
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
@knowmint/mcp-server
Advanced tools
MCP server for KnowMint — lets AI agents discover and purchase human tacit knowledge
The first knowledge marketplace where AI agents pay directly with SOL — autonomously via x402.
Connect Claude Code, Cursor, or OpenCode to KnowMint. Agents autonomously discover, evaluate, and purchase battle-tested solutions, prompts, datasets, and domain know-how via the x402 protocol — paying sellers directly with SOL.
Human-in-the-loop mode also available: agent proposes a purchase, you approve in seconds. Your choice of autonomy level.
~/.claude/mcp.json){
"mcpServers": {
"knowmint": {
"command": "npx",
"args": ["--yes", "--package", "@knowmint/mcp-server@0.1.2", "mcp-server"],
"env": {
"KM_API_KEY": "km_xxx",
"KM_BASE_URL": "https://knowmint.shop"
}
}
}
}
~/.cursor/mcp.json){
"mcpServers": {
"knowmint": {
"command": "npx",
"args": ["--yes", "--package", "@knowmint/mcp-server@0.1.2", "mcp-server"],
"env": {
"KM_API_KEY": "km_xxx",
"KM_BASE_URL": "https://knowmint.shop"
}
}
}
}
.opencode/config.json){
"mcp": {
"servers": {
"knowmint": {
"command": "npx",
"args": ["--yes", "--package", "@knowmint/mcp-server@0.1.2", "mcp-server"],
"env": { "KM_API_KEY": "km_xxx", "KM_BASE_URL": "https://knowmint.shop" }
}
}
}
}
~/Library/Application Support/Claude/claude_desktop_config.json){
"mcpServers": {
"knowmint": {
"command": "npx",
"args": ["--yes", "--package", "@knowmint/mcp-server@0.1.2", "mcp-server"],
"env": {
"KM_API_KEY": "km_xxx",
"KM_BASE_URL": "https://knowmint.shop"
}
}
}
}
Windows:
%APPDATA%\Claude\claude_desktop_config.jsonKM_BASE_URLdefaults tohttps://knowmint.shopwhen omitted. Get your API key at knowmint.shop/settings/api or runkm login.
| Tool | Description |
|---|---|
km_search | Search knowledge listings by keyword, type, or price |
km_get_detail | Get full metadata + preview for a listing |
km_purchase | Record a purchase after sending payment (tx_hash) |
km_get_content | Retrieve purchased full content |
km_publish | Publish a new knowledge listing |
Priority order:
KM_API_KEY environment variable~/.km/config.json (saved by km login)If you've already run km login, you can omit the env block entirely.
Agents with their own wallet (e.g. CDP Wallet) can complete purchases end-to-end without any additional MCP server:
1. km_get_content(id)
→ { payment_required: true, accepts: [{ payTo, maxAmountRequired, asset, network, ... }] }
2. Agent sends SOL/USDC from its own wallet
→ obtain tx_hash / signature
3. Build payment_proof:
base64url(JSON.stringify({
scheme: "exact",
network: "<value from accepts[].network>", // match the network returned above
payload: { txHash: "<signature>", asset: "native" }
}))
4. km_get_content(id, payment_proof: "<base64url>")
→ { full_content: "...", file_url: null }
Note: Use the
networkvalue returned inaccepts[]— do not hardcode it. Devnet example:"solana:EtWTRABZaYq6iMfeYKouRu166VU2xqa1"
Manual purchase via Phantom MCP also works: send tx → km_purchase(id, tx_hash) → km_get_content(id).
cd mcp && npm install && npm run build
{
"mcpServers": {
"knowmint": {
"command": "node",
"args": ["/path/to/knowledge_market/mcp/dist/index.js"],
"env": { "KM_API_KEY": "km_xxx" }
}
}
}
{
"mcpServers": {
"knowmint": {
"command": "node",
"args": ["--experimental-strip-types", "/path/to/knowledge_market/mcp/src/index.ts"],
"env": { "KM_API_KEY": "km_xxx" }
}
}
}
# Should print error to stderr and exit (no KM_API_KEY set)
npx --yes --package @knowmint/mcp-server@0.1.2 mcp-server
# With key — should stay running (waiting for MCP messages on stdin)
KM_API_KEY=km_xxx KM_BASE_URL=http://localhost:3000 npm run dev
# Interactive inspection
npx @modelcontextprotocol/inspector node --experimental-strip-types mcp/src/index.ts
FAQs
MCP server for KnowMint — lets AI agents discover and purchase human tacit knowledge
We found that @knowmint/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.