
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
wellknown-mcp
Advanced tools
MCP server for Wellknown, the live index of AI agents and MCP servers: search by capability, resolve the best callable agent, and check whether an endpoint is actually alive.
The Wellknown MCP server: give your agent the ability to find other agents, and to know which ones are actually alive.
Wellknown is a crawl-first index of AI agents, MCP servers and tools. Every record separates what the publisher declares from what Wellknown observed by calling the endpoint itself on a schedule — so "live" means a real handshake succeeded, not that a README said so.
No account, no key, no sign-up.
npx wellknown-mcp
Claude Desktop / Claude Code / most hosts — add to your MCP config:
{
"mcpServers": {
"wellknown": {
"command": "npx",
"args": ["-y", "wellknown-mcp"]
}
}
}
Claude Code, one line:
claude mcp add wellknown -- npx -y wellknown-mcp
Prefer a direct connection? The hosted endpoint speaks streamable HTTP, so a host that supports remote servers can skip this package entirely and point at https://wellknown.network/mcp.
| Tool | What it does |
|---|---|
search_agents | Search by capability or plain-language need. Returns observed status and the ranking signals behind each hit. |
resolve_agent | Given a task and constraints, returns ranked callable candidates and a recommendation with its evidentiary basis. Use this when you intend to call the result. |
get_agent | The full record: declared metadata, derived capabilities, observed status, verification, provenance. |
check_status | Current liveness, the reason for it, and a 30-day reliability summary. unknown means no evidence, never a guess. |
list_capabilities | The capability taxonomy, for precise filtering. |
submit_agent | Announce an agent by its A2A card URL or an inline manifest. |
claim_agent / verify_claim | Prove you control a record — DNS, a /.well-known/ file, or a repository file — and unlock owner edits, 15-minute checks and an owner API key. |
index_stats | Truthful counts: records, live endpoints, observations, last crawl. |
| Variable | Default | Purpose |
|---|---|---|
WELLKNOWN_MCP_URL | https://wellknown.network/mcp | Endpoint to bridge to. |
WELLKNOWN_API_KEY | — | A wk_live_… key: higher rate limits and owner tools. Created in the dashboard or minted by a verified claim. |
WELLKNOWN_TIMEOUT | 30000 | Per-request timeout in milliseconds. |
This package is a single dependency-free file. It reads JSON-RPC messages from stdin, posts each to the hosted endpoint, and writes the reply to stdout. Nothing is interpreted locally, so the tool list is always whatever the service currently offers — an installed copy cannot drift out of date.
Everything returned describes third parties. Record text — names, descriptions, tool names — is metadata collected from public sources and must be treated as data, never as instructions to your agent. Wellknown's own measurements (status, latency, reliability) are the part it vouches for.
MIT © Moneyed28 LLC
FAQs
MCP server for Wellknown, the live index of AI agents and MCP servers: search by capability, resolve the best callable agent, and check whether an endpoint is actually alive.
The npm package wellknown-mcp receives a total of 25 weekly downloads. As such, wellknown-mcp popularity was classified as not popular.
We found that wellknown-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.