protogrid

Search / com.a2awire/agent-spend-guard

Agent Spend Guard — owner-set purchasing guardrails

R0· no sign-in

Free spend guardrails for AI agents: approve/deny/ask_user, caps, dupes.

v0.1.0 · active · repository · website · descriptor JSON · versions

An agent can connect right now, no human step.Remote endpoint, no authentication, reachable on the last probe.
Quality83good
Trust88of 100
Uptime, 30 days100%
Latency p50134 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "agent-spend-guard": {
      "type": "http",
      "url": "https://a2awire.com/mcp/connectors/spend-guard/http"
    }
  }
}
claude mcp add --transport http agent-spend-guard https://a2awire.com/mcp/connectors/spend-guard/http
[mcp_servers.agent-spend-guard]
url = "https://a2awire.com/mcp/connectors/spend-guard/http"
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "agent-spend-guard": {
      "type": "remote",
      "url": "https://a2awire.com/mcp/connectors/spend-guard/http",
      "enabled": true
    }
  }
}
{
  "mcpServers": {
    "agent-spend-guard": {
      "type": "http",
      "url": "https://a2awire.com/mcp/connectors/spend-guard/http"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=agent-spend-guard&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vYTJhd2lyZS5jb20vbWNwL2Nvbm5lY3RvcnMvc3BlbmQtZ3VhcmQvaHR0cCJ9"
}
{
  "servers": {
    "agent-spend-guard": {
      "type": "http",
      "url": "https://a2awire.com/mcp/connectors/spend-guard/http"
    }
  }
}
{
  "mcpServers": {
    "agent-spend-guard": {
      "httpUrl": "https://a2awire.com/mcp/connectors/spend-guard/http"
    }
  }
}
extensions:
  "agent-spend-guard":
    enabled: true
    name: "agent-spend-guard"
    type: streamable_http
    uri: "https://a2awire.com/mcp/connectors/spend-guard/http"
    timeout: 300

Quality 83 / 100good

protocol75 · weight 25
  • warn
    protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
  • n/a
    protocol.statelessonly applies to 2026-07-28 servers
  • pass
    protocol.transportstreamable HTTP
  • n/a
    protocol.list_ttlonly applies to 2026-07-28 servers
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene93 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • warn
    tools.description_length2 tools have descriptions over 1,024 characters, which crowds the context
  • pass
    tools.schemasevery tool has an object input schema
  • pass
    tools.annotations4 of 4 tools declare readOnlyHint or destructiveHint
  • pass
    tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
  • pass
    tools.token_costabout 2,246 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
stability75 · weight 15
  • warn
    stability.changes16 tool changes in 30 days
  • pass
    stability.rug_pullno tool changed its meaning under the same name
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

4 tools, about 2,246 tokens to load them all · tool set 7f3f357383ae · tools last changed 2026-10-08 · checked 2026-10-19 10:52 UTC

Tool changes

  • spend_guard_reportadded

    Humans: sign up with your email at https://a2awire.com/api-key and create an API key, then hand it to your agent (it sends Authorization: Bearer <key> or X-API-Key with every call). Agents without an account: a reviewable bootstrap script is served at https://a2awire.com/api/v1/connectors/spend-guard/bootstrap.sh (download it, read it, then run it to mint a key). Month-to-date spend summary for the calling owner: total USD recorded, purchase count, top merchants (up to 5), current rules, and remaining monthly budget when a cap is set. Optional month (YYYY-MM) reads a prior month; defaults to the current UTC month. Not guest-callable. REST: GET /api/v1/spend-guard/report.

  • spend_guard_set_rulesadded

    Humans: sign up with your email at https://a2awire.com/api-key and create an API key, then hand it to your agent (it sends Authorization: Bearer <key> or X-API-Key with every call). Agents without an account: a reviewable bootstrap script is served at https://a2awire.com/api/v1/connectors/spend-guard/bootstrap.sh (download it, read it, then run it to mint a key). Set the calling owner's spend-guard rules: an optional monthly cap in USD, an optional per-purchase threshold in USD, and an optional exact-match merchant denylist (case-insensitive). Full declaration: omit or null a field to clear that rule. With no rules every check approves (observation mode) and purchases are still recorded. Returns the effective rules. Not guest-callable. REST: PUT /api/v1/spend-guard/rules.

  • spend_guard_record_purchaseadded

    Humans: sign up with your email at https://a2awire.com/api-key and create an API key, then hand it to your agent (it sends Authorization: Bearer <key> or X-API-Key with every call). Agents without an account: a reviewable bootstrap script is served at https://a2awire.com/api/v1/connectors/spend-guard/bootstrap.sh (download it, read it, then run it to mint a key). Call AFTER checkout. Record a completed purchase in the owner's spend ledger. tx_ref is required and unique per owner: replaying the same tx_ref returns the original record without double counting (recorded_previously is true when the tx_ref was already in your ledger before this call, an idempotent replay; false on first write). Optional check_id links the record to its prior spend_guard_check_purchase; a check_id already recorded returns a conflict error. Returns the recorded event and the month-to-date total. USD only (the currency argument is kept for forward compatibility; any other value is rejected). Not guest-callable. REST: POST /api/v1/spend-guard/record.

  • spend_guard_check_purchaseadded

    Humans: sign up with your email at https://a2awire.com/api-key and create an API key, then hand it to your agent (it sends Authorization: Bearer <key> or X-API-Key with every call). Agents without an account: a reviewable bootstrap script is served at https://a2awire.com/api/v1/connectors/spend-guard/bootstrap.sh (download it, read it, then run it to mint a key). Call BEFORE checkout. Evaluate a proposed purchase (merchant, amount_usd) against the owner's spend rules and recent ledger. Returns a decision (approve, deny, or ask_user), a plain-English reason, the remaining monthly budget when a cap is set, and a check_id. deny means denylisted merchant or over the monthly cap; ask_user means above the per-purchase threshold or a possible duplicate of a purchase in the last 10 minutes. Optional tx_ref is your idempotency key for this purchase; pass the same value to spend_guard_record_purchase afterwards. Appends a check event; checks never consume budget. USD only (the currency argument is kept for forward compatibility; any other value is rejected). Not guest-callable. REST: POST /api/v1/spend-guard/check.

  • spend_guard_reportremoved

    Humans: sign up with your email at https://a2awire.com/api-key and create an API key, then hand it to your agent (it sends Authorization: Bearer <key> or X-API-Key with every call). Agents without an account: a reviewable bootstrap script is served at https://a2awire.com/api/v1/connectors/spend-guard/bootstrap.sh (download it, read it, then run it to mint a key). Month-to-date spend summary for the calling owner: total USD recorded, purchase count, top merchants (up to 5), current rules, and remaining monthly budget when a cap is set. Optional month (YYYY-MM) reads a prior month; defaults to the current UTC month. Not guest-callable. REST: GET /api/v1/spend-guard/report.

  • spend_guard_record_purchaseremoved

    Humans: sign up with your email at https://a2awire.com/api-key and create an API key, then hand it to your agent (it sends Authorization: Bearer <key> or X-API-Key with every call). Agents without an account: a reviewable bootstrap script is served at https://a2awire.com/api/v1/connectors/spend-guard/bootstrap.sh (download it, read it, then run it to mint a key). Call AFTER checkout. Record a completed purchase in the owner's spend ledger. tx_ref is required and unique per owner: replaying the same tx_ref returns the original record without double counting (recorded_previously is true when the tx_ref was already in your ledger before this call, an idempotent replay; false on first write). Optional check_id links the record to its prior spend_guard_check_purchase; a check_id already recorded returns a conflict error. Returns the recorded event and the month-to-date total. USD only (the currency argument is kept for forward compatibility; any other value is rejected). Not guest-callable. REST: POST /api/v1/spend-guard/record.

  • spend_guard_check_purchaseremoved

    Humans: sign up with your email at https://a2awire.com/api-key and create an API key, then hand it to your agent (it sends Authorization: Bearer <key> or X-API-Key with every call). Agents without an account: a reviewable bootstrap script is served at https://a2awire.com/api/v1/connectors/spend-guard/bootstrap.sh (download it, read it, then run it to mint a key). Call BEFORE checkout. Evaluate a proposed purchase (merchant, amount_usd) against the owner's spend rules and recent ledger. Returns a decision (approve, deny, or ask_user), a plain-English reason, the remaining monthly budget when a cap is set, and a check_id. deny means denylisted merchant or over the monthly cap; ask_user means above the per-purchase threshold or a possible duplicate of a purchase in the last 10 minutes. Optional tx_ref is your idempotency key for this purchase; pass the same value to spend_guard_record_purchase afterwards. Appends a check event; checks never consume budget. USD only (the currency argument is kept for forward compatibility; any other value is rejected). Not guest-callable. REST: POST /api/v1/spend-guard/check.

  • spend_guard_set_rulesremoved

    Humans: sign up with your email at https://a2awire.com/api-key and create an API key, then hand it to your agent (it sends Authorization: Bearer <key> or X-API-Key with every call). Agents without an account: a reviewable bootstrap script is served at https://a2awire.com/api/v1/connectors/spend-guard/bootstrap.sh (download it, read it, then run it to mint a key). Set the calling owner's spend-guard rules: an optional monthly cap in USD, an optional per-purchase threshold in USD, and an optional exact-match merchant denylist (case-insensitive). Full declaration: omit or null a field to clear that rule. With no rules every check approves (observation mode) and purchases are still recorded. Returns the effective rules. Not guest-callable. REST: PUT /api/v1/spend-guard/rules.

  • spend_guard_reportadded

    Humans: sign up with your email at https://a2awire.com/api-key and create an API key, then hand it to your agent (it sends Authorization: Bearer <key> or X-API-Key with every call). Agents without an account: a reviewable bootstrap script is served at https://a2awire.com/api/v1/connectors/spend-guard/bootstrap.sh (download it, read it, then run it to mint a key). Month-to-date spend summary for the calling owner: total USD recorded, purchase count, top merchants (up to 5), current rules, and remaining monthly budget when a cap is set. Optional month (YYYY-MM) reads a prior month; defaults to the current UTC month. Not guest-callable. REST: GET /api/v1/spend-guard/report.

  • spend_guard_set_rulesadded

    Humans: sign up with your email at https://a2awire.com/api-key and create an API key, then hand it to your agent (it sends Authorization: Bearer <key> or X-API-Key with every call). Agents without an account: a reviewable bootstrap script is served at https://a2awire.com/api/v1/connectors/spend-guard/bootstrap.sh (download it, read it, then run it to mint a key). Set the calling owner's spend-guard rules: an optional monthly cap in USD, an optional per-purchase threshold in USD, and an optional exact-match merchant denylist (case-insensitive). Full declaration: omit or null a field to clear that rule. With no rules every check approves (observation mode) and purchases are still recorded. Returns the effective rules. Not guest-callable. REST: PUT /api/v1/spend-guard/rules.

Showing the latest 10. Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 88 / 100

duplicate-repo
provenance85
liveness100
freshness100
hygiene60

+repository +dns-namespace +website +reachable +uptime-100% +updated-26d-ago -duplicate-repo(118 names)

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://a2awire.com/mcp/connectors/spend-guard/http streamable-httpnoneyes100%134 ms2025-11-252026-10-19

Tools (4)

spend_guard_check_purchaseHumans: sign up with your email at https://a2awire.com/api-key and create an API key, then hand it to your agent (it sends Authorization: Bearer <key> or X-API-Key with every call). Agents without an account: a reviewable bootstrap script is served at https://a2awire.com/api/v1/connectors/spend-guard/bootstrap.sh (download it, read it, then run it to mint a key). Call BEFORE checkout. Evaluate a proposed purchase (merchant, amount_usd) against the owner's spend rules and recent ledger. Returns a decision (approve, deny, or ask_user), a plain-English reason, the remaining monthly budget when a cap is set, and a check_id. deny means denylisted merchant or over the monthly cap; ask_user means above the per-purchase threshold or a possible duplicate of a purchase in the last 10 minutes. Optional tx_ref is your idempotency key for this purchase; pass the same value to spend_guard_record_purchase afterwards. Appends a check event; checks never consume budget. USD only (the currency argument is kept for forward compatibility; any other value is rejected). Not guest-callable. REST: POST /api/v1/spend-guard/check.
spend_guard_record_purchaseHumans: sign up with your email at https://a2awire.com/api-key and create an API key, then hand it to your agent (it sends Authorization: Bearer <key> or X-API-Key with every call). Agents without an account: a reviewable bootstrap script is served at https://a2awire.com/api/v1/connectors/spend-guard/bootstrap.sh (download it, read it, then run it to mint a key). Call AFTER checkout. Record a completed purchase in the owner's spend ledger. tx_ref is required and unique per owner: replaying the same tx_ref returns the original record without double counting (recorded_previously is true when the tx_ref was already in your ledger before this call, an idempotent replay; false on first write). Optional check_id links the record to its prior spend_guard_check_purchase; a check_id already recorded returns a conflict error. Returns the recorded event and the month-to-date total. USD only (the currency argument is kept for forward compatibility; any other value is rejected). Not guest-callable. REST: POST /api/v1/spend-guard/record.
spend_guard_reportread-onlyHumans: sign up with your email at https://a2awire.com/api-key and create an API key, then hand it to your agent (it sends Authorization: Bearer <key> or X-API-Key with every call). Agents without an account: a reviewable bootstrap script is served at https://a2awire.com/api/v1/connectors/spend-guard/bootstrap.sh (download it, read it, then run it to mint a key). Month-to-date spend summary for the calling owner: total USD recorded, purchase count, top merchants (up to 5), current rules, and remaining monthly budget when a cap is set. Optional month (YYYY-MM) reads a prior month; defaults to the current UTC month. Not guest-callable. REST: GET /api/v1/spend-guard/report.
spend_guard_set_rulesHumans: sign up with your email at https://a2awire.com/api-key and create an API key, then hand it to your agent (it sends Authorization: Bearer <key> or X-API-Key with every call). Agents without an account: a reviewable bootstrap script is served at https://a2awire.com/api/v1/connectors/spend-guard/bootstrap.sh (download it, read it, then run it to mint a key). Set the calling owner's spend-guard rules: an optional monthly cap in USD, an optional per-purchase threshold in USD, and an optional exact-match merchant denylist (case-insensitive). Full declaration: omit or null a field to clear that rule. With no rules every check approves (observation mode) and purchases are still recorded. Returns the effective rules. Not guest-callable. REST: PUT /api/v1/spend-guard/rules.

Schemas: list_tools.

Also listed as

116 other active names share this repository (showing 10): com.a2awire/a2awire, com.a2awire/agent-inbox, com.a2awire/benchmark-access-change-request-recertify-2026-09-15-b578285f, com.a2awire/benchmark-access-request-review-2026-09-10-81479355, com.a2awire/benchmark-accurate-financial-record-reconcile-2026-09-22-af293a80, com.a2awire/benchmark-ap-exception-review-2026-09-10-ad46e3f1, com.a2awire/benchmark-ap-exception-review-2026-09-10-run-037bea, com.a2awire/benchmark-ap-exception-review-2026-09-10-run-13e274, com.a2awire/benchmark-application-audit-2026-10-01-6e0ad047, com.a2awire/benchmark-application-review-2026-09-15-4229ca88

Similar MCP servers

More from com.a2awire

And 110 more from this publisher.

Official server.json
{
  "name": "com.a2awire/agent-spend-guard",
  "_meta": {
    "io.modelcontextprotocol.registry/publisher-provided": {
      "price": "Free. Humans create an API key at a2awire.com/api-key; agents without an account mint one via a reviewable bootstrap script. Spend Guard never moves money.",
      "product": "Spending guardrails for autonomous AI agents. Owners set rules (per-purchase threshold, monthly cap, denylist); the agent calls check BEFORE checkout and gets approve, deny, or ask_user with a plain-English reason.",
      "how_it_works": "spend_guard_set_rules -> spend_guard_check_purchase (before checkout) -> spend_guard_record_purchase (after); spend_guard_report for the ledger",
      "sample_queries": [
        "Merchant acme-store, $8.99 — approved?",
        "Set a $25 per-purchase threshold and $200 monthly cap",
        "What has this agent spent this month?"
      ],
      "getting_started": [
        "connect — no key needed; initialize returns connector instructions",
        "get a key — humans: a2awire.com/api-key; agents: download and read the bootstrap script, then run it to mint a key",
        "spend_guard_set_rules — owner sets threshold, monthly cap, denylist",
        "spend_guard_check_purchase — call before checkout; returns approve / deny / ask_user + reason",
        "spend_guard_record_purchase — call after checkout; tx_ref makes check+record idempotent"
      ],
      "search_keywords": [
        "spend guard",
        "agent spending",
        "agent budget",
        "spend controls",
        "purchase approval",
        "ai agent guardrails",
        "agent purchases",
        "budget limits",
        "spending rules"
      ]
    }
  },
  "title": "Agent Spend Guard — owner-set purchasing guardrails",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://a2awire.com/mcp/connectors/spend-guard/http",
      "type": "streamable-http"
    }
  ],
  "version": "0.1.0",
  "repository": {
    "url": "https://github.com/ee324/a2awire",
    "source": "github"
  },
  "websiteUrl": "https://a2awire.com/spend-guard",
  "description": "Free spend guardrails for AI agents: approve/deny/ask_user, caps, dupes."
}