XAPS MCP Server

Xaps SDK

The Cognitive Circuit Breaker for Autonomous Agents

Xaps is an economic security layer for autonomous AI agents. Before executing a smart contract, transfer, or financial action, your agent calls Xaps for an independent dual-agent audit. Standard Web3 tools verify signatures — Xaps verifies intent and logic.

Install

pip install xaps-sdk

Or install from this repository:

pip install "xaps-sdk @ git+https://github.com/APMC1/[email protected]"

Quick Start

from xaps import XapsClient, XapsRejectedError
client = XapsClient(api_key="your_agent_key")
receipt = client.audit(    action="execute_smart_contract",    contract_address="0x742d35Cc6634C0532925a3b844Bc9e7595f0bEb",    amount=1000.0,)
audit = receipt["audit"]if audit["status"] == "REJECTED":    raise XapsRejectedError(audit["beta_attack"], receipt=receipt)
print(f"Approved: {audit['alpha_defense']}")print(f"Balance remaining: ${receipt['remaining_balance']:.2f}")

Async

from xaps import XapsClient
async with XapsClient(api_key="your_agent_key") as client:    receipt = await client.audit_async(        action="execute_smart_contract",        contract_address="0x742d35Cc6634C0532925a3b844Bc9e7595f0bEb",        amount=1000.0,    )

MCP Integration

Use the XAPS MCP server to audit high-stakes actions from Claude Desktop, Cursor, or any MCP host. See docs/mcp-host-integration.md for full setup.

Start Using xaps_audit in 60 Seconds

1. Install (exposes the xaps-mcp console command):

   bash

   pip install xaps-sdk

2. Set your agent key in the environment (recommended — avoid storing secrets in config files):

   bash

   export XAPS_AGENT_KEY="your_agent_key"

3. Add to Claude Desktop config (macOS: ~/Library/Application Support/Claude/claude_desktop_config.json):

   json

   {  "mcpServers": {    "xaps-audit": {      "command": "xaps-mcp"    }  }}

   For local dev from a git clone, use python /path/to/xaps_mcp_server.py with XAPS_MCP_DEV=1 instead.

   Full example: examples/mcp_claude_desktop_config.json

4. In your agent prompt:

   Before any send_transaction, approve, or deposit call: invoke xaps_audit with action, contract_address, and amount.

Agent rule templates: examples/.agentrc

Configuration

# Or pass explicitlyclient = XapsClient(api_key="...", base_url="https://api.xaps.network")

API Reference

XapsClient(api_key=None, base_url=..., timeout=10.0)

Create a client. Raises ValueError if no API key is provided.

client.audit(action, contract_address, amount, payload_override=None)

Synchronous audit. Returns receipt dict:

{  "xaps_receipt": true,  "agent_key": "...",  "remaining_balance": 9.99,  "audit": {    "status": "APPROVED",    "alpha_defense": "...",    "beta_attack": "..."  }}

await client.audit_async(...)

Async variant for agents running on asyncio.

Sink adoption magnet — audit_then_query / query_sink

After a Tollbooth receipt, agents can call the subsidized Sink for real structured data (GitHub / HTTP). That is the integration carrot: rails → utility.

from xaps import XapsClient
with XapsClient() as client:    # One shot: fast/swarm audit for query_oracle, then sink    result = client.audit_then_query(        "github repo anthropics/anthropic-sdk-python",        oracle_url="http://localhost:8766",  # or XAPS_ORACLE_URL    )    print(result["sink"]["data"])
    # Or reuse an existing receipt    receipt = client.audit_auto("query_oracle", "", 0.01)    data = client.query_sink("search github MCP agents", receipt)

Env: XAPS_ORACLE_URL (sink base), XAPS_API_URL + XAPS_AGENT_KEY (tollbooth).

MCP: xaps_audit_then_query, xaps_sink_query, xaps_sink_health.

Exceptions

Billing

• $0.01 USD per successful audit, deducted from prepaid balance
• Fund your agent key at xaps.network

Development

git clone https://github.com/APMC1/xaps-sdk.gitcd xaps-sdkpip install -e ".[dev]"pytest

The sovereign node (xap-sovereign-node) is private. This public repo contains only the SDK.

Security

Your Xaps Agent Key is a billing identifier, not a cryptographic secret. Do not commit it to version control.

License

MIT — see LICENSE.