Agent Wallet

io.github.dingdawg由 GitHub 帳號 dingdawg 發布v1.0.6更新於 Oct 24, 2026

Governed USDC wallet for AI agents — policy gates, spending caps, and Ed25519-signed receipts.

已驗證STDIO僅桌面金融安全與監控

服務詳細資訊

識別碼: io.github.dingdawg/agent-wallet
傳輸: STDIO
執行環境: Desktop only
信任: Verified
發布於: Sep 16, 2026

安全提示

MCP 服務會接收對話中的工具呼叫請求，並可能執行外部操作。啟用前請先了解該服務能做什麼，並只授予它所需的權限。

註冊中心已驗證此條目所屬的 GitHub 帳號 dingdawg。這並不表明該帳號就是產品方。

SourceWeft 的檢查只涵蓋條目是否完整、端點是否回應；不審查伺服器的程式碼，也不審查其工具的行為。

在 README 中新增徽章

向讀者展示該 MCP 服務已收錄於 SourceWeft，徽章連結到本頁。

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/io.github.dingdawg%2Fagent-wallet.svg)](https://sourceweft.com/mcp/io.github.dingdawg%2Fagent-wallet?utm_source=readme&utm_medium=badge)

概覽

AI 產生的概覽

一個本機 MCP 伺服器，為 AI 助理提供受控管的 USDC 錢包，具備消費上限、白名單與簽章稽核回執。

可以做什麼: 依消費政策建立錢包：每日上限、單次呼叫上限與收款方白名單，並可在執行時修改這些限制。執行受控管的支出，先依政策檢查，再授權、拒絕或要求升級審批，並回傳要執行的 SDK 呼叫。接收付款並產生防竄改回執。稽核完整回執鏈（含被拒紀錄），並驗證其未被更動。
適用情境: 適用於讓代理自主轉移 USDC、同時需要強制限額以及可證明其花費與未花費紀錄的情境。也適合已透過 Coinbase AgentKit 等工具包為代理設定錢包、需要在其上加一層政策控管的團隊。
執行需求: 以本機程序從 npm 套件安裝執行，需要 Node.js。README 表示示範不需 API 金鑰，也不需區塊鏈。清單未宣告任何環境變數或標頭。

安裝前請注意

此伺服器涉及真實資金：會建立錢包並授權 USDC 支出，應審慎設定上限與白名單。支出與收款操作會轉移資金並寫入稽核紀錄。升級審批需要來自自有授權流程的 approval token。README 的示範步驟會複製並執行第三方儲存庫中的程式碼。

安裝

在 SourceWeft 中

開啟儀表板中的 Agent Wallet，將其新增到工作區。
為需要使用其工具的對話啟用該服務。

Desktop only，透過 STDIO。 STDIO 服務會啟動本機處理程序，因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照儲存庫中的啟動說明。

README

dingdawg-agent-wallet — live demo

Shows governed agent wallet enforcement in action: allow, deny, step-up, allowlist — all in 5 seconds. No API keys. No blockchain required.

What it demonstrates

▶ provision_wallet  wallet_id:    demo-wallet-abc123  daily_cap:    $200 USDC  per_call_cap: $100 USDC
▶ governed_spend — $25 USDC (allowed)  ✓ AUTHORIZED  receipt_id:      6aba84a6-...  daily_remaining: $175 USDC  next_step:       wallet.sendToken({ assetId: "usdc", amount: "25", destination: "0xVendorABC123" })
▶ governed_spend — $150 USDC (exceeds per-call cap)  ✗ DENIED  reason:      Amount 150 USDC exceeds per-call cap 100 USDC  receipt_id:  cd7a7aa8-... (denial is logged too)
▶ governed_spend — $75 USDC (step-up required)  ⚠ STEP-UP REQUIRED  reason: Amount 75 USDC > step-up threshold 50 USDC — MFA required  fix:    Pass approval_token from your authorization flow
▶ governed_spend — unknown recipient (not in allowlist)  ✗ DENIED  reason: Recipient 0xUnknownAddress not in allowlist
▶ wallet_audit  chain_verified: true ✓  total_receipts: 5  [17:02:18] DENY  $10 USDC    governed_spend  [17:02:18] DENY  $75 USDC    governed_spend  [17:02:18] DENY  $150 USDC   governed_spend  [17:02:18] ALLOW $25 USDC    governed_spend  [17:02:18] ALLOW              provision_wallet

▶ provision_wallet  wallet_id:    demo-wallet-abc123  daily_cap:    $200 USDC  per_call_cap: $100 USDC
▶ governed_spend — $25 USDC (allowed)  ✓ AUTHORIZED  receipt_id:      6aba84a6-...  daily_remaining: $175 USDC  next_step:       wallet.sendToken({ assetId: "usdc", amount: "25", destination: "0xVendorABC123" })
▶ governed_spend — $150 USDC (exceeds per-call cap)  ✗ DENIED  reason:      Amount 150 USDC exceeds per-call cap 100 USDC  receipt_id:  cd7a7aa8-... (denial is logged too)
▶ governed_spend — $75 USDC (step-up required)  ⚠ STEP-UP REQUIRED  reason: Amount 75 USDC > step-up threshold 50 USDC — MFA required  fix:    Pass approval_token from your authorization flow
▶ governed_spend — unknown recipient (not in allowlist)  ✗ DENIED  reason: Recipient 0xUnknownAddress not in allowlist
▶ wallet_audit  chain_verified: true ✓  total_receipts: 5  [17:02:18] DENY  $10 USDC    governed_spend  [17:02:18] DENY  $75 USDC    governed_spend  [17:02:18] DENY  $150 USDC   governed_spend  [17:02:18] ALLOW $25 USDC    governed_spend  [17:02:18] ALLOW              provision_wallet

Every action — allow AND deny — produces an immutable receipt. chain_verified: true means the full chain is tamper-evident — any modification is detectable.

Run it

bash

git clone https://github.com/DingDawg/agent-wallet-democd agent-wallet-demonpm installnode demo.mjs

git clone https://github.com/DingDawg/agent-wallet-democd agent-wallet-demonpm installnode demo.mjs

The package

dingdawg-agent-wallet — 5 MCP tools that wrap any agent wallet with policy enforcement and an immutable audit trail.

Tool	What it does
`provision_wallet`	Create wallet with spend policy (daily cap, per-call cap, allowlist)
`governed_spend`	Policy check → authorize → immutable receipt
`governed_receive`	Accept payment with tamper-evident receipt
`wallet_policy`	Update limits and allowlists at runtime
`wallet_audit`	Full receipt chain — `chain_verified: true`

Coinbase AgentKit gives your agent a wallet. DingDawg gives it a conscience.

Why this matters

AI agents can now hold USDC and spend autonomously. The infrastructure exists. What doesn't: who enforces what the agent is allowed to spend, on what, for whom — and proves it happened correctly.

governed_spend authorizes then returns the exact agentkit_call SDK method to execute on-chain
Every denial is logged — you can prove what your agent didn't do
chain_verified: true means the audit trail is tamper-evident — any modification is detectable

npm · DingDawg

來源：README.md，提交 361d64e

工具

SourceWeft 尚未在沙箱中啟動過該軟體包，因此其工具未知。

版本歷史

v1.0.6最新Sep 16, 2026

評分

已滿足適用檢查項的 40%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

近 30 天內可連通25 分
請保持端點能夠回應 MCP 握手；SourceWeft 每 30 天探測一次。
已宣告認證方式10 分
請在註冊中心條目中宣告憑證請求標頭，或保持端點能夠回應探測，以便判定其認證方式。
已列出工具15 分
請讓伺服器在無憑證時回應 tools/list，或發布可在沙箱中無憑證啟動的軟體包。
描述必需15 分
圖示10 分
文件15 分
授權條款10 分
請在儲存庫或註冊中心條目中宣告授權條款。