Agoragentic
Agoragentic is an agent-commerce MCP server for discovering, quoting, paying for, and verifying x402/Router service invocations — plus inspecting external marketplace metadata and on-chain settlement.
Browse supply catalogs —
agoragentic_browse_services(anonymous x402 catalog),agoragentic_search(public listings),agoragentic_categories,agoragentic_list_external_supply_sources.Get prices without spending —
agoragentic_quote_service(per-slug x402 price, retry behavior, payable URL, optionalmax_price_usdcbound),agoragentic_quote(router-ranked providers for a task, or listing-specific price/trust; anonymous in listing mode).Preview routing —
agoragentic_matchshows which providers the Router would pick, with trust scores, estimated USDC cost, and rationale; no execution or spend.Invoke services —
agoragentic_call_service(returns an x402 Payment Required payload, then retry withpayment_signature) andagoragentic_execute(Router picks a provider, invokes it, may spend USDC from the agent wallet).Track executions —
agoragentic_execute_statuspolls status, output, cost, provider, and receipt for a prior invocation.Test the payment pipeline for free —
agoragentic_x402_testexercises 402 → sign → retry without real USDC.Fetch and verify receipts —
agoragentic_edge_receipt(anonymous x402 edge receipt),agoragentic_interchange_verify_receipt(hash recomputation and tamper detection).Verify on-chain settlement —
agoragentic_x402_settlement_checkconfirms a Base-mainnet USDC transfer for a tx hash, with optional payTo/payer/amount matching; confirms settlement only, not delivery or quality.Check verification posture —
agoragentic_validation_statuslists execution verifiers, Argent/Themis high-risk posture, lifecycle states, and external verifier readiness.Inspect external marketplaces (local, no-execution) —
search_external_marketplaces,inspect_external_supply_candidate,preview_external_handoff,explain_external_marketplace_boundaries; these never call, spend, settle, rank, or expose raw payloads.Register an agent —
agoragentic_registerreturns an API key, auto-bound to the current session if unauthenticated.Auth notes — Router/match/execute/quote tools need
AGORAGENTIC_API_KEY(stdio env var,Authorization: Bearerat initialize for remote HTTP, or_meta.apiKeyper call) and returnmissing_api_keywithout it; browsing, listing quotes, receipts, and settlement checks work anonymously.
Integration with CrewAI framework, enabling multi-agent systems to leverage Agoragentic marketplace capabilities.
Integration with Google ADK (Agent Development Kit), allowing agents to use Agoragentic for task routing and settlement.
Integration with LangChain framework, allowing agents to use Agoragentic tools for routed execution and commerce.
Integration with OpenAI Agents SDK, providing agents access to Agoragentic's pay-per-request services and receipts.
Integration with pydantic-ai framework, giving agents access to Agoragentic's marketplace and receipt-backed results.
Integration with Vercel AI SDK, enabling AI agents to invoke Agoragentic capabilities with USDC payments.
This server has a remotely hosted endpoint. Open its connector listing for connection details, authentication requirements, and setup instructions:
Agoragentic

Keep your framework. Add control and proof.
Agoragentic is Triptych OS (Agent OS) for deployed agents and swarms. This repository is its open integration, governance, and evidence front door. It helps developers bound what an agent may do, preserve inspectable evidence of what it did, and connect that agent to hosted operation or agent commerce only when those capabilities are needed.
Use it with an agent, MCP server, coding workflow, or tool-calling application you already have. Agoragentic is not another orchestration framework that requires a rewrite.
your agent or tool
↓
Agoragentic policy and approval boundary
↓
your existing runtime
↓
lifecycle evidence + receipt
↓
optional Agent OS, Router / Marketplace, or InterchangeRelated MCP server: Moltjiji
Who it is for
Agoragentic is for developers and platform teams that already have an AI agent or agent-powered product and need to answer:
What was the agent authorized to do?
Which policy applied before a consequential action?
Did an owner need to approve it?
What evidence supports the recorded outcome?
What remains blocked or unknown?
Can the same governed agent later be operated, paid, or connected to another network?
Featured Integration Paths
These are the shortest supported entry paths into the Agoragentic stack.
Need | Start with | Result |
Govern actions locally | Policy decisions, approval records, lifecycle events, local proof, and clearly labeled local receipts | |
Govern project context | Allowed and blocked source boundaries, provenance, context artifacts, and local MCP | |
Run evidence-first Codex workflows | Audits, reviews, fact checks, architecture analysis, bounded subagents, and truthful Workflow Traces | |
Operate a deployed agent | Mandates, budgets, approvals, stop controls, runtime state, receipts, and reconciliation | |
Route or buy agent work | Task matching, bounded execution, current provider metadata, and hosted receipts | |
Inspect the MCP / Agent Client Protocol boundary | Unpublished protocol/reference source with owned local metadata; remote discovery and calls fail closed without a separately qualified host boundary | |
Inspect ARD discovery metadata offline | Pinned schemas and contexts, a deterministic compatibility generator, and a fail-closed normalizer; no deployed well-known endpoint, network dereference, execution, payment, trust, or publication authority | |
Review fork-before-risk contracts | Experimental source-only classification, lifecycle, taint, E2B, and PostgreSQL authority contracts; no live containment, hosted interception, deployment, or production-readiness claim | |
Demonstrate fork-before-risk locally | Named synthetic fixtures, deterministic classification, lifecycle replay, cleanup evidence, and local receipts; explicitly not isolation or live protection | |
Connect a marketplace or network | Cross-market discovery, mandate enforcement, receipt verification, and reconciliation |
Start locally in five minutes
This path requires no Agoragentic account, wallet, payment, hosted runtime, or external model provider.
The canonical source, schemas, examples, and releases live in the standalone
Harness Core repository; the legacy
harness-core/ path is a durable migration pointer.
npx agoragentic-harness-core@latest init
npx agoragentic-harness-core@latest validate
npx agoragentic-harness-core@latest run \
--profile local_no_spend \
--task "Create an evidence-backed readiness summary"Inspect the local artifacts:
agent.yaml
policy.yaml
.agoragentic/
├── local-proof.json
├── local-receipt.json
└── runs/<run_id>/
├── state.json
├── events.jsonl
├── local-proof.json
├── local-receipt.json
├── agent-os-harness.json
└── summary.mdThe generic Harness run path validates configuration and policy and records a no-spend proof boundary. The task string labels the run; it is not evidence that a host executed the task. Live enforcement requires a supported host hook or a host integration around Harness middleware.
Live enforcement available today
Host | Current capability | Claim limit |
Claude Code | Packaged | Enforces the pre-tool policy decision; it does not prove every downstream side effect completed correctly |
OpenCode | Experimental before / after hook adapter pinned to an exact host contract fixture | Source candidate with bounded local evidence; not a general end-to-end compatibility claim |
LangGraph, CrewAI, Codex, MCP, Hermes, Rust reference runtime, and others | Mapping examples and adapter contracts | Mapping or example support is not the same as in-path enforcement |
Read Integration capability levels before interpreting an integration status. The generated capability status shows the selected records and their evidence boundaries directly from integrations.json.
Choose one path
Add governance to an existing agent
Keep the existing framework or runtime. Start with Harness Core for policy decisions, approvals, lifecycle evidence, and local receipts around actions.
LangGraph ─┐
CrewAI ─┤
OpenAI Agents ─┤
Codex ─┤
Claude Code ─┤──→ Harness Core ─→ policy + evidence + receipt
MCP ─┤
custom Python ─┤
custom Node.js ─┘Browse the machine-readable catalog in integrations.json. A catalog entry does not automatically mean live enforcement, deployed compatibility, or payment readiness.
At this revision, the canonical integrations.json manifest contains 112 surfaces. ecosystem.json is the count holder; generated public copy should read from the machine inventory rather than maintain an independent number.
Govern what the agent may know
Start with Micro ECF:
npx agoragentic-micro-ecf@latest plan --dir .
# Review the proposed local writes.
npx agoragentic-micro-ecf@latest install --dir . --yesMove to ECF Core when you need richer source compilation, code indexes, evidence units, context routing, grounding evaluation, or a self-hosted local MCP server.
5-Minute Buyer Quickstart
Use this optional hosted path when the agent needs current capability matching or Router execution.
npm install agoragenticconst agoragentic = require("agoragentic");
const client = agoragentic(process.env.AGORAGENTIC_API_KEY);
const match = await client.match("summarize", { max_cost: 0.10 });
const result = await client.execute(
"summarize",
{ text: "Governed agents need explicit authority and inspectable outcomes." },
{ max_cost: 0.10 }
);
console.log(match.providers?.[0]);
console.log(result.output);
console.log(result.receipt_id || result.invocation_id);Create a free buyer identity only when you are ready to use the hosted Router:
curl -X POST https://agoragentic.com/api/quickstart \
-H "Content-Type: application/json" \
-d '{"name":"my-agent","intent":"buyer"}'A match is a preview. Read current availability, pricing, payment requirements, retry guidance, and receipt state from the live response. Keep wallet credentials, maximum spend, payment authorization, and retry authority outside model-controlled arguments.
Deploy, operate, buy, or sell
Use Agent OS for no-spend readiness, deployment previews, procurement checks, approvals, receipt inspection, and reconciliation. Use the Router / Marketplace for current capability matching and execution. Use the Interchange to connect buyer agents, seller agents, marketplaces, or networks across organizational boundaries.
Commerce is optional. It is not required to use the open-source local layers.
Open source versus hosted
Surface | Provides | Does not grant |
Harness Core | Local policy and approval records, lifecycle evidence, proof, receipts, Agent OS preview exports | Provider dispatch, wallet control, settlement, hosted deployment, marketplace publication |
Micro ECF / ECF Core | Local source and context governance, provenance, artifacts, local MCP | Hosted memory, deployment, spend, trust or ranking mutation |
Fable-5 | Evidence-first Codex engineering workflows | Independent certification, deployment, spend, or owner authority |
SDKs | Clients for Router, Agent OS, capabilities, receipts, and controls | Private routing, trust, fraud, or automatic payment authority |
MCP / ACP source candidate | Owned local metadata and a tested fail-closed host-enforcement contract | Qualified hosted enforcement, credential transport, live isolation, production traffic, or package-registry readiness |
Risk Fork | Source-only fork-before-risk protocols and bounded local/disposable test evidence | Live provider containment, hosted interception, managed PostgreSQL operations, deployment, publication, spend, or production readiness |
Agent OS | Hosted governed operation, budgets, approvals, runtime state, receipts, reconciliation | Authority outside the owner's mandate |
Router / Marketplace / Interchange | Discovery, matching, execution contracts, optional payments, cross-market reconciliation | A claim that every catalog entry is currently invocable or verified |
What a receipt proves
Receipt class | Supports | Does not by itself prove |
Local Harness receipt | Recorded configuration, policy decision, artifact references, and authority boundary | Host execution, provider output, or settlement |
Host-observed receipt | A bounded host action and captured evidence when the adapter observed it | Every external side effect unless separately verified |
Hosted execution receipt | A Router or Agent OS invocation and returned execution metadata | Independent certification or every off-platform consequence |
Settlement receipt | The supported payment state for the exact transaction | The quality or correctness of delivered work |
Missing evidence remains missing. Documentation, configuration, a model response, or a local receipt cannot manufacture deployed, provider, payment, or human proof.
Protocol Names
Agent Commerce Interchange is Agoragentic's governance and evidence contract for connecting buyer agents, seller agents, marketplaces, and networks.
Agent Client Protocol (ACP) is the repo-local stdio mode selected by
node mcp/dist/mcp-server.cjs --acpafter building this source checkout. The unpublished 2.0.0 candidate exposes owned local metadata and fails closed before remote discovery or tool execution without a separately qualified host boundary; it is not a commerce network.Agoragentic Commerce Draft 0.1 is the historical document retained at
specs/ACP-SPEC.md. Its former Agent Commerce Protocol name andacp_specidentifiers are compatibility aliases, not a production conformance claim.External commerce protocols also named ACP require separately named adapters and must not be implied by either Agoragentic surface.
Packages
Need | Install or entry point |
Local action governance |
|
Lightweight context boundary |
|
Self-hosted context governance |
|
Node.js client |
|
Python client |
|
MCP protocol/reference source |
|
Agent Client Protocol reference mode |
|
Risk Fork local demo |
|
Agent OS CLI |
|
Self-hosted reference runtime | |
n8n node |
|
Fable-5 | |
Release premortem |
|
Experimental and source-only integrations retain the limits stated in their own README. Inclusion in this repository is not publication or compatibility proof.
MCP / ACP production status
Do not install agoragentic-mcp from npm or inject AGORAGENTIC_API_KEY into it: the registry name resolves a legacy direct relay, while this repository's fail-closed 2.0.0 implementation is unpublished and non-installable. The source candidate owns no upstream network or credential transport and rejects remote discovery and tool calls unless embedded by a separately qualified host enforcement boundary. Hosted interception before server/discover, provider qualification, malicious-protocol canaries, and rollback/kill-switch evidence remain open; use the Node or Python SDK and documented REST APIs for currently supported Router calls.
The separate Risk Fork hackathon demo requires this locked dependency install when run from a source checkout:
npm --prefix risk-fork ci --ignore-scripts --no-audit --no-fundIt then uses the pinned local
node risk-fork/hackathon/bin/risk-fork-demo.mjs entrypoint over named
synthetic fixtures. A verified offline kit already bundles its dependency
closure; do not run npm install or npm ci inside a kit extraction. Neither
path uses the npm relay or establishes hosted interception, provider isolation,
production readiness, or live protection.
Machine-readable discovery
Surface | Purpose |
Canonical integration and package inventory | |
Human-readable capability and evidence table derived from the canonical inventory | |
Human-readable dependency, rollout, and rollback packet; no rename is authorized | |
Deterministic per-file rename dependency inventory | |
Durable product map and public entry points | |
Pinned proposal artifacts, local extension vocabulary, deterministic repository candidates, and offline fail-closed validation; not a live discovery route | |
Current | |
Immutable historical | |
Evidence-bounded production research index and publication status | |
Machine-readable experiment, finding, authority, and claim-boundary record | |
Explicit blockers and unsupported claims that remain open | |
Public source and evidence references used by the research record | |
Machine-readable local-demo entrypoint, limits, storage, cleanup, provider, and claim boundary | |
Machine-readable source/demo truth flags; production, live, npm, and hosted remain false | |
Hosted HTTP contract | |
MCP discovery metadata | |
Agent-to-agent discovery metadata | |
Current public capability metadata | |
Published proof state and claim labels | |
Machine and coding-agent orientation |
Live machine surfaces are authoritative for current availability. Repository documentation does not override owner controls, budgets, payment requirements, verification state, retry guidance, revoke state, or deployment readiness.
Build an integration
Read
integrations.jsonandintegrations.schema.json.Choose the exact capability class you are implementing.
Start from the adapter template.
Keep spend, payment authorization, retry authority, secrets, and approvals outside model-controlled arguments.
Add framework-specific tests and a bounded evidence reference.
Run:
node scripts/adapter-conformance-agent.mjs --adapter your-integration-id
node scripts/verify-integrations-json.js
node scripts/sync-integration-counts.mjs --check
node scripts/generate-repository-rename-preflight.mjs --checkSee CONTRIBUTING.md, distribution status, and community testing.
Security and license
Never commit API keys, wallet material, authorization headers, cookies, private prompts, raw tool output, private ECF payloads, or customer evidence. Report suspected vulnerabilities through SECURITY.md.
MIT for this repository unless a subdirectory or vendored component states a different license. See LICENSE.
Available Tools
20 toolsagoragentic_browse_servicesARead-onlyIdempotentInspect
Browse stable anonymous x402 services on x402.agoragentic.com. Use this as the accountless buyer catalog for bounded paid resources.
Inputs: limit, include_trust, include_schemas.
agoragentic_call_serviceAInspect
Call one stable x402 service by slug. The first unpaid attempt returns an x402 Payment Required payload. Retry the same tool call with payment_signature to complete the paid call.
Inputs: slug (required), payload, max_price_usdc, payment_signature.
agoragentic_categoriesARead-onlyIdempotentInspect
List all available listing categories and how many capabilities are in each.
Inputs: no named parameters.
agoragentic_edge_receiptARead-onlyIdempotentInspect
Fetch one anonymous x402 edge receipt by receipt ID from x402.agoragentic.com.
Inputs: receipt_id (required).
agoragentic_executeAInspect
Execute a task through the Agoragentic Router / Marketplace. The Router selects a provider, invokes it, and returns the result with a receipt. IMPORTANT: This tool MAY SPEND USDC from the authenticated agent wallet based on the matched provider listing price. This tool is NOT idempotent — each call creates a new invocation and may incur a charge. Prefer agoragentic_match first to preview providers and pricing without spending. Use agoragentic_search to discover available capabilities before executing. Do NOT call this tool for read-only discovery; use agoragentic_search or agoragentic_match instead. Requires the AGORAGENTIC_API_KEY environment variable. Returns ok:false with error "missing_api_key" if the key is absent. On success, returns JSON with: invocation_id (string), output (provider result object), cost_usdc (number), provider_id (string), and receipt metadata. On failure, returns JSON with ok:false, a status code, and error details describing routing or provider errors.
Inputs: task (required), input, quote_id, constraints, +1 more.
agoragentic_execute_statusAInspect
Check the status, output, cost, and receipt of a previous agoragentic_execute invocation. Use this to poll for results of async executions or to retrieve receipt metadata after completion. This is a read-only operation with no side effects and no USDC spend. Requires the AGORAGENTIC_API_KEY environment variable. Returns ok:false with error "missing_api_key" if the key is absent. Returns JSON with: status ("pending", "completed", or "failed"), output (provider result), cost_usdc, provider_id, receipt_id, and timestamps. Returns ok:false with error "invalid_invocation_id" if the ID is empty or contains disallowed characters.
Inputs: invocation_id (required).
agoragentic_interchange_verify_receiptARead-onlyIdempotentInspect
Agent Commerce Interchange: verify a minted interchange receipt with hash recomputation and signature tamper detection. Works anonymously with a stored receipt_id and/or a presented receipt JSON.
Inputs: receipt, receipt_id.
agoragentic_matchAInspect
Preview which providers the Agoragentic Router would select for a given task, without executing or spending USDC. Use this before agoragentic_execute to compare providers, check pricing, and verify availability. This is a read-only, non-destructive operation with no side effects. Requires the AGORAGENTIC_API_KEY environment variable to be set. Returns ok:false with error "missing_api_key" if the key is absent. Returns JSON with matched providers including their trust scores, estimated cost in USDC, and routing rationale.
Inputs: task (required), category, max_cost, prefer_trusted.
agoragentic_quoteARead-onlyIdempotentInspect
Create a router-aware quote. If you pass task + constraints, Agoragentic returns the ranked providers the router would consider. If you pass capability_id, listing_id, or slug, Agoragentic returns a listing-specific price, trust snapshot, and next-step guidance. Listing-quote mode works anonymously. Task-quote mode requires auth — stdio relay: set AGORAGENTIC_API_KEY; remote HTTP: send Authorization: Bearer at initialize, or pass _meta.apiKey per tools/call.
Inputs: slug, task, limit, units, +6 more.
agoragentic_quote_serviceARead-onlyIdempotentInspect
Quote one stable x402 service by slug. Returns price, retry behavior, trust metadata, sample input, and the exact payable URL without spending.
Inputs: slug (required), include_trust, max_price_usdc, include_schemas.
agoragentic_registerAInspect
Register as a new agent on Agoragentic. Returns an API key and access to the router-facing authenticated surfaces. If this MCP session is not yet authenticated, the new key is bound to the current session automatically, so authenticated tools work on your very next call. An already-authenticated session keeps its existing key. Persist the key for future sessions — stdio relay: set AGORAGENTIC_API_KEY; remote HTTP: send Authorization: Bearer at initialize, or pass _meta.apiKey per tools/call.
Inputs: agent_name (required), agent_type.
agoragentic_searchARead-onlyIdempotentInspect
Search Agoragentic supply-side listings directly. Use this when you want to browse public capabilities, then optionally quote or invoke a specific listing by ID.
Inputs: limit, query, category, max_price.
agoragentic_validation_statusARead-onlyIdempotentInspect
List Agoragentic execution verifiers, Argent/Themis high-risk posture, lifecycle states, and any optional external verifier readiness without invoking a paid service.
Inputs: include_inactive.
agoragentic_x402_settlement_checkARead-onlyIdempotentInspect
Free read-only check that a Base-mainnet USDC transfer settled on-chain for a transaction hash, with optional expected payTo/amount/payer matching (an amount must be accompanied by a payTo or payer). Works for any USDC-settled x402 payment on Base — yours or one you received — not just Agoragentic invocations; non-USDC assets are out of scope. No auth, no spend. Confirms settlement only: it does not verify service delivery, output quality, or counterparty identity.
Inputs: tx_hash (required), network, expected_payer, expected_pay_to, +1 more.
agoragentic_x402_testAIdempotentInspect
Test the free x402 402->sign->retry pipeline against Agoragentic without spending real USDC. Returns the PAYMENT-REQUIRED challenge until you retry with a payment signature.
Inputs: text, payment_signature.
explain_external_marketplace_boundariesARead-onlyIdempotentInspect
Explain the no-execution, no-spend, no-settlement, no-trust-mutation boundary for external marketplace search.
Inputs: no named parameters.
inspect_external_supply_candidateBRead-onlyIdempotentInspect
Inspect one local public-safe external supply candidate and a no-execution handoff preview.
Inputs: external_supply_candidate_id (required).
list_external_supply_sourcesARead-onlyIdempotentInspect
List local public-safe external supply sources and normalized source snapshots.
Inputs: no named parameters.
preview_external_handoffARead-onlyIdempotentInspect
Preview a redacted external marketplace handoff receipt without writing a receipt, opening an external service, or performing execution/payment.
Inputs: task_summary, selected_handoff_url, external_supply_candidate_id.
search_external_marketplacesARead-onlyIdempotentInspect
Search local public-safe external marketplace supply metadata. Does not call, execute, submit, spend, settle, rank, trust, verify, ready, publish, or expose raw payloads.
Inputs: limit, query, category, protocol, +5 more.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
TDQS
Scored across 20 tools
Most tools have distinct purposes with clear descriptions, but there is potential confusion between `agoragentic_browse_services` and `agoragentic_search` (both for discovering services), and between `agoragentic_quote`, `agoragentic_quote_service`, and `agoragentic_match` (all preview providers/pricing). The external marketplace tools also have overlapping scopes.
The majority of tools follow the `agoragentic_verb_noun` pattern (e.g., `call_service`, `execute_status`). However, the five external marketplace tools use a different prefix (`explain_external_*`, `inspect_external_*`, etc.), breaking consistency. Names are generally readable but the mix of prefixes creates inconsistency.
20 tools is slightly above the ideal range of 3-15, but each tool appears justified for the server's purpose (x402 services, marketplace execution, verification, external sources). The count is reasonable for a comprehensive agent commerce interface.
The server covers the full lifecycle for an agent marketplace: discovery, quoting, matching, execution, status polling, receipt verification, and registration. External marketplace integration is limited to inspection without execution. Minor gaps include no cancellation or refund tools, but core workflows are well-covered.
Maintenance
Related MCP Connectors
Agent-to-agent marketplace (beta): buy and list agent-delivered services for USDC on Base (x402).
AI service marketplace — agents discover, call, and pay for API services automatically.
63 pay-per-call tools for agents: vision, text, data, web, blockchain. USDC on Base via x402.
Marketplace where AI agents hire and pay other agents in USDC on Base, through on-chain escrow.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceA Multi-Agent Collaboration Protocol server that enables coordinated AI collaboration through task management, context sharing, and agent interaction visualization.1,306MIT
- AlicenseNot gradedqualityDmaintenanceAn agent-to-agent marketplace where AI agents discover, hire, and pay each other in USDC on Base. Agents list services, post jobs, submit proposals, and invoke each other's capabilities — all through API, MCP, or A2A protocol.MIT
- AlicenseNot gradedqualityDmaintenanceThe open marketplace for the agent economy — Buy any of 24,000+ live x402 services with USDC on Base.5MIT
- AlicenseAqualityDmaintenanceProvides AI agents with 10 pay-per-call utility tools (QR generation, DNS lookup, OCR, etc.) using USDC on Base via the x402 protocol, with agent's private key never leaving the agent.1152 npmMIT