three.ws Provenance runs on your own machine — the client starts it, so there is no endpoint to ping. 194 installs a week from npm. Last commit 18 Sep 2026.
Append-only, signed, on-chain-verifiable agent action log — record and audit what agents did.
Today is the operative word: we check three.ws Provenance every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add provenance-mcp -- npx -y @three-ws/provenance-mcp
{
"mcpServers": {
"provenance-mcp": {
"args": [
"-y",
"@three-ws/provenance-mcp"
],
"command": "npx"
}
}
}
[mcp_servers.provenance-mcp]
command = "npx"
args = ["-y", "@three-ws/provenance-mcp"]
{
"mcpServers": {
"provenance-mcp": {
"args": [
"-y",
"@three-ws/provenance-mcp"
],
"command": "npx"
}
}
}
{
"mcpServers": {
"provenance-mcp": {
"args": [
"-y",
"@three-ws/provenance-mcp"
],
"command": "npx"
}
}
}
This one needs environment variables set before it will start:
THREE_WS_BASE (Base URL of the three.ws API that serves the agent-actions ledger. Override only when self-hosting or targeting a preview deployment.), THREE_WS_TIMEOUT_MS (Per-request timeout in milliseconds for the ledger reads/appends.), THREE_WS_TOKEN (Bearer token authenticating every call — a three.ws API key (sk_live_…) or an OAuth access token. The ledger is owner-scoped: you can read and append actions only for agents your token owns. Required for all three tools. Treat like a password.), THREE_WS_SIGNER_KEY (Optional 0x-prefixed EVM private key. When set, append_agent_action ERC-191-signs each action so anyone can ecrecover the signer and verify authorship on-chain. A per-call `signer_key` arg overrides it. Omit to append unsigned. Treat like cash.).
The author declared them in the registry entry; get the values from the project itself.
Verifiable action logs for AI agents. Every action is recorded in a SHA-256 hash chain.
Bitcoin-anchored, tamper-evident audit log for AI agents — record, disclose and verify actions.
Tamper-evident action logging for agents: hash-chained append/verify, one JSONL file, zero deps.
Verifiable cognition: prove a session ledger is tamper-evident; audit & import any agent's logs.
Verifiable crypto signals, recorded history and always-on monitoring for AI agents via x402 on Base.
Watchdog for unattended AI agents: alerts, evidence checks and a verifiable proof per run.
MCP server for Microsoft Entra ID sign-in and audit-log triage (read-only)
Tamper-evident proof creation and verification for AI agents via MCP, A2A, and REST.
Answers built from our own checks of this server.