---
bezeichner: "io.github.nirholas/provenance-mcp"
art: "mcp_server"
slug: "io-github-nirholas-provenance-mcp"
paketkoordinate: "npm:@three-ws/provenance-mcp"
status: "aktiv"
homepage: "https://three.ws"
erhebungsstand: "2026-10-11T01:17:01.851Z"
namensraum: "io.github.nirholas"
registerseite: "https://tracevero.com/mcp/io-github-nirholas-provenance-mcp"
abgerufen_am: "2026-10-11"
zugangsdaten_erforderlich: true
ausfuehrungsort: "lokal"
dateisystem_pfadargument: false
quelloffen_einsehbar: true
einsatzgebiet: "kryptowaehrung"
roh_beschreibung: "Append-only, signed, on-chain-verifiable agent action log — record and audit what agents did."
version: "0.1.3"
roh_umgebungsvariablen: "THREE_WS_BASE, THREE_WS_TIMEOUT_MS, THREE_WS_TOKEN, THREE_WS_SIGNER_KEY"
roh_geheime_pflichtvariablen: "THREE_WS_TOKEN"
roh_transportarten: "stdio"
roh_pfadargumente: ""
roh_repository_url: "https://github.com/nirholas/three.ws"
roh_paketquellen: "npm"
roh_geheime_pflichtkopfzeilen: ""
roh_pfad_umgebungsvariablen: ""
roh_remote_adressen: ""
roh_remote_hosts: ""
roh_statusmeldung: ""
roh_veroeffentlicht_am: "2026-10-10"
roh_aktualisiert_am: "2026-10-10"
roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json"
roh_bereitstellungsform: "paket"
roh_repository_quelle: "github"
roh_repository_unterordner: "packages/provenance-mcp"
roh_paketbezeichner: "@three-ws/provenance-mcp"
roh_paketversionen: "0.1.3"
roh_laufzeithinweise: "npx"
roh_umgebungsformate: "number, string"
roh_umgebungsbeschreibungen: "THREE_WS_BASE=Base URL of the three.ws API that serves the agent-actions ledger. Override only when self-hosting or targeting a preview deployment. · THREE_WS_SIGNER_KEY=Optional 0x-prefixed EVM private key. When set, append_agent_action ERC-191-signs each action so anyone can ecrecover the signer and verify authorship on-chain. A per-call `signer_key` arg overrides it. Omit to append unsigned. Treat like cash. · THREE_WS_TIMEOUT_MS=Per-request timeout in milliseconds for the ledger reads/appends. · THREE_WS_TOKEN=Bearer token authenticating every call — a three.ws API key (sk_live_…) or an OAuth access token. The ledger is owner-scoped: you can read and append actions only for agents your token owns. Required for all three tools. Treat like a password."
roh_symbolformate: "image/svg+xml"
roh_verbindungswege: "{\"packages\":[{\"registryType\":\"npm\",\"identifier\":\"@three-ws/provenance-mcp\",\"version\":\"0.1.3\",\"runtimeHint\":\"npx\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"THREE_WS_BASE\",\"description\":\"Base URL of the three.ws API that serves the agent-actions ledger. Override only when self-hosting or targeting a preview deployment.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"THREE_WS_TIMEOUT_MS\",\"description\":\"Per-request timeout in milliseconds for the ledger reads/appends.\",\"format\":\"number\",\"required\":false,\"secret\":false},{\"name\":\"THREE_WS_TOKEN\",\"description\":\"Bearer token authenticating every call — a three.ws API key (sk_live_…) or an OAuth access token. The ledger is owner-scoped: you can read and append actions only for agents your token owns. Required for all three tools. Treat like a password.\",\"format\":\"string\",\"required\":true,\"secret\":true},{\"name\":\"THREE_WS_SIGNER_KEY\",\"description\":\"Optional 0x-prefixed EVM private key. When set, append_agent_action ERC-191-signs each action so anyone can ecrecover the signer and verify authorship on-chain. A per-call `signer_key` arg overrides it. Omit to append unsigned. Treat like cash.\",\"format\":\"string\",\"required\":false,\"secret\":true}],\"additional_arguments_declared\":false}],\"remotes\":[]}"
---

# three.ws Provenance

## Measured values

| Property | Value | Source | Collected on | Level of trust | Raw declaration |
| --- | --- | --- | --- | --- | --- |
| Required secrets declared | true | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_geheime_pflichtvariablen: THREE_WS_TOKEN; roh_geheime_pflichtkopfzeilen: |
| Execution location | lokal | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_transportarten: stdio |
| Path argument present | false | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: |
| Repository URL listed | true | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_repository_url: https://github.com/nirholas/three.ws |
| Field of use, derived from the vendor description | kryptowaehrung | MCP-Register | 2026-08-26T16:45:01.514Z | abgeleitet | roh_beschreibung: Append-only, signed, on-chain-verifiable agent action log — record and audit what agents did. |
| Description (raw) | Append-only, signed, on-chain-verifiable agent action log — record and audit what agents did. | MCP-Register | 2026-08-26T16:45:01.514Z | selbstauskunft |  |
| Declared version | 0.1.3 | MCP-Register | 2026-10-11T01:17:01.851Z | selbstauskunft |  |
| Environment variables (raw) | THREE_WS_BASE, THREE_WS_TIMEOUT_MS, THREE_WS_TOKEN, THREE_WS_SIGNER_KEY | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Required secret variables (raw) | THREE_WS_TOKEN | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Transports (raw) | stdio | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Path arguments (raw) |  | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Repository (raw) | https://github.com/nirholas/three.ws | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Package registries (raw) | npm | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Required secret headers (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Path environment variables (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Remote URLs (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Remote hosts (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Registry status message (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| First listed in the registry (raw) | 2026-10-10 | MCP-Register | 2026-10-11T01:17:01.851Z | selbstauskunft |  |
| Last changed in the registry (raw) | 2026-10-10 | MCP-Register | 2026-10-11T01:17:01.851Z | selbstauskunft |  |
| Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Delivery form (raw) | paket | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Repository platform (raw) | github | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Repository subfolder (raw) | packages/provenance-mcp | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Package identifiers (raw) | @three-ws/provenance-mcp | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Package versions (raw) | 0.1.3 | MCP-Register | 2026-10-11T01:17:01.851Z | selbstauskunft |  |
| Runtime hints (raw) | npx | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Environment variable formats (raw) | number, string | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Environment variable descriptions (raw) | THREE_WS_BASE=Base URL of the three.ws API that serves the agent-actions ledger. Override only when self-hosting or targeting a preview deployment. · THREE_WS_SIGNER_KEY=Optional 0x-prefixed EVM private key. When set, append_agent_action ERC-191-signs each action so anyone can ecrecover the signer and verify authorship on-chain. A per-call `signer_key` arg overrides it. Omit to append unsigned. Treat like cash. · THREE_WS_TIMEOUT_MS=Per-request timeout in milliseconds for the ledger reads/appends. · THREE_WS_TOKEN=Bearer token authenticating every call — a three.ws API key (sk_live_…) or an OAuth access token. The ledger is owner-scoped: you can read and append actions only for agents your token owns. Required for all three tools. Treat like a password. | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Icon formats (raw) | image/svg+xml | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Connection paths (source structure) | {"packages":[{"registryType":"npm","identifier":"@three-ws/provenance-mcp","version":"0.1.3","runtimeHint":"npx","transport":"stdio","environment":[{"name":"THREE_WS_BASE","description":"Base URL of the three.ws API that serves the agent-actions ledger. Override only when self-hosting or targeting a preview deployment.","format":"string","required":false,"secret":false},{"name":"THREE_WS_TIMEOUT_MS","description":"Per-request timeout in milliseconds for the ledger reads/appends.","format":"number","required":false,"secret":false},{"name":"THREE_WS_TOKEN","description":"Bearer token authenticating every call — a three.ws API key (sk_live_…) or an OAuth access token. The ledger is owner-scoped: you can read and append actions only for agents your token owns. Required for all three tools. Treat like a password.","format":"string","required":true,"secret":true},{"name":"THREE_WS_SIGNER_KEY","description":"Optional 0x-prefixed EVM private key. When set, append_agent_action ERC-191-signs each action so anyone can ecrecover the signer and verify authorship on-chain. A per-call `signer_key` arg overrides it. Omit to append unsigned. Treat like cash.","format":"string","required":false,"secret":true}],"additional_arguments_declared":false}],"remotes":[]} | MCP-Register | 2026-10-11T01:17:01.851Z | selbstauskunft |  |

## Links

- Namespace: [[namensraum/io-github-nirholas|io.github.nirholas]]

---

- Registry page: <https://tracevero.com/mcp/io-github-nirholas-provenance-mcp>
- Retrieved on: 2026-10-11
