protogrid
Sign inAdd to your agent

Search / io.github.kindrat86/sipi-bot-spend-firewall

sipi.bot — Spend Firewall for AI Agents

R0· no sign-in

Pre-spend firewall for AI agents. Approves, blocks, flags transactions against policy rules.

v1.0.1 · active · website · descriptor JSON · versions

An agent can connect right now, no human step.Remote endpoint, no authentication, reachable on the last probe.
Quality79good
Trust73of 100
Uptime, 30 days100%
Latency p50248 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "sipi-bot-spend-firewall": {
      "type": "http",
      "url": "https://sipi.bot/api/mcp"
    }
  }
}
claude mcp add --transport http sipi-bot-spend-firewall https://sipi.bot/api/mcp
[mcp_servers.sipi-bot-spend-firewall]
url = "https://sipi.bot/api/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "sipi-bot-spend-firewall": {
      "type": "remote",
      "url": "https://sipi.bot/api/mcp",
      "enabled": true
    }
  }
}
{
  "mcpServers": {
    "sipi-bot-spend-firewall": {
      "type": "http",
      "url": "https://sipi.bot/api/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=sipi-bot-spend-firewall&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vc2lwaS5ib3QvYXBpL21jcCJ9"
}
{
  "servers": {
    "sipi-bot-spend-firewall": {
      "type": "http",
      "url": "https://sipi.bot/api/mcp"
    }
  }
}
{
  "mcpServers": {
    "sipi-bot-spend-firewall": {
      "httpUrl": "https://sipi.bot/api/mcp"
    }
  }
}
extensions:
  "sipi-bot-spend-firewall":
    enabled: true
    name: "sipi-bot-spend-firewall"
    type: streamable_http
    uri: "https://sipi.bot/api/mcp"
    timeout: 300

Quality 79 / 100good

protocol75 · weight 25
  • warn
    protocol.modernnewest supported version is 2024-11-05; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
  • n/a
    protocol.statelessonly applies to 2026-07-28 servers
  • pass
    protocol.transportstreamable HTTP
  • n/a
    protocol.list_ttlonly applies to 2026-07-28 servers
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene71 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • pass
    tools.description_lengthdescriptions are concise
  • pass
    tools.schemasevery tool has an object input schema
  • fail
    tools.annotationsno tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
  • fail
    tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: add_spend_rule (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); evaluate_spend (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); firewall_status (readOnlyHint, destructiveHint, idempotentHint, openWorldHint)
  • pass
    tools.token_costabout 172 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
stability100 · weight 15
  • pass
    stability.changesno tool changes in 30 days
  • pass
    stability.rug_pullno tool changed its meaning under the same name
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

3 tools, about 172 tokens to load them all · tool set 383dea14ff8c · checked 2026-10-20 17:34 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 73 / 100

no-repository
provenance45
liveness100
freshness65
hygiene80

+website +reachable +uptime-100% ~updated-91d-ago -no-repository

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://sipi.bot/api/mcp streamable-httpnoneyes100%248 ms2024-11-052026-10-20

Tools (3)

add_spend_ruleAdd a rule to the authenticated API key's isolated workspace.
evaluate_spendCheck whether an autonomous agent is allowed to make a purchase BEFORE spending. Returns APPROVED, BLOCKED, or FLAGGED.
firewall_statusGet private firewall stats for the authenticated API key.

Schemas: list_tools.

Similar MCP servers

  • Agent Reserve Protocol Authorization FirewallR0quality 100
    site.chatgpt.super-myna-7255.agent-reserve-protocol/agent-transaction-firewall

    Advisory policy preflight for AI-agent spend requests; never executes payments or accesses wallets.

  • warden402-mcpL0
    io.github.sukrutkrdg/warden402-mcp

    Pre-execution security for AI agents on Base: guard token/tx/address + per-agent spend firewall.

  • ReinL0
    io.github.bugiiiii11/rein

    Spend limits for AI agents that pay with x402: every paywall is policy-checked before a cent moves.

  • SatGate – Economic Firewall for AI AgentsR2quality 83
    io.github.SatGate-io/satgate

    Budget, payment and audit controls for AI agent API calls and MCP tool calls.

  • SpendNodR2quality 50
    io.github.gstack-ds/spendnod

    AI agent spending controls. Set limits, blocklists, and caps. Approve transactions from your phone.

  • AgentGuardL0
    io.github.MerchantGuard/agentguard

    Local spend caps, kill-switch blocking and Ed25519-signed receipts for AI agent tool calls.

More from io.github.kindrat86

  • CarShakeR0quality 79
    io.github.kindrat86/carshake

    Vehicle handover checklists, damage-documentation best practices, valet/rental/service FAQs.

  • ChurnLensR0quality 79
    io.github.kindrat86/churnlens

    Buyer-side SaaS due-diligence maths: NRR, GRR, revenue concentration, zombie MRR, LTV:CAC.

  • GitDealFlowR0quality 79
    io.github.kindrat86/gitdealflow

    Track startup engineering acceleration from public GitHub data before funding rounds

  • Invisible ExitR0quality 79
    io.github.kindrat86/invisibleexit

    Faceless micro-SaaS system for employed professionals. Build $4K/mo without quitting

  • SanctionsAIR0quality 79
    io.github.kindrat86/sanctionsai

    OFAC sanctions screening for AI agents: 1,050 wallets, 19,389 SDN names, <100ms. Free tier, no key.

  • sipitenoR0quality 79
    io.github.kindrat86/sipiteno

    Global expansion intelligence: country info, expansion cost estimates, competitor analysis.

And 4 more from this publisher.

Official server.json
{
  "name": "io.github.kindrat86/sipi-bot-spend-firewall",
  "title": "sipi.bot — Spend Firewall for AI Agents",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://sipi.bot/api/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "1.0.1",
  "websiteUrl": "https://sipi.bot",
  "description": "Pre-spend firewall for AI agents. Approves, blocks, flags transactions against policy rules."
}