alexar76/argus

> canonical AI-Factory monorepo. History here is append-only (no force-push).
> **Pull requests are welcome** — merged PRs are imported back into the monorepo
> and re-synced here, so your contribution becomes canonical.
> 💬 **Issues** · **Pull requests** both welcome.
ARGUS-3 — MCP server
> **0.3.3:** requires @aimarket/warden@0.8.1 or later. MCP servers are checked before launch and before every call; list-change notifications quarantine tools immediately. Changed definitions, and pins taken before 0.3.2, need a reviewed re-approval: argus warden pins status / argus warden pins approve ; the first clean connection keeps the automatic first-pin policy. Pin write failures close the connection. Publish Warden first, then ARGUS. Migration: EN · RU · ES · FR · ZH.
> 🌐 **English** · Русский · Español · Français · 中文 · Glossary
**One MCP server. WARDEN-hardened agent. Wallet optional.**
Transport: **stdio** (argus mcp). Built with the official
**Model Context Protocol** TypeScript SDK (@modelcontextprotocol/sdk).
Compatible hosts: Claude Desktop, Cursor, Glama, and any MCP client that supports stdio servers.
| Item | Location |
|------|----------|
| MCP entrypoint | argus mcp → src/channels/mcp_server.ts |
| Tools | argus_ask, argus_status, argus_capabilities |
| WARDEN firewall | docs/security-warden.md |
| Glama / Docker (stdio) | Dockerfile.glama, glama.json |
Part of the AICOM open agent economy.
**Live demo:** magic-ai-factory.com/argus/ · **Community:** Discord · Pollux · Telegram · Castor
Live landing
·
WARDEN firewall
·
Install
·
Wiki
**MCP firewall first — wallet optional.** ARGUS-3 vets every third-party MCP server through **WARDEN** (static scan → threat feed → origin → def-pinning) before a single tool runs. Crypto, wallet, and on-chain economy are **off by default**.
*(short name **ARGUS** · CLI: argus · npm: **argus-warden** · scoped: @alexar76/argus3)*
> **Why "ARGUS-3"?** In the myth, **Argus Panoptes** — the hundred-eyed watchman —
> was unbeatable until **Hermes** talked him to sleep and slew him. ARGUS-3 is the
> watchman that *doesn't* fall for Hermes: a hundred eyes open (WARDEN), frugal to a
> fault, immune to smooth-talking competitors.
>
> Third time's the watchman. 👁️
ARGUS is the **demand-side reference client** the agent economy was missing. The
ecosystem already has producers (the Factory 🏭), a broker (the Hub 🛒), pricing
(ACEX 📈), trust math (the LUMEN oracle 🔮) and observability (the Monitor 👽).
What it lacked was a first-class agent an ordinary person runs — one that
**discovers, pays for, consumes and sells** capabilities. That's ARGUS.
It is built on two stack layers that generic MCP clients typically lack:
1. **🛡️ WARDEN** — an MCP security firewall that vets third-party servers before
their tool definitions ever reach the model: a tiered static scan, a signed
threat feed, an origin check, and tool-def pinning against rug-pulls. Every
gate decides from what ARGUS already holds locally.
**Works with no wallet and no chain.**
2. **💸 Native settlement** *(optional)* — pay per-call and get paid in USDC on Base
through AIMarket escrow when you enable crypto and connect a wallet.
…and it stays frugal (a hard budget governor + live token meter — no
self-reflection on your dime), speaks **any model** (Anthropic, OpenAI-compatible,
Chinese, local), and — critically — **runs fully autonomously when the economy is
unavailable.** No wallet, no network to AICOM? It's still a best-in-class local,
MCP-secured assistant.
> ### 🔒 Crypto is OFF by default
> **A blockchain is not required to run ARGUS-3.** Wallet, lottery, ACEX, paid
> invokes, and on-chain settlement are **disabled by default** and turn on only
> when you set **ARGUS_CRYPTO_ENABLED=1** (plus a wallet). Out of the box you get
> the full agent — WARDEN, any model, memory, channels, and **free off-chain oracle
> reads** — with no chain, no token, no wallet, no custody. Crypto is opt-in.
---
Why ARGUS is different
| | What it does | Why it matters |
|---|---|---|
| 🛡️ **WARDEN firewall** | Every MCP server is vetted by a gate chain — static tool-def scan → threat feed → **origin** → def-pinning — before a single tool runs. | Tool-poisoning, rug-pulls (def drift), exfiltration and credential harvesting are blocked *by default*. Every gate decides from data ARGUS already holds locally, so vetting needs no network and nothing can talk the verdict out of it. |