
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
claudemarket
Advanced tools
Search Claude Market (13,870+ MCP servers, 4,384+ agent skills, and plugins) from your terminal or AI agent. Works as a CLI (npx claudemarket search <query>) and as an MCP server.
An MCP server that lets any AI agent — Claude Code, OpenClaw, Hermes, Codex, Cursor — search Claude Market directly from your editor: a directory of 13,870+ MCP servers, 4,384+ agent skills, and plugins.
Instead of opening a browser to find a tool, your agent can just search the directory for you and hand back install commands.
| Tool | What it does |
|---|---|
search_mcp_servers | Find an MCP server for a task (databases, scraping, GitHub…) |
search_skills | Find a reusable agent skill, with its install command |
search_plugins | Find a plugin / marketplace package |
Each returns names, descriptions, links, and popularity, ranked by stars or installs.
Add it to your MCP client config (no API key needed):
{
"mcpServers": {
"claudemarket": {
"command": "npx",
"args": ["-y", "claudemarket"]
}
}
}
~/.claude.json (or run claude mcp add claudemarket -- npx -y claudemarket)Ask your agent things like:
Your agent calls the matching tool, searches the directory, and returns the top results with links and install commands.
A thin wrapper over the public Claude Market search API (https://www.claudemarket.ai/api/search), so results are always live and the package stays tiny. Built with the Model Context Protocol TypeScript SDK.
MIT
FAQs
Search Claude Market (13,870+ MCP servers, 4,384+ agent skills, and plugins) from your terminal or AI agent. Works as a CLI (npx claudemarket search <query>) and as an MCP server.
The npm package claudemarket receives a total of 0 weekly downloads. As such, claudemarket popularity was classified as not popular.
We found that claudemarket demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.