Back to Browse

Agentresources MCP Server

Developer ToolsUse Caution4.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

MCP server for Agent Resources: Trust Cards, signed telemetry, ERC-8004 identity, x402.

About

MCP server for Agent Resources: Trust Cards, signed telemetry, ERC-8004 identity, x402.

Security Report

4.2
Use Caution4.2High Risk

This MCP server is well-structured with appropriate authentication controls and reasonable permission scoping. The codebase uses proper input validation via Zod schemas, avoids hardcoded credentials, and implements secure token handling. Minor code quality issues around broad error handling and the secrets scanner's detection capabilities do not significantly impact security posture. The server's permissions align with its stated purpose of providing operational tooling for Agent Resources infrastructure. Supply chain analysis found 4 known vulnerabilities in dependencies (1 critical, 2 high severity). Package verification found 1 issue.

7 files analyzed · 10 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

HTTP Network Access

Connects to external APIs or services over the internet.

process_spawn

Check that this permission is expected for this type of plugin.

system_info

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Override AR gateway base URL. Defaults to https://api.agentresources.xyzOptional

Environment variable: AR_API_BASE

secp256k1 private key (hex) used to sign telemetry envelopes and authenticate via wallet-session login. Required for write-side tools (telemetry, memory, signing-keys). Optional for read-side tools (trust_card_lookup).Required

Environment variable: AR_AGENT_PRIVATE_KEY

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-sznt2010-agentresources-mcp": {
      "env": {
        "AR_API_BASE": "your-ar-api-base-here",
        "AR_AGENT_PRIVATE_KEY": "your-ar-agent-private-key-here"
      },
      "args": [
        "-y",
        "@agentresources/mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

@agentresources/mcp

Operational MCP server for Agent Resources — Trust Card lookup, signed telemetry, memory verbs, signing-key management, and the ar CLI in one package.

npm Verify mirror License: MIT

This repo is the public mirror of @agentresources/mcp. The package is published to npm from the AR monorepo; this mirror exists so the MCP Registry, punkpeye/awesome-mcp-servers, and any agent that wants to fork the source can read it without authenticating.

Install

# Run as a one-shot MCP server (recommended for Claude Desktop / Cursor / Copilot CLI)
npx -y @agentresources/mcp

# Or install globally to get the `ar` CLI
npm i -g @agentresources/mcp
ar doctor          # 6-check self-diagnostic
ar skills get agent-resources

Wiring

// .mcp.json (Claude Desktop / Cursor / Copilot CLI)
{
  "mcpServers": {
    "agentresources": {
      "command": "npx",
      "args": ["-y", "@agentresources/mcp"],
      "env": {
        "AR_API_BASE": "https://api.agentresources.xyz",
        "AR_AGENT_PRIVATE_KEY": "0x...", // optional; needed for write-side tools
      },
    },
  },
}

Tools

ToolWhat it does
trust_card_lookupFetch + EIP-712 verify any AR-issued Trust Card by wallet or agent UUID.
telemetry_*Emit signed telemetry envelopes to the AR gateway (writes — needs key).
memory_*remember / recall / forget / improve against the AR memory loop.
signing_keys_*Register / rotate / revoke per-agent secp256k1 signing keys.

A second public package, @agentresources/docs-mcp, is a read-only doc explorer that runs without any AR credentials. Use it for agents that only need to read AR specs.

Skills are free

@agentresources/mcp is free. Paid AR products — Trust Card issuance, Scan, KYA, Retraining, on-chain attestation — are billable API services. This MCP server doesn't expose paid endpoints behind a free fly-by; it delegates to the gateway, which enforces the x402 payment challenge. See PHILOSOPHY.

Crypto-scam notice

AR has no token, no presale, no airdrop, no points, no staking. We will never DM you to ask for seed phrases, private keys, or funds. The only on-chain artefacts are ERC-8004 Identity NFTs, daily Merkle anchors, and the AR Treasury Agent (Base mainnet tokenId 45880). Report impersonation to contact@agentresources.xyz.

How this repo stays in sync

This repo is a downstream mirror of the canonical source at packages/mcp/ in the AR monorepo. CI on every push:

  1. Re-runs npm pack against the published @agentresources/mcp@<version> and diffs the tarball contents against src/ here.
  2. Validates server.json against the live MCP Registry schema.

To open a PR, edit the canonical source in the AR monorepo — the change will land here via the next sync.

License

MIT © Agent Resources

Trust Card

Verify the publisher of this repo: https://api.agentresources.xyz/.well-known/trust-card/agent/32f4ec0b-452e-467d-997b-ebd49730bb0a

Reviews

No reviews yet

Be the first to review this server!