# three.ws Vanity (npm · @three-ws/vanity-mcp)

Read the three.ws vanity-address market: quote difficulty + USDC price, browse the board.

- Trust score: 65/100 (medium)
- Change this week: +20
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `@three-ws/vanity-mcp`: 65/100 (this document), [markdown](https://verifymcp.io/servers/nirholas-vanity-mcp/three-ws-vanity-mcp.md), [page](https://verifymcp.io/servers/nirholas-vanity-mcp/three-ws-vanity-mcp)

## Channel facts

- Registry: `npm`
- Package: `@three-ws/vanity-mcp`
- Version: `0.1.1`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 87/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (Apache-2.0).
  - Actively maintained (last published 29 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 75/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 1140 tokens (~142/item across 8 items; 8 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

**Unverified: 1 category.** A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

## Install

### Claude

```bash
claude mcp add nirholas-vanity-mcp -- npx -y @three-ws/vanity-mcp
```

### Codex

```bash
codex mcp add nirholas-vanity-mcp -- npx -y @three-ws/vanity-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "nirholas-vanity-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@three-ws/vanity-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add nirholas-vanity-mcp --command npx --arg -y --arg @three-ws/vanity-mcp
```

### Hermes

```yaml
mcp_servers:
  nirholas-vanity-mcp:
    command: "npx"
    args: ["-y", "@three-ws/vanity-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "nirholas-vanity-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@three-ws/vanity-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 65, +45)

- [security regression] Provenance: unverified → fail
- [security improvement] Install scripts: unverified → pass
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Malware scan: unverified → pass
- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [functional improvement] Schema quality: unverified → excellent
- [functional improvement] License: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] MCP protocol: unverified → pass
- [functional] Licence: Apache-2.0

### 2026-07-31 (score 20, −7)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 27, −18)

- [security regression] Malware scan: pass → unverified

### 2026-07-27 (score 45)

First indexed and scored.

## MCP tools (8)

### `vanity_quote` (~152 tokens)

Quote the bounty price for a vanity pattern

Quote how hard a Solana vanity address is and what to escrow for it. Give a Base58 prefix and/or suffix and get the expected attempts, rarity tier, and an honest suggested USDC bounty (atomic units) from the difficulty→price oracle. Pure function of the pattern — no wallet, no payment, fully read-only. Use this before posting a grind-bounty so you escrow a fair amount.

Input parameters:

- `ignoreCase` (boolean): Match the pattern case-insensitively (cheaper, less rare). Default false.
- `prefix` (string): Base58 prefix the address must start with (e.g. "THREE").
- `suffix` (string): Base58 suffix the address must end with.

### `vanity_appraise` (~136 tokens)

Appraise the rarity of a Solana address

Appraise how rare a Solana address is: its detected vanity pattern, rarity score, rarity bits, tier, and expected grind attempts. Pure math on the Base58 address — nothing is stored. If the address has been published to the proof-of-grind gallery, the public entry is returned too. Read-only, no payment.

Input parameters:

- `address` (string, required): The Base58 Solana public key to appraise (32–44 chars).
- `prefixLen` (integer): Override how many leading characters to treat as the pattern prefix.
- `suffixLen` (integer): Override how many trailing characters to treat as the pattern suffix.

### `vanity_board` (~166 tokens)

Browse the vanity grind-bounty board

Browse the public grind-bounty board: vanity-address bounties requesters have escrowed for the worker fleet to grind. Filter by status (open / all / settled), sort by recency, reward, or expiry, and paginate. Each bounty shows its pattern, USDC amount, difficulty, status, and timing. Read-only; posting a bounty is a separate x402-paid write on the HTTP API.

Input parameters:

- `limit` (integer): Max bounties to return (1–100, default 24).
- `offset` (integer): Pagination offset (default 0).
- `sort` (string): Order: newest first, biggest reward first, or soonest to expire. Default recency.
- `status` (string): Which bounties to list. Default open.

### `vanity_open` (~97 tokens)

List claimable open bounties for workers

List the open, unexpired bounties a grinding worker can race to claim — the queue worker fleets poll. Each entry carries the pattern to grind and the escrowed USDC reward; the first worker to submit a verified, sealed key wins. Read-only discovery; submitting a claim is a separate write on the HTTP API.

Input parameters:

- `limit` (integer): Max claimable bounties to return (1–100, default 30).

### `vanity_stats` (~59 tokens)

Live grind-bounty market totals

Get live totals for the grind-bounty market: how many bounties are open, how much USDC is currently escrowed, and how much has been paid out to winning workers. A quick pulse on market activity. Read-only, no params.

### `vanity_leaderboard` (~66 tokens)

Top grinders by USDC earned

Rank the worker fleet: the top grinders by total USDC earned from winning vanity-address bounties. Each entry shows a worker id and its cumulative payout. Read-only.

Input parameters:

- `limit` (integer): How many top grinders to return (1–100, default 10).

### `vanity_config` (~91 tokens)

Bounty market config: payout + asset metadata

Read the grind-bounty market configuration: whether on-chain payouts are configured (can a winner actually be paid?), the settlement asset (USDC) and its decimals, which escrow networks are live (Base / Solana), the pricing band (floor + max atomics), the bounty protocol version, and the sealed-envelope scheme. Check this before posting to confirm the market can pay out. Read-only, no params.

### `vanity_gallery` (~180 tokens)

Browse the proof-of-grind rarity gallery

Browse the public proof-of-grind gallery: rare Solana addresses people have published with a verifiable grind receipt. Sort by rarity score or recency, filter by tier, minimum pattern length, or a substring the pattern must contain, and paginate. Each entry shows the address, pattern, rarity score/bits, tier, and an explorer link. Read-only.

Input parameters:

- `contains` (string): Only addresses whose vanity pattern contains this substring.
- `limit` (integer): Max entries to return (1–100, default 24).
- `minLength` (integer): Only patterns at least this many characters long.
- `offset` (integer): Pagination offset (default 0).
- `sort` (string): Order by rarity score (rarest first) or recency. Default score.
- `tier` (string): Filter to a single rarity tier id.

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/nirholas-vanity-mcp/three-ws-vanity-mcp#diagnostics

## Score history

- 2026-08-03: 65
- 2026-08-02: 65
- 2026-08-01: 20
- 2026-07-31: 20
- 2026-07-30: 27
- 2026-07-28: 45
- 2026-07-27: 45

## Links

- npm package: https://www.npmjs.com/package/@three-ws/vanity-mcp
- Socket report: https://socket.dev/npm/package/@three-ws/vanity-mcp
- Repository: https://github.com/nirholas/three.ws
- Website: https://three.ws/
- Changelog RSS feed: https://verifymcp.io/servers/nirholas-vanity-mcp/three-ws-vanity-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/nirholas-vanity-mcp/three-ws-vanity-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/nirholas-vanity-mcp/three-ws-vanity-mcp