MCP 服务器

EVIDIQ Aegis

Autonomous financial policy engine and budget guard for AI agent fleets. It verifies payment payloads, velocity caps, escrow release terms, and slippage inflation, returning risk verdicts and signed attestations.

README

<h1 align="center">EVIDIQ Aegis</h1>

Is this transaction safe to authorize under financial policy?

Autonomous financial policy engine, budget limits, velocity controls, escrow validation, and x402 settlement risk manager for AI agent fleets.

<a href="https://evidiq.dev">evidiq.dev</a> · <a href="https://evidiq.dev/docs/aegis">Aegis Docs</a> · <a href="https://mcp.evidiq.dev/aegis/skill.md">Agent Skill</a> · <a href="https://github.com/evidiq/evidiq">EVIDIQ Main</a> · <a href="https://github.com/evidiq/evidiq-aegis-mcp">Aegis MCP</a>

As autonomous AI agents pay, hire, and settle contracts with zero human in the loop, unconstrained budget spending and unvalidated financial parameters pose critical existential risks. An agent loop executing runaway API requests or releasing escrow funds without verifying deliverable checksums can drain wallet reserves in seconds.

EVIDIQ Aegis is the autonomous financial policy engine and budget guard for AI agent fleets.
It evaluates payment payloads, budget velocity caps, escrow release terms, and slippage inflation before money or data moves — returning structured risk verdicts and EIP-191 signed attestations.

Launch status: live endpoint. The MCP server is deployed at https://mcp.evidiq.dev/aegis/mcp, paid calls settle through the official OKX Payment SDK, and the OKX.AI listing (Agent #10367) is submitted and under review.

Aegis never holds agent private keys, never custody funds, and operates with zero model in the verdict path.

Position in the family

Service	Question	Boundary against Aegis
Core	Can I trust this agent?	Counterparty risk before work. Aegis guards financial transactions.
Notary	Can I prove this output happened?	Provenance of an output. Aegis enforces policy rules.
Operator	Can an agent act in a browser?	Browser execution; Aegis guards payment velocity & budget caps.
Sentinel	Is this MCP safe?	Scans service endpoints. Aegis enforces transaction financial policy.
Atlas	What does this dataset say?	Analyses data. Aegis checks spending limits and escrow release.
Lineage	Is this dependency trustworthy?	Supply chain. Aegis guards financial parameters.
Vault	What did the agent do?	Records history. Aegis provides signed financial attestations.
Redact	Is this content safe to share?	Sensitive values. Aegis verifies financial payment payloads.
Warden	Is this code safe to commit?	Source code quality. Aegis verifies payment transactions.
Assay	What will this transaction do?	Pre-signature intent. Aegis enforces spending velocity & escrow terms.
Rubric	Does this deliverable meet the contract?	Deliverable criteria. Aegis validates financial release terms.
Bastion	Is this deployment config safe to apply?	Infrastructure config. Aegis guards financial policy.
Aegis	Is this transaction safe to authorize under financial policy?	Autonomous financial policy engine & budget guard.

What it does

Payment Policy Verification — Evaluates payment payloads against daily budget caps, recipient allowlists, replay nonces, and EVM address sanity.
Spending Velocity Audits — Tracks historical spending across 60m, 6h, 24h, and 7d windows to prevent runaway loops.
Escrow Release Inspection — Validates escrow terms, deliverable SHA-256 hashes, and provider signatures prior to fund release.
Slippage & Fee Inflation Guard — Detects protocol price surges, unexpected gas fee spikes, and slippage bounds.
Signed Attestation Reports — Binds evaluation findings into EIP-191 signed cryptographic attestation reports.
Deterministic Verdicts — Evaluates rules strictly: failing blocker rules yields BLOCK; high risk yields REVIEW; clean evaluations yield PASS.
Pay per check — Five paid policy tools at 0.005–0.03 USDT0; five preflight and discovery utilities are free.

Route to Aegis when

Use Aegis before executing financial transfers or authorizing escrow releases: before initiating x402 payments, before transferring EVM tokens, or before settling autonomous contracts.

Do not send it private keys — ever. Do not route infrastructure configs here (that is Bastion), smart contract code is Assay, source code is Warden, endpoint reachability is Sentinel, and action logging is Vault.

A natural chain: validate_transfer_params → verify_payment_policy → audit_spending_window → attest_budget_verdict → append_record (Vault).

Use it from any agent

# Read the public Skill document
curl -s https://mcp.evidiq.dev/aegis/skill.md

# Inspect current x402 pricing discovery
curl -s https://mcp.evidiq.dev/aegis/x402

# Connect the remote MCP server (OpenClaw)
openclaw mcp add evidiq-aegis --transport streamable-http --url https://mcp.evidiq.dev/aegis/mcp

# Connect the remote MCP server (Claude Code)
claude mcp add --transport http evidiq-aegis https://mcp.evidiq.dev/aegis/mcp

Endpoints

Path	Method	Purpose
`/mcp`	`POST`	The MCP endpoint (Streamable HTTP).
`/mcp`	`HEAD`	402 — answered explicitly so a reachability prober never hangs.
`/x402`	`GET`	Public pricing discovery listing all ten tools and the v2 challenge.
`/skill.md`	`GET`	The agent-readable Skill document.
`/health`	`GET`	Service health & payment gate status.

MCP tools — five paid, five free

Prices are fixed atomic USD₮0 amounts.

Paid

Tool	Atomic	USDT0	Description
`verify_payment_policy`	5000	0.005	Evaluates payment payload against budget velocity, recipient allowlists, replay nonces, and EVM parameters
`audit_spending_window`	10000	0.010	Audits wallet spending velocity across 60m, 6h, 24h, and 7d historical windows
`inspect_escrow_release`	15000	0.015	Inspects escrow terms, deliverable SHA-256 checksums, and provider addresses before fund release
`guard_slippage_inflation`	20000	0.020	Guards against fee inflation, protocol price surges, and slippage spikes on cross-agent transactions
`attest_budget_verdict`	30000	0.030	Binds financial policy evaluation findings into an EIP-191 signed cryptographic attestation report

Free

Tool	Returns
`aegis_capabilities`	Engine capabilities, policy profiles, rule catalog, auxiliary checks, and pricing specification
`validate_transfer_params`	Preflight check for financial transfer payload EVM formatting and address sanity
`estimate_cost`	Price quotation lookup tool for any Aegis tool
`verify_aegis_report`	Offline verification tool for Aegis report integrity digests and EIP-191 signatures
`get_artifact`	Retrieve stored policy reports or default policy specifications

Proven on-chain

Live paid calls against the deployed endpoint completed the full x402 v2 round trip through the official OKX facilitator:

Tool	Amount	Settlement tx	Receipt	Signer	Verified
`verify_payment_policy`	`0.005 USDT0` (`5000` atomic)	`0x6f74549e…96cca86`	`0x1`	`0x8a3c7524…ee7D`	`valid:true, digestMatch:true, signatureValid:true`

OpenClaw Live VPS Status & Execution Proof

OpenClaw Live VPS Status

# Probing Aegis capabilities via OpenClaw
$ openclaw mcp probe evidiq-aegis
◇ OpenClaw 2026.7.1-beta.5 (b6387af)
MCP probe (/root/.openclaw/openclaw.json):
- evidiq-aegis: 10 tools (5 Paid, 5 Free)

OKX.AI Marketplace Registration

Property	Value
Agent ID	`#10367`
Agent Name	`EVIDIQ Aegis`
Listing Status	`Listing under review`
Registration Tx	`0x098d13bb4cbb595f778d817cec58625fe3ea9b4dac5fe1fd22d7f5e297688aad`
OKX Agent URL	https://www.okx.ai/agents/10367
Communication Addr	`0xfB9b43aD328c55eF3267c3Ccd262CBfAca89943d`
Services Registered	10 Services (5 Gated: $0.005–$0.03, 5 Ungated: $0.00)

Architecture

flowchart TB
    agent["<b>AI agent</b><br/>MCP client"]
    request{"Tool call<br/>free or paid?"}
    agent -->|POST /aegis/mcp| request

    free["Free preflight<br/>capabilities · validate<br/>estimate · verify · get_artifact"]
    gate["x402 v2 gate<br/>EIP-3009 exact · pay per policy check"]
    xlayer[("X Layer<br/>USD₮0 · eip155:196")]
    request -->|free helper| free
    request -->|paid policy check| gate
    gate -. verify and settle .-> xlayer

    subgraph aegis["EVIDIQ Aegis trust boundary"]
        direction TB
        parse["1. Payload validator<br/>EVM address & parameter sanity"]
        engine["2. Policy Engine<br/>budget velocity · allowlists · escrow"]
        report["3. Canonical report<br/>SHA-256 digest · EIP-191 signature"]
        artifacts["4. Content-addressed artifacts<br/>report & policy specifications"]
        parse --> engine --> report --> artifacts
    end

    free --> parse
    gate --> parse

    response["<b>MCP response</b><br/>verdict + attestation + report"]
    artifacts --> response

    classDef client fill:#312e81,stroke:#a78bfa,color:#ffffff,stroke-width:2px;
    classDef payment fill:#052e16,stroke:#4ade80,color:#ffffff,stroke-width:2px;
    classDef core fill:#0f172a,stroke:#38bdf8,color:#ffffff,stroke-width:2px;
    classDef output fill:#4c1d95,stroke:#c4b5fd,color:#ffffff,stroke-width:2px;
    class agent,request client;
    class free,gate,xlayer payment;
    class parse,engine,report,artifacts core;
    class response output;
    style aegis fill:#0f172a,stroke:#38bdf8,color:#e0f2fe,stroke-width:2px;

Security boundaries

Aegis evaluates supplied financial payloads and transaction parameters; it never executes arbitrary smart contract transactions or handles wallet keys.
Every policy check runs deterministically against configured rules and historical velocity windows.
Reports are canonicalized before hashing so integrity checks are reproducible across platforms.
EIP-191 signatures prove authenticity and non-repudiation of the attester key.

Self-host

Requirements: Node.js 22+ and npm.

npm install
npm run build
npm start

Or run the container:

docker build -t evidiq-aegis-mcp .
docker run -d --name evidiq-aegis-mcp -p 3013:3013 --env-file .env evidiq-aegis-mcp

Local routes: POST /mcp · GET /skill.md · GET /x402 · GET /health

Development

npm install      # install dependencies
npm run build    # compile TypeScript to dist/
npm test         # run the test suite
npm run dev      # start local watch server