KARTA — spend control for AI agents
Server Details
Task envelope, budget ledger, kill switch and signed receipts for agents that pay.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
TDQS
Scored across 1 tool
There is only one tool, so there is no possibility of confusion with another tool. Its purpose is clearly stated as checking a proposed spend against a task envelope.
The single tool name `check_spend` follows a clear verb_noun snake_case pattern. With only one name there is no inconsistency, though consistency across a broader surface cannot be assessed.
A single stateless check tool is very thin for a server framed as 'spend control for AI agents'. The scope implies broader operations such as envelope management, policy inspection, or audit workflows.
The surface covers only a pre-spend check and explicitly stores no state. There are significant gaps around envelope lifecycle, spend recording, policy configuration, and audit/history operations that a spend-control domain would typically need.
Available Tools
1 toolcheck_spendAInspect
Check whether a proposed agent spend is inside a task envelope. Returns verdict, rule, reason, counterfactual and next. No state is stored.
| Name | Required | Description | Default |
|---|---|---|---|
| payee | Yes | ||
| amount | Yes | ||
| envelope | Yes | ||
| calls_so_far | No | ||
| spent_so_far | No | 0 | |
| is_subscription | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full behavioral burden. It usefully discloses that 'No state is stored' and lists returned fields, but it does not explain permissions, idempotency, rate limits, or whether the check has side effects beyond the stated no-state behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with the core operation and followed by return fields and state behavior. There is no wasted language, and the most important scoping information comes first.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool has six input parameters, a nested object, no parameter descriptions, and no annotations. Although an output schema exists and the description need not fully explain return values, the input-side description is far too sparse to compensate for the schema coverage gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% across six parameters, including a nested `envelope` object and optional counters like `calls_so_far` and `spent_so_far`. The description only indirectly hints at envelope/amount/payee and adds no format, unit, or semantic detail for the undocumented parameters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb and resource: 'Check whether a proposed agent spend is inside a task envelope.' It clearly scopes the operation to spend validation against a task envelope, so an agent can understand the tool's purpose without opening the schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is implied by the phrase 'proposed agent spend' and 'task envelope,' which indicates this is a pre-authorization check. However, there are no explicit when-to-use, when-not-to-use, or alternative-tool instructions, and no siblings are provided to differentiate against.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
1 tool update
- First observed
check_spend
Related MCP Connectors
Cryptographically anchored evidence for agents: verified run receipts, proof-gated settlement.
Evidence-bound stopping for agents: judgment ledger, binding futility verdicts, signed receipts.
Paid agent work and paid verification, settled in USDC. Verified outcomes get signed receipts.
Shared task queue for humans and AI agents: leases, handoffs, approvals and signed receipts.
Related MCP Servers
- AlicenseAqualityBmaintenanceEnables AI agents to create cryptographically verifiable receipts of their delegated work, with capabilities for multi-party approval and offline verification.1129 npmApache 2.0

Mandareofficial
AlicenseAqualityAmaintenanceAccountability for AI agent fleets: verify a signed, hash-chained Mandare ledger, check budgets, kill an agent, and issue passports and mandates.8AGPL 3.0
evermint-mcpofficial
AlicenseNot gradedqualityDmaintenanceTamper-evident receipts for AI agent actions. The notary layer for agent-to-agent transactions.8 npm1MIT- AlicenseAqualityDmaintenanceCryptographic accountability for AI agents. Ed25519-signed receipts for every MCP tool call. Constraints, chains, AI judgment, invoicing, and local dashboard included.248 npm1MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.