Collar Guardrail — Pre-Trade Risk Layer

io.github.aiguardrailPublished by GitHub account aiguardrailv1.0.5Updated Oct 24, 2026

Deterministic pre-trade risk checks for AI agents on Robinhood Chain. Returns allow/warn/deny.

VerifiedStreamable HTTPWeb executableFinanceSecurity & Monitoring

Overview

AI-generated overview

A remote pre-trade risk checkpoint that scores proposed trades on Robinhood Chain and returns allow, warn, or deny with an audit hash.

What you can do
Collar evaluates a proposed trade before execution and returns a deterministic verdict of allow, warn, or deny, with reasons, a 0-100 risk score, and a tamper-evident SHA-256 audit hash. Tools include evaluate_trade for a free Tier 1 check, evaluate_trade_paid for a higher Tier 2 ceiling gated by an on-chain x402 payment, check_token_safety for honeypot and contract checks, simulate_balance for read-only balance simulation, get_supported_assets for the asset registry, and verify_audit_trail for hash-chain integrity. Checks cover oracle prices, market hours, tier limits, slippage bounds, and contract-safety signals; a danger-level honeypot finding forces a deny.
When to use it
Worth adding when an autonomous or semi-autonomous agent proposes trades on Robinhood Chain and you want a deterministic, auditable gate before execution rather than a probabilistic guess. Also useful for token safety screening and for verifying past decisions through the audit trail.
Requirements
Remote streamable-http endpoint; no local runtime, package, or API key is declared. The manifest declares no authentication, and the README states auth is none at a fixed Tier 1. The paid tool requires an on-chain x402 payment in USDG on Robinhood Chain as its credential. Network access to the provider's API is required.
Before you install
The server gates real trading decisions and its deny verdict is a hard stop, so a wrong or unavailable verdict can block or permit trades. evaluate_trade_paid spends money: 0.10 USDG per call on Robinhood Chain, settled on-chain. The README notes JWT authentication via EIP-191 wallet signature for the REST API and wallet connection support, so wallet-related credentials may be involved. The provider issues its own COLR token and is independent of Robinhood; treat the risk score and audit hash…

Installation

In SourceWeft

  1. Open Collar Guardrail — Pre-Trade Risk Layer in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.aiguardrail%2Fbackend/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "collar-guardrail-pre-trade-risk-layer": {
      "type": "http",
      "url": "https://api.collarguardrail.com/mcp-http/mcp"
    }
  }
}

README

Collar Guardrail

Deterministic pre-trade risk layer for AI agents on Robinhood Chain.

Collar evaluates proposed trades before execution and returns allow / warn / deny with reasons, a 0–100 risk score, and a tamper-evident SHA-256 audit hash.

[MCP Registry] [License: MIT]

Overview

Collar sits between an autonomous trading agent and the chain as a deterministic pre-trade checkpoint. Every proposed trade is scored against live oracle prices, market-hours rules, tier-based limits, slippage bounds, and contract-safety signals before it is allowed to proceed.

The result is a single, auditable verdict — never a probabilistic guess.

Endpoints

  • MCP Server: https://api.collarguardrail.com/mcp-http/mcp
  • MCP Server Card: https://api.collarguardrail.com/.well-known/mcp-server-card.json
  • Agent Card (A2A): https://api.collarguardrail.com/.well-known/agent-card.json
  • x402 Discovery: https://api.collarguardrail.com/.well-known/x402.json
  • Methodology: https://api.collarguardrail.com/methodology.html
  • Live Status: https://api.collarguardrail.com/status
  • Live Latency (p50/p95/p99): https://api.collarguardrail.com/latency.html
  • llms.txt: https://api.collarguardrail.com/llms.txt
  • Live Terminal (UI): https://collarguardrail.com

MCP Transport: streamable-http | Protocol: 2025-06-18 | Auth: none (fixed Tier 1)

Installation

Add to your MCP client config (Claude Desktop, Cursor, VS Code):

json
{  "mcpServers": {    "collar-guardrail": {      "url": "https://api.collarguardrail.com/mcp-http/mcp"    }  }}Verify:
bashcurl -X POST https://api.collarguardrail.com/mcp-http/mcp \  -H "Content-Type: application/json" \  -H "Accept: application/json, text/event-stream" \  -d '{"jsonrpc":"2.0","method":"tools/list","id":1}'Available ToolsTool	Purposeevaluate_trade	Pre-trade risk check at fixed Tier 1 ($5,000 ceiling). Returns allow / warn / deny with reasons and audit hash. Honeypot findings (severity=danger) force a DENY.evaluate_trade_paid	Same as evaluate_trade, gated by an x402 payment. Evaluated as Tier 2 ($25,000 ceiling). Call without payment_proof to receive the challenge; settle on-chain; retry with the proof.check_token_safety	Honeypot / contract safety check for any ERC-20. When severity=danger, evaluate_trade auto-DENYs.simulate_balance	Read-only balance simulation via eth_call state overrideget_supported_assets	Official Robinhood Chain asset registryverify_audit_trail	Verify the hash-chain integrity of past decisionsCall get_supported_assets first to resolve a symbol to its canonicalcontract address. A mismatched address is treated as a fake-token attemptand denied.
The free evaluate_trade is capped at Tier 1 ($5,000). If you need Tier 2($25,000) without holding COLR, use evaluate_trade_paid — the on-chainx402 payment is the credential.
CapabilitiesPricing
Chainlink oracle prices for 34+ Stock Tokens on Robinhood Chain
Uniswap V4 fallback when the oracle is stale, paused, or unconfigured
No fabricated fallback — if neither oracle nor V4 yields a price, verdict is deny
10-second V4 price cache
US Market Hours
Full US holiday calendar with observed-on-Friday/Monday shift
Early close on Thanksgiving Friday and Christmas Eve
Policy Enforcement
Tier system (REST API): 1,000 / 2,500 / 5,000 COLR → $5K / $25K / $100K limits
Per-tier rate limiting
Cluster-based rate limit and daily-loss guard (keyed on wallet fingerprint)
Slippage / MEV guard (hard 500 bps floor)
Idempotency via request_id (5-minute cache)
Global kill switch, contract mismatch detection, per-wallet blocklist
Contract Safety
Honeypot detection: bytecode scan, owner check, sell simulation via eth_call
Auto-DENY: when severity=danger, the verdict is deny regardless ofother checks — a hard stop.
GoPlus intelligence for unregistered tokens (buy/sell tax, mintable,proxy, ownership reclaim).
Excessive tax (buy or sell > 10%) triggers an automatic deny viaGoPlus when allow_unregistered=true is passed to the request.
Auth & Infrastructure
JWT authentication via EIP-191 wallet signature (REST API)
Auth rate limiting per IP (20 req/min)
WalletConnect v2 + EIP-6963 wallet discovery
200+ token registry
Hash-chained audit trail (audit_hash + audit_seq)
Observability
Public live status page — uptime, dependency health, known issues
Public latency dashboard — p50/p95/p99 per endpoint and per MCP tool
Public methodology — how the 0–100 score is computed
Public audit-chain verification
Payments (x402)Endpoint: POST /api/x402/analyze
Price: $0.10 USDG per call
Network: Robinhood Chain (eip155:4663)
Discovery: /.well-known/x402.json
Facilitator: Ultravioleta DAO
Listing: x402 Bazaar
No signup, no API key. Registered in the x402 Bazaar for automatic agent discovery.
Response Formatjson{  "decision": "allow",  "reasons": ["price source: oracle", "within tier 1 ceiling"],  "tier": 1,  "max_trade_usd": 5000,  "calculated_notional_usd": 1452.30,  "price_usd": 145.23,  "price_source": "oracle",  "risk_score": 12,  "audit_hash": "sha256:...",  "audit_seq": 12345,  "daily_pnl_usd": 0.0}decision: allow / warn / deny — deny is a hard stop
reasons prefixed with ADVISORY: are non-blocking
price_source: oracle / uniswap_v4 / fallback_default / unavailable
error: if present, no verdict was produced — treat as a hard stop
Discovery Files/.well-known/mcp-server-card.json — MCP tool schemas (canonical, flat)
/.well-known/mcp/server-card.json — alias (nested)
/.well-known/agent-card.json — A2A skills
/.well-known/x402.json — x402 payment resources
/.well-known/methodology.md — risk score methodology (agent-readable)
/.well-known/known-issues.json — public known-issues list
/methodology.html — methodology, human-readable
/mcp-card.html — rendered server card
/agent-card.html — rendered agent card
/latency.html — live latency dashboard
/status — live status page
/llms.txt — full API contract for LLM agents
/skill.md — concise skill index
/robots.txt — AI crawler allow-list
/sitemap.xml — site map
Registry ListingsOfficial MCP Registry: io.github.aiguardrail/backend
Smithery: search "collar"
x402 Bazaar: /api/x402/analyze
DocumentationLive Terminal (UI): https://collarguardrail.com
Agent Integration Guide: https://collarguardrail.com/agent-docs.html
MCP Server Card: https://api.collarguardrail.com/.well-known/mcp-server-card.json
Methodology: https://api.collarguardrail.com/methodology.html
Status: https://api.collarguardrail.com/status
Latency: https://api.collarguardrail.com/latency.html
ContactX (Twitter): @collarguardrail
DisclosureCollar is the risk layer for autonomous finance on Robinhood Chain.Deterministic, auditable, and independent.
COLR is our own utility token, issued and operated by the Collar team.It is not affiliated with, endorsed by, or issued by Robinhood Markets,Inc. or any Robinhood entity. Robinhood Chain is a public blockchain webuild on — using it does not imply any relationship with Robinhood.

Source: README.md at commit 8985c38

Tools

6

evaluate_trade

Evaluate Trade (Free)

Pre-trade risk check for a proposed trade. Call this BEFORE executing any trade and treat a "deny" decision as a hard stop. Evaluated at a fixed Tier 1 ceiling ($5,000 notional). For higher limits, use `evaluate_trade_paid` (Tier 2, $25,000) which settles an x402 payment on-chain.

Parameterssiderequiredassetrequiredamountrequiredwalletrequiredrequest_idcontract_addressrequiredmax_slippage_bps

evaluate_trade_paid

Evaluate Trade (x402 Paid, Tier 2)

Pre-trade risk check gated by an x402 payment. Evaluated as COLR Tier 2: $25,000 notional ceiling, 10/25 per-minute rate limits. No COLR holdings are required — the on-chain payment is the credential. FLOW ---- 1. Call WITHOUT payment_proof → the tool returns a `PaymentRequiredOutput` describing the on-chain payment (network, asset, amount, payTo, resource). 2. Settle the payment on-chain using an x402-capable client. The facilitator returns a proof string. 3. Call again with `payment_proof=<proof>` → the tool forwards the proof to the guardrail's x402-paid endpoint and returns a full `EvaluateTradeOutput` with `tier=2`.

Parameterssiderequiredassetrequiredamountrequiredwalletrequiredrequest_idpayment_proofcontract_addressrequiredmax_slippage_bps

check_token_safety

Check Token Safety

Honeypot / contract safety check for any ERC-20 token. Returns a severity classification (safe / warn / danger), the specific risk factors detected, and the result of a simulated sell. When severity=danger, the next `evaluate_trade` for the same contract is automatically denied regardless of any other checks. This is a heuristic bytecode + simulation check, not a formal audit. Use it before trading unknown tokens, memecoins, or any contract that is absent from the official Robinhood Chain registry. It is safe to call repeatedly; no transaction is ever sent.

Parameterscontract_addressrequired

simulate_balance

Simulate Balance

Simulate a wallet's ERC-20 balance after a hypothetical trade using eth_call state override. Read-only: no transaction is ever sent.

Parametersdeltarequiredholderrequireddecimalstoken_addressrequired

get_supported_assets

Get Supported Assets

List every asset in the guardrail's official Robinhood Chain registry, with its canonical contract address.

Takes no parameters.

verify_audit_trail

Verify Audit Trail

Verify the tamper-evident audit trail for a wallet's past guardrail decisions.

Parameterslimitwalletrequired

Version history

4
  1. v1.0.5LatestOct 6, 2026
  2. v1.0.4Sep 19, 2026
  3. v1.0.3Sep 18, 2026
  4. v1.0.2Sep 17, 2026

Score

100% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts