razorpay-mcp-guard
razorpay-mcp-guard
用于 Razorpay MCP 服务器的支出策略执行中间件。
Razorpay 官方的 MCP 服务器会执行收到的一切指令。整个技术栈中没有任何环节会审查代理(agent)被允许向它发送的内容。razorpay-mcp-guard 是一个 MCP 中间件,位于 LLM 代理与 Razorpay MCP 工具之间,强制执行:
按代理划分的支出上限 —— 每日 / 每月 / 终身限额,以派士(paise)为单位强制执行。
类别白名单 —— 只有白名单中的工具类别(例如
payments、settlements)可被访问;其余一律在入口处拦截。审批阈值 —— 超过可配置的卢比金额的调用,在到达 Razorpay 之前必须获得明确的人工审批。
每个决策(放行、拦截、升级上报)都会记录到只能追加的审计账本中,条目以哈希链连接,因此记录本身具有防篡改能力。
┌─────────────┐ tools/call ┌──────────────────┐ policy: ALLOW ┌──────────────────┐
│ LLM Agent │ ──────────────────► │ mcp-guard │ ─────────────────► │ Razorpay MCP │
│ (any client)│ ◄────────────────── │ (this proxy) │ ◄───────────────── │ server │
└─────────────┘ result └──────────────────┘ result └──────────────────┘
│ ▲
BLOCK/ESCALATE approve/deny
▼ │
Policy Engine + Audit Ledger + Approval Gate状态
开发中 —— 参见 docs/architecture.md。
Related MCP server: MandateGuard
许可证
MIT
This server cannot be deployed
Maintenance
Related MCP Connectors
Pre-spend firewall for AI agents. Approves, blocks, flags transactions against policy rules.
Zero-secret MCP gateway for AI agents: risk-scored, audited calls with human-in-the-loop approval.
- gatewayOAuthai.sealgate
MCP gateway with runtime security policy, tool-call-level control, and audit of agent actions.
See, price, and control every tool call your AI agents make: policy checks, cost, and audit tools.
Related MCP Servers
- FlicenseNot gradedqualityDmaintenanceProvides MCP tools to enforce spend policies (allow, deny, step-up, allowlist) on agent wallets with an immutable audit trail.-
- AlicenseNot gradedqualityAmaintenanceDeterministic, auditable payment policy enforcement for AI agents. It provides pre-action authorization with scopes, budgets, allowlists, and signed mandates via an MCP server.MIT
- AlicenseNot gradedqualityBmaintenanceA policy enforcement, audit, and evaluation control plane for LLM agents on payment infrastructure, intercepting tool calls at the MCP boundary to classify, redact, and allow/deny/escalate actions before execution.MIT
- AlicenseNot gradedqualityCmaintenanceGoverns AI agents' spending by enforcing budgets, approvals, and kill switches before any payment, providing an MCP interface for tool calls with policy checks.Apache 2.0