← Back to search

ARGUS-3 MCP Server

alexar76 Scanned 1d ago

ARGUS-3 stdio MCP (argus_ask, argus_status). WARDEN firewall blocks poisoned MCP servers.

MCP Registry ↗
C
73 / 100

Versions

0.2.4latest
first seen Jul 8, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 9

hub_discover
annotations: none low

Discover paid capabilities on the AIMarket Hub by natural-language intent + budget (USD). Read-only.

hub_invoke
annotations: none low

Invoke (pay for) a Hub capability with USDC on Base. SPENDS money — requires owner approval. Args: capabilityId, input, intent (optional: what the output must accomplish — judged by Pay-on-Verified when enabled).

subcontract_invoke
annotations: none low

Subcontract a sub-task to another agent on the Hub, paid per-call in USDC. Discovers the cheapest CI/trust-ranked capability for the intent within `budget` and invokes it. SPENDS money — requires owner approval. Args: intent, budget (max USD/call), input (optional).

oracle_call
annotations: none low

Call an AICOM oracle capability (verifiable math). Allowed capability_id values:

oracle_random
annotations: none low

Get verifiable randomness from the Platon oracle (platon.random@v1). Use for unbiased choices.

lottery_status
annotations: none low

Read the AI-Agent Oracle Lottery: current round, ticket price (ETH), paused flag, and your wallet's ETH balance.

lottery_buy
annotations: none low

Buy lottery tickets — SPENDS native ETH from your wallet (requires owner approval). Args: count (default 1).

acex_status
annotations: none low

Info on ACEX (AICOM capital market): the Pulse AMM, listing registry, and lending pool addresses, and whether trading is enabled.

acex_trade
annotations: none low

Trade on ACEX (swap USDC↔agent shares). SPENDS USDC — requires approval. DISABLED by default (HIGH-risk).

Permissions 3

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: pathlib
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 44

low
Tool 'hub_discover' has no annotations annotation_checker · 100%
low
Tool 'hub_invoke' has no annotations annotation_checker · 100%
low
Tool 'subcontract_invoke' has no annotations annotation_checker · 100%
low
Tool 'oracle_call' has no annotations annotation_checker · 100%
low
Tool 'oracle_random' has no annotations annotation_checker · 100%
low
Tool 'lottery_status' has no annotations annotation_checker · 100%
low
Tool 'lottery_buy' has no annotations annotation_checker · 100%
low
Tool 'acex_status' has no annotations annotation_checker · 100%
low
Tool 'acex_trade' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.0 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.0 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@2.1.8 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@2.1.8 (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
medium
Buffer.from base64 in alexar76-argus-58a0d27/test/attest.test.ts:91 entropy_analyzer · 75%
medium
Buffer.from base64 in alexar76-argus-58a0d27/test/attest.test.ts:146 entropy_analyzer · 75%
medium
Buffer.from base64 in alexar76-argus-58a0d27/src/verify/index.ts:73 entropy_analyzer · 75%
medium
Buffer.from base64 in alexar76-argus-58a0d27/src/verify/index.ts:83 entropy_analyzer · 75%
medium
Buffer.from base64 in alexar76-argus-58a0d27/src/attest/index.ts:154 entropy_analyzer · 75%
medium
Buffer.from base64 in alexar76-argus-58a0d27/src/attest/index.ts:174 entropy_analyzer · 75%
medium
Buffer.from base64 in alexar76-argus-58a0d27/src/provider/index.ts:81 entropy_analyzer · 75%
medium
Buffer.from base64 in alexar76-argus-58a0d27/src/provider/index.ts:85 entropy_analyzer · 75%
medium
Buffer.from base64 in alexar76-argus-58a0d27/src/sealed/index.ts:167 entropy_analyzer · 75%
medium
Buffer.from base64 in alexar76-argus-58a0d27/src/sealed/index.ts:197 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: hub_discover manifest_parser · 90%
info
Tool: hub_invoke manifest_parser · 90%
info
Tool: subcontract_invoke manifest_parser · 90%
info
Tool: oracle_call manifest_parser · 90%
info
Tool: oracle_random manifest_parser · 90%
info
Tool: lottery_status manifest_parser · 90%
info
Tool: lottery_buy manifest_parser · 90%
info
Tool: acex_status manifest_parser · 90%
info
Tool: acex_trade manifest_parser · 90%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (63) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 70%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 288 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%