Agent Wallet

io.github.dingdawgPublished by GitHub account dingdawgv1.0.6Updated Oct 24, 2026

Governed USDC wallet for AI agents — policy gates, spending caps, and Ed25519-signed receipts.

VerifiedSTDIODesktop onlyFinanceSecurity & Monitoring

Overview

AI-generated overview

A local MCP server that gives an AI assistant a governed USDC wallet with spending caps, allowlists and signed audit receipts.

What you can do
Provision a wallet with a spend policy: daily cap, per-call cap and recipient allowlist, and change those limits at runtime. Run a governed spend that is checked against policy, then authorized, denied or held for step-up approval, returning the SDK call to execute. Accept incoming payments with a tamper-evident receipt. Audit the full receipt chain, including denials, and verify that it has not been altered.
When to use it
Useful when an agent is meant to move USDC autonomously and you want enforced limits and a provable record of what it did and did not spend. Suited to teams already giving agents a wallet through a toolkit such as Coinbase AgentKit and needing a policy layer on top.
Requirements
Runs as a local process installed from the npm package, so Node.js is needed. The README states no API keys and no blockchain are required for the demo. The manifest declares no environment variables or headers.
Before you install
This server deals with real funds: it provisions wallets and authorizes USDC spending, so caps and allowlists should be set deliberately. Spend and receive actions move money and write audit records. Step-up approval requires an approval token from your own authorization flow. The README's demo instructions clone and run code from a third-party repository.

Installation

In SourceWeft

  1. Open Agent Wallet in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

dingdawg-agent-wallet — live demo

Shows governed agent wallet enforcement in action: allow, deny, step-up, allowlist — all in 5 seconds. No API keys. No blockchain required.

What it demonstrates

▶ provision_wallet  wallet_id:    demo-wallet-abc123  daily_cap:    $200 USDC  per_call_cap: $100 USDC
▶ governed_spend — $25 USDC (allowed)  ✓ AUTHORIZED  receipt_id:      6aba84a6-...  daily_remaining: $175 USDC  next_step:       wallet.sendToken({ assetId: "usdc", amount: "25", destination: "0xVendorABC123" })
▶ governed_spend — $150 USDC (exceeds per-call cap)  ✗ DENIED  reason:      Amount 150 USDC exceeds per-call cap 100 USDC  receipt_id:  cd7a7aa8-... (denial is logged too)
▶ governed_spend — $75 USDC (step-up required)  ⚠ STEP-UP REQUIRED  reason: Amount 75 USDC > step-up threshold 50 USDC — MFA required  fix:    Pass approval_token from your authorization flow
▶ governed_spend — unknown recipient (not in allowlist)  ✗ DENIED  reason: Recipient 0xUnknownAddress not in allowlist
▶ wallet_audit  chain_verified: true ✓  total_receipts: 5  [17:02:18] DENY  $10 USDC    governed_spend  [17:02:18] DENY  $75 USDC    governed_spend  [17:02:18] DENY  $150 USDC   governed_spend  [17:02:18] ALLOW $25 USDC    governed_spend  [17:02:18] ALLOW              provision_wallet

Every action — allow AND deny — produces an immutable receipt. chain_verified: true means the full chain is tamper-evident — any modification is detectable.

Run it

bash
git clone https://github.com/DingDawg/agent-wallet-democd agent-wallet-demonpm installnode demo.mjs

The package

dingdawg-agent-wallet — 5 MCP tools that wrap any agent wallet with policy enforcement and an immutable audit trail.

bash
npm install dingdawg-agent-wallet
ToolWhat it does
provision_walletCreate wallet with spend policy (daily cap, per-call cap, allowlist)
governed_spendPolicy check → authorize → immutable receipt
governed_receiveAccept payment with tamper-evident receipt
wallet_policyUpdate limits and allowlists at runtime
wallet_auditFull receipt chain — chain_verified: true

Coinbase AgentKit gives your agent a wallet. DingDawg gives it a conscience.

Why this matters

AI agents can now hold USDC and spend autonomously. The infrastructure exists. What doesn't: who enforces what the agent is allowed to spend, on what, for whom — and proves it happened correctly.

  • governed_spend authorizes then returns the exact agentkit_call SDK method to execute on-chain
  • Every denial is logged — you can prove what your agent didn't do
  • chain_verified: true means the audit trail is tamper-evident — any modification is detectable

npm · DingDawg

Source: README.md at commit 361d64e

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v1.0.6LatestSep 16, 2026

Score

40% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.