Countersign

io.github.countersign-network由 GitHub 账号 countersign-network 发布v0.2.2更新于 Oct 24, 2026

Kill switch + spend guard for AI agents that spend money, across every wallet vendor at once.

已验证STDIO仅桌面金融安全与监控

概览

AI 生成的概览

为 Countersign 控制面提供 MCP 工具，让助手在花钱前预检额度、一键冻结所有代理钱包，并查看哈希链审计账本。

可以做什么
  • 在动用钱包前询问某笔支出是否被允许，返回允许、拒绝或需审批。
  • 一次性冻结或解冻所有后端上的全部受管代理。
  • 统一下发额度上限、允许/拒绝名单与审批阈值的策略。
  • 列出受管代理并检查控制面健康状态。
  • 处理人工审批队列：列出、批准与拒绝待审请求。
  • 读取并重新校验只追加、哈希链式的审计账本。
适用场景
适合助手操作会动钱的代理、且希望在多个钱包或卡后端之上统一做支出预检、一键熔断和可审计记录的场景。它本身是治理层，不是钱包。
运行要求
通过 npx 从 npm 包 @countersign/mcp 以 stdio 在本地运行。需要一个运行中的 Countersign Core：用 COUNTERSIGN_URL 指定其基础地址，若该 Core 启用了鉴权还需设置 COUNTERSIGN_API_KEY。说明称托管 Core 已暂停并返回 503，因此预期需自行部署 Core。仅支持桌面 MCP 客户端。
安装前请注意
需要 Core 的 API 密钥（COUNTERSIGN_API_KEY）。相关工具可冻结或解冻全部代理、修改支出策略、批准或拒绝支出请求，误用可能阻断或放行真实付款。说明称仅限测试网且不托管资金，依赖前请自行核实部署情况。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Countersign，将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only，通过 STDIO。 STDIO 服务会启动本地进程，因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

@countersign/mcp

[npm version] [MCP] [License: Apache-2.0] [Spending governed by Countersign]

The cross-vendor kill switch + spend guard for AI agents — as MCP tools, inside any MCP client.

Countersign is a neutral control plane that holds one policy, one freeze, and one tamper-evident audit ledger across every agent-wallet backend at once. This package exposes it as Model Context Protocol tools, so an agent (or you, from chat in Claude / Cursor) can ask "may I spend this?" before acting — and freeze everything in under a second.

Tools

ToolWhat it does
countersign_request_spendPre-flight guard — ask whether a spend is allowed before touching the wallet (allow / deny / needs_approval).
countersign_freezeThe kill switch — freeze every agent on every backend at once.
countersign_apply_policyApply one unified policy (caps, allow/deny lists, approval threshold) across all backends.
countersign_list_agents / countersign_healthSee the governed fleet + control-plane health.
countersign_list_approvals / countersign_approve / countersign_denyThe human-approval queue.
countersign_ledgerRead + re-verify the append-only, hash-chained audit ledger.
countersign_unfreezeLift a freeze (recover).

Setup

It governs a running Countersign Core. The hosted Core at app.countersign.network is paused since 2026-09-18 and answers 503, so point this at a Core you run yourself. Set:

  • COUNTERSIGN_URL — your Core, e.g. https://app.countersign.network
  • COUNTERSIGN_API_KEY — required when the Core has auth enabled

Claude Desktop / Claude Code / Cursor

Add to your MCP config (claude_desktop_config.json, or claude mcp add, or Cursor's mcp.json):

json
{  "mcpServers": {    "countersign": {      "command": "npx",      "args": ["-y", "@countersign/mcp"],      "env": {        "COUNTERSIGN_URL": "https://app.countersign.network",        "COUNTERSIGN_API_KEY": "csk_…"      }    }  }}

That's it — your agent now has the spend guard and the kill switch.

Show it (the "powered by" badge)

If Countersign guards your agent, say so — it tells users (and other agents) that spending is governed, and points the next operator at the same kill switch. Drop this in your README:

markdown
[![Spending governed by Countersign](https://img.shields.io/badge/spending%20governed%20by-Countersign-58e6a8?labelColor=0b1020)](https://countersign.network)

Listing in MCP registries (distribution)

Countersign spreads by being easy to discover wherever agent builders look for tools. The metadata below is ready to submit to the common registries — copy it as-is.

  • Official MCP registry (registry.modelcontextprotocol.io / the mcp-registry repo) — entry:
    json
    {  "name": "io.github.countersign-network/countersign",  "description": "Cross-vendor kill switch + spend guard for AI agents that spend money — one policy, one freeze, one tamper-evident ledger across every wallet/card backend.",  "homepage": "https://countersign.network",  "repository": "https://github.com/countersign-network/countersign",  "packages": [    { "registry": "npm", "name": "@countersign/mcp", "runtime": "npx" }  ],  "license": "Apache-2.0"}
  • mcp.so — submit @countersign/mcp; category Finance / Security / Agents.
  • Smithery — npx-launched server; env COUNTERSIGN_URL (default https://app.countersign.network) + optional COUNTERSIGN_API_KEY.
  • awesome-mcp-servers lists — one-liner:

    Countersign — cross-vendor spend guard + sub-second kill switch + tamper-evident ledger for AI agents that move money (Coinbase, Turnkey, Openfort, Visa card). Testnet.

Standard listing fields:

FieldValue
Server idcountersign
Launchnpx -y @countersign/mcp
Toolscountersign_request_spend, countersign_freeze, countersign_apply_policy, countersign_list_agents, countersign_health, countersign_list_approvals, countersign_approve, countersign_deny, countersign_ledger, countersign_unfreeze
Tagspayments · security · kill-switch · spend-guard · agent-payments · wallet

Nothing here is auto-submitted — listings are made deliberately by a maintainer.

Apache-2.0. Countersign holds policy/freeze/ledger; it never takes custody of funds. Testnet only.

来源：packages/mcp/README.md，提交 534840a

工具

0
SourceWeft 尚未在沙箱中启动过该软件包，因此其工具未知。

版本历史

1
  1. v0.2.2最新Sep 16, 2026

评分

已满足适用检查项的 40%

该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分

    请保持端点能够响应 MCP 握手；SourceWeft 每 30 天探测一次。

  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头，或保持端点能够响应探测，以便判定其认证方式。

  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list，或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分

    请在仓库或注册中心条目中声明许可证。