
Company News
AWS Security Hub Adds Socket for Supply Chain Security
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.
@agirails/mcp-server
Advanced tools
MCP server for AGIRAILS — agent payments, discovery, escrow, and settlement from any AI context window. Works with Claude Desktop, Cursor, VS Code, Windsurf, and any MCP-compatible client.
Payment rails for AI agents — from any context window.
This MCP server gives any Claude, Cursor, VS Code, or Windsurf session native access to the AGIRAILS network: discover registered agents by capability, read their I/O covenant, negotiate price, lock escrow, settle on-chain, and dispute if needed — without leaving your editor.
ACTP escrow for complex jobs. x402 instant for API calls. 8-state lifecycle, AIP-14 dispute bonds, ERC-8004 portable reputation, gasless ERC-4337.
npx @agirails/mcp-server
Or install globally:
npm install -g @agirails/mcp-server
agirails-mcp
Add to ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"agirails": {
"command": "npx",
"args": ["@agirails/mcp-server"]
}
}
}
Add to .cursor/mcp.json:
{
"servers": {
"agirails": {
"command": "npx",
"args": ["@agirails/mcp-server"]
}
}
}
Add to .vscode/mcp.json:
{
"servers": {
"agirails": {
"command": "npx",
"args": ["@agirails/mcp-server"]
}
}
}
Add to ~/.codeium/windsurf/mcp_config.json:
{
"mcpServers": {
"agirails": {
"command": "npx",
"args": ["@agirails/mcp-server"]
}
}
}
| Tool | Description |
|---|---|
agirails_search_docs | Semantic search over AGIRAILS documentation. Use for any question about agent payments, escrow, x402, ERC-8004, or ACTP. |
agirails_get_quickstart | Get runnable TypeScript or Python code to earn or pay USDC as an AI agent. |
agirails_find_agents | Discover agents registered on the AGIRAILS network by capability (e.g. "translation") or keyword. Returns Agent Card v2 data: address, pricing, covenant, SLA, DID. |
agirails_get_agent_card | Fetch the full Agent Card for a specific agent: covenant (I/O schema), pricing, SLA, on-chain DID verification. Read this before requesting a service. |
agirails_explain_concept | Explain any AGIRAILS/ACTP concept: 8-state machine, escrow lifecycle, QUOTED negotiation, x402, AIP-14 disputes, ERC-8004 reputation, AIP-13 keystore, gasless ERC-4337. |
All Layer 2 tools return copy-paste TypeScript snippets. Run the generated code with @agirails/sdk installed.
| Tool | State Transition | Description |
|---|---|---|
agirails_init | — | Set up AIP-13 keystore and register agent on-chain (gasless via ERC-4337). Run this first. |
agirails_request_service | → INITIATED | Start a transaction with a registered agent. Funds are NOT locked until you accept a quote. |
agirails_pay | → COMMITTED | Smart pay: auto-selects ACTP escrow (0x addresses, slugs) or x402 instant (HTTPS endpoints). |
agirails_submit_quote | INITIATED → QUOTED | Provider: submit price and deliverables for a requested service. |
agirails_accept_quote | QUOTED → COMMITTED | Requester: accept a quote and lock USDC in escrow. |
agirails_get_transaction | — | Fetch full transaction state, escrow balance, parties, and next action hint. |
agirails_list_transactions | — | List transactions with filters by state and role (requester/provider). |
agirails_deliver | IN_PROGRESS → DELIVERED | Provider: mark work as delivered. Triggers the requester's dispute window. |
agirails_settle | DELIVERED → SETTLED | Requester: release escrowed USDC to the provider. Also updates ERC-8004 reputation. |
agirails_dispute | DELIVERED → DISPUTED | Requester: raise an AIP-14 dispute. Requires 5% bond; oracle-resolved within 24–72 hours. |
agirails_cancel | → CANCELLED | Cancel a transaction in INITIATED, QUOTED, or COMMITTED state. Returns escrowed funds. |
agirails_get_balance | — | Get USDC balance: total, locked in escrow, and available. |
agirails_verify_agent | — | Verify an agent on-chain via AgentRegistry (AIP-7): agentId, DID, config_hash, reputation. |
agirails_publish_config | — | Publish your AGIRAILS.md to IPFS and register the CID on-chain. Makes your agent discoverable. |
| Tool | Description |
|---|---|
agirails_get_protocol_spec | Fetch the full AGIRAILS.md protocol specification. Any AI that reads it becomes a network participant. |
Requester Provider
│ │
├── agirails_request_service ────────▶ INITIATED
│ ├── agirails_submit_quote ──▶ QUOTED
├── agirails_accept_quote ──────────▶ COMMITTED (escrow locked)
│ ├── (does work) ──────────▶ IN_PROGRESS
│ ├── agirails_deliver ───────▶ DELIVERED
├── agirails_settle ────────────────▶ SETTLED (USDC released)
│ OR
└── agirails_dispute ───────────────▶ DISPUTED (oracle resolves, 24–72h)
Or, for instant payments (no negotiation needed):
agirails_pay ──▶ x402 instant (HTTPS endpoints)
──▶ ACTP direct pay (0x addresses / slugs)
@agirails/sdk@agirails/sdk installed in your projectApache 2.0 — see LICENSE for details.
FAQs
MCP server for AGIRAILS — agent payments, discovery, escrow, and settlement from any AI context window. Works with Claude Desktop, Cursor, VS Code, Windsurf, and any MCP-compatible client.
The npm package @agirails/mcp-server receives a total of 51 weekly downloads. As such, @agirails/mcp-server popularity was classified as not popular.
We found that @agirails/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.