Security guardrails for AI agent payments
If you already use Agentpay, the agentpay mcp server is the piece that lets your assistant work with it directly. Security guardrails for AI agent payments.
A watchdog MCP that validates every agent payment request against all 9 security checks before it executes — catching policy violations, replay attacks, amount tampering, revoked tokens, and budget overruns at call time.
The toolset is worth reading before you wire it up, because it tells you what the integration is really for:
sentinel_audit_transaction — Run all 9 security checks; returns PASS/BLOCKED + SHA-256 audit hashsentinel_revoke_token — Permanently revoke a token — all future audits with this token_id will BLOCKsentinel_clear_nonce — Remove a nonce from the replay store (for legitimate refunds/retries only)sentinel_verify_chain — Verify a sequence of audit hashes forms an unbroken chainsentinel_threat_model — Simulate any named attack vector; returns severity, defence, and detectionPlan — PriceFree — $0Pro — $19/monthInstallation goes through your MCP client rather than a global install: point it at mcp on PyPI and it is fetched when the client starts. The copy-paste blocks for Claude Desktop, Claude Code and Cursor are further down this page.
Among the developer tooling options, the useful question is rarely "what can it do" but "what does it cost you to run" — permissions, credentials, and how much of your context its toolset consumes. Agentpay's toolset — sentinel_audit_transaction, sentinel_revoke_token, sentinel_clear_nonce and 5 more — is a fair guide to whether it matches your workflow. It is maintained by Rumblingb; worth a glance at recent repository activity before you build anything load-bearing on it.
SyncDev reviews every entry in this directory against the project's own documentation before publishing, and revisits them as servers change.
| Tool | What it does |
|---|---|
| sentinel_audit_transaction | Run all 9 security checks; returns PASS/BLOCKED + SHA-256 audit hash |
| sentinel_revoke_token | Permanently revoke a token — all future audits with this token_id will BLOCK |
| sentinel_clear_nonce | Remove a nonce from the replay store (for legitimate refunds/retries only) |
| sentinel_verify_chain | Verify a sequence of audit hashes forms an unbroken chain |
| sentinel_threat_model | Simulate any named attack vector; returns severity, defence, and detection |
| Plan | Price |
| Free | $0 |
| Pro | $19/month |
{
"mcpServers": {
"agentpay-sentinel": {
"command": "uvx",
"args": ["mcp"]
}
}
}Add to claude_desktop_config.json, then restart Claude Desktop.
Kill hallucinated APIs — version-accurate, up-to-date library documentation injected straight into context.
Microsoft's official browser automation server — drive a real browser through the accessibility tree, no screenshots needed.
GitHub's official server — repos, issues, pull requests, Actions and code security, straight from your assistant.
Issue tracking at the speed of conversation — Linear's official hosted server with OAuth and zero install.
Local repository surgery — status, diffs, commits, branches and history for any repo on disk.
Timezone sanity for AI — current time anywhere and correct conversions, without the model doing date math.