# three.ws Agent Payments (npm · @three-ws/agentcore-payments-mcp)

Governed x402 payment sessions: pay any endpoint with budget, allowlist & per-tx caps, no key.

- Trust score: 64/100 (medium)
- Change this week: +20
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `@three-ws/agentcore-payments-mcp`: 64/100 (this document), [markdown](https://verifymcp.io/servers/nirholas-agentcore-payments-mcp/three-ws-agentcore-payments-mcp.md), [page](https://verifymcp.io/servers/nirholas-agentcore-payments-mcp/three-ws-agentcore-payments-mcp)

## Channel facts

- Registry: `npm`
- Package: `@three-ws/agentcore-payments-mcp`
- Version: `0.1.2`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 87/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (Apache-2.0).
  - Actively maintained (last published 21 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 71/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 909 tokens (~181/item across 5 items; 5 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

**Unverified: 1 category.** A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

## Install

### Claude

```bash
claude mcp add nirholas-agentcore-payments-mcp -- npx -y @three-ws/agentcore-payments-mcp
```

### Codex

```bash
codex mcp add nirholas-agentcore-payments-mcp -- npx -y @three-ws/agentcore-payments-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "nirholas-agentcore-payments-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@three-ws/agentcore-payments-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add nirholas-agentcore-payments-mcp --command npx --arg -y --arg @three-ws/agentcore-payments-mcp
```

### Hermes

```yaml
mcp_servers:
  nirholas-agentcore-payments-mcp:
    command: "npx"
    args: ["-y", "@three-ws/agentcore-payments-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "nirholas-agentcore-payments-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@three-ws/agentcore-payments-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 64, +45)

- [security regression] Provenance: unverified → fail
- [security improvement] Install scripts: unverified → pass
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Malware scan: unverified → pass
- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [functional improvement] Schema quality: unverified → excellent
- [functional improvement] License: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] MCP protocol: unverified → pass
- [functional] Licence: Apache-2.0

### 2026-08-01 (score 19, −7)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-31 (score 26, −18)

- [security regression] Malware scan: pass → unverified

### 2026-07-27 (score 44)

First indexed and scored.

## MCP tools (5)

### `create_payment_session` (~303 tokens)

Create a funded agent payment session

Create a platform-managed payment session that funds agent x402 payments from your credits. The agent never needs a private key — it uses the returned session token to call pay_with_session. Governance enforces your budget_usd ceiling, optional per-payment cap (max_per_tx_usd), URL allowlist, and time expiry. Un-spent budget is automatically refunded on cancel or expiry. Returns: session object + token (shown once — store securely). Requires THREE_WS_SESSION.

Input parameters:

- `agent_id` (string): Optional: restrict this session token to a specific agent identity UUID.
- `allowed_hosts` (array): If set, only allow payments to endpoints at these hosts (e.g. ["api.weather.com"]). Empty = any host.
- `budget_usd` (number, required): Total budget in USD to allocate to this session (drawn from your credits). Min $0.001, max $1000.
- `expiry_seconds` (integer): Session lifetime in seconds. After expiry, payments are rejected. Default: 3600 (1 hour).
- `label` (string): Human-readable label for this session (e.g. "Research run #4").
- `max_per_tx_usd` (number): Optional per-payment ceiling in USD. Payments exceeding this are rejected before any money moves.
- `metadata` (object): Optional arbitrary metadata to attach to this session for bookkeeping.
- `network` (string): Settlement network for x402 payments. Solana USDC only.

### `pay_with_session` (~190 tokens)

Pay an x402 endpoint via a payment session

Execute an x402 micropayment against a paid API or MCP endpoint using a Payment Session token. The platform signs the Solana USDC transfer — no private key needed by the agent. Governance enforces budget limits, URL allowlists, and per-tx ceilings before any money moves. Endpoints that respond without a 402 are called for free. Returns the endpoint's response + payment receipt. Uses PAYMENT_SESSION_TOKEN env var if token is not passed inline.

Input parameters:

- `body` (object): JSON body for POST requests.
- `idempotency_key` (string): Optional idempotency key to prevent double-billing on retries.
- `method` (string): HTTP method. Default: GET.
- `token` (string): Payment session token (starts with "pss_"). Falls back to PAYMENT_SESSION_TOKEN env var.
- `url` (string, required): The x402 endpoint URL to pay and call.

### `check_payment_session` (~105 tokens)

Check a payment session's budget and status

Inspect a payment session: budget, amount spent, remaining budget, status (active/exhausted/expired/cancelled), expiry time, allowlist, and per-tx ceiling. Optionally include recent payment executions. Requires THREE_WS_SESSION (only the session owner can read it).

Input parameters:

- `include_executions` (boolean): If true, include the 10 most recent payment executions for this session.
- `session_id` (string, required): UUID of the payment session to inspect.

### `list_payment_sessions` (~88 tokens)

List payment sessions and spending stats

List your payment sessions with aggregate spending stats. Filter by status. Stats include: total budget allocated, total spent, active/exhausted/expired counts, settled payment count, and unique endpoints paid. Requires THREE_WS_SESSION.

Input parameters:

- `limit` (integer): Number of sessions to return (max 100).
- `status` (string): Filter by session status. Omit to return all sessions.

### `cancel_payment_session` (~73 tokens)

Cancel a payment session and refund unused budget

Cancel an active payment session. The un-spent portion of the budget is immediately refunded to your credit balance. Already-completed payments are not reversed. Idempotent — safe to call on an already-cancelled session. Requires THREE_WS_SESSION.

Input parameters:

- `session_id` (string, required): UUID of the session to cancel.

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/nirholas-agentcore-payments-mcp/three-ws-agentcore-payments-mcp#diagnostics

## Score history

- 2026-08-03: 64
- 2026-08-02: 64
- 2026-08-01: 19
- 2026-07-31: 26
- 2026-07-30: 44
- 2026-07-28: 44
- 2026-07-27: 44

## Links

- npm package: https://www.npmjs.com/package/@three-ws/agentcore-payments-mcp
- Socket report: https://socket.dev/npm/package/@three-ws/agentcore-payments-mcp
- Repository: https://github.com/nirholas/three.ws
- Website: https://three.ws/
- Changelog RSS feed: https://verifymcp.io/servers/nirholas-agentcore-payments-mcp/three-ws-agentcore-payments-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/nirholas-agentcore-payments-mcp/three-ws-agentcore-payments-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/nirholas-agentcore-payments-mcp/three-ws-agentcore-payments-mcp