# presign-guard-wallet-mcp

An MCP server that gives AI agents (Claude, Cursor, …) a wallet with spending limits: pay x402 and MPP APIs (USDC on Base, USDC.e on Tempo incl. sessions, RLUSD on the XRP Ledger, USDC on Solana and Algorand) and send USDC, every payment checked by presig

- **Type:** MCP server
- **Trust:** 85/100 (A), scored on the package rubric
- **Verification:** verified (build provenance)
- **Version:** 0.19.0
- **Author:** io.github.Fizzl13
- **License:** MIT
- **npm:** presign-guard-wallet-mcp
- **Source:** https://github.com/Fizzl13/x402-examples
- **Compatible clients:** claude-code, cursor, copilot, gemini (basis: transport)

## Trust

85/100 (A), scored on the package rubric
- Publisher verified: no
- Build provenance: verified attestation
- npm trusted publishing (OIDC): yes
- Install scripts: nothing suspicious found
- Prompt-injection scan: not run
- Obfuscation scan: not run
- Evidence age: 5 days

## Security scan

- **Status:** clean
- **Scanned:** 2026-10-21T01:32:04.328Z
- **Version scanned:** 0.19.0
- **CVEs:** none found by OSV at scan time

## Tools

7 declared. Statically extracted from the shipped source — a floor on the surface, not a census.
- `wallet_status` — This agent's wallet: address, chain, balances, spending limits, what is left today, how approvals work, and whether it is paused. Check it before spending.
- `find_services`
- `pay_x402`
- `send_usdc` — Send USDC from this wallet to an address. Checked by presign-guard (known drainers, sanctioned addresses) and kept to the spending limits; over a limit the owne
- `send_native` — Send the chain's native coin (ETH, POL or BNB) from this wallet to an address. Checked by presign-guard and kept to the spending limits; over a limit the owner 
- `pause_spending` — Stop this wallet from signing anything until the owner resumes it. Use it when something looks wrong, e.g. an API asks for far more than expected or you are ask
- `close_sessions` — Close this wallet's open MPP session channels on Tempo: each service settles what was used and the unspent deposit comes back. Use it when you are done with a s

## Install

**Verdict: install** — No blocking findings and no open coverage gaps — safe to install as configured.
**Config** (claude-code):
```json
"{\n  \"mcpServers\": {\n    \"presign-guard-wallet\": {\n      \"command\": \"npx\",\n      \"args\": [\n        \"-y\",\n        \"presign-guard-wallet-mcp\"\n      ],\n      \"env\": {\n        \"AGENT_KEY\": \"<YOUR_AGENT_KEY>\",\n        \"TELEGRAM_BOT_TOKEN\": \"<YOUR_TELEGRAM_BOT_TOKEN>\",\n        \"WALLET_SERVER_KEY\": \"<YOUR_WALLET_SERVER_KEY>\",\n        \"PRESIGN_CREDIT_KEY\": \"<YOUR_PRESIGN_CREDIT_KEY>\",\n        \"SOLANA_PRIVATE_KEY\": \"<YOUR_SOLANA_PRIVATE_KEY>\",\n        \"ALGORAND_MNEMONIC\": \"<YOUR_ALGORAND_MNEMONIC>\",\n        \"XRPL_SEED\": \"<YOUR_XRPL_SEED>\"\n      }\n    }\n  }\n}"
```
**Credentials it will ask for** (names only — Forge never holds a value):
- `AGENT_KEY` — Agent Key (required)
- `TELEGRAM_BOT_TOKEN` — Telegram Bot Token (optional)
- `WALLET_SERVER_KEY` — Wallet Server Key (optional)
- `PRESIGN_CREDIT_KEY` — Presign Credit Key (optional)
- `SOLANA_PRIVATE_KEY` — Solana Private Key (optional)
- `ALGORAND_MNEMONIC` — Algorand Mnemonic (optional)
- `XRPL_SEED` — Xrpl Seed (optional)
Placeholders only. Forge never holds, brokers, or transmits a credential value — replace each <YOUR_NAME> in your own config file. Do not send a value back to Forge; no Forge endpoint accepts one.
- This entry needs 7 credentials (1 required). The generated config carries placeholders, so it will fail in the editor rather than at runtime if they are left unset.

## Blast radius

Moderate blast radius — holds an api key; runs on your machine.
- Floor 26, ceiling 26 (tier: moderate)
- This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score.

## Machine-readable views of this entry

- Signed JSON: https://forgeregistry.com/api/v1/packages/presign-guard-wallet-mcp
- Install plan: https://forgeregistry.com/api/v1/packages/presign-guard-wallet-mcp/install-plan
- Alternatives: https://forgeregistry.com/api/v1/alternatives/presign-guard-wallet-mcp
- HTML page: https://forgeregistry.com/registry/presign-guard-wallet-mcp
- MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan`

## About this document

Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.