three.ws Audio
NPM · @THREE-WS/AUDIO-MCP · SCANNED SEP 23
Text-to-speech, speech-to-text, audio-to-face lipsync, and motion-capture clips for 3D agents.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security98
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 31 of 96 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency35
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- License check failed: the license (SEE LICENSE IN LICENSE) isn't a recognized OSI-approved license. See how to fix → Fail
- Actively maintained (last published 11 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability65
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 1573 tokens (~314/item across 5 items; 5 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management90
- Stability observed for 27 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 5 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 6 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the three.ws Audio MCP server?
three.ws Audio runs locally as an npm package, launched with npx -y @three-ws/audio-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · @three-ws/audio-mcp
claude mcp add nirholas-audio-mcp -- npx -y @three-ws/audio-mcp
{
"mcpServers": {
"nirholas-audio-mcp": {
"command": "npx",
"args": [
"-y",
"@three-ws/audio-mcp"
]
}
}
} {
"servers": {
"nirholas-audio-mcp": {
"command": "npx",
"args": [
"-y",
"@three-ws/audio-mcp"
]
}
}
} codex mcp add nirholas-audio-mcp -- npx -y @three-ws/audio-mcp
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"nirholas-audio-mcp": {
"type": "local",
"command": [
"npx",
"-y",
"@three-ws/audio-mcp"
],
"enabled": true
}
}
} openclaw mcp add nirholas-audio-mcp --command npx --arg -y --arg @three-ws/audio-mcp
mcp_servers:
nirholas-audio-mcp:
command: "npx"
args: ["-y", "@three-ws/audio-mcp"] {
"McpServers": {
"nirholas-audio-mcp": {
"Transport": "stdio",
"Command": "npx",
"Arguments": [
"-y",
"@three-ws/audio-mcp"
]
}
}
} assistant mcp add nirholas-audio-mcp -t stdio -c npx -a -y @three-ws/audio-mcp
{
"mcpServers": {
"nirholas-audio-mcp": {
"command": "npx",
"args": [
"-y",
"@three-ws/audio-mcp"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 23 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 87 to 90. That category is still filling its 30-day observation window: 26 days of observed history at the previous scan, 27 at this one. The score rises as the window fills, whether or not the server changes.
- 21 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 80 to 83. That category is still filling its 30-day observation window: 24 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes.
- 19 Sept 26 −3
- Stability: pass → 0.77 functional
- 18 Sept 26 0
- Stability: 0.97 → pass security
- 17 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 16 Sept 26 −1
- Stability: pass → 0.93 functional
- 15 Sept 26 0
- Stability: 0.97 → pass security
- 14 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 23 Sept 2026 · Analysed npm/@three-ws/audio-mcp@0.1.2
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Dependencies 96 packages
| Packages resolved | 96 |
|---|---|
| Stale | 31 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
audio_to_face Audio to face (lipsync) ~363
Generate a per-frame ARKit blendshape lipsync track from speech using free NVIDIA NIM Audio2Face-3D. Provide either `text` (the server synthesizes it with Magpie TTS, then animates that clip and returns both the audio and the animation) or `audio` (base64 wav/pcm you already have, so the lips match the exact bytes you will play). Returns { animation: { fps, blendShapeNames, frames, durationSec } } where each frame is { t, w } — t in seconds, w = weights ordered by blendShapeNames (ARKit-52). On the text path it also returns { audio: { base64, contentType, format } }. Read-only — produces an animation track without changing platform state.
| Name | Type | Req | Description |
|---|---|---|---|
| audio | string | – | Pre-synthesized audio to animate, base64-encoded (raw or a data: URL). Provide this OR `text`. Set `format` to match the bytes. |
| format | string | – | Encoding of `audio` (default "wav"). Use "pcm" for raw 16-bit little-endian PCM and set `sampleRate`. |
| language | string | – | BCP-47 language for the text path (default "en-US"). Ignored when `audio` is supplied. |
| sampleRate | integer | – | Sample rate in Hz for raw PCM `audio` (default 16000). Ignored for WAV. |
| text | string | – | Text to synthesize and animate (1–4096 chars). Provide this OR `audio`. On this path the synthesized audio is returned alongside the animation. |
| voice | string | – | Voice for the text path (default "nova"). Ignored when `audio` is supplied. |
No output schema declared.
No examples provided.
motion_capture_clip Get a motion-capture clip ~147
Fetch a single motion-capture clip by id, including its full per-frame animation track. Returns { clip } with metadata plus `frames`: each frame is { t, shapes, mat? } — t in seconds, shapes a name→weight map (ARKit blendshapes for face clips; joint channels for pose/hand/vmc), and an optional 16-float transform matrix. Use this to drive an avatar from a clip discovered via motion_capture_clips. Public and unlisted clips are readable anonymously; a private clip needs THREE_WS_API_KEY for its owner. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | The clip id (UUID) returned by motion_capture_clips. |
No output schema declared.
No examples provided.
motion_capture_clips List motion-capture clips ~221
List motion-capture clips from the three.ws library — recorded face/pose/hand/VMC tracks an avatar can play back. Returns clip metadata (id, slug, name, kind, format, duration_ms, frame_count, tags, visibility, play_count, price) but NOT the frames; fetch a clip by id with motion_capture_clip to get the animation track. Anonymous callers see only public clips; set THREE_WS_API_KEY to include your own. Cursor-paginated via next_cursor. Read-only live data.
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | Pagination cursor from a previous response's next_cursor. |
| include_public | boolean | – | When authenticated (THREE_WS_API_KEY set), return your clips AND public ones instead of just your own. Ignored anonymously (always public-only). |
| kind | string | – | Filter by capture kind: "face" (blendshapes), "pose" (body), "hand", or "vmc". |
| limit | integer | – | How many clips to return (1–100, default 50). |
No output schema declared.
No examples provided.
speech_to_text Speech to text ~294
Transcribe spoken audio to text using the free NVIDIA NIM Riva recognizer. Pass the audio as base64 (raw or a data: URL). Accepted encodings: wav, pcm (set sampleRate), flac, ogg/opus — the WebM container from a browser MediaRecorder must be decoded to WAV or PCM first. Returns { text, confidence, language, model, durationSec } and, when `words` is set, per-word timestamps. Audio is capped at ~8 MB. Read-only — recognizes speech without changing any platform state.
| Name | Type | Req | Description |
|---|---|---|---|
| audio | string | yes | The audio to transcribe, base64-encoded (a raw base64 string or a data:<mime>;base64,… URL). Max ~8 MB decoded. |
| format | string | – | Audio encoding of the supplied bytes (default "wav"). Use "pcm" for raw 16-bit little-endian PCM (set sampleRate). |
| language | string | – | BCP-47 language hint for recognition (default "en-US"). |
| model | string | – | Override the Riva model name (advanced; defaults to the configured model). |
| sampleRate | integer | – | Sample rate in Hz for raw PCM input (default 16000). Ignored for WAV, which carries its own rate in the header. |
| words | boolean | – | When true, also return per-word timestamps in a `words` array. |
No output schema declared.
No examples provided.
text_to_speech Text to speech ~344
Synthesize spoken audio from text for a 3D avatar and return it as a base64 audio data URL (data:<mime>;base64,…) plus metadata. Free NVIDIA NIM Magpie TTS leads; OpenAI is the paid backstop. Because Magpie emits raw PCM, every non-pcm request is served as WAV — the returned `mime`, `format`, and `voice` describe the bytes you actually get, not the request. Pair the audio with audio_to_face to drive lipsync. Input text is capped at 4096 characters. Read-only — synthesizes audio without changing any platform state.
| Name | Type | Req | Description |
|---|---|---|---|
| format | string | – | Requested audio container (default "mp3"). The free NVIDIA lane serves every non-pcm request as WAV; the response metadata reports what you actually received. |
| language | string | – | BCP-47 language for the free NVIDIA lane (default "en-US"; also es-US, fr-FR, de-DE, zh-CN, vi-VN, it-IT, hi-IN, ja-JP). |
| model | string | – | OpenAI TTS model for the paid backstop lane (default "gpt-4o-mini-tts"). Ignored by the free NVIDIA lane, which always uses magpie-tts-multilingual. |
| speed | number | – | Playback speed multiplier, 0.5–2.0 (OpenAI backstop lane only; default 1.0). |
| text | string | yes | The text to speak (1–4096 characters). |
| voice | string | – | Voice persona (default "nova"). The same id renders on either provider lane. |
No output schema declared.
No examples provided.
What is the three.ws Audio MCP server?
three.ws Audio is an MCP server listed in the public MCP registry as io.github.nirholas/audio-mcp. Text-to-speech, speech-to-text, audio-to-face lipsync, and motion-capture clips for 3D agents. This page covers its npm package (@three-ws/audio-mcp).
Is the three.ws Audio MCP server safe to use?
three.ws Audio scores 79 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 23 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the three.ws Audio MCP server expose?
three.ws Audio exposes 5 tools: text_to_speech, speech_to_text, audio_to_face, motion_capture_clips, motion_capture_clip. Their descriptions and schemas cost roughly 1,369 tokens of context every time the server is loaded.
Is the three.ws Audio MCP server still maintained?
three.ws Audio is still listed as active in the MCP registry. We last reached this channel on 23 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.