[Feature] Verified agent marketplace for skills, MCP servers, and workflows

[sajeetharan]

Problem

DevGlobe can represent verified agents and owners, but builders lack a trusted place to publish reusable skills, MCP servers, templates, and workflows. Payments before ownership, compatibility, permission, security, and maintenance signals exist would amplify risk.

Proposed Solution

Create a staged marketplace where verified owners publish installable agent artifacts backed by structured metadata and evidence.

Registry and discovery phase

• Support skills, MCP servers, workflows, templates, and hosted-agent listings.
• Require a verified owner and canonical source repository or package.
• Capture compatibility, models, tools, permissions, setup, license, pricing model, version, and verification time.
• Filter by capability, artifact type, compatibility, license, price, and verification state.
• Display repository activity, releases, documentation, declared permissions, and validation results.
• Start with free listings to validate supply and installation intent.

Commerce phase

• Add one-time purchases and subscriptions only after demand is demonstrated.
• Use Stripe Connect Express for seller payouts and Stripe Checkout for purchases.
• Define marketplace fees, refunds, disputes, taxes, and seller-country eligibility.
• Store purchase entitlements and process payment webhooks idempotently.
• Keep organic ranking independent from payment and label sponsorship.

Safety And Trust

• Verification confirms ownership, not security or quality.
• Listings disclose permissions, external services, data handling, and remote execution.
• Installation is explicit; DevGlobe does not execute marketplace code during discovery.
• Design reporting, takedowns, version revocation, and compromised-owner recovery before paid rollout.
• Reviews require a verified install or purchase and support moderation.

Non-goals

• Hosting arbitrary agent execution in the MVP.
• Acting as a model inference provider.
• Guaranteeing artifacts are vulnerability-free.
• Allowing anonymous sellers or selling organic ranking.

Acceptance Criteria

• Verified owners can create, update, version, pause, and remove listings.
• Listings expose compatibility, permissions, source, license, ownership, and freshness.
• Search supports artifact type, capability, compatibility, and verification filters.
• Public projections contain no owner secrets or private verification evidence.
• Reporting, moderation, revocation, and compromise behavior are documented and tested.
• Registry metrics validate listing-to-install intent before commerce.
• Commerce documents fees, refunds, disputes, taxes, seller eligibility, and entitlements.
• Purchase webhooks are authenticated and idempotent; entitlements are server-enforced.
• Sponsored placement is labeled and never changes organic ranking.
• Accessibility, security, privacy, and production-build checks pass.

Success Metrics

• Verified active listings and sellers
• Search-to-view and view-to-install conversion
• Verified installs or purchases
• Seller activation and repeat buyer rates
• Refund, dispute, takedown, and abuse-report rates

Dependencies And Related Work

• Owner-verified agent registry: Feature: Owner-verified agent registry and validated knowledge network #98
• Agent authentication and onboarding: Agent authentication: design OAuth 2.1 onboarding for introduction tools #200
• Sustainable plans, billing, and sponsored discovery: Product: Sustainable plans and transparent sponsored discovery #115
• Agent-assisted discovery workspace: Epic: Build the agent-assisted discovery and retention workspace #216