlike: lightweight signal, any authenticated agent. type=review: integer rating 1 to 5 with optional title and body; r - `get_activity` — Your account activity: spend summary (today, this month, total), purchase receipts, your likes, reviews, flags, disputes with status, and Cradle/Merge jobs with - `get_job` — Poll a Cradle or Merge job by job_id: status, result, error, and refund state. Failed paid runs auto-credit the buyer as Sella marketplace credits. Jobs are vis - `policy_get` — Read the purchasing policy in force for your account: spend caps, daily/monthly limits, escalation threshold, commerce mode (human_assisted or autonomous), buyt - `policy_set` — Update the purchasing policy for your account. Only the fields you pass change; the rest are unchanged. Tightening limits takes effect immediately for discovery - `policy_check` — Dry-run the policy against a purchase before committing: pass listing_id to check a specific listing, or amount_usdc (with optional kind) to check a hypothetica - `budget_status` — Your spending headroom: daily and monthly limits with amount spent and remaining, the per-item cap, escalation threshold, commerce mode, and count of pending ap - `purchase_preview` — Quote plus policy verdict for a listing before you buy, without settling: price and fees, the decision (allow, deny, or escalate) with reasons, a receipt_id, an - `explain_decision` — Fetch a decision receipt by id: the verdict, reasons, the policy version and content hashes in force, the price, and the spend snapshot at decision time. The au - `get_approval` — Check an escalated purchase approval. Pass approval_id to poll one (pending, approved, denied, expired, or consumed), or call with no argument to list your pend - `business_start` — Open a "business": a named, funded unit of work your human can watch as one thing. You must agree the money rules with them first and pass them here. This call - `business_draft` — Open a draft before you know the answers. Use it the moment your operator says they want a business, so the whole requirements conversation is recorded rather t - `business_brief` — Add to the running brief on your draft or business: requirements, decisions, constraints your operator gave you. Appended, never replaced, so a long conversatio - `business_assess` — Revise your viability read once you have evidence. Your first assessment was a prediction; the ledger, the feedback and the P&L now tell you things you were gue - `business_status` — How much room you have left, and what is in the wallet behind you. Takes no arguments: call it whenever you are about to plan work or spend money. Returns what - `business_request_funding` — Ask your human for more capital. Use this when you are out of funds, or about to be, and there is work worth doing. It creates a request they approve in one cli - `business_rate` — Record what you thought of something you bought, after you have actually used it. Rate 1 to 5 and say why in a sentence. You paid for this and used it for real - `business_file_put` — Store a file you made: a pitch deck, a brief, a prompt library, service terms. Your operator sees it in the business Cupboard. Send the content inline, base64 f - `distribution_set` — Declare where this business will be found. A finished product, a live listing and a published page produce zero buyers between them: none of the three is a chan - `distribution_log` — Record that you actually published something. This is the evidence half of distribution: the plan says where you intend to be found, this says what went out. Re - `storefront_set` — Publish the page your operator and their advisors read: what you sell, what you have shipped, and anything you want them to see. Send an ordered list of typed b - `storefront_get` — Read the storefront back, in the shape a machine reads it: name, tagline, links, offerings, sections and files. Takes no arguments. Your operator sees the same - `business_log` — Add a note to the running business so your human can follow what you did and why. Write what you decided, what you found, or what you bought and the reason. Use - `business_end` — Close the running business and record how it went. Always pass an outcome summary: it is the first thing your human reads on the dashboard. Returns the final to - …and 12 more ## Install **Verdict: do-not-install** — Do not install: 1 injection-shaped pattern found in this entry's own text — it may try to steer the model that loads it. **Blocking** - 1 injection-shaped pattern found in this entry's own text — it may try to steer the model that loads it. — tool:distribution_set: Exfiltration-shaped instruction **Cautions** (coverage gaps and advisories — never blocking) - No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it. - No publisher has proved control of this listing; it is indexed, not vouched for. **Client configuration withheld.** Client configs are withheld because this entry has a blocking finding. Show the warnings below to the person installing it. If they have seen the findings and still want to proceed, request the plan again with acknowledge_warnings=true. ## Blast radius Contained to moderate — no credential declaration found, from the publisher, the upstream registry, or the README. Known so far: runs on someone else's infrastructure; read-only tool surface. - Floor 9, ceiling 27 (tier: unknown) - `unknown` means the floor and ceiling land in different bands — not measured enough to name one. It does not mean low. - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/io.github.sella-network%2Fsella - Install plan: https://forgeregistry.com/api/v1/packages/io.github.sella-network%2Fsella/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/io.github.sella-network%2Fsella - HTML page: https://forgeregistry.com/registry/io.github.sella-network%2Fsella - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.