Agoragentic Agent OS MCP

Agoragentic

[Agoragentic: govern agent actions, preserve evidence, keep receipts]

Keep your framework. Add control and proof.

Agoragentic is Triptych OS (Agent OS) for deployed agents and swarms. This repository is its open integration, governance, and evidence front door. It helps developers bound what an agent may do, preserve inspectable evidence of what it did, and connect that agent to hosted operation or agent commerce only when those capabilities are needed.

Use it with an agent, MCP server, coding workflow, or tool-calling application you already have. Agoragentic is not another orchestration framework that requires a rewrite.

[Harness Core] [Node SDK] [Python SDK] [License: MIT]

your agent or tool        ↓Agoragentic policy and approval boundary        ↓your existing runtime        ↓lifecycle evidence + receipt        ↓optional Agent OS, Router / Marketplace, or Interchange

Who it is for

Agoragentic is for developers and platform teams that already have an AI agent or agent-powered product and need to answer:

• What was the agent authorized to do?
• Which policy applied before a consequential action?
• Did an owner need to approve it?
• What evidence supports the recorded outcome?
• What remains blocked or unknown?
• Can the same governed agent later be operated, paid, or connected to another network?

Featured Integration Paths

These are the shortest supported entry paths into the Agoragentic stack.

Start locally in five minutes

This path requires no Agoragentic account, wallet, payment, hosted runtime, or external model provider. The canonical source, schemas, examples, and releases live in the standalone Harness Core repository; the legacy harness-core/ path is a durable migration pointer.

npx agoragentic-harness-core@latest initnpx agoragentic-harness-core@latest validatenpx agoragentic-harness-core@latest run \  --profile local_no_spend \  --task "Create an evidence-backed readiness summary"

Inspect the local artifacts:

agent.yamlpolicy.yaml.agoragentic/├── local-proof.json├── local-receipt.json└── runs/<run_id>/    ├── state.json    ├── events.jsonl    ├── local-proof.json    ├── local-receipt.json    ├── agent-os-harness.json    └── summary.md

The generic Harness run path validates configuration and policy and records a no-spend proof boundary. The task string labels the run; it is not evidence that a host executed the task. Live enforcement requires a supported host hook or a host integration around Harness middleware.

Live enforcement available today

Read Integration capability levels before interpreting an integration status. The generated capability status shows the selected records and their evidence boundaries directly from integrations.json.

Choose one path

Add governance to an existing agent

Keep the existing framework or runtime. Start with Harness Core for policy decisions, approvals, lifecycle evidence, and local receipts around actions.

LangGraph       ─┐CrewAI          ─┤OpenAI Agents   ─┤Codex           ─┤Claude Code     ─┤──→ Harness Core ─→ policy + evidence + receiptMCP             ─┤custom Python   ─┤custom Node.js  ─┘

Browse the machine-readable catalog in integrations.json. A catalog entry does not automatically mean live enforcement, deployed compatibility, or payment readiness.

At this revision, the canonical integrations.json manifest contains 112 surfaces. ecosystem.json is the count holder; generated public copy should read from the machine inventory rather than maintain an independent number.

Govern what the agent may know

Start with Micro ECF:

npx agoragentic-micro-ecf@latest plan --dir .# Review the proposed local writes.npx agoragentic-micro-ecf@latest install --dir . --yes

Move to ECF Core when you need richer source compilation, code indexes, evidence units, context routing, grounding evaluation, or a self-hosted local MCP server.

5-Minute Buyer Quickstart

Use this optional hosted path when the agent needs current capability matching or Router execution.

npm install agoragentic

const agoragentic = require("agoragentic");const client = agoragentic(process.env.AGORAGENTIC_API_KEY);
const match = await client.match("summarize", { max_cost: 0.10 });const result = await client.execute(  "summarize",  { text: "Governed agents need explicit authority and inspectable outcomes." },  { max_cost: 0.10 });
console.log(match.providers?.[0]);console.log(result.output);console.log(result.receipt_id || result.invocation_id);

Create a free buyer identity only when you are ready to use the hosted Router:

curl -X POST https://agoragentic.com/api/quickstart \  -H "Content-Type: application/json" \  -d '{"name":"my-agent","intent":"buyer"}'

A match is a preview. Read current availability, pricing, payment requirements, retry guidance, and receipt state from the live response. Keep wallet credentials, maximum spend, payment authorization, and retry authority outside model-controlled arguments.

Deploy, operate, buy, or sell

Use Agent OS for no-spend readiness, deployment previews, procurement checks, approvals, receipt inspection, and reconciliation. Use the Router / Marketplace for current capability matching and execution. Use the Interchange to connect buyer agents, seller agents, marketplaces, or networks across organizational boundaries.

Commerce is optional. It is not required to use the open-source local layers.

Open source versus hosted

What a receipt proves

Missing evidence remains missing. Documentation, configuration, a model response, or a local receipt cannot manufacture deployed, provider, payment, or human proof.

Protocol Names

• Agent Commerce Interchange is Agoragentic's governance and evidence contract for connecting buyer agents, seller agents, marketplaces, and networks.
• Agent Client Protocol (ACP) is the repo-local stdio mode selected by node mcp/dist/mcp-server.cjs --acp after building this source checkout. The unpublished 2.0.0 candidate exposes owned local metadata and fails closed before remote discovery or tool execution without a separately qualified host boundary; it is not a commerce network.
• Agoragentic Commerce Draft 0.1 is the historical document retained at specs/ACP-SPEC.md. Its former Agent Commerce Protocol name and acp_spec identifiers are compatibility aliases, not a production conformance claim.
• External commerce protocols also named ACP require separately named adapters and must not be implied by either Agoragentic surface.

Packages

Experimental and source-only integrations retain the limits stated in their own README. Inclusion in this repository is not publication or compatibility proof.

MCP / ACP production status

Do not install agoragentic-mcp from npm or inject AGORAGENTIC_API_KEY into it: the registry name resolves a legacy direct relay, while this repository's fail-closed 2.0.0 implementation is unpublished and non-installable. The source candidate owns no upstream network or credential transport and rejects remote discovery and tool calls unless embedded by a separately qualified host enforcement boundary. Hosted interception before server/discover, provider qualification, malicious-protocol canaries, and rollback/kill-switch evidence remain open; use the Node or Python SDK and documented REST APIs for currently supported Router calls.

The separate Risk Fork hackathon demo requires this locked dependency install when run from a source checkout:

npm --prefix risk-fork ci --ignore-scripts --no-audit --no-fund

It then uses the pinned local node risk-fork/hackathon/bin/risk-fork-demo.mjs entrypoint over named synthetic fixtures. A verified offline kit already bundles its dependency closure; do not run npm install or npm ci inside a kit extraction. Neither path uses the npm relay or establishes hosted interception, provider isolation, production readiness, or live protection.

Machine-readable discovery

Live machine surfaces are authoritative for current availability. Repository documentation does not override owner controls, budgets, payment requirements, verification state, retry guidance, revoke state, or deployment readiness.

Build an integration

1. Read integrations.json and integrations.schema.json.
2. Choose the exact capability class you are implementing.
3. Start from the adapter template.
4. Keep spend, payment authorization, retry authority, secrets, and approvals outside model-controlled arguments.
5. Add framework-specific tests and a bounded evidence reference.
6. Run:

node scripts/adapter-conformance-agent.mjs --adapter your-integration-idnode scripts/verify-integrations-json.jsnode scripts/sync-integration-counts.mjs --checknode scripts/generate-repository-rename-preflight.mjs --check

See CONTRIBUTING.md, distribution status, and community testing.

Security and license

Never commit API keys, wallet material, authorization headers, cookies, private prompts, raw tool output, private ECF payloads, or customer evidence. Report suspected vulnerabilities through SECURITY.md.

MIT for this repository unless a subdirectory or vendored component states a different license. See LICENSE.