three.ws Portfolio MCP server

by nirholas·io.github.nirholas/portfolio-mcp·v0.1.2·265 stars

No reviews yet

An agent's trading state — portfolio value, PnL, live balances, trade feed, and signed transfers.

B83/100grade B

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

B83/100

full report

Adoption

Established

265 stars83 downloads/wk

Reviews

Write one

Nobody has reviewed three.ws Portfolio yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

three.ws Portfolio tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.10 · 2026-11-02 · same rubric, same numbers if you re-run it

no findings

Code scan13 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitystatic API keys via environment variables6/15
Maintenancelast push 0 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

How three.ws Portfolio compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 83/100; higher than 70% of 4,456 AI and agents servers
GitHub stars: 265; more than 95% of 2,733 AI and agents servers
Downloads a week: 83; more than 55% of 1,712 AI and agents servers with a package

Release history: 2 versions in the registry since 2026-08-19, latest 2026-10-10, typically one every 52 days.

Install three.ws Portfolio in Claude Code, Cursor or VS Code

Runs npx -y @three-ws/portfolio-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add portfolio-mcp -- npx -y @three-ws/portfolio-mcp

Add to Cursor

What the publisher says

From the three.ws Portfolio repository's README, as published. We do not edit it. Read it on GitHub

three.ws

Website · Docs · Changelog · X / Twitter · GitHub · $THREE on pump.fun

https://github.com/user-attachments/assets/d52515d1-cb04-4dd6-98bd-fef233312dc4

Give your AI a body. three.ws is an open source (Apache-2.0), browser-native 3D AI agent platform. Type a prompt and Forge generates a textured 3D model, or drop a GLB you already have. Add an LLM brain, register on-chain, and embed anywhere: no plugins, no server uploads, no installs required.

Try it in 60 seconds: open three.ws/forge, type "a brass steampunk owl, full body", and download the GLB. Text→3D, image→3D, and sketch→3D — free draft tier, no account. Jump to the Forge section ↓

Want to build it with us? Your first contribution goes from clone to open pull request in about 15 minutes, with a full worked example. Every good first issue names the file to change and the command that proves it worked. Say hello in Discussions or Telegram.

Meet the avatar: a live 3D model, right here in markdown

Drag to rotate. This is not an image or a video: it is an interactive 3D model rendered natively by GitHub. The avatar was generated from a one-line text prompt on three.ws Forge (free tier), decimated to 1,200 triangles, and embedded as ASCII STL with readme-3d, our open-source toolkit for putting 3D models in any GitHub README, issue, or discussion.

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

three.ws Portfolio: common questions

Is three.ws Portfolio MCP server safe?: Mostly: it is graded B (83/100). Read the three.ws Portfolio safety report
How do I install three.ws Portfolio?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does three.ws Portfolio need an API key?: Yes. The registry entry asks for THREE_WS_SESSION, SOLANA_SECRET_KEY.
Is three.ws Portfolio maintained?: The last commit was 13 days ago (2026-11-02). The latest release is v0.1.2.
What can I use instead of three.ws Portfolio?: Servers from other publishers that do the same job: Godot MCP server, Watch Skill MCP server and WaveSpeed MCP server.
How does three.ws Portfolio compare with other AI and agents MCP servers?: safety score 83/100 (higher than 70% of 4,456 AI and agents servers); github stars 265 (more than 95% of 2,733 AI and agents servers); downloads a week 83 (more than 55% of 1,712 AI and agents servers with a package). Full comparison.

Alternatives to three.ws Portfolio

Same job from other publishers: the closest match first, then the best rated.

Godot MCP
Agent-driven Godot playtesting: editor control, input injection, game-time stepping, live state.
not reviewed
Established
A
Watch Skill
Watch video and live sessions, keep timestamped evidence, and verify an agent's own work.
not reviewed
Established
B
WaveSpeed
Run any model on the live WaveSpeed catalog: image, video, audio, 3D.
not reviewed
Established
A
agent-custody
MCP gateway that checks each agent tool call against a signed grant and policy, and signs a receipt
not reviewed
Established
A
Emilia Protocol
Exact-action approval for consequential agent actions: request, track, and verify signed receipts.
not reviewed
Established
B

three.ws Portfolio vs Godot MCP

Run it through the gateway

Local package. It runs on your machine, not through the gateway.

Rating: —
Safety grade: B · 83/100
Stars: 265
Downloads/wk: 83
Price: Free
Licence: Apache-2.0
Transport: Local · npm
Version: 0.1.2
Category: AI and agents
Last release: 2026-11-02

Credentials it needs

THREE_WS_BASEBase URL of the three.ws API that serves the portfolio + trades endpoints. Override only when self-hosting or targeting a preview deployment.
THREE_WS_TIMEOUT_MSPer-request timeout in milliseconds for the live three.ws API reads.
THREE_WS_SESSIONsecretYour three.ws session token (the value of the `__Host-sid` cookie from a signed-in browser). Required for the account-scoped reads — get_portfolio_summary, get_portfolio_history, get_portfolio_asset — which return data for the agents YOU own. The public trade feed and on-chain balance reads do not need it. Treat like a password.
SOLANA_RPC_URLSolana mainnet RPC endpoint used by get_wallet_balances and send_transfer. Defaults to https://api.mainnet-beta.solana.com — bring your own (Helius / Quicknode / Triton) for production traffic.
SOLANA_SECRET_KEYsecretBase58-encoded Solana secret key for the wallet that send_transfer signs from. REQUIRED for send_transfer (the only write tool); a per-call `secret` arg overrides it. Not needed for any read tool. Treat like cash.
MAX_SOL_PER_TXPer-transaction spend cap in SOL for native SOL transfers via send_transfer. Bounds the blast radius of a leaked key or an injected argument.
RECIPIENT_ALLOWLISTOptional comma-separated base58 pubkeys. When set, send_transfer refuses any recipient not in the list.
REQUIRE_CONFIRMWhen on (default), send_transfer refuses until re-issued with confirm:true. Set 0/false to disable the gate.

Own this server?

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Claim listing

Badge for your README

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/nirholas-portfolio-mcp.svg)](https://mcp.market/server/nirholas-portfolio-mcp)

How the badge works