Agent Wormhole MCP Server

Integration guide: payment safety, policy, confirmed top-ups and launch attestations. It runs locally over stdio via the published package.

People who work with agent security, llm agents and prompt injection and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in Python.

VERIFIED ACTIVE

LAST COMMIT 2026-09-15 · ★ 3 · #46 OF 204 MAINTAINED SECURITY · VERIFIED 2026-09-18

Apache-2.0 · Python servers · how we verify → /methodology

01 · Install Agent Wormhole

before you install - you'll need

WORMHOLE_API_KEY

Environment variables documented in the project's README - it lists which are required and which have defaults.

Claude Code

claude mcp add runningoffcode-agent-wormhole -- npx -y wormhole-x402

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "runningoffcode-agent-wormhole": {
      "command": "npx",
      "args": [
        "-y",
        "wormhole-x402"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

repo age created 2026-07-25 - young repo, little track record yet

license Apache-2.0 - declared in the repository

npm package wormhole-x402 - unscoped; check the name against the project README before installing

registry namespace io.github.runningoffcode is GitHub-verified and matches the repo owner

03 · What Agent Wormhole can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v0.1.2 · 2026-07-26

On-chain memos: a permissionless injection channel · New wormhole memos command and readguard coverage for the one inbound channel that requires nothing of the agent. · Every other vector needs the agent to go…

x402-v0.1.3 · 2026-07-26

Security hardening from the post-launch review, plus first-class facilitator support. · Closed bypasses · guardSigner now guards every signing method a wallet exposes - signAllTransactions, signAndSendTransaction, and…

v0.1.1 · 2026-07-26

Two packages, one thesis: an agent obeys instructions it did not write, so the places those instructions live need integrity checks. · wormhole-guard (PyPI, Python 3.8+, zero dependencies) - integrity monitoring and…

04 · Who maintains Agent Wormhole

Agent Wormhole is maintained by runningoffcode. It's the only MCP server we track from this author; the repo dates to Jul 2026.

05 · Facts

repository: github.com/runningoffcode/agent-wormhole
website: https://agentwormhole.com/
category: security - ranked #46 of 204 actively-maintained security servers as of 2026-09-18.
release cadence: 3 releases in the last 90 days (latest 2026-07-26)
registry: io.github.runningoffcode/wormhole-x402 (active, first published 2026-09-04 · 2 versions)
packages: npm:wormhole-x402

06 · Agent Wormhole FAQ

What is Agent Wormhole?

Integration guide: payment safety, policy, confirmed top-ups and launch attestations. It runs locally over stdio via the published package.

Is Agent Wormhole still maintained?

Yes - as of 2026-09-18, its last commit was 2026-09-15 and it shipped 3 releases in the last 90 days. We re-verify nightly.

How do I install Agent Wormhole?

Run `npx -y wormhole-x402`. The README documents one environment variable (WORMHOLE_API_KEY) to set first. You can also paste the ready-made client config above.

Does Agent Wormhole run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Agent Wormhole

Alternatives to Agent Wormhole

Maintained security servers if Agent Wormhole isn't the fit.

Pairs well with

Servers that cover what Agent Wormhole doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · Audit · Code Sentinel · Sand Base · SAS Viya

More Python MCP servers · Orchestrator · Xlsx Tools MCP · Hermes Grocy MCP · wallabag MCP · Cronometer API MCP · see all