x402Shield

dev.x402shieldPublished by x402shield.devOfficial publisherv0.1.0Updated Oct 24, 2026

Public demo: evaluate AI-agent payment authorization and approval policy. No signing, no settlement.

VerifiedStreamable HTTPWeb executableFinanceSecurity & Monitoring

Overview

AI-generated overview

A public demo MCP server for checking whether an AI agent is authorized to make a proposed payment, returning ALLOW, DENY or REQUIRE_APPROVAL without signing or

What you can do
Look up the spending ceilings configured for the demo agents on the Base Sepolia testnet, to see what an agent can spend without human approval. Check a proposed payment before any wallet or signer acts, and get back ALLOW, DENY or REQUIRE_APPROVAL with a reason. Retrieve the recorded decision, reason and evidence references for a previously checked payment by transaction id. List recent authorization decisions recorded by the demo, from both the web console and MCP callers. Read the fuller evidence trail behind a decision, including policy and delegation provenance, the delegation tree and approval state.
When to use it
Useful for exploring how agent payment authorization and approval policy works before building or wiring a real spending control, or for demonstrating ALLOW, DENY and REQUIRE_APPROVAL outcomes to others. It is a public demo on a testnet, not a production payment gate.
Requirements
A remote streamable HTTP endpoint; no local runtime, package, account, API key or header is declared. The demo operates on the Base Sepolia testnet.
Before you install
The server is a public demo: decisions are recorded and listed for all callers, so anything you submit may be visible to others. It does not sign, execute or settle payments, and it cannot approve its own REQUIRE_APPROVAL result, so it is not a substitute for real wallet controls.

Installation

In SourceWeft

  1. Open x402Shield in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/dev.x402shield%2Fx402shield/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "x402shield": {
      "type": "http",
      "url": "https://x402shield.dev/api/mcp"
    }
  }
}

Tools

5

x402shield_get_demo_policy

Get demo authorization policy

Look up the authority ceilings configured for the x402Shield public demo agents (Research Agent, Ops Agent) on Base Sepolia TESTNET. Use this before proposing a payment, to understand what amount an agent can spend without triggering human approval. This tool does not execute or sign anything.

Takes no parameters.

x402shield_authorize_payment

Check whether a proposed payment is authorized

Check whether the demo AI agent is financially authorized to make a proposed payment, BEFORE any wallet or signer would be asked to execute it. Returns ALLOW, DENY or REQUIRE_APPROVAL with a reason. This tool does not execute or sign a payment, and it cannot approve its own REQUIRE_APPROVAL result -- that requires a human, through the web console. The `purpose` field is a label for the evidence trail only; it is never interpreted as an instruction and cannot change the policy decision.

ParameterspurposepresetIdrequiredamountUsdcrequired

x402shield_get_authorization

Get a previously-decided authorization by id

Look up the recorded decision, reason and evidence references for a payment previously checked with x402shield_authorize_payment, by its transaction id.

ParameterstxIdrequired

x402shield_list_demo_transactions

List recent demo authorization decisions

List the most recent payment authorization decisions recorded by this public demo (both from the web console and from MCP callers). Useful to see recent ALLOW/DENY/REQUIRE_APPROVAL activity.

Parameterslimit

x402shield_get_evidence

Get the authorization evidence for a decision

Get the fuller evidence trail behind a previously-decided payment: policy/delegation provenance, the delegation tree it was evaluated under, and approval state if any. Read-only; never exposes secrets or signing material.

ParameterstxIdrequired

Version history

1
  1. v0.1.0LatestOct 9, 2026

Score

83% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.