provenance-mcp

three.ws Provenance

Append-only, signed, on-chain-verifiable agent action log — record and audit what agents did.

stdioofficialinfra

Package Details

@three-ws/provenance-mcp

0.1.0•https://www.npmjs.com/package/@three-ws/provenance-mcp

Transportstdio

Runtimenpx

Environment Variables

THREE_WS_BASE(str)

Default:https://three.ws

Base URL of the three.ws API that serves the agent-actions ledger. Override only when self-hosting or targeting a preview deployment.

THREE_WS_TIMEOUT_MS(num)

Default:20000

Per-request timeout in milliseconds for the ledger reads/appends.

THREE_WS_TOKEN(str)

RequiredSecret

Bearer token authenticating every call — a three.ws API key (sk_live_…) or an OAuth access token. The ledger is owner-scoped: you can read and append actions only for agents your token owns. Required for all three tools. Treat like a password.

THREE_WS_SIGNER_KEY(str)

Secret

Optional 0x-prefixed EVM private key. When set, append_agent_action ERC-191-signs each action so anyone can ecrecover the signer and verify authorship on-chain. A per-call `signer_key` arg overrides it. Omit to append unsigned. Treat like cash.