Cedulon

io.github.dogrucanemek-alt由 GitHub 账号 dogrucanemek-alt 发布v0.17.0更新于 Nov 1, 2026

Policy-gated agent spend with signed receipts and rail-extract audit

发布方自己的服务：Agora by openforallofus

已验证STDIO仅桌面金融开发者工具安全与监控

服务详情

标识符: io.github.dogrucanemek-alt/cedulon
传输: STDIO
运行时: Desktop only
信任: Verified
发布于: Sep 16, 2026

安全提示

MCP 服务会接收对话中的工具调用请求，并可能执行外部操作。启用前请先了解该服务能做什么，并只授予它所需的权限。

注册中心已验证此条目所属的 GitHub 账号 dogrucanemek-alt。这并不表明该账号就是产品方。

SourceWeft 的检查只涵盖条目是否完整、端点是否响应；不审查服务器的代码，也不审查其工具的行为。

在 README 中添加徽章

向读者展示该 MCP 服务已收录于 SourceWeft，徽章链接到本页。

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/io.github.dogrucanemek-alt%2Fcedulon.svg)](https://sourceweft.com/mcp/io.github.dogrucanemek-alt%2Fcedulon?utm_source=readme&utm_medium=badge)

概览

AI 生成的概览

本地 MCP 服务器，用于受策略约束的模拟支付，提供签名收据、收据验证以及基于对账提取的账本审计。

可以做什么: 在进程内模拟轨道上发起受策略约束的支付，返回签名收据或失败关闭的拒绝原因
使用你提供的密钥验证支付收据及收款方副签
将收据链与检查点同服务器自身账本或你提交的签名提取进行对账，并给出范围与计数
以演示 JSON 格式导出收据、检查点与提取，并附审计结论与保证
报告服务器版本、策略摘要、收据数量与链头哈希
适用场景: 适合用于原型验证或演示智能体支付控制：单笔与累计上限、收款方与币种白名单、签名收据和审计对账，且不涉及真实资金或网络。
运行要求: 通过 stdio 在本地运行，通常用 npx 启动已发布的 npm 包，需要 Node.js。无需账号、API 密钥或网络访问。策略上限通过环境变量设置，例如 CEDULON_MAX_AMOUNT、CEDULON_MAX_CUMULATIVE 和 CEDULON_MAX_PAYMENTS；CEDULON_STATE_PATH 可选地把账本持久化为 JSON 文件。

安装前请注意

轨道是进程内模拟：没有钱包、RPC 或网络，不会转移真实资金。未提供 expectIssuerKeyPem 时，收据仅用其自带的密钥校验，任何密钥都能通过。设置 CEDULON_STATE_PATH 会把账本（含演示密钥）写入磁盘，README 提示不要提交该文件。

安装

在 SourceWeft 中

打开控制台中的 Cedulon，将其添加到工作区。
为需要使用其工具的对话启用该服务。

Desktop only，通过 STDIO。 STDIO 服务会启动本地进程，因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照仓库中的启动说明。

README

`@cedulon/mcp-server`

Local stdio MCP server. Thin wrappers over @cedulon/core, @cedulon/x402-adapter, @cedulon/audit, and @cedulon/receipts. The only non-workspace runtime dependency is the official MCP SDK.

Core packages still carry zero runtime dependencies. This package depends only on those workspace packages plus @modelcontextprotocol/sdk.

Tools

Name	What it does
`cedulon_spend`	Policy-gated spend. Args: `amount`, `currency`, `payee`, `nonce`, `tool`. Allow → signed receipt JSON. Deny → `{ ok: false, reason }`.
`cedulon_audit`	Reconcile the receipt chain against the rail extract: the in-process ledger, or a signed extract you present as `extract`. Optional `extraSettlements` injects extract rows (bypass demo; refused beside `extract`). The result carries `scope` when it ran over a presented extract, and `counts`, the class every receipt and row landed in.
`cedulon_verify_receipt`	Verify receipt COSE bytes (`receipt` object or `coseHex` + `publicKeyPem`). Checks countersignature when present.
`cedulon_export_ledger`	Receipts + checkpoint + extract in the `demo:export` JSON shape, with the findings, guarantee and `counts` of the audit over this server's own ledger.
`cedulon_status`	Version, policy summary, receipt count, chain head.

Run

The binary is cedulon-mcp (compiled JavaScript, no --experimental-strip-types). From this repository, after npm run build:packages:

From the published package, without a clone:

npx cedulon-mcp is the same binary from a packed or already-installed copy. The server is also listed in the MCP Registry as io.github.dogrucanemek-alt/cedulon.

From the repository source tree (development):

Host config

Claude Desktop / Claude Code / Cursor (mcpServers), after the package is installed:

json

{  "mcpServers": {    "cedulon": {      "command": "npx",      "args": ["-y", "@cedulon/mcp-server"]    }  }}

{  "mcpServers": {    "cedulon": {      "command": "npx",      "args": ["-y", "@cedulon/mcp-server"]    }  }}

State and policy

In-process by default. Set CEDULON_STATE_PATH to a JSON file to persist receipts, checkpoints, extract rows, and demo keys across process restarts. Do not commit that file.

Policy knobs (demo defaults in parentheses):

CEDULON_MAX_AMOUNT (10)
CEDULON_MAX_CUMULATIVE (30)
CEDULON_MAX_PAYMENTS (3)
CEDULON_WINDOW_MS (3600000)
CEDULON_ALLOWED_PAYEES (payee-1; * clears the list)
CEDULON_ALLOWED_CURRENCIES (USD; * clears the list)
CEDULON_ALLOWED_TOOLS
CEDULON_PAYER (payer-1)

The rail is the in-process mock. No wallet, no RPC, no network.

Privacy Policy

https://cedulon.com/privacy.html

The short version, which that page states at length. This server runs on your machine and speaks to your client over stdio. It makes no network requests: this package and the six packages it depends on contain no HTTP client, no socket, and no telemetry, and the only dependency outside the project is the official Model Context Protocol SDK. It collects nothing, because there is no endpoint of ours to collect it.

While it runs it holds, in memory, the spend requests of the session (amount, currency, payee, nonce, calling tool name), the receipts derived from them, the checkpoint, and your policy limits. It writes nothing to disk unless you set CEDULON_STATE_PATH, in which case that ledger is written as JSON to the path you chose, on your machine. No analytics, no crash reporting, no update check, no third-party sharing.

Privacy questions and security reports: [email protected].

来源：packages/mcp-server/README.md，提交 a41e9f0

工具

cedulon_spend

Spend on the mock rail

Policy-gated spend on the mock rail. Allow returns a signed COSE receipt JSON. Deny returns the fail-closed reason.

输入参数toolnonce必填payee必填amount必填currency必填

cedulon_audit

Audit the receipt chain

Reconcile the in-process receipt chain and checkpoint against the rail extract: this server's own ledger, or a signed extract you present. Returns audit: balanced or findings, names the account, rail and window it was computed over (scope) when an extract declared one, and counts the class every receipt and row landed in (counts).

输入参数trustextractmanifestpayeeTrustissuerTrustwitnessTrustmanifestTrustextraSettlements

cedulon_verify_receipt

Verify a spend receipt

Verify a spend receipt COSE_Sign1 (and payee countersignature when present). Supply expectIssuerKeyPem to check it against a key you already hold; without one the receipt is only checked against the key it carries, which any key satisfies.

输入参数coseHexreceiptpublicKeyPemcounterCoseHexexpectPayeeKeyPempayeePublicKeyPemexpectIssuerKeyPem

cedulon_export_ledger

Export the ledger

Export receipts, checkpoint, and rail extract in the same JSON shape as npm run demo:export, with the findings, guarantee and counts of the audit over this server's own ledger.

无需输入参数。