Cedulon

io.github.dogrucanemek-alt由 GitHub 帳號 dogrucanemek-alt 發布v0.17.0更新於 Nov 1, 2026

Policy-gated agent spend with signed receipts and rail-extract audit

發布方自己的服務：Agora by openforallofus

已驗證STDIO僅桌面金融開發者工具安全與監控

服務詳細資訊

識別碼: io.github.dogrucanemek-alt/cedulon
傳輸: STDIO
執行環境: Desktop only
信任: Verified
發布於: Sep 16, 2026

安全提示

MCP 服務會接收對話中的工具呼叫請求，並可能執行外部操作。啟用前請先了解該服務能做什麼，並只授予它所需的權限。

註冊中心已驗證此條目所屬的 GitHub 帳號 dogrucanemek-alt。這並不表明該帳號就是產品方。

SourceWeft 的檢查只涵蓋條目是否完整、端點是否回應；不審查伺服器的程式碼，也不審查其工具的行為。

在 README 中新增徽章

向讀者展示該 MCP 服務已收錄於 SourceWeft，徽章連結到本頁。

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/io.github.dogrucanemek-alt%2Fcedulon.svg)](https://sourceweft.com/mcp/io.github.dogrucanemek-alt%2Fcedulon?utm_source=readme&utm_medium=badge)

概覽

AI 產生的概覽

本機 MCP 伺服器，用於受政策約束的模擬付款，提供簽章收據、收據驗證，以及依對帳擷取進行的帳本稽核。

可以做什麼: 在行程內的模擬軌道上發起受政策約束的付款，回傳簽章收據或失敗即關閉的拒絕原因
使用你提供的金鑰驗證付款收據與收款方副簽
將收據鏈與檢查點和伺服器自身帳本或你提交的簽章擷取進行對帳，並給出範圍與計數
以示範 JSON 格式匯出收據、檢查點與擷取，並附上稽核結論與保證
回報伺服器版本、政策摘要、收據數量與鏈頭雜湊
適用情境: 適合用來製作原型或示範代理付款控管：單筆與累計上限、收款方與幣別白名單、簽章收據與稽核對帳，且不涉及真實資金或網路。
執行需求: 透過 stdio 在本機執行，通常以 npx 啟動已發佈的 npm 套件，需要 Node.js。不需帳號、API 金鑰或網路存取。政策上限以環境變數設定，例如 CEDULON_MAX_AMOUNT、CEDULON_MAX_CUMULATIVE 與 CEDULON_MAX_PAYMENTS；CEDULON_STATE_PATH 可選擇將帳本持久化為 JSON 檔案。

安裝前請注意

軌道是行程內的模擬機制：沒有錢包、RPC 或網路，不會移動真實資金。未提供 expectIssuerKeyPem 時，收據只以其自帶的金鑰驗證，任何金鑰都能通過。設定 CEDULON_STATE_PATH 會把帳本（含示範金鑰）寫入磁碟，README 提醒不要提交該檔案。

安裝

在 SourceWeft 中

開啟儀表板中的 Cedulon，將其新增到工作區。
為需要使用其工具的對話啟用該服務。

Desktop only，透過 STDIO。 STDIO 服務會啟動本機處理程序，因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照儲存庫中的啟動說明。

README

`@cedulon/mcp-server`

Local stdio MCP server. Thin wrappers over @cedulon/core, @cedulon/x402-adapter, @cedulon/audit, and @cedulon/receipts. The only non-workspace runtime dependency is the official MCP SDK.

Core packages still carry zero runtime dependencies. This package depends only on those workspace packages plus @modelcontextprotocol/sdk.

Tools

Name	What it does
`cedulon_spend`	Policy-gated spend. Args: `amount`, `currency`, `payee`, `nonce`, `tool`. Allow → signed receipt JSON. Deny → `{ ok: false, reason }`.
`cedulon_audit`	Reconcile the receipt chain against the rail extract: the in-process ledger, or a signed extract you present as `extract`. Optional `extraSettlements` injects extract rows (bypass demo; refused beside `extract`). The result carries `scope` when it ran over a presented extract, and `counts`, the class every receipt and row landed in.
`cedulon_verify_receipt`	Verify receipt COSE bytes (`receipt` object or `coseHex` + `publicKeyPem`). Checks countersignature when present.
`cedulon_export_ledger`	Receipts + checkpoint + extract in the `demo:export` JSON shape, with the findings, guarantee and `counts` of the audit over this server's own ledger.
`cedulon_status`	Version, policy summary, receipt count, chain head.

Run

The binary is cedulon-mcp (compiled JavaScript, no --experimental-strip-types). From this repository, after npm run build:packages:

From the published package, without a clone:

npx cedulon-mcp is the same binary from a packed or already-installed copy. The server is also listed in the MCP Registry as io.github.dogrucanemek-alt/cedulon.

From the repository source tree (development):

Host config

Claude Desktop / Claude Code / Cursor (mcpServers), after the package is installed:

json

{  "mcpServers": {    "cedulon": {      "command": "npx",      "args": ["-y", "@cedulon/mcp-server"]    }  }}

{  "mcpServers": {    "cedulon": {      "command": "npx",      "args": ["-y", "@cedulon/mcp-server"]    }  }}

State and policy

In-process by default. Set CEDULON_STATE_PATH to a JSON file to persist receipts, checkpoints, extract rows, and demo keys across process restarts. Do not commit that file.

Policy knobs (demo defaults in parentheses):

CEDULON_MAX_AMOUNT (10)
CEDULON_MAX_CUMULATIVE (30)
CEDULON_MAX_PAYMENTS (3)
CEDULON_WINDOW_MS (3600000)
CEDULON_ALLOWED_PAYEES (payee-1; * clears the list)
CEDULON_ALLOWED_CURRENCIES (USD; * clears the list)
CEDULON_ALLOWED_TOOLS
CEDULON_PAYER (payer-1)

The rail is the in-process mock. No wallet, no RPC, no network.

Privacy Policy

https://cedulon.com/privacy.html

The short version, which that page states at length. This server runs on your machine and speaks to your client over stdio. It makes no network requests: this package and the six packages it depends on contain no HTTP client, no socket, and no telemetry, and the only dependency outside the project is the official Model Context Protocol SDK. It collects nothing, because there is no endpoint of ours to collect it.

While it runs it holds, in memory, the spend requests of the session (amount, currency, payee, nonce, calling tool name), the receipts derived from them, the checkpoint, and your policy limits. It writes nothing to disk unless you set CEDULON_STATE_PATH, in which case that ledger is written as JSON to the path you chose, on your machine. No analytics, no crash reporting, no update check, no third-party sharing.

Privacy questions and security reports: [email protected].

來源：packages/mcp-server/README.md，提交 a41e9f0

工具

cedulon_spend

Spend on the mock rail

Policy-gated spend on the mock rail. Allow returns a signed COSE receipt JSON. Deny returns the fail-closed reason.

輸入參數toolnonce必填payee必填amount必填currency必填

cedulon_audit

Audit the receipt chain

Reconcile the in-process receipt chain and checkpoint against the rail extract: this server's own ledger, or a signed extract you present. Returns audit: balanced or findings, names the account, rail and window it was computed over (scope) when an extract declared one, and counts the class every receipt and row landed in (counts).

輸入參數trustextractmanifestpayeeTrustissuerTrustwitnessTrustmanifestTrustextraSettlements

cedulon_verify_receipt

Verify a spend receipt

Verify a spend receipt COSE_Sign1 (and payee countersignature when present). Supply expectIssuerKeyPem to check it against a key you already hold; without one the receipt is only checked against the key it carries, which any key satisfies.

輸入參數coseHexreceiptpublicKeyPemcounterCoseHexexpectPayeeKeyPempayeePublicKeyPemexpectIssuerKeyPem

cedulon_export_ledger

Export the ledger

Export receipts, checkpoint, and rail extract in the same JSON shape as npm run demo:export, with the findings, guarantee and counts of the audit over this server's own ledger.

無需輸入參數。