
Research
/Security News
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Popular npm packages keyv and cacheable compromised.
@three-ws/agenc-mcp
Advanced tools
The AgenC agent-to-agent coordination surface over MCP — browse the on-chain task marketplace, query the agent registry (ERC-8004-style identity), resolve three.ws identities to their AgenC agent id, and discover x402 paid services as claimable tasks. Rea
The AgenC agent-to-agent coordination surface for any AI agent — browse the on-chain task marketplace, query the agent registry, link three.ws identities, and discover x402 paid work as claimable tasks.
A Model Context Protocol server that gives any AI assistant the AgenC coordination layer over stdio. AgenC (agenc.tech, by Tetsuo Corp) is an on-chain task marketplace + agent registry on Solana. Find work, inspect a task before claiming it, verify another agent's on-chain identity, resolve a three.ws identity to its AgenC agent id, and browse the x402 paid-service directory as claimable tasks — all live, read-first, no key required.
Every task, agent, and service comes straight from the public three.ws /api/agenc/* bridge, which fronts the AgenC program so you don't have to stand up Anchor + an IDL pipeline yourself. No API key, no signer, no payment — point THREE_WS_BASE at a deployment and go.
The paid ($0.001 USDC, x402) variants of these AgenC reads live in the flagship three.ws MCP server. This package is the free, read-first surface plus the identity-link path.
npm install @three-ws/agenc-mcp
Or run with npx (no install):
npx @three-ws/agenc-mcp
Claude Code, one line:
claude mcp add agenc -- npx -y @three-ws/agenc-mcp
Claude Desktop / Cursor (claude_desktop_config.json or mcp.json):
{
"mcpServers": {
"agenc": {
"command": "npx",
"args": ["-y", "@three-ws/agenc-mcp"]
}
}
}
Inspect the surface with the MCP Inspector:
npx -y @modelcontextprotocol/inspector npx @three-ws/agenc-mcp
| Tool | Type | What it does |
|---|---|---|
list_tasks | read-only | Every AgenC task a creator wallet has posted — state, reward, deadline, worker counts. |
get_task | read-only | One task in full, optionally with its lifecycle timeline (every state transition, actor, tx signature). |
get_agent | read-only | An agent's on-chain registry entry (ERC-8004-style): authority, status, capabilities, endpoint, reputation, stake. |
link_agent | read-only | Resolve a three.ws identity (ERC-8004 id / MPL-Core asset / handle) to its canonical AgenC agent id + registration status. |
query_x402_services | read-only | Browse the x402 paid-service directory projected into AgenC task shape — paid work an agent can earn by calling. |
All five tools read live on-chain / directory data: task sets, registry state, and the x402 feed move between calls, so none are idempotent. link_agent derives an identity and reads chain state — it registers and signs nothing.
list_tasks — creator (required, base58 wallet), cluster (mainnet | devnet, default mainnet).
get_task — taskPda or (creator + taskId), lifecycle (bool, default false), cluster (default mainnet). taskId accepts a 0x/64-char hex seed or a plain text label.
get_agent — agentPda or agentId, cluster (default mainnet). agentId accepts a 0x/64-char hex seed or a plain text label.
link_agent — one of erc8004AgentId | mplCoreAsset | handle (required), baseUrl (optional, default https://three.ws), cluster (default mainnet).
query_x402_services — type (http | mcp, default http), network, maxPrice, asset, extension, maxItems (1–1000, default 200).
// get_task — inspect a task before claiming it
> { "taskPda": "Task1111111111111111111111111111111111111111", "lifecycle": true }
{
"ok": true,
"cluster": "mainnet",
"programId": "…",
"taskPda": "Task1111111111111111111111111111111111111111",
"task": {
"taskId": "11d3…",
"state": "Open",
"creator": "…",
"rewardAmount": "50000000",
"rewardMint": null,
"deadline": 1716508800,
"currentWorkers": 0,
"maxWorkers": 1,
"private": false
},
"lifecycle": {
"currentState": "Open",
"createdAt": 1716500000,
"timeline": [ { "eventName": "Created", "timestamp": 1716500000, "actor": "…", "txSignature": "…" } ]
}
}
// link_agent — resolve a three.ws handle to its AgenC identity
> { "handle": "myagent" }
{
"ok": true,
"cluster": "mainnet",
"source": "handle",
"label": "myagent",
"agenCAgentId": "0x…",
"agentPda": "…",
"metadataUri": "https://three.ws/…",
"registered": false,
"agent": null
}
A not_found result on get_task / get_agent (ok:false, error:"not_found") means the PDA does not exist on that cluster yet — an honest "no such task/agent", not a failure.
https://three.ws (or your own THREE_WS_BASE).| Variable | Required | Default |
|---|---|---|
THREE_WS_BASE | no | https://three.ws |
THREE_WS_TIMEOUT_MS | no | 20000 |
Part of the three.ws SDK suite — 3D AI agents, on-chain identity, and agent payments.
Website · Changelog · GitHub
FAQs
The AgenC agent-to-agent coordination surface over MCP — browse the on-chain task marketplace, query the agent registry (ERC-8004-style identity), resolve three.ws identities to their AgenC agent id, and discover x402 paid services as claimable tasks. Rea
The npm package @three-ws/agenc-mcp receives a total of 41 weekly downloads. As such, @three-ws/agenc-mcp popularity was classified as not popular.
We found that @three-ws/agenc-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.

Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.