English Français العربية

io.github.Rumblingb/agentpay-sentinel-mcp

السجل الرسمي المالية والمدفوعات

Security guardrails for AI agent payments

الشيفرة المصدرية التوثيق

التثبيت

خطوات التثبيت موجودة في التوثيق أدناه. التوثيق

التوثيق

مأخوذ من ملف README للمشروع على GitHub ويُحدَّث أسبوعيًا. تفتح الروابط على GitHub.

المحتويات
  1. AgentPay Sentinel MCP
  2. What your agent can do
  3. Installation
  4. Tool Reference
  5. Security
  6. Pricing
  7. License

AgentPay Sentinel MCP

A watchdog MCP that validates every agent payment request against all 9 security checks before it executes — catching policy violations, replay attacks, amount tampering, revoked tokens, and budget overruns at call time.

What your agent can do

  • Run a pre-flight audit on any payment transaction before executing it — get PASS or BLOCKED with the specific check that failed
  • Validate token integrity: confirms the SHA-256 hash matches the expected merchant_id:amount binding, catching forged or tampered tokens
  • Enforce budget caps: rejects transactions where current_spend + amount > budget_cap and returns exact remaining budget
  • Check merchant allowlist membership and block purchases in restricted categories
  • Verify token expiry and rate limits before the payment fires
  • Simulate known attack vectors (token forgery, budget overflow, replay, merchant spoof, expiry bypass) and get the specific defense mechanism and detection method for each

Installation

Requires: Python 3.10+, mcp package.

pip install mcp

Claude Desktop — add to ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):

{
  "mcpServers": {
    "agentpay-sentinel": {
      "command": "python",
      "args": ["/absolute/path/to/agentpay-sentinel-mcp/server.py"]
    }
  }
}

Cursor — add to .cursor/mcp.json in your project root:

{
  "mcpServers": {
    "agentpay-sentinel": {
      "command": "python",
      "args": ["/absolute/path/to/agentpay-sentinel-mcp/server.py"]
    }
  }
}

Tool Reference

ToolDescriptionKey params
sentinel_audit_transactionRun all 9 security checks; returns PASS/BLOCKED + SHA-256 audit hashtoken_hash, merchant_id, amount, current_spend, budget_cap (required) · nonce, token_id, approved_amount (enable checks 7–9)
sentinel_revoke_tokenPermanently revoke a token — all future audits with this token_id will BLOCKtoken_id, reason
sentinel_clear_nonceRemove a nonce from the replay store (for legitimate refunds/retries only)nonce
sentinel_verify_chainVerify a sequence of audit hashes forms an unbroken chainaudit_hashes, expected_chain_root
sentinel_threat_modelSimulate any named attack vector; returns severity, defence, and detectionattack_vector, context
All 9 checks run by sentinel_audit_transaction
#CheckWhat it catchesParam
1Token integritySHA-256 hash mismatch — forged tokenstoken_hash
2Budget enforcementSpend exceeding capcurrent_spend, budget_cap
3Merchant allowlistPayment to unlisted merchantallowlist
4Category restrictionPurchase in blocked categoryblocked_categories
5Expiry checkExpired tokenexpires_at
6Rate limitToo many calls per minutecalls_this_minute
7Amount mismatchAgent changed amount after human approvedapproved_amount
8Replay attackSame nonce used twice (file-backed store)nonce
9Revocation evasionAgent using a revoked tokentoken_id

Checks 7–9 activate when the corresponding param is passed. State persists to ~/.sentinel/.

Attack vectors in sentinel_threat_model

token_forgery · budget_overflow · replay_attack · amount_mismatch · revocation_evasion · merchant_spoof · expiry_bypass

Security

sentinel_audit_transaction returns an advisory verdict — it does not intercept network traffic. Your agent is responsible for calling it before executing a payment and halting on BLOCKED. The audit hash returned is a SHA-256 digest of all check results, giving you a tamper-evident record of each pre-flight decision.

Pricing

PlanPriceIncluded
Free$050 audits/month
Pro$19/monthUnlimited audits + threat model simulations

Upgrade to Pro

License

MIT — AgentPay Labs. Source: github.com/Rumblingb/agentpay-sentinel-mcp

الأسئلة الشائعة

ما هو io.github.Rumblingb/agentpay-sentinel-mcp؟

Security guardrails for AI agent payments

كيف أثبّت io.github.Rumblingb/agentpay-sentinel-mcp؟

اتبع خطوات التثبيت في توثيقه المعروض في هذه الصفحة وفي مستودعه.

هل io.github.Rumblingb/agentpay-sentinel-mcp مفتوح المصدر؟

نعم. شيفرته متاحة على GitHub بترخيص MIT.

من يصون io.github.Rumblingb/agentpay-sentinel-mcp؟

ينشره Rumblingb. يدرجه AI.tn لكنه لا يصونه ولا يوصي به.

من سجل MCP الرسمي. الإدراج ليس توصية: راجع شيفرة الخادم وصلاحياته قبل منحه الوصول إلى بياناتك.