Skip to main content
Glama

Cerberus: On-Chain Payment Firewall for AI Agents

Three gates. MCP risk control. On-chain policy enforcement.

Security middleware for AI agent payments — off-chain MCP soft controls + on-chain Policy hard floor.

Full project guide: docs/PROJECT_GUIDE.md
MetaMask + network setup (step-by-step): docs/PROJECT_GUIDE.md#10-complete-metamask-guide-connect-wallet--add-network

Architecture

Payment Request
      │
      ▼
┌─────────────────────────────────────┐
│  Layer 1: Identity Verification     │  MCP: @cerberus/mcp-identity
├─────────────────────────────────────┤
│  Layer 2: Risk & Safety Screening   │  MCP: @cerberus/mcp-payment-guard
├─────────────────────────────────────┤
│  Layer 3: Execution & Authorization │  MCP: @cerberus/mcp-execution
│           + Policy.validate (chain) │  + PaymentGateway.pay (wallet)
└─────────────────────────────────────┘
      │
      ▼
  Approved / Blocked + Audit Log + Events

Pitch: MCP lets the agent check smartly; on-chain Policy makes rules unbypassable; events are independently verifiable.

Related MCP server: ows-mcp-wallet

Quick Start (Simulated Demo)

npm install
npm run demo

Open http://localhost:3000 — badge ⚡ Simulated.

Five scenarios: Identity / Risk / On-chain Policy / Success / Amount Limit.

On-Chain Mode + MetaMask (Summary)

# Terminal 1 — keep running
npm run node

# Terminal 2
npm run deploy:local

# Terminal 3
npm run demo
  1. Badge should show ⛓️ On-chain.

  2. In MetaMask, add network Localhost 8545 (RPC http://127.0.0.1:8545, chainId 31337).

  3. Import Hardhat Account #0 private key:
    0xac0974bec39a17e36ba4a6b4d238ff944bacb478cbed5efcae784d7bf4f2ff80

  4. Run scenario 4 · Successful PaymentConnect WalletApprove & Pay.

Full step-by-step guide: §10 in docs/PROJECT_GUIDE.md.

Base Sepolia: PRIVATE_KEY=0x... npm run deploy:base-sepolia (then switch MetaMask to chainId 84532).

Mode

Layer 3 Policy

⚡ Simulated

In-memory whitelist simulation

⛓️ On-chain

viem readContractPolicy.validateWithReason

MCP Servers

npm run mcp:identity
npm run mcp:guard
npm run mcp:execution

Project Structure

cerberus/
├── docs/PROJECT_GUIDE.md     # Full project guide + MetaMask tutorial
├── packages/core/            # Three-layer firewall + chain/viem
├── packages/mcp-identity/
├── packages/mcp-payment-guard/
├── packages/mcp-execution/
├── packages/contracts/       # Policy, PaymentGateway, AgentRegistry, MockUSDC
└── apps/demo/                # Next.js demo + wagmi

License

MIT

A
license - permissive license
-
quality - not tested
C
maintenance

Maintenance

Maintainers
Response time
Release cycle
Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

  • A
    license
    A
    quality
    D
    maintenance
    Enables AI agents to check balances and send transactions across multiple blockchains with automatic spending limit protection and policy enforcement.
    3
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Payment firewall for AI agents: a signed, independently verifiable verdict on every money-moving action. Blocks wrong/lookalike payee, over-cap, and duplicate-invoice (BEC) fraud before money moves — anyone can verify a verdict against the public JWKS. Free, local-first, non-custodial.
    2
    12
    1
    Apache 2.0

View all related MCP servers

Related MCP Connectors

  • KYC, KYB, AML, wallet screening, transaction monitoring, and fraud workflows for AI agents.

  • KYA identity verification, trust scoring, and performance bonds for AI agents

  • Verify x402 payment endpoints before an AI agent pays: scam scan, on-chain checks, trust scores.

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/lz-123123/Cerberus-On-Chain-Payment-Firewall-for-AI-Agents'

If you have feedback or need assistance with the MCP directory API, please join our Discord server