Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type @ followed by the MCP server name and your instructions, e.g., "@Agent Clearing Desk run eu_duty_estimate for a $200 shipment to France and show the signed receipt"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
A spend gate for AI agents that call paid tools. Each agent key has a hard budget (one-off, daily or monthly) and a tool allowlist; every call is cleared before it runs and returns an Ed25519-signed receipt that anyone can verify offline.
Live desk and judge sandbox: https://agent-clearing-desk.nguyenhieuec.workers.dev
MCP endpoint: /mcp (Streamable HTTP, JSON responses)
REST: POST /v1/tools/:name/run
Public signing key: /.well-known/receipt-signing-key.json
Galuxium Nexus V2 package: submission/galuxium/
Unknown tool: 404. Arguments that break the input schema: 400 with the problems. Nothing is charged.
Tool not on the allowlist: 403 with a signed receipt. Too many failed calls this hour: 429.
One conditional UPDATE reserves the price; if the budget has no room, 402 with a signed receipt.
The upstream runs. On failure, timeout or refused arguments the reservation is refunded to its own budget period (502, 504 or 400).
On success the price is charged and the receipt signs the input hash, result hash, amount and upstream cost (SHA-256 over canonical JSON).
Operators add a tool from any MCP server at run time with POST /api/admin/tools; the desk runs the MCP session handshake and reads that server's tools/list for the schema.
An optional upstream credential header is sealed with AES-256-GCM and never returned.
Money is integer millicents.
The audit log and receipts are append-only.
Receipts are visible only within their organization.
Related MCP server: evav-gateway
npm install
npm test # real SQLite (node:sqlite, Node 22.5+), production migrations
npm run typecheck
npm run db:migrate:local
npm run devSecrets for a deployment:
Secret | What it is |
| Ed25519 private key as JWK JSON |
| Bearer token for |
| OpenKrill Connect refresh token; seeds the first refresh, later tokens rotate in D1 |
| Optional static OpenKrill API key; when set it replaces the Connect token |
| 32 random bytes in base64; seals credentials of operator-added MCP servers (unset: such credentials are refused) |
OPENKRILL_CLIENT_ID (the Connect client) is a plain var in wrangler.jsonc.
If a refresh token ever stops working, set a new seed and delete the upstream_credentials row.
Scripts:
scripts/run-e2e.mjs: live end-to-end run (operator flow with ADMIN_SECRET).
scripts/verify-receipt.mjs response.json [public-key.json] [--input args.json]: offline check of the signature, the result hash, the input hash and the readable copy; takes a REST response, an MCP tools/call result or a bare receipt.
scripts/sync-tool-schemas.mjs: copies input schemas from the upstreams.
MIT
This server cannot be deployed
See, price, and control every tool call your AI agents make: policy checks, cost, and audit tools.
Zero-trust gateway for AI agents: score tool calls, verify agent cards, enforce policy, audit.
Pre-spend firewall for AI agents. Approves, blocks, flags transactions against policy rules.
Agent payments, API key vaulting, and governed mandates. Agents spend within user-defined limits.
