EVIDIQ Aegis

As autonomous AI agents pay, hire, and settle contracts with zero human in the loop, unconstrained budget spending and unvalidated financial parameters pose critical existential risks. An agent loop executing runaway API requests or releasing escrow funds without verifying deliverable checksums can drain wallet reserves in seconds.

EVIDIQ Aegis is the autonomous financial policy engine and budget guard for AI agent fleets.
It evaluates payment payloads, budget velocity caps, escrow release terms, and slippage inflation before money or data moves — returning structured risk verdicts and EIP-191 signed attestations.

Launch status: live endpoint. The MCP server is deployed at https://mcp.evidiq.dev/aegis/mcp, paid calls settle through the official OKX Payment SDK, and the OKX.AI listing (Agent #10367) is now listed.

Aegis never holds agent private keys, never custody funds, and operates with zero model in the verdict path.

Position in the family

Related MCP server: actiongate

What it does

• Payment Policy Verification — Evaluates payment payloads against daily budget caps, recipient allowlists, replay nonces, and EVM address sanity.

• Spending Velocity Audits — Tracks historical spending across 60m, 6h, 24h, and 7d windows to prevent runaway loops.

• Escrow Release Inspection — Validates escrow terms, deliverable SHA-256 hashes, and provider signatures prior to fund release.

• Slippage & Fee Inflation Guard — Detects protocol price surges, unexpected gas fee spikes, and slippage bounds.

• Signed Attestation Reports — Binds evaluation findings into EIP-191 signed cryptographic attestation reports.

• Deterministic Verdicts — Evaluates rules strictly: failing blocker rules yields BLOCK; high risk yields REVIEW; clean evaluations yield PASS.

• Pay per check — Five paid policy tools at 0.005–0.03 USDT0; five preflight and discovery utilities are free.

Route to Aegis when

Use Aegis before executing financial transfers or authorizing escrow releases: before initiating x402 payments, before transferring EVM tokens, or before settling autonomous contracts.

Do not send it private keys — ever. Do not route infrastructure configs here (that is Bastion), smart contract code is Assay, source code is Warden, endpoint reachability is Sentinel, and action logging is Vault.

A natural chain: validate_transfer_params → verify_payment_policy → audit_spending_window → attest_budget_verdict → append_record (Vault).

Use it from any agent

# Read the public Skill document
curl -s https://mcp.evidiq.dev/aegis/skill.md

# Inspect current x402 pricing discovery
curl -s https://mcp.evidiq.dev/aegis/x402

# Connect the remote MCP server (OpenClaw)
openclaw mcp add evidiq-aegis --transport streamable-http --url https://mcp.evidiq.dev/aegis/mcp

# Connect the remote MCP server (Claude Code)
claude mcp add --transport http evidiq-aegis https://mcp.evidiq.dev/aegis/mcp

Endpoints

MCP tools — five paid, five free

Prices are fixed atomic USD₮0 amounts.

Paid

Free

Proven on-chain

Live paid calls against the deployed endpoint completed the full x402 v2 round trip through the official OKX facilitator:

OpenClaw Live VPS Status & Execution Proof

# Probing Aegis capabilities via OpenClaw
$ openclaw mcp probe evidiq-aegis
◇ OpenClaw 2026.7.1-beta.5 (b6387af)
MCP probe (/root/.openclaw/openclaw.json):
- evidiq-aegis: 10 tools (5 Paid, 5 Free)

OKX.AI Marketplace Registration

Architecture

flowchart TB
    agent["<b>AI agent</b><br/>MCP client"]
    request{"Tool call<br/>free or paid?"}
    agent -->|POST /aegis/mcp| request

    free["Free preflight<br/>capabilities · validate<br/>estimate · verify · get_artifact"]
    gate["x402 v2 gate<br/>EIP-3009 exact · pay per policy check"]
    xlayer[("X Layer<br/>USD₮0 · eip155:196")]
    request -->|free helper| free
    request -->|paid policy check| gate
    gate -. verify and settle .-> xlayer

    subgraph aegis["EVIDIQ Aegis trust boundary"]
        direction TB
        parse["1. Payload validator<br/>EVM address & parameter sanity"]
        engine["2. Policy Engine<br/>budget velocity · allowlists · escrow"]
        report["3. Canonical report<br/>SHA-256 digest · EIP-191 signature"]
        artifacts["4. Content-addressed artifacts<br/>report & policy specifications"]
        parse --> engine --> report --> artifacts
    end

    free --> parse
    gate --> parse

    response["<b>MCP response</b><br/>verdict + attestation + report"]
    artifacts --> response

    classDef client fill:#312e81,stroke:#a78bfa,color:#ffffff,stroke-width:2px;
    classDef payment fill:#052e16,stroke:#4ade80,color:#ffffff,stroke-width:2px;
    classDef core fill:#0f172a,stroke:#38bdf8,color:#ffffff,stroke-width:2px;
    classDef output fill:#4c1d95,stroke:#c4b5fd,color:#ffffff,stroke-width:2px;
    class agent,request client;
    class free,gate,xlayer payment;
    class parse,engine,report,artifacts core;
    class response output;
    style aegis fill:#0f172a,stroke:#38bdf8,color:#e0f2fe,stroke-width:2px;

Security boundaries

• Aegis evaluates supplied financial payloads and transaction parameters; it never executes arbitrary smart contract transactions or handles wallet keys.

• Every policy check runs deterministically against configured rules and historical velocity windows.

• Reports are canonicalized before hashing so integrity checks are reproducible across platforms.

• EIP-191 signatures prove authenticity and non-repudiation of the attester key.

Self-host

Requirements: Node.js 22+ and npm.

npm install
npm run build
npm start

Or run the container:

docker build -t evidiq-aegis-mcp .
docker run -d --name evidiq-aegis-mcp -p 3013:3013 --env-file .env evidiq-aegis-mcp

Local routes: POST /mcp · GET /skill.md · GET /x402 · GET /health

Development

npm install      # install dependencies
npm run build    # compile TypeScript to dist/
npm test         # run the test suite
npm run dev      # start local watch server

Links

• Website — https://evidiq.dev

• Aegis documentation — https://evidiq.dev/docs/aegis

• Live MCP endpoint — https://mcp.evidiq.dev/aegis/mcp

• Agent Skill — https://mcp.evidiq.dev/aegis/skill.md

• x402 discovery — https://mcp.evidiq.dev/aegis/x402

• Service health — https://mcp.evidiq.dev/aegis/health

• OKX.AI Agent #10367 — https://www.okx.ai/agents/10367

• OKX Payment SDK guide — https://web3.okx.com/onchainos/dev-docs/payments/service-seller-sdk

• Registration tx — https://www.oklink.com/xlayer/tx/0x098d13bb4cbb595f778d817cec58625fe3ea9b4dac5fe1fd22d7f5e297688aad

• EVIDIQ main repository — https://github.com/evidiq/evidiq

• x402 Protocol — https://x402.org

License

MIT © 2026 EVIDIQ — see LICENSE. Part of the EVIDIQ trust and execution layer for the AI agent economy.