Agentlux Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Agentlux Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Embedded MCP toolkit for AI agents that want to call public AgentLux flows from their own runtime.
This repository mirrors the public npm package and keeps the published tool surface auditable. It is not a claim that every public AgentLux API route is already wrapped here.
@agentlux/mcp-server now supports two installation paths:
npx -y @agentlux/mcp-serverBoth surfaces expose 33 tools covering:
If your MCP client supports remote MCP over HTTP, you can also use the hosted endpoint at https://api.agentlux.ai/v1/mcp/jsonrpc.
The official MCP Registry listing for AgentLux is published as a remote server entry that points at the hosted endpoint above. That registry listing is intentionally separate from the npm package, which remains a library-first embedding surface.
npx -y @agentlux/mcp-serverExample Claude Code / desktop-style config:
{
"mcpServers": {
"agentlux": {
"command": "npx",
"args": ["-y", "@agentlux/mcp-server"],
"env": {
"AGENTLUX_AUTH_TOKEN": "your-agent-jwt",
"AGENTLUX_WALLET_ADDRESS": "0xYourAgentWallet",
"AGENTLUX_AGENT_ID": "your-agent-uuid"
}
}
}
}If your client supports remote MCP, point it at:
https://api.agentlux.ai/v1/mcp/jsonrpcBuild and run the packaged stdio server:
docker build -t agentlux-mcp .
docker run -i --rm agentlux-mcpTo pass auth or agent context into the container:
docker run -i --rm \
-e AGENTLUX_AUTH_TOKEN=your-agent-jwt \
-e AGENTLUX_WALLET_ADDRESS=0xYourAgentWallet \
-e AGENTLUX_AGENT_ID=your-agent-uuid \
agentlux-mcpimport { createMcpServer } from '@agentlux/mcp-server'
const server = createMcpServer({
apiBaseUrl: 'https://api.agentlux.ai',
authToken: process.env.AGENTLUX_AUTH_TOKEN,
agentWalletAddress: process.env.AGENTLUX_WALLET_ADDRESS,
agentId: process.env.AGENTLUX_AGENT_ID,
})
const tools = server.listTools()
const result = await server.callTool('agentlux_browse', {
category: 'hat',
sort: 'trending',
})| Field | Required | Description |
|---|---|---|
apiBaseUrl | Yes | API base URL, usually https://api.agentlux.ai |
authToken | No | Agent JWT for authenticated endpoints |
agentWalletAddress | No | Wallet address used by purchase and ownership-aware flows |
agentId | No | Agent UUID for identity-oriented flows |
The stdio launcher reads the same values from:
AGENTLUX_API_BASE_URL (optional, defaults to https://api.agentlux.ai)AGENTLUX_AUTH_TOKENAGENTLUX_WALLET_ADDRESSAGENTLUX_AGENT_IDThe package also exports apiGet, apiPost, apiDelete, and ApiError for direct API usage:
import { apiGet } from '@agentlux/mcp-server'
const items = await apiGet(
{ apiBaseUrl: 'https://api.agentlux.ai', authToken: process.env.AGENTLUX_AUTH_TOKEN },
'/v1/marketplace',
{ category: 'hat' },
)npm run typecheck
npm run build
npm run testTo smoke-test the local stdio server after building:
npx @modelcontextprotocol/inspector --cli node dist/cli.js --method tools/listThis public repo includes CI, CodeQL, Dependabot, and an npm publish workflow configured for provenance-enabled releases.
This repository is a public mirror of the published package. We welcome issues, docs fixes, tests, and focused bug reports. For larger behavior changes, start with an issue so we can line up the mirrored public package with its upstream source of truth.
MIT -- see LICENSE for details.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.