
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
handsforagents-mcp
Advanced tools
MCP server for Hands for Agents: a human in the EU makes, assembles, measures, verifies and ships physical things for your agent.
A person in the Czech Republic (EU) makes, assembles, measures, verifies and ships physical things for your agent, and sends the operator an invoice.
Your agent can call an API for almost anything except the physical world. This is the physical world: FDM 3D printing in-house, CNC / sheet metal / laser / welding through Czech subcontractors, assembly and commissioning of hardware, dimensional inspection, human testing of a device, on-site verification anywhere in the Czech Republic, and receive-repack-ship with customs paperwork. Every task ends with an evidence package — timestamped photos, a measurement report with the instrument and its resolution, a test log, a tracking number, and the name of the person who did the work.
https://mcp.handsforagents.com/mcp (Streamable HTTP)https://api.handsforagents.com/v1/servicesPoint any client that supports remote MCP servers straight at the endpoint:
{
"mcpServers": {
"handsforagents": {
"type": "http",
"url": "https://mcp.handsforagents.com/mcp"
}
}
}
For a client that only speaks stdio, this package bridges to the same endpoint and adds nothing of its own:
{
"mcpServers": {
"handsforagents": {
"command": "npx",
"args": ["-y", "handsforagents-mcp"]
}
}
}
No API key, no account, no registration. list_services and request_quote are open; the other tools need the access_token that request_quote handed you.
| Tool | What it does |
|---|---|
list_services | The seven services, the refused categories, seven example prices, the payment rules and the key contract terms. Byte for byte the same document as /services.json. |
request_quote | Sends a task to a human for screening and a fixed-price quote. Not an order, not binding, nothing charged. Returns quote_id, access_token, response_due_at and nda_url. A human answers within 24 hours, every day, including weekends and Czech public holidays. |
create_task | Accepts a quote and the terms of service. Returns task_id and a Stripe Checkout URL for the first payment: the full price or a card hold (tasks up to 150 EUR), or the deposit (tasks above). |
get_status | Reads a quote or a task back: the quote with its payment schedule or the refusal reason, later the task status, payments, evidence files and tracking numbers, and the Checkout URL for the balance when it is due. |
confirm_delivery | accepted=true closes the task; accepted=false with a reason opens a dispute, answered by a human within 2 business days. Without either, the task counts as accepted 7 days after delivery. |
The same five operations are available over REST, described in openapi.yaml.
Lost the access_token? POST https://api.handsforagents.com/v1/quotes/{quote_id}/access-token sends a new one to the contact e-mail on the quote; the old token keeps working too. REST only, not an MCP tool — the server still lists five tools.
curl -sL https://mcp.handsforagents.com/mcp \
-H 'Content-Type: application/json' \
-H 'Accept: application/json, text/event-stream' \
-H 'MCP-Protocol-Version: 2025-11-25' \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/list","params":{}}'
Or without MCP at all:
curl -s https://api.handsforagents.com/v1/services | head -40
There is no catalogue. A human quotes every task as one fixed total in EUR or USD, built from 45 EUR/hour plus materials, subcontractors and carrier cost at cost. Minimum 45 EUR. Seven worked examples are in list_services — a printed PETG bracket checked with calipers and shipped tracked to Germany comes to 70 EUR, on-site verification of a business address with ten geotagged photos to 105 EUR.
Payment is by card through Stripe Checkout, in full (or as a card hold for short tasks) up to 150 EUR, deposit plus balance above it, with the balance due after you have seen the evidence package and before the item ships. No cryptocurrency, no cash, no anonymous payment of any kind — deliberately, so that every client is identifiable and every task has an invoice.
A human reads every request before a quote is issued; nothing is accepted automatically. Refused outright: anything needing login credentials or account access, impersonation, surveillance of people, fake reviews and engagement, getting around identity/age/CAPTCHA/KYC verification, referral and coupon fraud, weapons and export-controlled dual-use goods, counterfeits, reshipping goods bought with someone else's card, and anything illegal in the Czech Republic or the EU. Three further categories — confirming a person's identity, signing a document, receiving a parcel addressed to a third party — are accepted only after the operator has been verified.
Also outside the capability: safety-critical parts (medical, food-contact, pressure, lifting) without a separate written engineering agreement, in-person work outside the Czech Republic, and storage beyond 30 days.
your engineering s.r.o., company ID (IČO) 09738100, Jaurisova 515/4, Michle, 140 00 Praha 4, Czech Republic. Registered 9 December 2020, file C 341512 at the Municipal Court in Prague. Verify it yourself: justice.cz · ARES, as JSON.
The contract is with the operator of the agent — the company or person on whose behalf it acts — because an agent has no legal personality. Czech law, courts in Prague for business clients, consumers keep their home protections.
Everything you send is confidential by default from the first request_quote, without marking anything and without signing anything, for the task and three years after. A pre-filled one-way NDA is there if you need a signed document.
Full terms: terms · task policy · disputes and refunds · privacy · DPA
The service opened in September 2026 and no tasks have been completed yet; the statistics on the site say so and will be updated monthly. Liability insurance is being arranged and is not yet in force — the site says that too, rather than implying otherwise. Completed tasks will be published here as anonymised examples with their evidence packages, with the client's consent.
Found something? security@handsforagents.com, or see security.txt.
MIT for this bridge package. The service itself is governed by the terms of service linked above.
FAQs
MCP server for Hands for Agents: a human in the EU makes, assembles, measures, verifies and ships physical things for your agent.
The npm package handsforagents-mcp receives a total of 174 weekly downloads. As such, handsforagents-mcp popularity was classified as not popular.
We found that handsforagents-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.