
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@agtnames/resolver
Advanced tools
Resolve and verify .agt agent names against AGT Registry v2 (raw JSON-RPC, no wallet library needed)
Resolve and verify .agt agent names against the AGT Registry (Polygon). Reads the registry over raw JSON-RPC — no wallet library — and verifies the agent manifest three ways: the signer, the manifest's declared owner, and the on-chain owner must all agree. Works in Node.js, Deno, Bun, and browsers.
npm install @agtnames/resolver
import { AgtResolver } from "@agtnames/resolver";
const agt = new AgtResolver({ chain: "polygon" }); // or { rpcUrl, registry }
const r = await agt.resolveAgent("exampleagent.agt");
r.owner // '0x…' — current on-chain owner
r.active // registered and not expired
r.verified // manifest passed all checks
r.records.endpoints.mcp // 'https://…/mcp'
r.records.addr // primary address record
r.manifest // the full signed manifest (or null)
new AgtResolver(options)| Option | Description |
|---|---|
chain | Named chain: "polygon" (mainnet; the CLI/MCP default), "amoy", "localhost". Fills rpcUrl, registry, resolver, fns defaults |
rpcUrl | Override the JSON-RPC endpoint |
rpcUrls | Ordered JSON-RPC endpoints tried until one answers (network errors, timeouts, non-2xx; a contract revert never fails over). polygon ships a three-endpoint list |
registry | Override the registry contract address (needed only for localhost or a custom deployment) |
ipfsGateways | Ordered public gateways tried for ipfs:// manifests until one answers (default DEFAULT_IPFS_GATEWAYS: pinata, dweb.link, ipfs.io, w3s.link). A 429 at one gateway is not a verdict on the document; the error names every gateway only when all fail |
ipfsGateway | Pin reads to a single gateway (no fallback) |
timeoutMs | Per-request timeout |
maxManifestBytes | Cap on manifest size (default 256 KiB) |
legacyDns, dohUrl | Opt-in DNS-over-HTTPS fallback for names that predate the registry (off by default) |
resolveAgent(name) → AgentResolutionReturns owner, registered / active / perpetual, records (addr, manifestUri, wallet, endpoints, texts), manifest (+ manifestSource), verified / manifestStatus / reasons / signer, and source.
manifestStatus tells transport apart from trust: verified; unverified (the document loaded but failed the signature / owner / name check — do not act on it); unavailable (a pointer exists but the document could not be fetched from any gateway — retry later; this says nothing about the owner); none (no manifest published, or the name is not registered).
manifest is typed as AgtManifest (spec v3): description, icon, website, endpoints[], capabilities[], pricing (AgtPricing — model is free / freemium / paid / contact), payments[], keys[], delegation, registrations[]. Only trust these fields when verified is true.
resolveAddresses(name, { coinType? }) → AddressRecordThe wallet fast path: two batched JSON-RPC round trips, no manifest fetch. Returns addr (the name's primary EVM address, ENS semantics), wallet (agentWallet, the wallet the agent pays and gets paid with), and, when coinType is given, coinTypeAddr (addr(node, coinType) as hex bytes; coinTypeForChain(chainId) builds the ENSIP-11 coin type). Lapsed names return active: false and null addresses. checksumAddress() turns a result into EIP-55 mixed case for display. This is what the MetaMask Snap calls when someone types name.agt in the send field.
const a = await agt.resolveAddresses("launchpad.agt");
a.addr // '0x…' or null
a.wallet // '0x…' or null
isAgent(name) → booleanResolves a name and returns whether it has a valid, verified manifest.
agentCardFrom({ name, owner, manifest, verified, endpoints }) → A2AAgentCard | nullAn A2A agent card (protocol 1.0 shape) for a name that publishes an a2a endpoint: url from the verified manifest (else the on-chain record), skills[] from the manifest capabilities, provider from the owner and website, documentationUrl to the name page. Manifest fields are used only when verified is true. Returns null without an a2a endpoint. agtnames.com serves the same card at GET /api/v2/agent-card/<label>, so ADK's RemoteA2aAgent(agent_card=url) and Microsoft Agent Framework's A2AAgent(url=...) can call a .agt agent by URL.
erc8004RegistrationFrom(manifest, { manifestUri?, active? }) → Erc8004RegistrationThe JSON an ERC-8004 identity registration points at: services[] from the manifest endpoints (A2A, MCP, web), x402Support from the payment rails, registrations[] from manifest.registrations with standard erc-8004, plus an agt provenance block. Export today; on-chain registration is on the roadmap.
CHAINS exports the deployed Registry v2 addresses, so new AgtResolver({ chain: "polygon" }) is a complete configuration:
| Chain | Registry | Resolver | Migration claim |
|---|---|---|---|
polygon (137) | 0x5B9386C47395B0551c814cC03b69cbD20eb0C87A | 0x66Ae037d2A6a770B4772b889b6cA1704504399f2 | 0x4276d03AcbcA433D257FBd90c53F090F4B16d38E |
amoy (80002) | 0xd08E0d9BCB26572Eaa22fe27Df53a5D2721D3BCD | 0xE02f88b9BC0394742bBBe5c590E043B647B83419 | 0xC79A3fb86BcC3637BB58cDcd1f6E12Cf3fFDCBc8 |
localhost has no defaults; pass { rpcUrl, registry }. polygon also carries rpcUrls (publicnode, dRPC, 1RPC), tried in order.
ipfs://, https://, or data:) and verify it — signer, declared owner, and on-chain owner must agree, and ipfs:// bytes must hash to the CID.npx agt-resolve resolve exampleagent.agt # full resolution as JSON
npx agt-resolve record exampleagent.agt # on-chain record only
npx agt-resolve addr exampleagent.agt # payable records only (addr, agentWallet); add a coinType as the 2nd arg
npx agt-resolve available exampleagent.agt
npx agt-resolve text exampleagent.agt url
npx agt-resolve namehash exampleagent.agt # no network
npx agt-resolve card exampleagent.agt # A2A agent card (exit 1 without an a2a endpoint)
npx agt-resolve export-8004 exampleagent.agt # ERC-8004 registration JSON from the verified manifest
Flags: --chain polygon|amoy|localhost, --rpc URL, --registry 0x…, --legacy. Exit codes: 0 ok, 1 the lookup failed, 2 usage.
Resolution is raw JSON-RPC plus fetch, with no wallet library or framework required. The only dependencies are the audited @noble/curves and @noble/hashes primitives (signature recovery and hashing). The main entry uses no Node-only globals, so it runs in Node.js, Deno, Bun, browsers and sandboxed runtimes such as MetaMask Snaps.
MIT
FAQs
Resolve and verify .agt agent names against AGT Registry v2 (raw JSON-RPC, no wallet library needed)
The npm package @agtnames/resolver receives a total of 762 weekly downloads. As such, @agtnames/resolver popularity was classified as not popular.
We found that @agtnames/resolver demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.