# three.ws Marketplace (npm · @three-ws/marketplace-mcp)

Browse and discover the public three.ws agent marketplace and skills catalog. Read-only.

- Trust score: 69/100 (medium)
- Change this week: +24
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `@three-ws/marketplace-mcp`: 69/100 (this document), [markdown](https://verifymcp.io/servers/nirholas-marketplace-mcp/three-ws-marketplace-mcp.md), [page](https://verifymcp.io/servers/nirholas-marketplace-mcp/three-ws-marketplace-mcp)

## Channel facts

- Registry: `npm`
- Package: `@three-ws/marketplace-mcp`
- Version: `0.1.1`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 87/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (Apache-2.0).
  - Actively maintained (last published 29 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 77/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 688 tokens (~137/item across 5 items; 5 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 23/100
  - Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add nirholas-marketplace-mcp -- npx -y @three-ws/marketplace-mcp
```

### Codex

```bash
codex mcp add nirholas-marketplace-mcp -- npx -y @three-ws/marketplace-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "nirholas-marketplace-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@three-ws/marketplace-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add nirholas-marketplace-mcp --command npx --arg -y --arg @three-ws/marketplace-mcp
```

### Hermes

```yaml
mcp_servers:
  nirholas-marketplace-mcp:
    command: "npx"
    args: ["-y", "@three-ws/marketplace-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "nirholas-marketplace-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@three-ws/marketplace-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 69, +3)

- [functional improvement] Stability: unverified → 0.23

### 2026-08-02 (score 66, +46)

- [security regression] Provenance: unverified → fail
- [security improvement] Install scripts: unverified → pass
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Malware scan: unverified → pass
- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [functional improvement] Schema quality: unverified → excellent
- [functional improvement] License: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] MCP protocol: unverified → pass
- [functional] Licence: Apache-2.0

### 2026-08-01 (score 20, +15)

- [functional improvement] Tool coverage: unverified → 100

### 2026-07-31 (score 5, −40)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-27 (score 45)

First indexed and scored.

## MCP tools (5)

### `browse_agents` (~184 tokens)

Browse the agent marketplace

Search and page the public three.ws agent marketplace. Filter by category and free-text query, choose a sort order, and get back a list of agent cards (id, name, description, category, tags, ratings, view/fork counts, thumbnail and GLB avatar URLs) plus a cursor for the next page. Read-only.

Input parameters:

- `category` (string): Restrict to one category slug (e.g. "programming", "marketing", "education").
- `cursor` (string): Opaque pagination cursor from a previous response's next_cursor.
- `limit` (integer): How many agents to return (1–48, default 24).
- `q` (string): Free-text search across agent name, description, and tags.
- `sort` (string): Sort order: "recommended" (default), "recent", "popular", or "top_rated".

### `agent_detail` (~73 tokens)

Fetch a marketplace agent by id

Fetch one published marketplace agent by its id, including its full detail: name, description, category, tags, system prompt, greeting, capabilities, author, ratings, skill prices, subscription tiers, and avatar URLs. Read-only.

Input parameters:

- `id` (string, required): The marketplace agent id (a UUID from a browse_agents card).

### `agent_categories` (~41 tokens)

List agent marketplace categories

List the agent marketplace categories with the count of published agents in each, plus the overall total. Use the returned category slugs to filter browse_agents. Read-only.

### `browse_skills` (~195 tokens)

Browse the skills catalog

Search and page the public three.ws skills catalog — reusable tools and capabilities agents can install. Filter by free-text query and category, choose a sort order, and get back a list of skills (id, name, slug, description, category, tags, install count, rating, per-call price, author, content preview) plus a cursor for the next page. Read-only.

Input parameters:

- `category` (string): Restrict to one category slug (e.g. "general").
- `cursor` (string): Opaque pagination cursor from a previous response's next_cursor.
- `limit` (integer): How many skills to return (1–50, default 20).
- `q` (string): Free-text search across skill name, description, and tags.
- `sort` (string): Sort order: "popular" (default, by install count), "new" (most recent), or "az" (A–Z).

### `skill_categories` (~50 tokens)

List skills catalog categories

List the skills catalog categories that have at least one public skill, each with a slug, label, and the count of skills in it. Use the returned slugs to filter browse_skills. Read-only.

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/nirholas-marketplace-mcp/three-ws-marketplace-mcp#diagnostics

## Score history

- 2026-08-03: 69
- 2026-08-02: 66
- 2026-08-01: 20
- 2026-07-31: 5
- 2026-07-30: 45
- 2026-07-28: 45
- 2026-07-27: 45

## Links

- npm package: https://www.npmjs.com/package/@three-ws/marketplace-mcp
- Socket report: https://socket.dev/npm/package/@three-ws/marketplace-mcp
- Repository: https://github.com/nirholas/three.ws
- Website: https://three.ws/
- Changelog RSS feed: https://verifymcp.io/servers/nirholas-marketplace-mcp/three-ws-marketplace-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/nirholas-marketplace-mcp/three-ws-marketplace-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/nirholas-marketplace-mcp/three-ws-marketplace-mcp