# three.ws Provenance

Logs AI assistant actions to an append-only registry with EVM signatures. Useful when verifying delegation history or auditing third-party agents.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI · ★ 249
- Author: nirholas
- License: Apache-2.0 · policy=link-only · description only; the file stays with the author
- Source: https://github.com/nirholas/three.ws/tree/HEAD/packages/provenance-mcp
- Updated: 2026-10-24
- HTML: https://affpapa.org/en/nevibecode/mcp/threews-provenance

## What it does

The server connects an assistant to the three.ws ledger. Every recorded event is append-only, meaning existing logs cannot be overwritten or wiped. When an EVM private key is provided, the server signs the canonical payload using ERC-191 standards so authorship can be proven later.

Three tools handle the interaction. `append_agent_action` submits a new step to the ledger. Reading occurs via `list_agent_actions` with cursor pagination, while `query_action` extracts an entry by ID and runs `ecrecover` to identify the signer. Appending is non-idempotent: repeating the call writes an extra log entry.

Running the package requires Node.js 20 or higher alongside internet reach to `https://three.ws`. Requests fail without a valid `THREE_WS_TOKEN` because ledger access is restricted to the identity owner.

## Requirements
- Needs: Node.js (commands run via npx)
- Environment variables: `THREE_WS_BASE`, `THREE_WS_TIMEOUT_MS`, `THREE_WS_TOKEN`, `THREE_WS_SIGNER_KEY` — keys and tokens: ask the human for the values, never commit them or put them in shared files.

## Install

### Claude Code (native platform)

**Platform CLI**
```bash
claude mcp add --env THREE_WS_BASE=<THREE_WS_BASE> --env THREE_WS_TIMEOUT_MS=<THREE_WS_TIMEOUT_MS> --env THREE_WS_TOKEN=<THREE_WS_TOKEN> --env THREE_WS_SIGNER_KEY=<THREE_WS_SIGNER_KEY> --transport stdio provenance-mcp -- npx -y @three-ws/provenance-mcp
```
Replace <…> with your own values

### Codex

**Platform CLI**
```bash
codex mcp add provenance-mcp --env THREE_WS_BASE=<THREE_WS_BASE> --env THREE_WS_TIMEOUT_MS=<THREE_WS_TIMEOUT_MS> --env THREE_WS_TOKEN=<THREE_WS_TOKEN> --env THREE_WS_SIGNER_KEY=<THREE_WS_SIGNER_KEY> -- npx -y @three-ws/provenance-mcp
```
Replace <…> with your own values

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "provenance-mcp": {
            "command": "npx",
            "args": [
                "-y",
                "@three-ws/provenance-mcp"
            ],
            "env": {
                "THREE_WS_BASE": "<THREE_WS_BASE>",
                "THREE_WS_TIMEOUT_MS": "<THREE_WS_TIMEOUT_MS>",
                "THREE_WS_TOKEN": "<THREE_WS_TOKEN>",
                "THREE_WS_SIGNER_KEY": "<THREE_WS_SIGNER_KEY>"
            }
        }
    }
}
```
Replace <…> with your own values

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "provenance-mcp": {
            "type": "stdio",
            "command": "npx",
            "args": [
                "-y",
                "@three-ws/provenance-mcp"
            ],
            "env": {
                "THREE_WS_BASE": "<THREE_WS_BASE>",
                "THREE_WS_TIMEOUT_MS": "<THREE_WS_TIMEOUT_MS>",
                "THREE_WS_TOKEN": "<THREE_WS_TOKEN>",
                "THREE_WS_SIGNER_KEY": "<THREE_WS_SIGNER_KEY>"
            }
        }
    }
}
```
Replace <…> with your own values

### Gemini CLI

**Platform CLI**
```bash
gemini mcp add -e THREE_WS_BASE=<THREE_WS_BASE> -e THREE_WS_TIMEOUT_MS=<THREE_WS_TIMEOUT_MS> -e THREE_WS_TOKEN=<THREE_WS_TOKEN> -e THREE_WS_SIGNER_KEY=<THREE_WS_SIGNER_KEY> provenance-mcp npx -y @three-ws/provenance-mcp
```
Replace <…> with your own values

## When to use it
- record agent operations in an append-only verifiable registry
- verify cryptographic signatures on actions using `ecrecover`
- inspect an assistant's prior action feed using paginated cursors
- validate that third-party agent records were not modified

## Example prompts
- Check action 10482 for agent `6a7d0f2c-1b3e-4a55-9c88-2d41b0f7e913` using `query_action`.
- Fetch the last 20 records for agent `6a7d0f2c-1b3e-4a55-9c88-2d41b0f7e913` with `list_agent_actions`.
- Record a new `launch` action for agent `6a7d0f2c-1b3e-4a55-9c88-2d41b0f7e913` with `append_agent_action`.

## Similar
- [REA](https://affpapa.org/en/nevibecode/mcp/rea.md) — MCP server · ★ 386989
- [GitHub](https://affpapa.org/en/nevibecode/mcp/github.md) — MCP server · ★ 33918
- [Netdata](https://affpapa.org/en/nevibecode/mcp/netdata.md) — MCP server · ★ 81115
- [browser-use](https://affpapa.org/en/nevibecode/mcp/browser-use.md) — MCP server · ★ 119160
- [Codebase Memory](https://affpapa.org/en/nevibecode/mcp/codebase-memory.md) — MCP server · ★ 47392
- [mcp-server](https://affpapa.org/en/nevibecode/mcp/mcp-server.md) — MCP server · ★ 43872

From the same set: [nirholas/three.ws](https://affpapa.org/en/nevibecode/by/nirholas/three.ws.md) — 43 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md