sanction-mcp

The wallet an AI agent carries — over MCP.

Give your agent a Sanction key instead of your credit card. Before it buys anything, calls a paid API, or touches a secret, it asks Sanction — which approves, escalates to you, or denies based on the policy you set. Every decision is logged.

A short-lived mandate (sanction_request_execution) is what you hand a child agent or a counterparty — never the root key. They check it at POST /mandate/verify with no API key. stdio MCP is cooperative: the host must ask before acting. Prefer the hosted URL when your host accepts remote MCP: https://getsanction.com/mcp with x-api-key: pxy_.... The LLM gateway intercepts inference spend without cooperation. A hosted broker that intercepts tools/call is next.

This package is the stdio client. The hosted endpoint is the same wallet over Streamable HTTP. Discovery: Wallet Card.

Quickstart

1. Get a key (self-serve, ~60s)

# Create a wallet — returns a management key (sk_...) and a wallet id. Save both;
# the management key is shown only once.
curl -s -X POST https://getsanction.com/api/v1/wallets \
  -H "content-type: application/json" \
  -d '{"name":"My Wallet","owner_email":"[email protected]"}'

# Create an agent under that wallet — returns its API key (pxy_...), shown once.
# Use the management key from step 1 as x-mgmt-key, and the wallet id as wallet_id.
curl -s -X POST https://getsanction.com/api/v1/agents \
  -H "content-type: application/json" \
  -H "x-mgmt-key: sk_REPLACE_ME" \
  -d '{"wallet_id":"REPLACE_WITH_WALLET_ID","name":"My Agent"}'

You now have a pxy_... agent key (→ SANCTION_API_KEY) — the only configuration the server needs.

2. Add to your MCP host

Remote (paste this when the host accepts a URL):

{
  "mcpServers": {
    "sanction": {
      "url": "https://getsanction.com/mcp",
      "headers": { "x-api-key": "pxy_..." }
    }
  }
}

stdio (this package):

{
  "mcpServers": {
    "sanction": {
      "command": "npx",
      "args": ["sanction-mcp"],
      "env": { "SANCTION_API_KEY": "pxy_..." }
    }
  }
}

Works with any MCP host — Claude Code, Claude Desktop, Cursor.

Tools

| Tool | What it does | |------|--------------| | sanction_authorize | Ask before any purchase/subscription/transfer. Returns approve / escalate / deny. | | sanction_authorize_provision | Ask before provisioning seats/licenses/infrastructure. Governs the resource and the dollars in one call. | | sanction_authorize_tool | Ask before invoking another tool, shell command, deploy, or email send. Enforces the tool allow/block/escalate policy. | | sanction_authorize_capability | Ask before acquiring a new capability — installing a skill/plugin, enabling an integration, calling a new API. Enforces the capability allow/block/escalate policy. | | sanction_check_authorization | Poll an escalated request for its one-use grant. | | sanction_log_tokens | Record LLM token usage against the daily token budget. | | sanction_log_outcome | Record a confirmed business outcome (enrollment, booking, conversion). Feeds cost-per-outcome ceilings; idempotent via dedupe_key. | | sanction_request_execution | Mint a short-lived mandate (JWT) for a child agent or counterparty. | | sanction_inject_credential | Retrieve a vaulted secret under that mandate (audit-logged). | | sanction_wallet_status | Today/MTD token + spend totals and pending approvals. |

Configuration

| Env | Required | Default | |-----|----------|---------| | SANCTION_API_KEY | yes | — | | SANCTION_WALLET_ID | no — sanction_wallet_status derives the wallet from the agent key; set only to override | — | | SANCTION_API_URL | no | https://getsanction.com/api/v1 |

Set a spend policy

New wallets start with sane defaults (auto-approve under $10, escalate over $25, hard-cap at $50/txn, $50/day). Tune per-agent limits and clearance with the management key — see the full quickstart and examples.

License

MIT