I couldn't trust MCP tools I found — so I built a marketplace that scans them daily