Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add mcp/nirholas/three.ws/ibm-x402-mcpgit clone --depth 1 https://github.com/nirholas/three.wsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/mcp/nirholas/three.ws/ibm-x402-mcp)<a href="https://agentmods.dev/mcp/nirholas/three.ws/ibm-x402-mcp"><img src="https://agentmods.dev/badge/mcp/nirholas/three.ws/ibm-x402-mcp.svg" alt="Measured on agentmods" height="20"></a>Grade A, and why
ibm-x402-mcp scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
{
"ibm-x402-mcp": {
"command": "npx",
"args": [
"-y",
"@three-ws/ibm-x402-mcp"
],
"env": {
"MCP_SVM_PAYMENT_ADDRESS": "",
"WATSONX_API_KEY": "",
"WATSONX_PROJECT_ID": "",
"WATSONX_SPACE_ID": "",
"WATSONX_URL": "",
"WATSONX_MODEL_ID": "",
"WATSONX_EMBED_MODEL_ID": "",
"X402_FEE_PAYER_SOLANA": "",
"X402_FACILITATOR_URL": ""
}
}
}What else server.json configures
This page is one entry in a file that holds 45. Installing the file brings all of them; each is measured and scanned on its own page.
- MCP server 3D-AI-Agent-Avatar A not measured
- MCP server 3d-agent-mcp A not measured
- MCP server activity-mcp A not measured
- MCP server agenc-mcp A not measured
- MCP server agent-sniper A not measured
- MCP server agentcore-payments-mcp A not measured
- MCP server agora-mcp A not measured
- MCP server alerts-mcp A not measured
- MCP server alibaba-cloud A not measured
- MCP server assistant-widget A not measured
- MCP server audio-mcp A not measured
- MCP server autopilot-mcp A not measured
- MCP server billing-mcp A not measured
- MCP server brain-mcp A not measured
- MCP server clash-mcp A not measured
- MCP server concierge-mcp A not measured
- MCP server copy-mcp A not measured
- MCP server ibm-watsonx A not measured
- MCP server ibm-x402-mcp-remote A not measured
- MCP server intel-mcp A not measured
- MCP server kol-mcp A not measured
- MCP server loom-mcp A not measured
- MCP server marketplace-mcp A not measured
- MCP server metaplex-agent A not measured
- MCP server naming-mcp A not measured
- MCP server notifications-mcp A not measured
- MCP server portfolio-mcp A not measured
- MCP server provenance-mcp A not measured
- MCP server pumpfun-solana-mcp A not measured
- MCP server scene-mcp A not measured
- MCP server signals-mcp A not measured
- MCP server three-token-mcp A not measured
- MCP server three.ws A not measured
- MCP server threews-3d-studio A not measured
- MCP server threews-3d-studio-free A not measured
- MCP server threews-agent A not measured
- MCP server threews-avatar A not measured
- MCP server threews-pumpfun A not measured
- MCP server threews-x402-bazaar A not measured
- MCP server tutor-mcp A not measured
- MCP server vanity-mcp A not measured
- MCP server vision-mcp A not measured
- MCP server x402-bridge A not measured
- MCP server x402-mcp A not measured
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 20 lines scan A 6f5a05c6dd68
ibm-x402-mcp is an MCP server published in the GitHub repository nirholas/three.ws (111 stars, last pushed today), licensed Apache-2.0. Its token cost is not measured: an MCP server costs its tool schemas, not its config file. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other mcp servers, from other repositories
nodeflare
MCP server for NodeFlare RPC — blockchain data on 23 EVM chains for AI agents. Free public tier, API key, or pay-per-call with x402 (USDC on Base/Polygon/Arbitrum). Runs locally from the nodeflare-mcp npm package.
bsv-wallet
MCP server "bsv-wallet" as configured in Calhooon/bsv-wallet-cli. Launched with cargo run --release --manifest-path mcp/Cargo.toml. Needs 1 environment variable to run.
monerometrics
Live Monero (XMR) network metrics: reorgs, orphan blocks, mining-pool centralization. Remote server at api.monerometrics.net.
dero-mcp-server
Read-only DERO blockchain MCP: 33 tools (12 composites) incl. TELA discovery + bundled docs. Runs locally from the dero-mcp-server npm package.
sui-mcp-server
53-tool MCP server for Sui blockchain — wallets, DeFi, Move contracts, staking, SuiNS, analytics. Runs locally from the sui-mcp-server npm package.
evmscope
EVM blockchain intelligence toolkit for AI agents. 20 tools across 5 chains. Zero config. Runs locally from the evmscope npm package.