$THREE Token

Unverified

NPM@three-ws/three-token-mcp

FRisk gradecritical blast radius

Catalogue entry updated 12 days ago

Auth postureNot probedno remote endpoint probed yet

Tools31 Destructive · 2 Read

Worst categoryDestructivegrade tracks the peak, not the average

Capability mix

Destructive 1Read 2

What it can reach

Ingests untrusted inputTouches secretsReaches networkRuns codeTouches filesChanges permissionsSends external commsPersistsDeletes dataMoves money

Tools 3

Change history

No change history on record for this server.

Recommended policy

three_burndeny

Read-only toolsallow

This record as markdown: /tools/io-github-nirholas-three-token-mcp.md — append .md to any tool or server page.

// RUNNING THIS SERVER

DIRECT INSTALL npx -y @three-ws/three-token-mcp

Installed this way, nothing enforces the recommended policy above — calls run exactly as the agent makes them.

// LOOK UP ANOTHER SERVER

Every MCP server has a record like this.

Type a name, get the same breakdown: verified identity, auth posture, risk grade, capabilities, recommended policy.

Teams ship this data inside their own products. See what a licence covers →