Countersign

io.github.countersign-networkPublished by GitHub account countersign-networkv0.2.2Updated Oct 24, 2026

Kill switch + spend guard for AI agents that spend money, across every wallet vendor at once.

VerifiedSTDIODesktop onlyFinanceSecurity & Monitoring

Overview

AI-generated overview

MCP tools for a Countersign control plane that lets an assistant pre-check agent spending, freeze all agent wallets at once, and review a hash-chained audit…

What you can do
  • Ask whether a proposed spend is allowed before touching a wallet, getting allow, deny or needs_approval.
  • Freeze or unfreeze every governed agent across all wallet backends at once.
  • Apply one unified policy of caps, allow/deny lists and approval thresholds.
  • List governed agents and check control-plane health.
  • Work the human-approval queue: list, approve and deny pending requests.
  • Read and re-verify the append-only, hash-chained audit ledger.
When to use it
Useful when an assistant drives agents that move money and you want a single pre-flight spend check, a one-call kill switch and an auditable record across several wallet or card backends. It is a governance layer, not a wallet itself.
Requirements
Runs locally via npx from the npm package @countersign/mcp over stdio. Needs a running Countersign Core: set COUNTERSIGN_URL to its base URL, and COUNTERSIGN_API_KEY when that Core has auth enabled. The hosted Core is described as paused and returning 503, so a self-run Core is expected. Desktop MCP clients only.
Before you install
Requires an API key (COUNTERSIGN_API_KEY) for the Core. Tools can freeze or unfreeze all agents, change spend policy, and approve or deny spending requests, so a misused call can block or unblock real payments. The README states it is testnet only and never takes custody of funds; verify that against your own deployment before relying on it.

Installation

In SourceWeft

  1. Open Countersign in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

@countersign/mcp

[npm version] [MCP] [License: Apache-2.0] [Spending governed by Countersign]

The cross-vendor kill switch + spend guard for AI agents — as MCP tools, inside any MCP client.

Countersign is a neutral control plane that holds one policy, one freeze, and one tamper-evident audit ledger across every agent-wallet backend at once. This package exposes it as Model Context Protocol tools, so an agent (or you, from chat in Claude / Cursor) can ask "may I spend this?" before acting — and freeze everything in under a second.

Tools

ToolWhat it does
countersign_request_spendPre-flight guard — ask whether a spend is allowed before touching the wallet (allow / deny / needs_approval).
countersign_freezeThe kill switch — freeze every agent on every backend at once.
countersign_apply_policyApply one unified policy (caps, allow/deny lists, approval threshold) across all backends.
countersign_list_agents / countersign_healthSee the governed fleet + control-plane health.
countersign_list_approvals / countersign_approve / countersign_denyThe human-approval queue.
countersign_ledgerRead + re-verify the append-only, hash-chained audit ledger.
countersign_unfreezeLift a freeze (recover).

Setup

It governs a running Countersign Core. The hosted Core at app.countersign.network is paused since 2026-09-18 and answers 503, so point this at a Core you run yourself. Set:

  • COUNTERSIGN_URL — your Core, e.g. https://app.countersign.network
  • COUNTERSIGN_API_KEY — required when the Core has auth enabled

Claude Desktop / Claude Code / Cursor

Add to your MCP config (claude_desktop_config.json, or claude mcp add, or Cursor's mcp.json):

json
{  "mcpServers": {    "countersign": {      "command": "npx",      "args": ["-y", "@countersign/mcp"],      "env": {        "COUNTERSIGN_URL": "https://app.countersign.network",        "COUNTERSIGN_API_KEY": "csk_…"      }    }  }}

That's it — your agent now has the spend guard and the kill switch.

Show it (the "powered by" badge)

If Countersign guards your agent, say so — it tells users (and other agents) that spending is governed, and points the next operator at the same kill switch. Drop this in your README:

markdown
[![Spending governed by Countersign](https://img.shields.io/badge/spending%20governed%20by-Countersign-58e6a8?labelColor=0b1020)](https://countersign.network)

Listing in MCP registries (distribution)

Countersign spreads by being easy to discover wherever agent builders look for tools. The metadata below is ready to submit to the common registries — copy it as-is.

  • Official MCP registry (registry.modelcontextprotocol.io / the mcp-registry repo) — entry:
    json
    {  "name": "io.github.countersign-network/countersign",  "description": "Cross-vendor kill switch + spend guard for AI agents that spend money — one policy, one freeze, one tamper-evident ledger across every wallet/card backend.",  "homepage": "https://countersign.network",  "repository": "https://github.com/countersign-network/countersign",  "packages": [    { "registry": "npm", "name": "@countersign/mcp", "runtime": "npx" }  ],  "license": "Apache-2.0"}
  • mcp.so — submit @countersign/mcp; category Finance / Security / Agents.
  • Smithery — npx-launched server; env COUNTERSIGN_URL (default https://app.countersign.network) + optional COUNTERSIGN_API_KEY.
  • awesome-mcp-servers lists — one-liner:

    Countersign — cross-vendor spend guard + sub-second kill switch + tamper-evident ledger for AI agents that move money (Coinbase, Turnkey, Openfort, Visa card). Testnet.

Standard listing fields:

FieldValue
Server idcountersign
Launchnpx -y @countersign/mcp
Toolscountersign_request_spend, countersign_freeze, countersign_apply_policy, countersign_list_agents, countersign_health, countersign_list_approvals, countersign_approve, countersign_deny, countersign_ledger, countersign_unfreeze
Tagspayments · security · kill-switch · spend-guard · agent-payments · wallet

Nothing here is auto-submitted — listings are made deliberately by a maintainer.

Apache-2.0. Countersign holds policy/freeze/ledger; it never takes custody of funds. Testnet only.

Source: packages/mcp/README.md at commit 534840a

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.2.2LatestSep 16, 2026

Score

40% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.