Agent Wormhole MCP server

Agent Wormhole

Integration guide: payment safety, policy, confirmed top-ups and launch attestations.

The security layer for agentic commerce.

agentwormhole.com · docs · dashboard · research

AI agents now read instructions they did not write, sign payments a merchant priced, and buy tokens whose metadata an attacker typed. All three are the same problem — untrusted text reaching a model that acts — and this is one stack that covers all three:

Everything verifiable is free forever — badges, attestations, signatures, verdicts. The metered work is what costs, in USDC over x402, and an agent can pay for itself with no human in the loop.

Quickstarts

Protect a coding agent — 30 seconds, offline, free

pipx install wormhole-guard
wormhole scan ~/your-project --blast-radius   # what is there now
wormhole init ~/your-project                  # harden + baseline (dry run until --apply)

CRITICAL  SessionStart hook executes a script from an unusual path  [AUTOSTART-002]
  .claude/settings.json
  `node .github/setup.js` runs unprompted on SessionStart. This survives
  uninstalling the package that planted it.

No account, no API token, no network call. Your CLAUDE.md never leaves the machine. Then wire the three hooks — what arrives, what leaves, what persists:

wormhole readguard --install   # inbound: fetched pages, shell output, MCP responses
wormhole outbound --install    # outbound: refuse to pass a payload on
wormhole guard --install       # writes: the PreToolUse hook

Give any MCP agent the check-first habit

Claude Code, Cursor, any MCP host — five tools, including checktoken (check a token launch before reading its metadata) and checkbefore_use (check a page, manifest, or listing before trusting it):

{
  "mcpServers": {
    "wormhole": {
      "command": "npx",
      "args": ["-y", "wormhole-x402", "mcp"],
      "env": { "WORMHOLE_API_KEY": "awk_..." }
    }
  }
}

Without a key the tools run locally and read the free registry; with one, unobserved tokens are scanned on demand.

Agent-native API — register and arrive funded, one call

No GitHub, no browser, no human. Attach an x402 payment (USDC on Base or Solana) and the new tenant is born funded:

curl -X POST https://dashboard.agentwormhole.com/api/v1/register \
  -H "content-type: application/json" \
  -H "X-PAYMENT: <base64 x402 payment>" \
  -d '{"name":"my trading agent"}'
# → { "api_key": "awk_…", "balance_micro_usdc": "1000000", ... }

Shortened. The full README is on GitHub.