ARGUS-3 is a wallet-native, security-hardened personal AI agent, positioned as a demand-side reference client and also the reference host for the WARDEN MCP firewall. It is built on the official Model Context Protocol TypeScript SDK and can run as an MCP server (stdio transport), compatible with stdio-capable MCP clients such as Claude Desktop, Cursor, and Glama.
Main capabilities:
- WARDEN MCP firewall: inspects third-party MCP servers before startup and before every invocation, defending against threats such as injection, data exfiltration, secret collection, and hidden Unicode through layered static scanning, signed threat feeds, provenance checks, and tool definition pinning. Changes to tool definitions trigger quarantine and require re-approval.
- Multi-provider model routing: supports Anthropic, OpenAI-compatible, Chinese models, and local models, allocated across triage/core/heavy tiers, with automatic fallback when keys are missing.
- Autonomous offline operation: can run as a local MCP security assistant without a wallet or network, with the economic layer disabled by default.
- Optional economic integration: after enabling cryptocurrency and connecting a wallet, pay-per-call and receiving payments via AIMarket escrow in USDC (Base chain) are possible.
- Multi-channel support: CLI, Telegram, HTTP server, and MCP server, with Docker deployment.
- Agent Arena gamification: tracks real economic activity through XP, levels, streaks, quests, and badges, with support for share cards and an optional global leaderboard.
Usage:
- Install via an interactive wizard (about 2 minutes), or install from npm: npx argus-warden --help.
- Run argus chat or argus serve.
- As an MCP server: argus mcp, configured in the mcpServers of Claude Desktop/Cursor.
- Configuration files: argus.config.json (non-secret configuration) and .env (secrets such as API keys and wallet keys).
Use cases:
- Individual users who need to safely use third-party MCP servers.
- Developers who want to participate in the AI agent economy and buy and sell capabilities.
- Scenarios that require multi-model routing and autonomous offline operation.Limitations:
- Cryptocurrency features are disabled by default and require setting ARGUS_CRYPTO_ENABLED=1 and connecting a wallet.
- Some features (such as LUMEN trust scoring, OS-level MCP sandboxing, and the signed threat feed publisher) are not yet implemented or are part of the v2 roadmap.
- The repository is a read-only mirror and does not accept pull requests.
- Specific fees, prices, and platform support details are not currently provided.
