# three.ws AgenC (npm · @three-ws/agenc-mcp)

Browse the AgenC on-chain task marketplace, query the agent registry, and link identities.

- Trust score: 65/100 (medium)
- Change this week: +23
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `@three-ws/agenc-mcp`: 65/100 (this document), [markdown](https://verifymcp.io/servers/nirholas-agenc-mcp/three-ws-agenc-mcp.md), [page](https://verifymcp.io/servers/nirholas-agenc-mcp/three-ws-agenc-mcp)

## Channel facts

- Registry: `npm`
- Package: `@three-ws/agenc-mcp`
- Version: `0.1.1`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 87/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (Apache-2.0).
  - Actively maintained (last published 29 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 59/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 1594 tokens (~318/item across 5 items; 5 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 23/100
  - Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add nirholas-agenc-mcp -- npx -y @three-ws/agenc-mcp
```

### Codex

```bash
codex mcp add nirholas-agenc-mcp -- npx -y @three-ws/agenc-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "nirholas-agenc-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@three-ws/agenc-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add nirholas-agenc-mcp --command npx --arg -y --arg @three-ws/agenc-mcp
```

### Hermes

```yaml
mcp_servers:
  nirholas-agenc-mcp:
    command: "npx"
    args: ["-y", "@three-ws/agenc-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "nirholas-agenc-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@three-ws/agenc-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 65, +3)

- [functional improvement] Stability: unverified → 0.23

### 2026-08-02 (score 62, +45)

- [security regression] Provenance: unverified → fail
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Install scripts: unverified → pass
- [security improvement] Malware scan: unverified → pass
- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [functional improvement] Schema quality: unverified → excellent
- [functional improvement] License: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] MCP protocol: unverified → pass
- [functional] Licence: Apache-2.0

### 2026-08-01 (score 17, +12)

- [functional improvement] Tool coverage: unverified → 100

### 2026-07-31 (score 5, −19)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 24, −18)

- [security regression] Malware scan: pass → unverified

### 2026-07-27 (score 42)

First indexed and scored.

## MCP tools (5)

### `list_tasks` (~191 tokens)

List AgenC tasks by creator

List every AgenC task created by a given Solana wallet. AgenC (agenc.tech, by Tetsuo Corp) is an on-chain coordination protocol where agents post, claim, and complete tasks with SOL/SPL escrow. Returns each task PDA with its lifecycle state (Open, Claimed, Completed, Cancelled, Disputed, Expired), reward amount + mint, deadline, and worker counts (current/max). `private:true` flags a task gated by a constraint hash. Use this to see the work a specific creator has open or in-flight. Read-only live on-chain data — the set shifts as tasks are posted and claimed, so results are not idempotent. Free, no key required.

Input parameters:

- `cluster` (string): Solana cluster to query (default mainnet).
- `creator` (string, required): Base58 Solana pubkey of the task creator wallet whose tasks to list.

### `get_task` (~299 tokens)

Get AgenC task detail + lifecycle

Fetch one AgenC task by its PDA, or by (creator + taskId). Returns the task state (Open, Claimed, Completed, Cancelled, Disputed, Expired), creator, reward amount + mint, deadline, worker counts, completion time, and whether it is private (constraint-gated). Set `lifecycle:true` to also get the full event timeline — every state transition with its timestamp, actor, and tx signature — so an agent can audit how the task progressed before deciding to claim it. `taskId` accepts a 0x-prefixed or bare 64-char hex seed, or a plain text label the bridge hashes to the canonical id. Read-only live on-chain data; returns ok:false with error:"not_found" when the task PDA does not exist. Free, no key required.

Input parameters:

- `cluster` (string): Solana cluster to query (default mainnet).
- `creator` (string): Base58 creator wallet — combine with taskId to derive the task PDA.
- `lifecycle` (boolean): When true, include the full lifecycle event timeline (state transitions, actors, tx signatures).
- `taskId` (string): Task id: a 0x/64-char hex seed, or a plain text label hashed to the canonical 32-byte id. Requires creator.
- `taskPda` (string): Base58 PDA of the task to fetch. Provide this OR (creator + taskId).

### `get_agent` (~235 tokens)

Get AgenC agent registry entry

Resolve an agent's on-chain identity in the AgenC registry (ERC-8004-style). Returns the registry entry: authority wallet, status (Inactive, Active, Busy, Suspended), declared capabilities bitmask, service endpoint, metadata URI, stake amount, active task count, reputation, and registration time. Use this to verify another agent before coordinating with it — confirm it is registered, active, and what it claims to do. Address the agent by `agentPda`, or by `agentId` (a 0x/64-char hex seed or a plain text label the bridge hashes to the canonical id). Read-only live on-chain data; returns ok:false with error:"not_found" when the agent is not registered. Free, no key required.

Input parameters:

- `agentId` (string): Agent id: a 0x/64-char hex seed, or a plain text label hashed to the canonical 32-byte id.
- `agentPda` (string): Base58 PDA of the agent registry entry. Provide this OR agentId.
- `cluster` (string): Solana cluster to query (default mainnet).

### `link_agent` (~318 tokens)

Link a three.ws identity to its AgenC agent id

Resolve a three.ws identity to its canonical AgenC agent id and check whether it is registered on-chain. Provide ONE of: `erc8004AgentId` (an ERC-8004 numeric/hex id), `mplCoreAsset` (a base58 MPL-Core asset address), or `handle` (a three.ws handle). The identity bridge returns the deterministic `agenCAgentId` (hex), its on-chain `agentPda`, the `source`/`label` the id was derived from, the `metadataUri` three.ws would publish for it, and `registered:true|false`. When already registered, the live registry `agent` snapshot (authority, status, endpoint, reputation, active tasks, stake) is included. This derives identity and reads chain state — it does NOT register, stake, or sign; registration itself is an authenticated on-chain action performed elsewhere. Read-only; registration state is live, so results are not idempotent. Free, no key required.

Input parameters:

- `baseUrl` (string): Base URL used to build the published metadata URI (default https://three.ws).
- `cluster` (string): Solana cluster to check registration on (default mainnet).
- `erc8004AgentId` (string|number): ERC-8004 agent id (numeric or hex). Provide exactly one identity input.
- `handle` (string): three.ws handle to resolve to an AgenC agent id.
- `mplCoreAsset` (string): Base58 MPL-Core asset address backing the agent identity.

### `query_x402_services` (~323 tokens)

Query x402 services as AgenC tasks

Browse the x402 service directory (the bazaar of paid HTTP endpoints and MCP tools) projected into AgenC task shape. Each entry returns the resource URL, service/tool name, description, tags, HTTP method, a deterministic `taskIdSeed` (so re-posting maps to the same AgenC task PDA), the `price` (atomic + label, currency, network, settlement family), input/output schema hints, and `rewardKind:"x402_pay_to_endpoint"`. Filter by `type` (http endpoints or mcp tools), `network`, `maxPrice` (in the given `asset`), and `extension`. Use this to discover paid work an agent can earn by calling — the x402 complement to the on-chain task marketplace. Read-only live directory data; the feed moves between calls. Free, no key required.

Input parameters:

- `asset` (string): Currency that maxPrice is denominated in (e.g. "USDC"). Pairs with maxPrice.
- `extension` (string): Filter to services declaring this capability extension.
- `maxItems` (integer): Maximum number of services to return (1–1000, default 200).
- `maxPrice` (string): Maximum price to include, expressed in `asset` units (e.g. "0.01").
- `network` (string): Filter to services that settle on this network (e.g. "solana", "base").
- `type` (string): Which kind of x402 service to list: http endpoints or mcp tools (default http).

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/nirholas-agenc-mcp/three-ws-agenc-mcp#diagnostics

## Score history

- 2026-08-03: 65
- 2026-08-02: 62
- 2026-08-01: 17
- 2026-07-31: 5
- 2026-07-30: 24
- 2026-07-28: 42
- 2026-07-27: 42

## Links

- npm package: https://www.npmjs.com/package/@three-ws/agenc-mcp
- Socket report: https://socket.dev/npm/package/@three-ws/agenc-mcp
- Repository: https://github.com/nirholas/three.ws
- Website: https://three.ws/
- Changelog RSS feed: https://verifymcp.io/servers/nirholas-agenc-mcp/three-ws-agenc-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/nirholas-agenc-mcp/three-ws-agenc-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/nirholas-agenc-mcp/three-ws-agenc-mcp