3d-agent-mcpCAUTION
MCP tools for the 3d-agent stack — free text→3D (TRELLIS) plus paid 3D/avatar/rigging, pump.fun snapshots, ERC-8004 reputation, vanity grinder. Paid calls settled in USDC via x402.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
@three-ws/mcp-server
MCP tools from three.ws — free text→3D plus paid text/image→3D, avatars, rigging, agent reputation, and more. Paid calls settled per call in USDC.
Quickstart · Tools · Config · Programmatic · Payments · three.ws
MCP tools from three.ws, five need no payment, wallet, or API key to start:forge_free(text prompt → 3D GLB on the free NVIDIA NIM / Microsoft TRELLIS lane),vanity_premium(browse the pre-ground premium vanity inventory), and the crypto-news trio (crypto_news,crypto_news_digest, andcrypto_news_archive, archive search is free up to a daily quota, then $0.001 USDC per search via x402). The rest are paid: text/image→3D mesh generation, 3D avatars, one-
4dcafd22b4a9OBSERVED · 2026-10-10Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add mcp-server --env HELIUS_API_KEY=${HELIUS_API_KEY} -- npx -y @three-ws/[email protected]Trust audit
CAUTIONgrade B · trust 87/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (1 observation(s))
- Network
- declared (3 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- found
Findings (6)
token: 'FeMbDoX7R1Psc4GEcvJdsbNbZA3bfztcyDCatJVJpump',
token: 'FeMbDoX7R1Psc4GEcvJdsbNbZA3bfztcyDCatJVJpump',
.nojekyll
store = await import('../../../api/_lib/vanity-inventory-store.js');@coinbase/x402, @coral-xyz/anchor, @modelcontextprotocol/sdk, @solana/web3.js, @tetsuo-ai/protocol, @tetsuo-ai/sdk, @x402/core, @x402/evm
Gates applied: no_behavioural_pass.
4dcafd22b4a9full audit observations/trust-audit/mcp-server/nirholas__3d-agent-mcp.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-10 | 4dcafd22b4a9 | CAUTION | B | 87 | first audit |
Questions
What is the 3d-agent-mcp MCP server?
MCP tools for the 3d-agent stack — free text→3D (TRELLIS) plus paid 3D/avatar/rigging, pump.fun snapshots, ERC-8004 reputation, vanity grinder. Paid calls settled in USDC via x402.
Is 3d-agent-mcp safe to connect to an agent?
With care. The audit graded it B (87/100) and found 6 things worth knowing before you trust this server, listed below with the exact line each was found on.
What credentials does 3d-agent-mcp need?
It reads HELIUS_API_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does 3d-agent-mcp run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as @three-ws/mcp-server at 1.2.3.
How current is this page?
The grade is for one exact copy of the source (4dcafd22b4a9), read on 2026-10-10. The repository is watched and re-audited when it changes.