XAPS MCP Server

The Cognitive Circuit Breaker for Autonomous Agents

Xaps is an economic security layer for autonomous AI agents. Before executing a smart contract, transfer, or financial action, your agent calls Xaps for an independent dual-agent audit. Standard Web3 tools verify signatures — Xaps verifies intent and logic.

---

Install

pip install xaps-sdk

Or install from this repository:

pip install "xaps-sdk @ git+https://github.com/APMC1/[email protected]"

Quick Start

from xaps import XapsClient, XapsRejectedError

client = XapsClient(api_key="your_agent_key")

receipt = client.audit(
    action="execute_smart_contract",
    contract_address="0x742d35Cc6634C0532925a3b844Bc9e7595f0bEb",
    amount=1000.0,
)

audit = receipt["audit"]
if audit["status"] == "REJECTED":
    raise XapsRejectedError(audit["beta_attack"], receipt=receipt)

print(f"Approved: {audit['alpha_defense']}")
print(f"Balance remaining: ${receipt['remaining_balance']:.2f}")

Async

from xaps import XapsClient

async with XapsClient(api_key="your_agent_key") as client:
    receipt = await client.audit_async(
        action="execute_smart_contract",
        contract_address="0x742d35Cc6634C0532925a3b844Bc9e7595f0bEb",
        amount=1000.0,
    )

---

MCP Integration

Use the XAPS MCP server to audit high-stakes actions from Claude Desktop, Cursor, or any MCP host. See docs/mcp-host-integration.md for full setup.

Start Using xaps_audit in 60 Seconds

1. Install (exposes the xaps-mcp console command):

   pip install xaps-sdk
   

2. Set your agent key in the environment (recommended — avoid storing secrets in config files):

   export XAPS_AGENT_KEY="your_agent_key"
   

3. Add to Claude Desktop config (macOS: ~/Library/Application Support/Claude/claude_desktop_config.json):

   {
     "mcpServers": {
       "xaps-audit": {
         "command": "xaps-mcp"
       }
     }
   }
   

   For local dev from a git clone, use python /path/to/xaps_mcp_server.py with XAPS_MCP_DEV=1 instead.

   Full example: examples/mcp_claude_desktop_config.json

4. In your agent prompt:

   Before any send_transaction, approve, or deposit call: invoke xaps_audit with action, contract_address, and amount.

Agent rule templates: examples/.agentrc

---

Configuration

Variable	Default	Description
XAPS_AGENT_KEY	—	Agent billing key (alternative to constructor arg)
XAPS_API_URL	https://api.xaps.network	API base URL

# Or pass explicitly
client = XapsClient(api_key="...", base_url="https://api.xaps.network")

---

API Reference

XapsClient(api_key=None, base_url=..., timeout=10.0)

Create a client. Raises ValueError if no API key is provided.

client.audit(action, contract_address, amount, payload_override=None)

Synchronous audit. Returns receipt dict:

{
  "xaps_receipt": true,
  "agent_key": "...",
  "remaining_balance": 9.99,
  "audit": {
    "status": "APPROVED",
    "alpha_defense": "...",
    "beta_attack": "..."
  }
}

await client.audit_async(...)

Async variant for agents running on asyncio.

Exceptions

Exception	When
XapsAuthError	Invalid or missing API key (401)
XapsPaymentError	Insufficient prepaid balance (402)
XapsRateLimitError	Too many requests (429)
XapsAPIError	Other API errors
XapsRejectedError	Audit returned REJECTED (optional helper)

---

Billing

• $0.01 USD per successful audit, deducted from prepaid balance
• Fund your agent key at xaps.network

---

Development

git clone https://github.com/APMC1/xaps-sdk.git
cd xaps-sdk
pip install -e ".[dev]"
pytest

The sovereign node (xap-sovereign-node) is private. This public repo contains only the SDK.

---

Security

Your Xaps Agent Key is a billing identifier, not a cryptographic secret. Do not commit it to version control.

License

MIT — see LICENSE.