protogrid
Sign inAdd to your agent

Search / io.github.nirholas/3d-agent-mcp

three.ws 3D Agent Tools

L0· runs locally

MCP tools from three.ws: free + paid text-to-3D, rigging, agent reputation, market intel.

v1.2.3 · active · repository · website · descriptor JSON · versions

Runs on your machine: something must execute the package.Only local packages are published (npm, PyPI, OCI, …). The registry never executes them, so tools are unknown until you run it.
Quality–not scored
Trust84of 100
Packages1
Tools seen0

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "3d-agent-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@three-ws/[email protected]"
      ],
      "env": {
        "HELIUS_API_KEY": "${HELIUS_API_KEY}"
      }
    }
  }
}
claude mcp add 3d-agent-mcp -e "HELIUS_API_KEY=${HELIUS_API_KEY}" -- npx -y @three-ws/[email protected]
[mcp_servers.3d-agent-mcp]
command = "npx"
args = ["-y", "@three-ws/[email protected]"]
env = { "HELIUS_API_KEY" = "${HELIUS_API_KEY}" }

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "3d-agent-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@three-ws/[email protected]"
      ],
      "enabled": true,
      "environment": {
        "HELIUS_API_KEY": "{env:HELIUS_API_KEY}"
      }
    }
  }
}
{
  "mcpServers": {
    "3d-agent-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@three-ws/[email protected]"
      ],
      "env": {
        "HELIUS_API_KEY": "${HELIUS_API_KEY}"
      }
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=3d-agent-mcp&config=eyJjb21tYW5kIjoibnB4IiwiYXJncyI6WyIteSIsIkB0aHJlZS13cy9tY3Atc2VydmVyQDEuMi4zIl0sImVudiI6eyJIRUxJVVNfQVBJX0tFWSI6IiR7SEVMSVVTX0FQSV9LRVl9In19"
}
{
  "servers": {
    "3d-agent-mcp": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@three-ws/[email protected]"
      ],
      "env": {
        "HELIUS_API_KEY": "${HELIUS_API_KEY}"
      }
    }
  }
}
{
  "mcpServers": {
    "3d-agent-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@three-ws/[email protected]"
      ],
      "env": {
        "HELIUS_API_KEY": "${HELIUS_API_KEY}"
      }
    }
  }
}
extensions:
  "3d-agent-mcp":
    enabled: true
    name: "3d-agent-mcp"
    type: stdio
    cmd: "npx"
    args:
      - "-y"
      - "@three-ws/[email protected]"
    envs:
      "HELIUS_API_KEY": "${HELIUS_API_KEY}"
    timeout: 300

Placeholders to fill from your own secret store: ${HELIUS_API_KEY}. The registry never accepts secret values.

This is a local package: the command runs on your machine.

Quality – / 100not scored

Not scored: fewer than three checks apply, usually because no remote answered a credential-free probe or the server is a local package.

protocoln/a · weight 25
  • n/a
    protocol.modern, protocol.stateless, protocol.transport, protocol.list_ttlno remote answered a protocol handshake (not probed yet, unreachable, or local-only)
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygienen/a · weight 30
  • n/a
    tools.descriptions, tools.description_length, tools.schemas, tools.annotations, tools.directory_hints, tools.token_cost, tools.api_dumptool list unknown (behind auth, not probed, or empty)
stabilityn/a · weight 15
  • n/a
    stability.changes, stability.rug_pulltool list unknown
dependencies67 · weight 15
  • fail
    deps.known_vulns16 advisories to act on (malicious, or rated high or critical with a fix available): GHSA-7q85-xj36-vmfc in [email protected] (indirect, fixed in 0.6.1), GHSA-8238-w5pm-2374 in [email protected] (indirect, fixed in 0.6.1), GHSA-j5f4-cc29-5x44 in [email protected] (indirect, fixed in 0.6.1), ...; 24 more of lower severity or without a fix
  • pass
    deps.mcp_sdk_version@modelcontextprotocol/sdk 1.32.1, no known advisory
  • pass
    deps.resolvable@three-ws/[email protected] resolved: 1200 packages

Tool list unknown · checked 2026-10-20 20:14 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 84 / 100

duplicate-repo
provenance90
livenessn/a
freshness100
hygiene60

+repository +namespace-matches-repo +website ~liveness-unmeasured +updated-10d-ago -duplicate-repo(51 names)

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Dependencies

@three-ws/[email protected] npm1199 dependencies, resolved · MCP SDK @modelcontextprotocol/sdk 1.32.1 · advisories checked 2026-10-20

advisoryseveritypackagefixed in
GHSA-x8mw-p69m-v3mx@fastify/busboy vulnerable to Denial of Service via prototype-named multipart part headerhigh@fastify/[email protected]indirectfixed in 3.2.1
GHSA-32mq-hpph-xfvr@libp2p/kad-dht: Unvalidated PUT_VALUE records allow unbounded disk exhaustion on DHT server nodeshigh@libp2p/[email protected]indirectfixed in 16.2.6
GHSA-vrf4-mx87-p53wlibp2p: PeerStore accepts attacker-signed PeerRecords for a victim peer ID and stores certified attacker addresseshigh@libp2p/[email protected]indirectfixed in 12.0.24
GHSA-7q85-xj36-vmfcadm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)high[email protected]indirectfixed in 0.6.1
GHSA-8238-w5pm-2374adm-zip: Unhandled error event in async DEFLATE decompression crashes Node.js process (DoS)high[email protected]indirectfixed in 0.6.1
GHSA-j5f4-cc29-5x44adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalationhigh[email protected]indirectfixed in 0.6.1
GHSA-rcw4-f5rp-g42vadm-zip: Decompression-bomb protection (fix for CVE-2026-39244) can be bypassed by declaring uncompressed size as 0high[email protected]indirectfixed in 0.6.1
GHSA-xcpc-8h2w-3j85adm-zip: Crafted ZIP file triggers 4GB memory allocationhigh[email protected]indirectfixed in 0.6.0
GHSA-5c6j-r48x-rmvqSerialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()high[email protected]indirectfixed in 7.0.3
GHSA-ph9p-34f9-6g65tmp has Path Traversal via unsanitized prefix/postfix that enables directory escapehigh[email protected]indirectfixed in 0.2.6

30 more advisories in the dependencies endpoint.

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.

Endpoints

packageregistryversionruntimesecrets
@three-ws/mcp-servernpm1.2.3npxHELIUS_API_KEY

Tools (0)

No tools observed. Local packages are never executed by the registry.

Schemas: list_tools.

Also listed as

50 other active names share this repository (showing 10): io.github.nirholas/3D-AI-Agent-Avatar, io.github.nirholas/activity-mcp, io.github.nirholas/agenc-mcp, io.github.nirholas/agentcore-payments-mcp, io.github.nirholas/agent-sniper, io.github.nirholas/agora-mcp, io.github.nirholas/alerts-mcp, io.github.nirholas/alibaba-cloud, io.github.nirholas/assistant-widget, io.github.nirholas/audio-mcp

Similar MCP servers

  • Agent Tools MCPR0quality 94
    io.github.why-see/agent-tools-mcp

    32 free MCP tools for data validation, text optimization, and synthetic test data.

  • tools-mcpL0
    io.github.First-CH/tools-mcp

    Web production tools for AI agents: contrast, JP text, WebP, JSON-LD, slugs, dates and 40+ more

  • webdata-tools-mcpL0
    io.github.tacps126/webdata-tools-mcp

    Tools for AI agents: jobs, hiring signals, news, reviews, Reddit, contacts, property, exhibitors.

  • TooltraceR1quality 84
    io.tooltrace/mcp-server

    Web tools for AI agents: scrape pages to Markdown, audit SEO, detect tech stacks, check sitemaps

  • Agent UtilitiesL0
    io.github.cgvhbjk/agent-utilities-mcp

    Paid tools for HTML, JSON, shopping data and agent configs. Free discovery; $5 prepaid credits.

  • x402 ToolsR0quality 73
    io.github.foxxx009/x402-tools-mcp

    Pay-per-call research tools for AI agents, paid via x402 USDC. Remote MCP, one free tool.

More from io.github.nirholas

  • Papertrade AIR2quality 100
    io.github.nirholas/papertrade-ai

    Trade Papertrade BTC and ETH perps from Claude, ChatGPT, Codex, Cursor and any MCP client.

  • paired.exchangeR0quality 88
    io.github.nirholas/paired

    Launch coins quoted in tokenized stocks on Robinhood Chain; the user signs at a launch link.

  • three.ws 3D Studio (free)R0quality 86
    io.github.nirholas/threews-3d-studio-free

    Free text/image → 3D: generate, rig, avatar-ify, and refine GLB models. No auth, no payment.

  • three.ws for GrokR0quality 86
    io.github.nirholas/threews-grok

    Free text/image to 3D for Grok Bot, plus your three.ws agents once signed in. Never spends.

  • IBM Granite x402 RemoteR2quality 83
    io.github.nirholas/ibm-x402-mcp-remote

    Pay-per-use IBM Granite AI via x402: chat, code, embeddings, forecasting. USDC on Base or Solana.

  • three.ws Avatars & AgentsR2quality 83
    io.github.nirholas/three.ws

    3D avatars, embeds, glTF tools, agent memory, and on-chain agent identity from three.ws.

And 73 more from this publisher.

Official server.json
{
  "name": "io.github.nirholas/3d-agent-mcp",
  "icons": [
    {
      "src": "https://three.ws/three-ws-mcp-icon.svg",
      "sizes": [
        "any"
      ],
      "mimeType": "image/svg+xml"
    }
  ],
  "title": "three.ws 3D Agent Tools",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "version": "1.2.3",
  "packages": [
    {
      "version": "1.2.3",
      "transport": {
        "type": "stdio"
      },
      "identifier": "@three-ws/mcp-server",
      "runtimeHint": "npx",
      "registryType": "npm",
      "environmentVariables": [
        {
          "name": "MCP_SVM_PAYMENT_ADDRESS",
          "format": "string",
          "description": "Solana address that receives USDC when a client pays for a tool call (falls back to X402_PAY_TO_SOLANA / X402_PAY_TO). Required to settle paid tools."
        },
        {
          "name": "SOLANA_RPC_URL",
          "format": "string",
          "description": "Solana mainnet RPC endpoint. Defaults to the public cluster — bring your own (Helius / Quicknode / Triton) for production traffic."
        },
        {
          "name": "HELIUS_API_KEY",
          "format": "string",
          "isSecret": true,
          "description": "Optional Helius API key — enables exact supply and richer DAS data in pump.fun snapshots."
        }
      ]
    }
  ],
  "repository": {
    "url": "https://github.com/nirholas/three.ws",
    "source": "github",
    "subfolder": "mcp-server"
  },
  "websiteUrl": "https://three.ws",
  "description": "MCP tools from three.ws: free + paid text-to-3D, rigging, agent reputation, market intel."
}