v1.1.0 · MIT License
Provides trust and commerce checks for agent operators through HTTP x402 and a remote MCP endpoint, enabling clients to inspect x402 quotes, MCP handshakes, and A2A cards and to run paid verification and data tools.
v0.6.1 · Apache 2.0
Read-only checks for money that agents move. verify_receipt: schema, Ed25519 signature, mandate expiry, amount = quantity x unit_price, refund not above payment. audit_spend: duplicate charges, price escalation, failed-but-billed, runaway loops, missing refunds, model overpay, budget breaches - three separate amounts, never one. reserve_report: NAV with an evidence hash per line; refuses a backing
v0.1.0 · MIT License
A free, read-only server that lets users diagnose production AI-agent risks: it flags over-privileged API keys from permission descriptions, scans code snippets for the signals that prevent duplicate execution, and explains guard patterns such as idempotency keys, approval gates, outboxes, and circuit breakers. It makes no network calls or writes, and rejects inputs that look like real secrets.