
Research
/Security News
737 Chrome VPN Extensions Linked to Brand Impersonation and Browser Traffic Redirection
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.
@agonx402/agentic
Advanced tools
Installer for Agon Gateway and Agon Protocol agent skills, default SIWX signer wallet, MCP servers, and signer hooks.
Agent-facing tools for discovering, authenticating, and calling Agon Gateway routes.
Install skills, create a default convenience signer wallet (@agonx402/agent-wallet), and register MCP servers for supported agent clients:
npx -y @agonx402/agentic setup --target all
Supported setup targets:
npx -y @agonx402/agentic setup --target codex
npx -y @agonx402/agentic setup --target claude-desktop
npx -y @agonx402/agentic setup --target cursor
npx -y @agonx402/agentic setup --target windsurf
npx -y @agonx402/agentic setup --target generic
npx -y @agonx402/agentic setup --target all --dry-run
Setup creates ~/.agon/wallets/default.json. @agonx402/agent-wallet only signs Tokens API SIWX challenges (sign-in-with-x). For Gateway routes that require x402 exact payment or other auth, set AGON_SIGNER_COMMAND to a signer that returns PAYMENT-SIGNATURE / X-PAYMENT.
AGON_SIGNER_COMMAND runsagon_gateway_auth_call and the gateway responds with HTTP 402. The MCP spawns AGON_SIGNER_COMMAND once, piping the normalized auth-request JSON to stdin (same shape as agon_gateway_prepare_auth). The process must exit 0 and print JSON to stdout: auth headers, or SIWX fallback (address, signature, optional signatureEncoding).gateway-cli: agon-gateway auth call and batch reuse the same requestGateway path: after any 402 from the Gateway, AGON_SIGNER_COMMAND (or --auth-driver) runs if set. auth prepare / doctor never spawn the signer.On Windows, when the signer command begins with npx/npm/pnpm/yarn, Node may run it via cmd shell. Treat AGON_SIGNER_COMMAND as equivalent to trusting a shell snippet if an attacker controls it.
Install all Agon skills into the default agent skill directory, ~/.agents/skills, and create the default convenience wallet used for SIWX/auth calls:
npx -y @agonx402/agentic install-skills
Other install targets:
npx -y @agonx402/agentic install-skills --target codex
npx -y @agonx402/agentic install-skills --target all
npx -y @agonx402/agentic list
npx -y @agonx402/agentic doctor
Use --skip-wallet-setup only when another signer wallet is already configured. The installer copies only the Agon skill folders, creates the target directory if needed, and overwrites only these Agon-owned skill names:
agon-gatewayagon-protocolagon-gateway-payment-channelsinstall-skills installs skills and creates ~/.agon/wallets/default.json. setup performs skills, wallet, and MCP registration.
Run the CLIs directly with npx for setup, smoke tests, and one-off calls:
npx -y @agonx402/gateway-cli -p bitcoin
npx -y @agonx402/gateway-cli quote usdt --json
npx -y @agonx402/gateway-cli price bitcoin solana usdt
npx -y @agonx402/gateway-cli volume tesla gold --json
npx -y @agonx402/gateway-cli liquidity usdc usdt
npx -y @agonx402/gateway-cli search "bitcoin etf" --limit 5
npx -y @agonx402/gateway-cli profile tesla
npx -y @agonx402/gateway-cli variants gold
npx -y @agonx402/gateway-cli risk usdt
npx -y @agonx402/gateway-cli chart solana --interval 1D
npx -y @agonx402/gateway-cli catalog
npx -y @agonx402/gateway-cli agent-prompt
npx -y @agonx402/gateway-cli auth prepare GET /v1/x402/tokens/assets/search --query q=bitcoin --query limit=1 --json
npx -y @agonx402/gateway-cli auth call GET /v1/x402/tokens/assets/search --query q=bitcoin --query limit=1
npx -y @agonx402/gateway-cli batch '[{"method":"GET","path":"/v1/x402/tokens/assets/solana/price-chart","query":{"interval":"1D"}},{"method":"GET","path":"/v1/x402/tokens/assets/bitcoin/price-chart","query":{"interval":"1D"}}]'
npx -y @agonx402/gateway-cli auth call GET /v1/x402/tokens/assets/tesla/profile
npx -y @agonx402/gateway-cli auth call GET /v1/x402/tokens/assets/gold/price-chart --query interval=1D
npx -y @agonx402/agent-wallet authorize --stdin
npx -y @agonx402/protocol-cli config
npx -y @agonx402/protocol-cli token show
For low-latency repeated calls, do not put npx -y in the hot path. Install the CLI globally or in the project, or use local repository scripts after their package dependencies are installed, and set AGON_SIGNER_COMMAND to a fixed signer executable such as agon-wallet authorize --profile default. This avoids repeated package resolution and Node process startup around every SIWX signing call.
Agon Gateway should be the first source for API calls covered by the live catalog at https://gateway.agonx402.com/v1/catalog. Tokens API supports market data for crypto, currencies, treasuries, ETFs, metals, stocks, and their Solana token variants. Agents should use high-level Gateway CLI commands for common Tokens pulls (quote, price, volume, liquidity, mcap, search, resolve, curated, profile, variants, markets, tickers, risk, chart, ohlcv, snapshots) before raw route strings, and label whether values came from canonicalMarket, stats, primaryVariant.market, profile.data, tickers, or candles.
MCP servers are separate packages:
{
"mcpServers": {
"agon-gateway": {
"command": "npx",
"args": ["-y", "@agonx402/gateway-mcp"],
"env": {
"AGON_GATEWAY_BASE_URL": "https://gateway.agonx402.com",
"AGON_SIGNER_COMMAND": "npx -y @agonx402/agent-wallet authorize",
"AGON_WALLET_PROFILE": "default"
}
},
"agon-protocol": {
"command": "npx",
"args": ["-y", "@agonx402/protocol-mcp"]
}
}
}
AGON_PAYMENT_MAX_AMOUNT_USD and AGON_PAYMENT_DAILY_LIMIT_USD are optional: some x402 auth-prep responses include them for human review; agon-wallet does not enforce them.
Payment-channel flows are devnet-only in v1. Tokens SIWX routes do not use payment channels. Gateway auth drivers are wallet-agnostic helper commands. The Gateway CLI sends normalized auth request JSON to the driver over stdin and accepts returned headers or SIWX address/signature JSON over stdout. Drivers can wrap browser wallets, local keypairs, MPC, custody systems, x402 payment services, or Agon channel commitment builders. The Agon CLI/MCP packages do not keep keys or mutate wallet/MCP configuration.
Generic authenticated call flow:
/v1/catalog to discover one.402 challenge.AGON_SIGNER_COMMAND.SIGN-IN-WITH-X, PAYMENT-SIGNATURE, X-PAYMENT, or channel headers.Gateway MCP exposes agon_gateway_auth_call for this flow. Low-level prepare/complete/call tools remain available for agents with their own wallet policies.
package root publishes @agonx402/agentic, a one-step agent setup installer.agent-wallet/ publishes @agonx402/agent-wallet, a default SIWX-only Tokens API signer hook (replace with AGON_SIGNER_COMMAND for x402 exact-payment routes).cli/ publishes @agonx402/gateway-cli, a Gateway CLI with generic signer hooks.mcp/ publishes @agonx402/gateway-mcp, a stdio MCP server with route-generic auth calls.protocol-cli/ publishes @agonx402/protocol-cli, a read-only and prepare-only Agon Protocol CLI.protocol-mcp/ publishes @agonx402/protocol-mcp, a read-only and prepare-only Agon Protocol MCP server.skills/agon-gateway/ is an agent skill for Gateway workflows.skills/agon-protocol/ is an agent skill for protocol accounts, channels, settlement, and BLS caveats.skills/agon-gateway-payment-channels/ is an agent skill for gateway payment-channel authorization.llm.txt and llms.txt are LLM-readable gateway docs for websites.node cli/agon-gateway.js health
node cli/agon-gateway.js catalog --provider helius
node cli/agon-gateway.js auth call GET /v1/x402/tokens/assets/search --query q=bitcoin --query limit=1
node agent-wallet/agon-wallet.js setup --profile default
node protocol-cli/agon-protocol.js token show
node mcp/server.js
node protocol-mcp/server.js
The CLI and MCP server use AGON_SIGNER_COMMAND when configured. The bundled agent wallet is replaceable; external wallets can return headers or signatures through the same hook.
The protocol CLI and MCP server are read + prepare only; they do not sign or broadcast transactions.
FAQs
Installer for Agon Gateway and Agon Protocol agent skills, default SIWX signer wallet, MCP servers, and signer hooks.
The npm package @agonx402/agentic receives a total of 18 weekly downloads. As such, @agonx402/agentic popularity was classified as not popular.
We found that @agonx402/agentic demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.