Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/tyox-all/weave_protocol/apinpx skills add Tyox-all/Weave_Protocol --skill apigit clone --depth 1 https://github.com/Tyox-all/Weave_ProtocolWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00036 | $0.00611 |
| Opus 5 | $0.00018 | $0.00305 |
| Sonnet 5 | $0.00007 | $0.00122 |
| Haiku 4.5 | $0.00004 | $0.00061 |
Grade A, and why
weave-api-calling scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -X POST http://localhost:3000/mund/scan \ What it actually says
Weave Protocol REST API
Overview
HTTP endpoints for all Mund, Hord, Domere, and Witan functionality. Use when MCP is unavailable or for web integration.
Start Server
npx @weave_protocol/api
# or
docker run -p 3000:3000 weave-protocol/api
Endpoints
Mund (Security)
| Method | Path | Purpose |
|---|---|---|
| POST | /mund/scan |
Scan content |
| POST | /mund/scan-mcp-server |
Vet MCP server |
| POST | /mund/check-secret |
Check for secret |
| POST | /mund/check-pii |
Detect PII |
Hord (Encryption)
| Method | Path | Purpose |
|---|---|---|
| POST | /hord/encrypt |
Encrypt data |
| POST | /hord/decrypt |
Decrypt data |
| POST | /hord/yoxallismus/lock |
Yoxallismus lock |
| POST | /hord/yoxallismus/unlock |
Yoxallismus unlock |
Domere (Compliance)
| Method | Path | Purpose |
|---|---|---|
| POST | /domere/checkpoint |
Create checkpoint |
| POST | /domere/compliance/report |
Generate report |
| POST | /domere/anchor |
Blockchain anchor |
Witan (Governance)
| Method | Path | Purpose |
|---|---|---|
| POST | /witan/propose |
Create proposal |
| POST | /witan/vote |
Cast vote |
| POST | /witan/escalate |
Escalate decision |
Quick Examples
Scan content
curl -X POST http://localhost:3000/mund/scan \
-H "Content-Type: application/json" \
-d '{"content": "sk-abc123..."}'
Encrypt data
curl -X POST http://localhost:3000/hord/encrypt \
-H "Content-Type: application/json" \
-d '{"data": "secret", "key": "my-key"}'
Create checkpoint
curl -X POST http://localhost:3000/domere/checkpoint \
-H "Content-Type: application/json" \
-d '{"action": "data_access", "actor": "agent-001"}'
When to Use
- Web application integration
- Environments without MCP support
- Microservice architectures
- CI/CD pipelines
Links
What ships with it
23 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- Dockerfile 354 B
- LICENSE 11 KB
- package-lock.json 78 KB
- package.json 1.2 KB
- README.md 8.7 KB
- src/adapters/langchain.ts 6.2 KB runs code
- src/adapters/openai.ts 8.6 KB runs code
- src/dashboard-routes.ts 4.3 KB runs code
- src/dashboard.html 31 KB
- src/index.ts 11 KB runs code
- src/middleware/auth.ts 100 B runs code
- src/middleware/error.ts 358 B runs code
- src/middleware/logger.ts 740 B runs code
- src/routes/dashboard-snapshot.ts 8.7 KB runs code
- src/routes/domere.ts 14 KB runs code
- src/routes/health.ts 578 B runs code
- src/routes/hord.ts 9.7 KB runs code
- src/routes/hundredmen.ts 17 KB runs code
- src/routes/mund.ts 4.9 KB runs code
- src/services/domere.ts 19 KB runs code
- src/services/hord.ts 12 KB runs code
- src/services/mund.ts 9.7 KB runs code
- tsconfig.json 450 B
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 85 lines · 36 tokens per session scan A cd43dbc5a50a
weave-api-calling is a skill published in the GitHub repository Tyox-all/Weave_Protocol (0 stars, last pushed 8d ago), licensed Apache-2.0. It adds 36 tokens to every session and 611 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
analytical-table
Use ALWAYS for AnalyticalTable internals — react-table v7 plugin architecture, vendored react-table code at packages/main/src/components/AnalyticalTable/react-table/, tableHooks, AnalyticalTableHooks, useDynamicColumnWidths, useColumnResizing, useRowSelect, useF2CellEdit, useManualRowSelect…
rtc-balance
Check RustChain wallet balance, epoch info, and network status via the public RPC.
ui5wc-upgrade
Guide a complete UI5 Web Components version upgrade in the ui5-webcomponents-react monorepo. Updates root and peer dependencies, regenerates wrapper components, syncs theming parameters, updates version-info, detects new components and breaking changes, and verifies the build. Use when a new @ui5/webcomponents version…
build-page-layout
Build a page layout using fd-dynamic-page or fdp-dynamic-page — collapsing header, subheader, content area, footer, and optional tabs.
adopt-styles
Adopt breaking changes from fundamental-styles into Angular components.
build-form
Build a reactive form with @fundamental-ngx/platform form components, FormGroup wiring, validation, and error states.