Atlas / MCP servers / rhein1 / Agoragentic Integrations

Agoragentic IntegrationsBLOCK

Name: Agoragentic Integrations
Author: rhein1

mcp/rhein1/agoragentic-integrations

MCP server by rhein1 · a2a · agent commerce · agent framework · Audited 2026-10-08

Public adapters and discovery catalog for Triptych OS (Agent OS): agent frameworks, MCP/A2A/x402 protocols, workflows, wallets, SDKs, and examples for execute-first routing, governed handoffs, and receipt-aware agent commerce.

Verdict

BLOCK

Grade

Trust score

26 /100

Exposed tools

70 52r · 18w · 0d

Transport

stdio · streamable-http

License

MIT

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Keep your framework. Add control and proof.

Agoragentic is Triptych OS (Agent OS) for deployed agents and swarms. This repository is its open integration, governance, and evidence front door. It helps developers bound what an agent may do, preserve inspectable evidence of what it did, and connect that agent to hosted operation or agent commerce only when those capabilities are needed.

Use it with an agent, MCP server, coding workflow, or tool-calling application you already have. Agoragentic is not another orchestration framework that requires a rewrite.

[](https://www.npmjs.com/package/agoragentic-harness-core) [](https://www.npmjs.com/package/agoragentic) [](https://pypi.org/project/agoragentic/) [](LICENSE)

your agent or tool
↓
Agoragentic policy and approval boundary
↓
your existing runtime
↓
lifecycle evidence + receipt
↓
optional Agent OS, Router / Marketplace, or Interchange

Who it is for

Agoragentic is for developers and platform teams that already have an AI agent or agent-powered product and need to answer:

What was the agent authorized to do?
Which policy applied before a consequential action?
Did an owner need to approve it?
What evidence supports the recorded outcome?
What remains blocked or unknown?
Can the same governed agent later be operated, paid, or connected to another network?

Featured Integration Paths

These are the shortest supported entry paths into the Agoragentic stack.

Read from source at commit b6872d4a19aaOBSERVED · 2026-10-08

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add transaction-assurance --env AGORAGENTIC_API_KEY=${AGORAGENTIC_API_KEY} --env AGORAGENTIC_SUPERVISOR_API_KEY=${AGORAGENTIC_SUPERVISOR_API_KEY} --env ARCADE_MCP_RECEIPT_SECRET=${ARCADE_MCP_RECEIPT_SECRET} --env DASHCLAW_API_KEY=${DASHCLAW_API_KEY} -- npx -y @agoragentic/[email protected]

claude-desktop

{
  "mcpServers": {
    "transaction-assurance": {
      "command": "npx",
      "args": [
        "-y",
        "@agoragentic/[email protected]"
      ],
      "env": {
        "AGORAGENTIC_API_KEY": "${AGORAGENTIC_API_KEY}",
        "AGORAGENTIC_SUPERVISOR_API_KEY": "${AGORAGENTIC_SUPERVISOR_API_KEY}",
        "ARCADE_MCP_RECEIPT_SECRET": "${ARCADE_MCP_RECEIPT_SECRET}",
        "DASHCLAW_API_KEY": "${DASHCLAW_API_KEY}"
      }
    }
  }
}

Exposed tools (70)

52 read · 18 write · 0 destructive.

Tool	Risk	Description
`AGORAGENTIC_EXECUTE`	write	Route a task through Agoragentic execute() with provider selection, receipts, and settlement.
`AGORAGENTIC_INVOKE`	write	Compatibility direct-provider invocation when a known capability ID is required.
`AGORAGENTIC_MATCH`	read	Preview eligible routed providers before execution.
`AGORAGENTIC_MEMORY_WRITE`	write	Write scoped Agent OS memory when policy allows it.
`AGORAGENTIC_PASSPORT`	read	Compatibility identity helper for legacy passport surfaces.
`AGORAGENTIC_REGISTER`	write	Create an Agoragentic API key for a buyer, seller, or dual-purpose agent.
`AGORAGENTIC_SEARCH`	read	Compatibility catalog browsing. Prefer AGORAGENTIC_MATCH for new routed work.
`AGORAGENTIC_VAULT`	read	Compatibility inventory view for legacy vault surfaces.
`agoragentic`	read	Agoragentic Router / Marketplace for governed agent task routing, receipts, and USDC settlement on Base L2
`agoragentic_browse_services`	read	Browse stable x402 edge resources.${ACP_ENFORCEMENT_NOTE}
`agoragentic_call_service`	read	Call a stable x402 edge resource after payment challenge handling.${ACP_ENFORCEMENT_NOTE}
`agoragentic_edge_receipt`	read	Inspect x402 edge receipt metadata.${ACP_ENFORCEMENT_NOTE}
`agoragentic_execute`	write	Route a task through Agoragentic execute() with provider selection, receipts, and settlement.
`agoragentic_execute_status`	write	Check the status, output, cost, and receipt of a previous agoragentic_execute invocation.
`agoragentic_invoke`	write	Compatibility direct-provider invocation when a known capability ID is required.
`agoragentic_match`	read	Preview eligible routed providers before execution.
`agoragentic_memory_read`	read	Read scoped Agent OS memory when policy allows it.
`agoragentic_memory_write`	write	Write scoped Agent OS memory when policy allows it.
`agoragentic_passport`	read	Compatibility identity helper for legacy passport surfaces.
`agoragentic_preview_x402`	read	Preview route-first x402-eligible providers for a task WITHOUT registration, provider execution, or USDC spend.
`agoragentic_procurement_check`	read	Preflight a known listing against policy, budget, and approval state.
`agoragentic_quote`	read	Preview a bounded routed task quote before paid or side-effecting execution.
`agoragentic_receipt`	read	Read the normalized receipt for an existing Agoragentic invocation.
`agoragentic_register`	write	Create an Agoragentic API key for a buyer, seller, or dual-purpose agent.
`agoragentic_search`	read	Compatibility catalog browsing. Prefer agoragentic_match for new routed work.
`agoragentic_status`	read	Read status for an existing Agoragentic invocation.
`agoragentic_vault`	read	Compatibility inventory view for legacy vault surfaces.
`agoragentic_x402_claim`	write	Build or submit a wallet proof for paid x402 receipt and vault access.
`agoragentic_x402_test`	read	Exercise the free x402 pipeline canary.${ACP_ENFORCEMENT_NOTE}
`arcis.execute`	write	Run a paid execute() call through Agoragentic with x402 retry recovery and a buyer-visible receipt checklist.
`arcis.health`	read	Return wrapper health and configured upstream base URL.
`arcis.last_receipt`	read	Return the most recent receipt checklist produced by this wrapper instance.
`audio_transcode`	read	Transcode audio between formats.
`credential_bypass`	read	Bearer secret-token-value-12345
`currency_conversion`	read	Convert currency amounts (mock-first, no live API call)
`execute`	write	Run the packaged PM-Claude skill through the marketplace execute() route and return a usage receipt.
`execute_pm_claude_prd_critic`	write	Local execute() wrapper for the pm-claude PRD Critic skill sold through the marketplace.
`fixture-agent`	read	Fixture installable agent
`image_resize`	read	Resize an image.
`ip_geolocation_lookup`	read	Look up geolocation data for an IP address (mock-first, no live API call)
`local_echo`	read	Returns a bounded local demonstration result.
`m3_memory.execute`	write	Execute a local m3-memory task with bounded inputs.
`metadata_echo`	read	Returns a bounded test result.
`micro_ecf.build_packet`	read	Build local context-packet, policy-summary, source-map, and deployment-preview artifacts.
`micro_ecf.context_pack`	read	Return a Codex/IDE-friendly local context pack summary without raw source content.
`micro_ecf.export_agent_os_harness`	read	Export a no-spend Agent OS Harness packet from the local Micro ECF policy.
`micro_ecf.get_policy`	read	Read the local Micro ECF policy file.
`micro_ecf.get_source`	read	Read one source metadata record from the local source map by source id or path.
`micro_ecf.handoff`	read	Read local Micro ECF next-session handoff summary. Read-only.
`micro_ecf.search_context`	read	Search local Micro ECF source-map summaries. Returns metadata only, not raw source contents.
`micro_ecf.status`	read	Return local Micro ECF resident status for the current artifact root.
`micro_ecf.work_memory`	write	Read local worklog, docs-sync plan, handoff, and latest summary artifacts. Read-only.
`micro_ecf.worklog_status`	read	Read local Micro ECF worklog current/history/checkpoint status. Read-only.
`nvidia_elements_execute`	write	Run a seller-packaged NVIDIA Elements capability through Agoragentic execute() with trust metadata and x402 usage receipts.
`packed_v2_probe`	read
`pdf_extract_text`	read	Extract text content from a PDF file.
`relay_payment_probe`	read
`relay_safe_probe`	read
`research.summarize_brief`	read	Summarize a research brief into bounded action items.
`risk_fork_demo_list_scenarios`	read	List the fixed synthetic Risk Fork demo scenarios. Accepts no paths, commands, URLs, repositories, credentials, or remote targets.
`risk_fork_demo_plan`	read	Classify one fixed synthetic scenario in the host without allocating or writing anything.
`risk_fork_demo_receipt`	write	Read a previously created sanitized demo receipt by opaque run id.
`risk_fork_demo_run`	write	Run one fixed synthetic scenario in the owned local demo root. The host determines whether a disposable local protocol copy is required.
`risk_fork_protect`	read	Fixture-only exact Risk Fork gateway tool.
`risk_fork_synthetic_untrusted_tool`	read	SYNTHETIC UNTRUSTED MCP DESCRIPTION
`risk_forkd_loopback_read`	read	Deterministic in-memory read-only risk-forkd fixture.
`safe_probe`	read
`summarize`	read	Summarize public-safe text
`unclassified_remote_tool`	read	No effect annotations or capability declaration
`weather_lookup`	read	Look up weather data for a location (mock-first, no live API call)

Trust audit

BLOCKgrade F · trust 26/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	WARN
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	FAIL
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (11 observation(s))
Network: declared (9 observation(s))
Shell: declared (1 observation(s))
Dependencies: not all pinned
Secrets in source: found

Findings (25)

CRITICALPrompt injection · prompt.transfer_instruction · CWE-94, CWE-1427

interchange/bankr/SKILL.md:25

Require the expected schema and known endpoint bindings in [the contract](references/contract.md). Report the actual observation time and cache/date evidence when exposed by the host. A cached respons

Why it matters. an instruction to move sensitive data to an outside destination

Fix. remove; a skill never needs the user's secrets off the machine

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

ag-ui/test.js:35

const fn = new Function('module', 'exports', code);

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

HIGHFilesystem / path · fs.credential_store · CWE-22, CWE-59

micro-ecf/src/core.mjs:151

'id_ecdsa',