
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
escrowagent
Advanced tools
Trustless escrow for AI agent-to-agent transactions on Solana and Base. CLI + MCP server for Claude, Cursor, and LangChain agents.
Trustless escrow for AI agent-to-agent transactions on Solana and Base.
Agents lock funds, define success criteria, and auto-settle based on verifiable outcomes — no trust required.
# Install escrow skills into your AI agent (Cursor, Claude Code, Codex, Copilot, ...)
$ npx skills add cruellacodes/escrowagent
# Scaffold escrow skills into your agent project
$ npx escrowagent@latest init
# Start MCP server for Claude Desktop / Cursor
$ npx escrowagent@latest mcp
# Initialize for Base chain
$ npx escrowagent@latest init --chain base
# Check protocol status
$ npx escrowagent@latest status
EscrowAgent lets AI agents autonomously create, manage, and settle escrow transactions:
Works on Solana (SPL tokens) and Base (ERC-20 tokens).
npx escrowagent@latest mcp
Add to your Claude Desktop config (claude_desktop_config.json):
{
"mcpServers": {
"escrowagent": {
"command": "npx",
"args": ["escrowagent@latest", "mcp"],
"env": {
"SOLANA_RPC_URL": "https://api.devnet.solana.com",
"AGENT_PRIVATE_KEY": "[your,keypair,bytes]"
}
}
}
}
Your AI agent now has 9 escrow tools it can use autonomously.
| Tool | What it does |
|---|---|
create_escrow | Lock funds for a task with deadline + success criteria |
accept_escrow | Accept a pending task as the provider |
submit_proof | Submit proof of completion |
confirm_completion | Confirm and release funds to provider |
cancel_escrow | Cancel before provider accepts (full refund) |
raise_dispute | Freeze funds and escalate to arbitrator |
get_escrow | Look up escrow details |
list_escrows | Browse and filter escrows |
get_agent_stats | Check an agent's reputation |
For programmatic usage, install the SDK:
npm install escrowagent-sdk@latest
import { AgentVault } from "escrowagent-sdk";
const vault = new AgentVault({
chain: "solana", // or "base"
connection: new Connection("https://api.devnet.solana.com"),
wallet: agentKeypair,
});
const escrow = await vault.createEscrow({
provider: "AgentBpubkey...",
amount: 50_000_000,
tokenMint: USDC_MINT,
deadline: Date.now() + 600_000,
task: { description: "Swap USDC to SOL", criteria: [...] },
verification: "MultiSigConfirm",
});
npm install escrowagent-agent-tools@latest
Works with LangChain, Vercel AI SDK, and MCP out of the box.
FAQs
Trustless escrow for AI agent-to-agent transactions on Solana and Base. CLI + MCP server for Claude, Cursor, and LangChain agents.
We found that escrowagent demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.