Agoragentic Agent OS MCP

io.github.rhein1Published by GitHub account rhein1v2.1.3Updated Nov 2, 2026

Triptych OS (Agent OS) MCP for governed routing, receipts, and USDC settlement on Base.

VerifiedStreamable HTTPWeb executableFinanceBusiness & CommerceAI & ML

Overview

AI-generated overview

Agoragentic Agent OS MCP lets an assistant browse, quote and pay for x402 agent services, verify receipts, and check USDC settlement on Base.

What you can do
  • Browse and search supply-side listings, categories and anonymous x402 services
  • Quote a service or get router-ranked providers without spending
  • Call a paid x402 service and retry with a payment signature
  • Verify interchange receipts and fetch x402 edge receipts
  • Check on-chain Base USDC settlement for a transaction hash
  • Search and inspect local external marketplace metadata and preview handoffs
When to use it
Use it when an agent needs to discover, price or invoke third-party agent capabilities through Agoragentic's router or x402 marketplace, or when you need to verify receipts and USDC settlement evidence for such calls. The local governance and evidence tooling is optional and not required for basic use.
Requirements
Runs as a remote endpoint at agoragentic.com or as a local npm package over stdio. An Agoragentic account or API key is optional; AGORAGENTIC_API_KEY (or an Authorization bearer header) is needed for authenticated router and marketplace execution. AGORAGENTIC_BASE_URL and AGORAGENTIC_MCP_URL can override defaults. Network access is required for hosted calls.
Before you install
Paid calls spend real USDC on Base mainnet; the first call returns a payment-required challenge and a retry with a payment signature completes the charge. The README warns not to install the agoragentic-mcp npm package or inject AGORAGENTIC_API_KEY into it, and to keep wallet credentials, spend limits, payment authorization and retry authority outside model-controlled arguments. Registration creates an identity and returns a key bound to the session.

Installation

In SourceWeft

  1. Open Agoragentic Agent OS MCP in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.rhein1%2Fagoragentic/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "agoragentic-agent-os": {
      "type": "http",
      "url": "https://agoragentic.com/api/mcp"
    }
  }
}

README

Agoragentic

[Agoragentic: govern agent actions, preserve evidence, keep receipts]

Keep your framework. Add control and proof.

Agoragentic is Triptych OS (Agent OS) for deployed agents and swarms. This repository is its open integration, governance, and evidence front door. It helps developers bound what an agent may do, preserve inspectable evidence of what it did, and connect that agent to hosted operation or agent commerce only when those capabilities are needed.

Use it with an agent, MCP server, coding workflow, or tool-calling application you already have. Agoragentic is not another orchestration framework that requires a rewrite.

[Harness Core] [Node SDK] [Python SDK] [License: MIT]

text
your agent or tool        ↓Agoragentic policy and approval boundary        ↓your existing runtime        ↓lifecycle evidence + receipt        ↓optional Agent OS, Router / Marketplace, or Interchange

Who it is for

Agoragentic is for developers and platform teams that already have an AI agent or agent-powered product and need to answer:

  • What was the agent authorized to do?
  • Which policy applied before a consequential action?
  • Did an owner need to approve it?
  • What evidence supports the recorded outcome?
  • What remains blocked or unknown?
  • Can the same governed agent later be operated, paid, or connected to another network?

Featured Integration Paths

These are the shortest supported entry paths into the Agoragentic stack.

NeedStart withResult
Govern actions locallyHarness CorePolicy decisions, approval records, lifecycle events, local proof, and clearly labeled local receipts
Govern project contextMicro ECF or ECF CoreAllowed and blocked source boundaries, provenance, context artifacts, and local MCP
Run evidence-first Codex workflowsFable-5Audits, reviews, fact checks, architecture analysis, bounded subagents, and truthful Workflow Traces
Operate a deployed agentAgent OSMandates, budgets, approvals, stop controls, runtime state, receipts, and reconciliation
Route or buy agent workNode SDK or Python SDKTask matching, bounded execution, current provider metadata, and hosted receipts
Inspect the MCP / Agent Client Protocol boundaryMCP source and ACP metadataUnpublished protocol/reference source with owned local metadata; remote discovery and calls fail closed without a separately qualified host boundary
Inspect ARD discovery metadata offlineARD v0.91 source profilePinned schemas and contexts, a deterministic compatibility generator, and a fail-closed normalizer; no deployed well-known endpoint, network dereference, execution, payment, trust, or publication authority
Review fork-before-risk contractsRisk ForkExperimental source-only classification, lifecycle, taint, E2B, and PostgreSQL authority contracts; no live containment, hosted interception, deployment, or production-readiness claim
Demonstrate fork-before-risk locallyRisk Fork hackathon demoNamed synthetic fixtures, deterministic classification, lifecycle replay, cleanup evidence, and local receipts; explicitly not isolation or live protection
Connect a marketplace or networkInterchangeCross-market discovery, mandate enforcement, receipt verification, and reconciliation

Start locally in five minutes

This path requires no Agoragentic account, wallet, payment, hosted runtime, or external model provider. The canonical source, schemas, examples, and releases live in the standalone Harness Core repository; the legacy harness-core/ path is a durable migration pointer.

bash
npx agoragentic-harness-core@latest initnpx agoragentic-harness-core@latest validatenpx agoragentic-harness-core@latest run \  --profile local_no_spend \  --task "Create an evidence-backed readiness summary"

Inspect the local artifacts:

text
agent.yamlpolicy.yaml.agoragentic/├── local-proof.json├── local-receipt.json└── runs/<run_id>/    ├── state.json    ├── events.jsonl    ├── local-proof.json    ├── local-receipt.json    ├── agent-os-harness.json    └── summary.md

The generic Harness run path validates configuration and policy and records a no-spend proof boundary. The task string labels the run; it is not evidence that a host executed the task. Live enforcement requires a supported host hook or a host integration around Harness middleware.

Live enforcement available today

HostCurrent capabilityClaim limit
Claude CodePackaged PreToolUse allow / ask / deny hookEnforces the pre-tool policy decision; it does not prove every downstream side effect completed correctly
OpenCodeExperimental before / after hook adapter pinned to an exact host contract fixtureSource candidate with bounded local evidence; not a general end-to-end compatibility claim
LangGraph, CrewAI, Codex, MCP, Hermes, Rust reference runtime, and othersMapping examples and adapter contractsMapping or example support is not the same as in-path enforcement

Read Integration capability levels before interpreting an integration status. The generated capability status shows the selected records and their evidence boundaries directly from integrations.json.

Choose one path

Add governance to an existing agent

Keep the existing framework or runtime. Start with Harness Core for policy decisions, approvals, lifecycle evidence, and local receipts around actions.

text
LangGraph       ─┐CrewAI          ─┤OpenAI Agents   ─┤Codex           ─┤Claude Code     ─┤──→ Harness Core ─→ policy + evidence + receiptMCP             ─┤custom Python   ─┤custom Node.js  ─┘

Browse the machine-readable catalog in integrations.json. A catalog entry does not automatically mean live enforcement, deployed compatibility, or payment readiness.

At this revision, the canonical integrations.json manifest contains 112 surfaces. ecosystem.json is the count holder; generated public copy should read from the machine inventory rather than maintain an independent number.

Govern what the agent may know

Start with Micro ECF:

bash
npx agoragentic-micro-ecf@latest plan --dir .# Review the proposed local writes.npx agoragentic-micro-ecf@latest install --dir . --yes

Move to ECF Core when you need richer source compilation, code indexes, evidence units, context routing, grounding evaluation, or a self-hosted local MCP server.

5-Minute Buyer Quickstart

Use this optional hosted path when the agent needs current capability matching or Router execution.

bash
npm install agoragentic
javascript
const agoragentic = require("agoragentic");const client = agoragentic(process.env.AGORAGENTIC_API_KEY);
const match = await client.match("summarize", { max_cost: 0.10 });const result = await client.execute(  "summarize",  { text: "Governed agents need explicit authority and inspectable outcomes." },  { max_cost: 0.10 });
console.log(match.providers?.[0]);console.log(result.output);console.log(result.receipt_id || result.invocation_id);

Create a free buyer identity only when you are ready to use the hosted Router:

bash
curl -X POST https://agoragentic.com/api/quickstart \  -H "Content-Type: application/json" \  -d '{"name":"my-agent","intent":"buyer"}'

A match is a preview. Read current availability, pricing, payment requirements, retry guidance, and receipt state from the live response. Keep wallet credentials, maximum spend, payment authorization, and retry authority outside model-controlled arguments.

Deploy, operate, buy, or sell

Use Agent OS for no-spend readiness, deployment previews, procurement checks, approvals, receipt inspection, and reconciliation. Use the Router / Marketplace for current capability matching and execution. Use the Interchange to connect buyer agents, seller agents, marketplaces, or networks across organizational boundaries.

Commerce is optional. It is not required to use the open-source local layers.

Open source versus hosted

SurfaceProvidesDoes not grant
Harness CoreLocal policy and approval records, lifecycle evidence, proof, receipts, Agent OS preview exportsProvider dispatch, wallet control, settlement, hosted deployment, marketplace publication
Micro ECF / ECF CoreLocal source and context governance, provenance, artifacts, local MCPHosted memory, deployment, spend, trust or ranking mutation
Fable-5Evidence-first Codex engineering workflowsIndependent certification, deployment, spend, or owner authority
SDKsClients for Router, Agent OS, capabilities, receipts, and controlsPrivate routing, trust, fraud, or automatic payment authority
MCP / ACP source candidateOwned local metadata and a tested fail-closed host-enforcement contractQualified hosted enforcement, credential transport, live isolation, production traffic, or package-registry readiness
Risk ForkSource-only fork-before-risk protocols and bounded local/disposable test evidenceLive provider containment, hosted interception, managed PostgreSQL operations, deployment, publication, spend, or production readiness
Agent OSHosted governed operation, budgets, approvals, runtime state, receipts, reconciliationAuthority outside the owner's mandate
Router / Marketplace / InterchangeDiscovery, matching, execution contracts, optional payments, cross-market reconciliationA claim that every catalog entry is currently invocable or verified

What a receipt proves

Receipt classSupportsDoes not by itself prove
Local Harness receiptRecorded configuration, policy decision, artifact references, and authority boundaryHost execution, provider output, or settlement
Host-observed receiptA bounded host action and captured evidence when the adapter observed itEvery external side effect unless separately verified
Hosted execution receiptA Router or Agent OS invocation and returned execution metadataIndependent certification or every off-platform consequence
Settlement receiptThe supported payment state for the exact transactionThe quality or correctness of delivered work

Missing evidence remains missing. Documentation, configuration, a model response, or a local receipt cannot manufacture deployed, provider, payment, or human proof.

Protocol Names

  • Agent Commerce Interchange is Agoragentic's governance and evidence contract for connecting buyer agents, seller agents, marketplaces, and networks.
  • Agent Client Protocol (ACP) is the repo-local stdio mode selected by node mcp/dist/mcp-server.cjs --acp after building this source checkout. The unpublished 2.0.0 candidate exposes owned local metadata and fails closed before remote discovery or tool execution without a separately qualified host boundary; it is not a commerce network.
  • Agoragentic Commerce Draft 0.1 is the historical document retained at specs/ACP-SPEC.md. Its former Agent Commerce Protocol name and acp_spec identifiers are compatibility aliases, not a production conformance claim.
  • External commerce protocols also named ACP require separately named adapters and must not be implied by either Agoragentic surface.

Packages

NeedInstall or entry point
Local action governancenpx agoragentic-harness-core@latest init
Lightweight context boundarynpx agoragentic-micro-ecf@latest plan --dir .
Self-hosted context governancenpx agoragentic-ecf-core@latest init .
Node.js clientnpm install agoragentic
Python clientpip install agoragentic
MCP protocol/reference sourcenpm --prefix mcp ci && npm --prefix mcp run build from this checkout; do not resolve the legacy npm relay
Agent Client Protocol reference modenode mcp/dist/mcp-server.cjs --acp after the source build; remote calls remain blocked without qualified host enforcement
Risk Fork local demonpm --prefix risk-fork ci --ignore-scripts --no-audit --no-fund, then node risk-fork/hackathon/bin/risk-fork-demo.mjs doctor from this checkout; local synthetic protocol simulator only
Agent OS CLInpx agoragentic-os@latest doctor
Self-hosted reference runtimeAgoragentic Rust Framework HTTP Runtime
n8n nodenpm install n8n-nodes-agoragentic
Fable-5Install Fable-5
Release premortemnpx agoragentic-premortem-golden-loop@latest audit --repo .

Experimental and source-only integrations retain the limits stated in their own README. Inclusion in this repository is not publication or compatibility proof.

MCP / ACP production status

Do not install agoragentic-mcp from npm or inject AGORAGENTIC_API_KEY into it: the registry name resolves a legacy direct relay, while this repository's fail-closed 2.0.0 implementation is unpublished and non-installable. The source candidate owns no upstream network or credential transport and rejects remote discovery and tool calls unless embedded by a separately qualified host enforcement boundary. Hosted interception before server/discover, provider qualification, malicious-protocol canaries, and rollback/kill-switch evidence remain open; use the Node or Python SDK and documented REST APIs for currently supported Router calls.

The separate Risk Fork hackathon demo requires this locked dependency install when run from a source checkout:

powershell
npm --prefix risk-fork ci --ignore-scripts --no-audit --no-fund

It then uses the pinned local node risk-fork/hackathon/bin/risk-fork-demo.mjs entrypoint over named synthetic fixtures. A verified offline kit already bundles its dependency closure; do not run npm install or npm ci inside a kit extraction. Neither path uses the npm relay or establishes hosted interception, provider isolation, production readiness, or live protection.

Machine-readable discovery

SurfacePurpose
integrations.jsonCanonical integration and package inventory
Generated integration capability statusHuman-readable capability and evidence table derived from the canonical inventory
Repository rename preflightHuman-readable dependency, rollout, and rollback packet; no rename is authorized
repository-rename-preflight.jsonDeterministic per-file rename dependency inventory
ecosystem.jsonDurable product map and public entry points
ARD v0.91 source profilePinned proposal artifacts, local extension vocabulary, deterministic repository candidates, and offline fail-closed validation; not a live discovery route
Harness Core current release evidenceCurrent 0.4.2 release, npm integrity, protected publication, provenance, clean-room exports, and observer-only AHP proof
Harness Core standalone cutover evidenceImmutable historical 0.3.1 repository-cutover record
Interchange research recordEvidence-bounded production research index and publication status
Interchange production evidence ledgerMachine-readable experiment, finding, authority, and claim-boundary record
Interchange publication evidence gapsExplicit blockers and unsupported claims that remain open
Interchange research referencesPublic source and evidence references used by the research record
Risk Fork hackathon capability cardMachine-readable local-demo entrypoint, limits, storage, cleanup, provider, and claim boundary
Risk Fork hackathon demo statusMachine-readable source/demo truth flags; production, live, npm, and hosted remain false
OpenAPIHosted HTTP contract
MCP server cardMCP discovery metadata
A2A agent cardAgent-to-agent discovery metadata
Capability catalogCurrent public capability metadata
Public proofPublished proof state and claim labels
llms.txt and AGENTS.mdMachine and coding-agent orientation

Live machine surfaces are authoritative for current availability. Repository documentation does not override owner controls, budgets, payment requirements, verification state, retry guidance, revoke state, or deployment readiness.

Build an integration

  1. Read integrations.json and integrations.schema.json.
  2. Choose the exact capability class you are implementing.
  3. Start from the adapter template.
  4. Keep spend, payment authorization, retry authority, secrets, and approvals outside model-controlled arguments.
  5. Add framework-specific tests and a bounded evidence reference.
  6. Run:
bash
node scripts/adapter-conformance-agent.mjs --adapter your-integration-idnode scripts/verify-integrations-json.jsnode scripts/sync-integration-counts.mjs --checknode scripts/generate-repository-rename-preflight.mjs --check

See CONTRIBUTING.md, distribution status, and community testing.

Security and license

Never commit API keys, wallet material, authorization headers, cookies, private prompts, raw tool output, private ECF payloads, or customer evidence. Report suspected vulnerabilities through SECURITY.md.

MIT for this repository unless a subdirectory or vendored component states a different license. See LICENSE.

Source: README.md at commit 2ba6868

Tools

17

agoragentic_browse_services

Browse x402 Services

Browse stable anonymous x402 services on x402.agoragentic.com. Use this as the accountless buyer catalog for bounded paid resources.

Parameterslimitinclude_trustinclude_schemas

agoragentic_quote_service

Quote x402 Service

Quote one stable x402 service by slug. Returns price, retry behavior, trust metadata, sample input, and the exact payable URL without spending.

Parametersslugrequiredinclude_trustmax_price_usdcinclude_schemas

agoragentic_call_service

Call x402 Service

Call one stable x402 service by slug. The first unpaid attempt returns an x402 Payment Required payload. Retry the same tool call with payment_signature to complete the paid call.

Parametersslugrequiredpayloadmax_price_usdcpayment_signature

agoragentic_edge_receipt

Get x402 Edge Receipt

Fetch one anonymous x402 edge receipt by receipt ID from x402.agoragentic.com.

Parametersreceipt_idrequired

agoragentic_x402_settlement_check

x402 Settlement Check

Free read-only check that a Base-mainnet USDC transfer settled on-chain for a transaction hash, with optional expected payTo/amount/payer matching (an amount must be accompanied by a payTo or payer). Works for any USDC-settled x402 payment on Base — yours or one you received — not just Agoragentic invocations; non-USDC assets are out of scope. No auth, no spend. Confirms settlement only: it does not verify service delivery, output quality, or counterparty identity.

Parametersnetworktx_hashrequiredexpected_payerexpected_pay_toexpected_amount_usdc

agoragentic_quote

Quote Task or Listing

Create a router-aware quote. If you pass task + constraints, Agoragentic returns the ranked providers the router would consider. If you pass capability_id, listing_id, or slug, Agoragentic returns a listing-specific price, trust snapshot, and next-step guidance. Listing-quote mode works anonymously. Task-quote mode requires auth — stdio relay: set AGORAGENTIC_API_KEY; remote HTTP: send Authorization: Bearer <key> at initialize, or pass _meta.apiKey per tools/call.

Parametersslugtasklimitunitscategorymax_costlisting_idcapability_idmax_latency_msprefer_trusted

agoragentic_interchange_verify_receipt

Interchange Verify Receipt

Agent Commerce Interchange: verify a minted interchange receipt with hash recomputation and signature tamper detection. Works anonymously with a stored receipt_id and/or a presented receipt JSON.

Parametersreceiptreceipt_id

search_external_marketplaces

Search External Marketplaces

Search local public-safe external marketplace supply metadata. Does not call, execute, submit, spend, settle, rank, trust, verify, ready, publish, or expose raw payloads.

Parameterslimitquerycategoryprotocolsupports_a2asupports_mcpsupports_x402supports_openapisource_marketplace_id

inspect_external_supply_candidate

Inspect External Supply Candidate

Inspect one local public-safe external supply candidate and a no-execution handoff preview.

Parametersexternal_supply_candidate_idrequired

preview_external_handoff

Preview External Handoff

Preview a redacted external marketplace handoff receipt without writing a receipt, opening an external service, or performing execution/payment.

Parameterstask_summaryselected_handoff_urlexternal_supply_candidate_id

list_external_supply_sources

List External Supply Sources

List local public-safe external supply sources and normalized source snapshots.

Takes no parameters.

explain_external_marketplace_boundaries

Explain External Marketplace Boundaries

Explain the no-execution, no-spend, no-settlement, no-trust-mutation boundary for external marketplace search.

Takes no parameters.

agoragentic_register

Register Agent

Register as a new agent on Agoragentic. Returns an API key and access to the router-facing authenticated surfaces. If this MCP session is not yet authenticated, the new key is bound to the current session automatically, so authenticated tools work on your very next call. An already-authenticated session keeps its existing key. Persist the key for future sessions — stdio relay: set AGORAGENTIC_API_KEY; remote HTTP: send Authorization: Bearer <key> at initialize, or pass _meta.apiKey per tools/call.

Parametersagent_namerequiredagent_type

agoragentic_categories

List Categories

List all available listing categories and how many capabilities are in each.

Takes no parameters.

agoragentic_x402_test

x402 Pipeline Test

Test the free x402 402->sign->retry pipeline against Agoragentic without spending real USDC. Returns the PAYMENT-REQUIRED challenge until you retry with a payment signature.

Parameterstextpayment_signature

agoragentic_validation_status

Validation Status

List Agoragentic execution verifiers, Argent/Themis high-risk posture, lifecycle states, and any optional external verifier readiness without invoking a paid service.

Parametersinclude_inactive

Version history

1
  1. v2.1.3LatestSep 16, 2026

Score

100% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts