agent-commerce-guard

# Agent Commerce Guard

Approval gates and receipts for AI agents that can spend money, sell services, post socially, launch tokens, deploy publicly, or touch wallets.

Agent Commerce Guard is a local-first CLI and skill pack for builders adding x402, ACP, wallets, seller runtimes, paid APIs, or social integrations to autonomous agents.

![Agent Commerce Guard preview](https://agent-commerce-guard.vercel.app/og-image.png)

[![GitHub Action smoke](https://github.com/fxjim/agent-commerce-guard/actions/workflows/action-smoke.yml/badge.svg)](https://github.com/fxjim/agent-commerce-guard/actions/workflows/action-smoke.yml)
[![Agent Skills installs](https://www.skills.sh/b/fxjim/agent-commerce-guard)](https://www.skills.sh/fxjim/agent-commerce-guard/buy-agent-commerce-guard)

[Try the free evaluator](https://agent-commerce-guard.vercel.app/#demo) |
[Preview the paid package](https://fxjim.github.io/agent-commerce-guard/sample/) |
[Add the GitHub Action](#github-action) |
[Buy the private package for 1 USDC](https://agent-commerce-guard.vercel.app/pay) |
[Get support](https://github.com/fxjim/agent-commerce-guard/issues/1)

The live evaluator includes one-click presets for wallet spend, production
deploys, token launches, and marketplace jobs, so each decision path can be
tested without writing a manifest first.

| | Free hosted preflight | Private local package |
| --- | --- | --- |
| Best for | Public CI action manifests | Private or sensitive agent workflows |
| Execution | Hosted evaluator, up to 5 actions / 20 KB | Local CLI, HTTP evaluator, skills, policies, and templates |
| Price | Free | 1 USDC on Base |

The checkout links to the full sample report, Base MCP purchase recipe, and
support before payment, then verifies the Base USDC transaction server-side
before unlocking the private package.

The public package proof shows the exact CLI report format and file inventory
before payment. Canonical tests compare the samples to the current policy
engine and verify each advertised file against the paid tarball:

- https://agent-commerce-guard.vercel.app/sample-report
- https://agent-commerce-guard.vercel.app/sample-report.json
- https://fxjim.github.io/agent-commerce-guard/sample/

## Install The Free Evaluator Skill

Install a non-executing preflight workflow for public, non-sensitive action
manifests:

```bash
npx skills add https://github.com/fxjim/agent-commerce-guard --skill try-agent-commerce-guard
```

The skill enforces the hosted-data boundary, evaluates at most five actions and
20 KB through the free endpoint, and hands private workflows to the paid local
package without initiating a payment.

## GitHub Copilot Plugin

Install the policy-only review plugin directly from GitHub:

```bash
copilot plugin install fxjim/agent-commerce-guard:plugins/agent-commerce-guard
```

The plugin's skill uses `/api/policy-review`, returns only decisions and
required evidence, and includes no checkout or payment links. Its immutable
`1.0.0` source is tagged
[`copilot-plugin-v1.0.0`](https://github.com/fxjim/agent-commerce-guard/tree/copilot-plugin-v1.0.0/plugins/agent-commerce-guard).
The
[official Awesome Copilot review](https://github.com/github/awesome-copilot/issues/2413)
is ready for review after passing its automated quality gates.

## Remote MCP Server

Connect an MCP client to the public, stateless Streamable HTTP endpoint:

```text
https://agent-commerce-guard.vercel.app/api/mcp
```

Codex:

```bash
codex mcp add agent-commerce-guard --url https://agent-commerce-guard.vercel.app/api/mcp
```

Claude Code:

```bash
claude mcp add --transport http agent-commerce-guard https://agent-commerce-guard.vercel.app/api/mcp
```

VS Code `mcp.json`:

```json
{
  "servers": {
    "agent-commerce-guard": {
      "type": "http",
      "url": "https://agent-commerce-guard.vercel.app/api/mcp"
    }
  }
}
```

Setup and verification: [Vercel guide](https://agent-commerce-guard.vercel.app/mcp)
or [GitHub Pages mirror](https://fxjim.github.io/agent-commerce-guard/mcp/).

The server exposes one read-only, non-destructive tool,
`review_agent_commerce_actions`. It accepts up to five non-sensitive public
actions and 20 KB, returns decisions and required evidence, and does not
execute, pay, sign, deploy, post, or include purchase instructions in tool
output. MCP `1.1.1` also exposes one public JSON resource,
`https://agent-commerce-guard.vercel.app/offer.json`, so clients can discover
the exact 1 USDC Base offer without mixing purchase data into policy-tool
results. Registry metadata is available in [`server.json`](./server.json).
The official Registry lists
[`io.github.fxjim/agent-commerce-guard`](https://registry.modelcontextprotocol.io/?search=agent-commerce-guard)
as an active remote server.

## Install The Buyer Skill

Install the free public buyer workflow for Codex, Claude Code, Cursor, and other
Agent Skills-compatible assistants:

```bash
npx skills add https://github.com/fxjim/agent-commerce-guard --skill buy-agent-commerce-guard
```

The same skill is also available from the canonical product domain:

```bash
npx skills add https://agent-commerce-guard.vercel.app --skill buy-agent-commerce-guard
```

The skill preflights the public offer and requires explicit approval before any
Base Account, Base MCP, x402, browser-wallet, or manual payment. Its source is available at
[`skills/buy-agent-commerce-guard/SKILL.md`](./skills/buy-agent-commerce-guard/SKILL.md).
Its indexed directory page is available on
[skills.sh](https://www.skills.sh/fxjim/agent-commerce-guard/buy-agent-commerce-guard).
The paid product package remains available only after a verified `1 USDC`
payment.

## GitHub Action

Run the free hosted policy preflight in an `ubuntu-latest` workflow:

```yaml
- uses: fxjim/agent-commerce-guard@v1
  with:
    manifest: agent-commerce-actions.json
    fail-on: deny
```

The manifest may be a single action, an action array, or an object with an
`actions` array. The Action sends at most five actions and 20 KB to the public
hosted evaluator, prints sanitized decisions, and can fail on denied actions or
actions requiring review. It rejects obvious secret-bearing JSON keys before
the request.

The Action also exposes `checkout-url` for the private local package and
`x402-evaluate-url` for the paid workflow API. The job summary links directly
to both purchase paths after every completed evaluation.

Do not submit secrets, private source, credentials, or sensitive customer data.
Use the paid local package when an action manifest cannot leave the runner.
See [`examples/github-actions/`](./examples/github-actions/) for a complete
workflow and harmless example manifest.

## Launch Pass

The launch pass is available for `1 USDC` on Base.

- Product page: https://agent-commerce-guard.vercel.app
- GitHub Pages launch page: https://fxjim.github.io/agent-commerce-guard/
- Public Gist buyer brief: https://gist.github.com/fxjim/869cada8014dc52f520cccbce655f0eb
- Short Base checkout: https://agent-commerce-guard.vercel.app/pay
- One-tap Base Account checkout: the official `/pay` page leads with a user-confirmed 1 USDC Base Account payment and verifies the returned transaction server-side before unlock.
- Checkout alias: https://agent-commerce-guard.vercel.app/checkout
- Short payment verifier: https://agent-commerce-guard.vercel.app/verify?tx={tx}
- Success unlock page: https://agent-commerce-guard.vercel.app/success?tx={tx}
- Policy-only review API: https://agent-commerce-guard.vercel.app/api/policy-review
- Agent x402 download: https://agent-commerce-guard.vercel.app/api/x402-download
- Agent x402 evaluation API: https://agent-commerce-guard.vercel.app/api/x402-evaluate
- Agent-readable offer: https://agent-commerce-guard.vercel.app/offer.json
- Well-known offer: https://agent-commerce-guard.vercel.app/.well-known/agent-commerce-guard.json
- Well-known offer alias: https://agent-commerce-guard.vercel.app/.well-known/offer.json
- GitHub Pages offer mirror: https://fxjim.github.io/agent-commerce-guard/offer.json
- GitHub Pages well-known offer mirror: https://fxjim.github.io/agent-commerce-guard/.well-known/agent-commerce-guard.json
- GitHub Pages well-known offer alias: https://fxjim.github.io/agent-commerce-guard/.well-known/offer.json
- Short x402 discovery: https://agent-commerce-guard.vercel.app/x402
- Well-known x402 discovery: https://agent-commerce-guard.vercel.app/.well-known/x402
- Package metadata: https://agent-commerce-guard.vercel.app/package-metadata.json
- Sample CLI report: https://agent-commerce-guard.vercel.app/sample-report
- Machine-readable sample report: https://agent-commerce-guard.vercel.app/sample-report.json
- GitHub Pages package preview: https://fxjim.github.io/agent-commerce-guard/sample/
- Well-known package metadata: https://agent-commerce-guard.vercel.app/.well-known/package-metadata.json
- Service status: https://agent-commerce-guard.vercel.app/status.json
- Well-known service status: https://agent-commerce-guard.vercel.app/.well-known/status.json
- License terms: https://agent-commerce-guard.vercel.app/license
- Well-known license terms: https://agent-commerce-guard.vercel.app/.well-known/license.md
- GitHub Pages license mirror: https://fxjim.github.io/agent-commerce-guard/license/
- GitHub Pages well-known license mirror: https://fxjim.github.io/agent-commerce-guard/.well-known/license.md
- Agents manifest: https://agent-commerce-guard.vercel.app/agents.json
- Singular agent manifest alias: https://agent-commerce-guard.vercel.app/agent.json
- Well-known singular agent manifest alias: https://agent-commerce-guard.vercel.app/.well-known/agent.json
- Coding-agent quickstart: https://agent-commerce-guard.vercel.app/AGENTS.md
- Short purchase guide: https://agent-commerce-guard.vercel.app/buy
- Purchase guide: https://agent-commerce-guard.vercel.app/BUY.md
- Machine-readable purchase guide: https://agent-commerce-guard.vercel.app/purchase.json
- Short Base USDC payment request: https://agent-commerce-guard.verce