evidiq-aegis-mcp

<p align="center"> <img src="https://raw.githubusercontent.com/evidiq/evidiq-aegis-mcp/main/logo.png" width="200" alt="EVIDIQ Aegis" /> </p> <h1 align="center">EVIDIQ Aegis</h1> <p align="center"><strong>Is this transaction safe to authorize under financial policy?</strong></p> <p align="center"> Autonomous financial policy engine, budget limits, velocity controls, escrow validation, and x402 settlement risk manager for AI agent fleets. </p> <p align="center"> <a href="https://evidiq.dev">evidiq.dev</a> &middot; <a href="https://evidiq.dev/docs/aegis">Aegis Docs</a> &middot; <a href="https://mcp.evidiq.dev/aegis/skill.md">Agent Skill</a> &middot; <a href="https://github.com/evidiq/evidiq">EVIDIQ Main</a> &middot; <a href="https://github.com/evidiq/evidiq-aegis-mcp">Aegis MCP</a> </p> <p align="center"> <a href="https://mcp.evidiq.dev/aegis/mcp"><img src="https://img.shields.io/badge/MCP%20Server-Live-6E56CF?style=flat-square" alt="MCP Server live" /></a> <a href="https://evidiq.dev/docs/aegis"><img src="https://img.shields.io/badge/Financial-Policy%20%2B%20Velocity%20%2B%20Escrow-0284C7?style=flat-square" alt="Financial Policy Guard" /></a> <a href="https://www.oklink.com/xlayer"><img src="https://img.shields.io/badge/X%20Layer-USDT0-3CCF4E?style=flat-square" alt="X Layer USDT0" /></a> <a href="https://mcp.evidiq.dev/aegis/x402"><img src="https://img.shields.io/badge/x402-0.005%E2%80%930.03%20USDT0-2563EB?style=flat-square" alt="x402: 0.005 to 0.03 USDT0" /></a> <a href="https://web3.okx.com/onchainos/dev-docs/payments/service-seller-sdk"><img src="https://img.shields.io/badge/Payments-Official%20OKX%20SDK-121212?style=flat-square&logo=okx&logoColor=white" alt="Official OKX Payment SDK" /></a> <a href="https://www.okx.ai/agents/10367"><img src="https://img.shields.io/badge/OKX.AI-Agent%20%2310367%20Listed-121212?style=flat-square&logo=okx&logoColor=white" alt="OKX.AI Agent 10367 listed" /></a> <a href="./LICENSE"><img src="https://img.shields.io/badge/License-MIT-3DA639?style=flat-square" alt="License: MIT" /></a> </p> --- As autonomous AI agents pay, hire, and settle contracts with zero human in the loop, unconstrained budget spending and unvalidated financial parameters pose critical existential risks. An agent loop executing runaway API requests or releasing escrow funds without verifying deliverable checksums can drain wallet reserves in seconds. **EVIDIQ Aegis is the autonomous financial policy engine and budget guard for AI agent fleets.** It evaluates payment payloads, budget velocity caps, escrow release terms, and slippage inflation before money or data moves — returning structured risk verdicts and EIP-191 signed attestations. > **Launch status: live endpoint.** The MCP server is deployed at `https://mcp.evidiq.dev/aegis/mcp`, paid calls settle through the official OKX Payment SDK, and the OKX.AI listing (**Agent #10367**) is now listed. **Aegis never holds agent private keys, never custody funds, and operates with zero model in the verdict path.** --- ## Position in the family | Service | Question | Boundary against Aegis | | --- | --- | --- | | Core | Can I trust this agent? | Counterparty risk before work. Aegis guards financial transactions. | | Notary | Can I prove this output happened? | Provenance of an output. Aegis enforces policy rules. | | Operator | Can an agent act in a browser? | Browser execution; Aegis guards payment velocity & budget caps. | | Sentinel | Is this MCP safe? | Scans service endpoints. Aegis enforces transaction financial policy. | | Atlas | What does this dataset say? | Analyses data. Aegis checks spending limits and escrow release. | | Lineage | Is this dependency trustworthy? | Supply chain. Aegis guards financial parameters. | | Vault | What did the agent do? | Records history. Aegis provides signed financial attestations. | | Redact | Is this content safe to share? | Sensitive values. Aegis verifies financial payment payloads. | | Warden | Is this code safe to commit? | Source code quality. Aegis verifies payment transactions. | | Assay | What will this transaction do? | Pre-signature intent. Aegis enforces spending velocity & escrow terms. | | Rubric | Does this deliverable meet the contract? | Deliverable criteria. Aegis validates financial release terms. | | Bastion | Is this deployment config safe to apply? | Infrastructure config. Aegis guards financial policy. | | **Aegis** | **Is this transaction safe to authorize under financial policy?** | **Autonomous financial policy engine & budget guard.** | --- ## What it does - **Payment Policy Verification** — Evaluates payment payloads against daily budget caps, recipient allowlists, replay nonces, and EVM address sanity. - **Spending Velocity Audits** — Tracks historical spending across 60m, 6h, 24h, and 7d windows to prevent runaway loops. - **Escrow Release Inspection** — Validates escrow terms, deliverable SHA-256 hashes, and provider signatures prior to fund release. - **Slippage & Fee Inflation Guard** — Detects protocol price surges, unexpected gas fee spikes, and slippage bounds. - **Signed Attestation Reports** — Binds evaluation findings into EIP-191 signed cryptographic attestation reports. - **Deterministic Verdicts** — Evaluates rules strictly: failing blocker rules yields `BLOCK`; high risk yields `REVIEW`; clean evaluations yield `PASS`. - **Pay per check** — Five paid policy tools at `0.005–0.03 USDT0`; five preflight and discovery utilities are free. --- ## Route to Aegis when Use Aegis **before executing financial transfers or authorizing escrow releases**: before initiating x402 payments, before transferring EVM tokens, or before settling autonomous contracts. Do **not** send it private keys — ever. Do not route infrastructure configs here (that is **Bastion**), smart contract code is **Assay**, source code is **Warden**, endpoint reachability is **Sentinel**, and action logging is **Vault**. A natural chain: `validate_transfer_params` → `verify_payment_policy` → `audit_spending_window` → `attest_budget_verdict` → `append_record` (Vault). --- ## Use it from any agent ```bash # Read the public Skill document curl -s https://mcp.evidiq.dev/aegis/skill.md # Inspect current x402 pricing discovery curl -s https://mcp.evidiq.dev/aegis/x402 # Connect the remote MCP server (OpenClaw) openclaw mcp add evidiq-aegis --transport streamable-http --url https://mcp.evidiq.dev/aegis/mcp # Connect the remote MCP server (Claude Code) claude mcp add --transport http evidiq-aegis https://mcp.evidiq.dev/aegis/mcp ``` ### Endpoints | Path | Method | Purpose | | :--- | :--- | :--- | | `/mcp` | `POST` | The MCP endpoint (Streamable HTTP). | | `/mcp` | `HEAD` | **402** — answered explicitly so a reachability prober never hangs. | | `/x402` | `GET` | Public pricing discovery listing all ten tools and the v2 challenge. | | `/skill.md` | `GET` | The agent-readable Skill document. | | `/health` | `GET` | Service health & payment gate status. | --- ## MCP tools — five paid, five free Prices are fixed atomic USD₮0 amounts. ### Paid | Tool | Atomic | USDT0 | Description | | :--- | ---: | ---: | :--- | | `verify_payment_policy` | 5000 | 0.005 | Evaluates payment payload against budget velocity, recipient allowlists, replay nonces, and EVM parameters | | `audit_spending_window` | 10000 | 0.010 | Audits wallet spending velocity across 60m, 6h, 24h, and 7d historical windows | | `inspect_escrow_release` | 15000 | 0.015 | Inspects escrow terms, deliverable SHA-256 checksums, and provider addresses before fund release | | `guard_slippage_inflation` | 20000 | 0.020 | Guards against fee inflation, protocol price surges, and slippage spikes on cross-agent transactions | | `attest_budget_verdict` | 30000 | 0.030 | Binds financial policy evaluation findings into an EIP-191 signed cryptographic attestation report | ### Free | Tool | Returns | | :--- | :--- | | `aegis_capabilities` | Engine capabilities, policy profiles, rule catalog, auxiliary checks, and pricing specification | | `validate_transfer_params` | Preflight check for financial transfer payload EVM formatting and address sanity | | `estimate_cost` | Price quotation lookup tool for any Aegis tool | | `verify_aegis_report` | Offline verification tool for Aegis report integrity digests and EIP-191 signatures | | `get_artifact` | Retrieve stored policy reports or default policy specifications | --- ## Proven on-chain Live paid calls against the deployed endpoint completed the full x402 v2 round trip through the official OKX facilitator: | Tool | Amount | Settlement tx | Receipt | Signer | Verified | | :--- | :--- | :--- | :---: | :--- | :--- | | `verify_payment_policy` | `0.005 USDT0` (`5000` atomic) | [`0x6f74549e…96cca86`](https://www.oklink.com/xlayer/tx/0x6f74549eecb4627509f6397db02b8397892c9893d869790006b258b6996cca86) | `0x1` | `0x8a3c7524…ee7D` | `valid:true, digestMatch:true, signatureValid:true` | --- ## OpenClaw Live VPS Status & Execution Proof  ```bash # Probing Aegis capabilities via OpenClaw $ openclaw mcp probe evidiq-aegis ◇ OpenClaw 2026.7.1-beta.5 (b6387af) MCP probe (/root/.openclaw/openclaw.json): - evidiq-aegis: 10 tools (5 Paid, 5 Free) ``` --- ## OKX.AI Marketplace Registration | Property | Value | | :--- | :--- | | **Agent ID** | `#10367` | | **Agent Name** | `EVIDIQ Aegis` | | **Listing Status** | `Listed on OKX.AI` | | **Registration Tx** | [`0x098d13bb4cbb595f778d817cec58625fe3ea9b4dac5fe1fd22d7f5e297688aad`](https://www.oklink.com/xlayer/tx/0x098d13bb4cbb595f778d817cec58625fe3ea9b4dac5fe1fd22d7f5e297688aad) | | **OKX Agent URL** | [https://www.okx.ai/agents/10367](https://www.okx.ai/agents/10367) | | **Communication Addr** | `0xfB9b43aD328c55eF3267c3Ccd262CBfAca89943d` | | **Services Registered** | 10 Services (5 Gated: $0.005–$0.03, 5 Ungated: $0.00) | --- ## Architecture ```mermaid flowchart TB agent["<b>AI agent</b><br/>MCP client"] request{"Tool call<br/>free or paid?"} agent -->|POST /aegis/mcp| request free["Free preflight<br/>capabilities · validate<br/>estimate · verify · get_artifact"] gate["x402 v2 gate<br/>EIP-3009 exact · pay per policy check"] xlayer[("X Layer<br/>USD₮0 · eip155:196")] request -->|free helper| free request -->|paid policy check| gate gate -. verify and settle .-> xlayer subgraph aegis["EVIDIQ Aegis trust boundary"] direction TB parse["1. Payload validator<br/>EVM address & parameter sanity"] engine["2. Policy Engine<br/>budget velocity · allowlists · escrow"] report["3. Canonical report<br/>SHA-256 digest · EIP-191 signature"] artifacts["4. Content-addressed artifacts<br/>report & policy specifications"] parse --> engine --> report --> artifacts end free --> parse gate --> parse response["<b>MCP response</b><br/>verdict + attestation + report"] artifacts --> response classDef client fill:#312e81,stroke:#a78bfa,color:#ffffff,stroke-width:2px; classDef payment fill:#052e16,stroke:#4ade80,color:#ffffff,stroke-width:2px; classDef core fill:#0f172a,stroke:#38bdf8,color:#ffffff,stroke-width:2px; classDef output fill:#4c1d95,stroke:#c4b5fd,color:#ffffff,stroke-width:2px; class agent,request client; class free,gate,xlayer payment; class parse,engine,report,artifacts core; class response output; style aegis fill:#0f172a,stroke:#38bdf8,color:#e0f2fe,stroke-width:2px; ``` --- ## Security boundaries - Aegis evaluates supplied financial payloads and transaction parameters; it never executes arbitrary smart contract transactions or handles wallet keys. - Every policy check runs deterministically against configured rules and historical velocity windows. - Reports are canonicalized before hashing so integrity checks are reproducible across platforms. - EIP-191 signatures prove authenticity and non-repudiation of the attester key. --- ## Self-host Requirements: Node.js `22+` and npm. ```bash npm install npm run build npm start ``` Or run the container: ```bash docker build -t evidiq-aegis-mcp . docker run -d --name evidiq-aegis-mcp -p 3013:3013 --env-file .env evidiq-aegis-mcp ``` Local routes: `POST /mcp` · `GET /skill.md` · `GET /x402` · `GET /health` --- ## Development ```bash npm install # install dependencies npm run build # compile TypeScript to dist/ npm test # run the test suite npm run dev # start local watch server ``` --- ## Links - **Website** — https://evidiq.dev - **Aegis documentation** — https://evidiq.dev/docs/aegis - **Live MCP endpoint** — https://mcp.evidiq.dev/aegis/mcp - **Agent Skill** — https://mcp.evidiq.dev/aegis/skill.md - **x402 discovery** — https://mcp.evidiq.dev/aegis/x402 - **Service health** — https://mcp.evidiq.dev/aegis/health - **OKX.AI Agent #10367** — https://www.okx.ai/agents/10367 - **OKX Payment SDK guide** — https://web3.okx.com/onchainos/dev-docs/payments/service-seller-sdk - **Registration tx** — https://www.oklink.com/xlayer/tx/0x098d13bb4cbb595f778d817cec58625fe3ea9b4dac5fe1fd22d7f5e297688aad - **EVIDIQ main repository** — https://github.com/evidiq/evidiq - **x402 Protocol** — https://x402.org --- ## TypeScript SDK A typed client for the live endpoint lives in [`sdk/index.ts`](sdk/index.ts) — 10 tools (5 free, 5 paid). Free tools answer a bare call; paid tools run the x402 flow automatically (402 challenge → `pay` hook → replay with the `x-payment` header). No key lives in the file. ```ts import { AegisClient } from "./sdk/index.js"; const client = new AegisClient(); // endpoint defaults to https://mcp.evidiq.dev/aegis/mcp // free const caps = await client.callTool("aegis_capabilities", {}); // paid — settle the 402 challenge via the constructor's pay hook, or omit it // to receive a PaymentRequiredError carrying the full x402 v2 challenge const result = await client.callTool("some_paid_tool", { arg: "value" }); ``` The `pay` hook receives the decoded x402 v2 challenge (`{ x402Version, resource, accepts[] }` — payTo, asset, amount) and returns the value for the `x-payment` header, e.g. an EIP-3009 `transferWithAuthorization` settled via the official OKX SDK. Without a hook, paid calls throw `PaymentRequiredError` so the caller can settle however it wants. ## License MIT © 2026 EVIDIQ — see [LICENSE](./LICENSE). Part of the [EVIDIQ](https://github.com/evidiq/evidiq) trust and execution layer for the AI agent economy.