Skip to main content
Glama

mcp-checkout-guard

Pre-purchase check for shops, payment links and paid APIs — a single-purpose MCP server for AI agents. No install, no account: it runs as a remote server; this repo also has a zero-dependency stdio bridge.

https://angel.oroboros-design.com/mcp/checkout-guard

Use it

Claude Code

claude mcp add --transport http checkout-guard https://angel.oroboros-design.com/mcp/checkout-guard

Claude Desktop, Cursor, Windsurf, VS Code (remote server)

{ "mcpServers": { "checkout-guard": { "url": "https://angel.oroboros-design.com/mcp/checkout-guard" } } }

Any stdio client (Node 18+)

{ "mcpServers": { "checkout-guard": { "command": "npx", "args": ["-y", "github:daoudandiaye98-alt/mcp-checkout-guard"] } } }

Then ask your agent, for example: Before paying at https://shop.example.com/checkout, run preflight and stop unless the verdict is pay.

Related MCP server: verdix

Tools

Tool

Price

What it does

preflight

3 free calls per agent, then 0.25 USDC

One request to the url: TLS, domain age, look-alike domains, redirects to foreign gateways, payment provider, card fields in the page, http forms, text aimed at agents and, for x402, USDC contract, payTo, EIP-712 domain and price traps. Verdict pay, caution or do_not_pay with every reason.

buy_pack_with_card

—

Prepaid calls by card (Stripe) when the free calls are used up.

Paying

The first 3 paid calls per agent are free (identify your agent with the header X-API-Key, or set ANGEL_API_KEY for the stdio bridge). After that each call is paid per request in USDC on Base via x402 (params._meta["x402/payment"]), with a prepaid pack (bundle_token) or by card (buy_pack_with_card). The 402 answer names the exact amount and the pay-to address before anything is signed.

Disclosure: on verdict pay for a shop with an affiliate programme (for example Amazon), the answer can include a partner_link to the same merchant; Angel may earn a commission if you buy through it, the merchant sets the price, and the checked url is just as safe. Pass partner_link: false to leave it out.

More

  • Same checks as a library: npm i angel-agent-guard · pip install angel-agent-guard (angel-agent-guard)

  • All of Angel's tools in one server: https://angel.oroboros-design.com/agenten/signal/mcp · A2A agent card: https://angel.oroboros-design.com/.well-known/agent.json

  • MCP Registry: com.oroboros-design.angel/checkout-guard

Operated by Oroboros Design (Köln, Germany). MIT licence for the code in this repo.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    Related MCP Connectors

    Related MCP Servers

    • A
      license
      A
      quality
      D
      maintenance
      Enables AI agents to scan payment endpoints for safety, returning a letter grade (A–F) and verdict before authorizing payments.
      2
      41 npm
      MIT
    • A
      license
      A
      quality
      B
      maintenance
      Enables AI agents to check an EVM address on Base for risk (safe, caution, danger) before sending funds, with reasons, paid per call via x402 from the user's own wallet.
      7
      135 npm
      1
      MIT
    • A
      license
      Not graded
      quality
      B
      maintenance
      Enables AI agents to run a free fail-closed preflight gate on x402 payment challenges and transactions before signing, plus five USDC-paid on-chain truth checks covering arbitrage profitability, token safety, swap routing, quote validation, and trade sizing. Each check returns a verdict with pinned-block evidence and a verifiable receipt.
      Apache 2.0
    • A
      license
      Not graded
      quality
      C
      maintenance
      Enables AI agents to run pre-sign risk checks on transactions, approvals, EIP-712 signatures, token addresses, wallet approvals, sanctions screening, and prompt-injection texts, returning green/orange/red verdicts with machine-readable reason codes before signing.
      1
      AGPL 3.0