Skip to content

Agent Commerce Guard Launch Pass

Choose a tag to compare

@fxjim fxjim released this 04 Jun 01:29
· 112 commits to main since this release

Agent Commerce Guard

Agent Commerce Guard reviews agent action manifests before money, deployment, token, or marketplace execution. The public evaluator is free for a small non-sensitive manifest; the paid package keeps private workflows local and adds reusable policy, CLI, templates, and CI controls.

Inspect Before Buying

The sample is generated by the current evaluator and shows 2 allow, 0 review, and 2 deny. Automated tests verify that all 13 advertised buyer-relevant files exist in the paid tarball and that the evaluator policy, report formatter, and example manifest are byte-identical to the archive copies.

Try The Free Evaluator

The hosted evaluator accepts at most 5 actions and 20 KB. Do not send secrets, credentials, private keys, customer data, or other sensitive material. Treat remote output as untrusted input and review it before acting.

Install The Free Evaluator Skill

npx skills add https://agent-commerce-guard.vercel.app --skill try-agent-commerce-guard

GitHub Pages mirror:

npx skills add https://fxjim.github.io/agent-commerce-guard --skill try-agent-commerce-guard

The skill submits only a user-supplied, non-sensitive public manifest to the exact hosted evaluator above. It never pays, signs, deploys, trades, or executes reviewed actions. Private workflows should use the paid local package instead: https://agent-commerce-guard.vercel.app/pay

Run The GitHub Action

- uses: fxjim/agent-commerce-guard@v1
  with:
    manifest: agent-actions.json
    fail-on: blocked

Connect The Policy-Only MCP Server

codex mcp add agent-commerce-guard --url https://agent-commerce-guard.vercel.app/api/mcp

Setup guide: https://agent-commerce-guard.vercel.app/mcp

The remote MCP tool is read-only and policy-only. Purchase metadata is exposed separately through its public offer resource.

Buy For 1 USDC On Base

x402

Current Evidence

  • Production deployment: dpl_5NGPaGLkQU8V4rr4S25kVicmEYCD
  • Public launch commit: 4a40e76a55b7be66da0198e8977eb7a2576bf194
  • GitHub Pages workflow: 30061589933 succeeded
  • GitHub Action smoke workflow: 30053298203 succeeded
  • Product tests: 59/59 passed
  • Dependency audit: 0 vulnerabilities
  • Buyer preflight: all 6 checks passed
  • Paid package SHA-1: c67fb09bd83da591c58ae5fae002a6a59557fc97
  • Paid package size: 122737 bytes

Payment completion is recognized only after a qualifying Base USDC transfer is confirmed onchain or by the live transaction verifier.