EVIDIQ Aegis

Is this transaction safe to authorize under financial policy?

Autonomous financial policy engine, budget limits, velocity controls, escrow validation, and x402 settlement risk manager for AI agent fleets.

evidiq.dev · Aegis Docs · Agent Skill · EVIDIQ Main · Aegis MCP

---

As autonomous AI agents pay, hire, and settle contracts with zero human in the loop, unconstrained budget spending and unvalidated financial parameters pose critical existential risks. An agent loop executing runaway API requests or releasing escrow funds without verifying deliverable checksums can drain wallet reserves in seconds.

EVIDIQ Aegis is the autonomous financial policy engine and budget guard for AI agent fleets.
It evaluates payment payloads, budget velocity caps, escrow release terms, and slippage inflation before money or data moves — returning structured risk verdicts and EIP-191 signed attestations.

Launch status: live endpoint. The MCP server is deployed at https://mcp.evidiq.dev/aegis/mcp, paid calls settle through the official OKX Payment SDK, and the OKX.AI listing (Agent #10367) is now listed.

Aegis never holds agent private keys, never custody funds, and operates with zero model in the verdict path.

---

Position in the family

Service	Question	Boundary against Aegis
Core	Can I trust this agent?	Counterparty risk before work. Aegis guards financial transactions.
Notary	Can I prove this output happened?	Provenance of an output. Aegis enforces policy rules.
Operator	Can an agent act in a browser?	Browser execution; Aegis guards payment velocity & budget caps.
Sentinel	Is this MCP safe?	Scans service endpoints. Aegis enforces transaction financial policy.
Atlas	What does this dataset say?	Analyses data. Aegis checks spending limits and escrow release.
Lineage	Is this dependency trustworthy?	Supply chain. Aegis guards financial parameters.
Vault	What did the agent do?	Records history. Aegis provides signed financial attestations.
Redact	Is this content safe to share?	Sensitive values. Aegis verifies financial payment payloads.
Warden	Is this code safe to commit?	Source code quality. Aegis verifies payment transactions.
Assay	What will this transaction do?	Pre-signature intent. Aegis enforces spending velocity & escrow terms.
Rubric	Does this deliverable meet the contract?	Deliverable criteria. Aegis validates financial release terms.
Bastion	Is this deployment config safe to apply?	Infrastructure config. Aegis guards financial policy.
Aegis	Is this transaction safe to authorize under financial policy?	Autonomous financial policy engine & budget guard.

---

What it does

• Payment Policy Verification — Evaluates payment payloads against daily budget caps, recipient allowlists, replay nonces, and EVM address sanity.
• Spending Velocity Audits — Tracks historical spending across 60m, 6h, 24h, and 7d windows to prevent runaway loops.
• Escrow Release Inspection — Validates escrow terms, deliverable SHA-256 hashes, and provider signatures prior to fund release.
• Slippage & Fee Inflation Guard — Detects protocol price surges, unexpected gas fee spikes, and slippage bounds.
• Signed Attestation Reports — Binds evaluation findings into EIP-191 signed cryptographic attestation reports.
• Deterministic Verdicts — Evaluates rules strictly: failing blocker rules yields BLOCK; high risk yields REVIEW; clean evaluations yield PASS.
• Pay per check — Five paid policy tools at 0.005–0.03 USDT0; five preflight and discovery utilities are free.

---

Route to Aegis when

Use Aegis before executing financial transfers or authorizing escrow releases: before initiating x402 payments, before transferring EVM tokens, or before settling autonomous contracts.

Do not send it private keys — ever. Do not route infrastructure configs here (that is Bastion), smart contract code is Assay, source code is Warden, endpoint reachability is Sentinel, and action logging is Vault.

A natural chain: validate_transfer_params → verify_payment_policy → audit_spending_window → attest_budget_verdict → append_record (Vault).

---

Use it from any agent

# Read the public Skill document
curl -s https://mcp.evidiq.dev/aegis/skill.md

# Inspect current x402 pricing discovery
curl -s https://mcp.evidiq.dev/aegis/x402

# Connect the remote MCP server (OpenClaw)
openclaw mcp add evidiq-aegis --transport streamable-http --url https://mcp.evidiq.dev/aegis/mcp

# Connect the remote MCP server (Claude Code)
claude mcp add --transport http evidiq-aegis https://mcp.evidiq.dev/aegis/mcp

Endpoints

Path	Method	Purpose
/mcp	POST	The MCP endpoint (Streamable HTTP).
/mcp	HEAD	402 — answered explicitly so a reachability prober never hangs.
/x402	GET	Public pricing discovery listing all ten tools and the v2 challenge.
/skill.md	GET	The agent-readable Skill document.
/health	GET	Service health & payment gate status.

---

MCP tools — five paid, five free

Prices are fixed atomic USD₮0 amounts.

Paid

Tool	Atomic	USDT0	Description
verify_payment_policy	5000	0.005	Evaluates payment payload against budget velocity, recipient allowlists, replay nonces, and EVM parameters
audit_spending_window	10000	0.010	Audits wallet spending velocity across 60m, 6h, 24h, and 7d historical windows
inspect_escrow_release	15000	0.015	Inspects escrow terms, deliverable SHA-256 checksums, and provider addresses before fund release
guard_slippage_inflation	20000	0.020	Guards against fee inflation, protocol price surges, and slippage spikes on cross-agent transactions
attest_budget_verdict	30000	0.030	Binds financial policy evaluation findings into an EIP-191 signed cryptographic attestation report

Free

Tool	Returns
aegis_capabilities	Engine capabilities, policy profiles, rule catalog, auxiliary checks, and pricing specification
validate_transfer_params	Preflight check for financial transfer payload EVM formatting and address sanity
estimate_cost	Price quotation lookup tool for any Aegis tool
verify_aegis_report	Offline verification tool for Aegis report integrity digests and EIP-191 signatures
get_artifact	Retrieve stored policy reports or default policy specifications

---

Proven on-chain

Live paid calls against the deployed endpoint completed the full x402 v2 round trip through the official OKX facilitator:

Tool	Amount	Settlement tx	Receipt	Signer	Verified
verify_payment_policy	0.005 USDT0 (5000 atomic)	0x6f74549e…96cca86	0x1	0x8a3c7524…ee7D	valid:true, digestMatch:true, signatureValid:true

---

OpenClaw Live VPS Status & Execution Proof

# Probing Aegis capabilities via OpenClaw
$ openclaw mcp probe evidiq-aegis
◇ OpenClaw 2026.7.1-beta.5 (b6387af)
MCP probe (/root/.openclaw/openclaw.json):
- evidiq-aegis: 10 tools (5 Paid, 5 Free)

---

OKX.AI Marketplace Registration

Property	Value
Agent ID	#10367
Agent Name	EVIDIQ Aegis
Listing Status	Listed on OKX.AI
Registration Tx	0x098d13bb4cbb595f778d817cec58625fe3ea9b4dac5fe1fd22d7f5e297688aad
OKX Agent URL	https://www.okx.ai/agents/10367
Communication Addr	0xfB9b43aD328c55eF3267c3Ccd262CBfAca89943d
Services Registered	10 Services (5 Gated: $0.005–$0.03, 5 Ungated: $0.00)

---

Architecture

flowchart TB
    agent["<b>AI agent</b><br/>MCP client"]
    request{"Tool call<br/>free or paid?"}
    agent -->|POST /aegis/mcp| request

    free["Free preflight<br/>capabilities · validate<br/>estimate · verify · get_artifact"]
    gate["x402 v2 gate<br/>EIP-3009 exact · pay per policy check"]
    xlayer[("X Layer<br/>USD₮0 · eip155:196")]
    request -->|free helper| free
    request -->|paid policy check| gate
    gate -. verify and settle .-> xlayer

    subgraph aegis["EVIDIQ Aegis trust boundary"]
        direction TB
        parse["1. Payload validator<br/>EVM address & parameter sanity"]
        engine["2. Policy Engine<br/>budget velocity · allowlists · escrow"]
        report["3. Canonical report<br/>SHA-256 digest · EIP-191 signature"]
        artifacts["4. Content-addressed artifacts<br/>report & policy specifications"]
        parse --> engine --> report --> artifacts
    end

    free --> parse
    gate --> parse

    response["<b>MCP response</b><br/>verdict + attestation + report"]
    artifacts --> response

    classDef client fill:#312e81,stroke:#a78bfa,color:#ffffff,stroke-width:2px;
    classDef payment fill:#052e16,stroke:#4ade80,color:#ffffff,stroke-width:2px;
    classDef core fill:#0f172a,stroke:#38bdf8,color:#ffffff,stroke-width:2px;
    classDef output fill:#4c1d95,stroke:#c4b5fd,color:#ffffff,stroke-width:2px;
    class agent,request client;
    class free,gate,xlayer payment;
    class parse,engine,report,artifacts core;
    class response output;
    style aegis fill:#0f172a,stroke:#38bdf8,color:#e0f2fe,stroke-width:2px;

---

Security boundaries

• Aegis evaluates supplied financial payloads and transaction parameters; it never executes arbitrary smart contract transactions or handles wallet keys.
• Every policy check runs deterministically against configured rules and historical velocity windows.
• Reports are canonicalized before hashing so integrity checks are reproducible across platforms.
• EIP-191 signatures prove authenticity and non-repudiation of the attester key.

---

Self-host

Requirements: Node.js 22+ and npm.

npm install
npm run build
npm start

Or run the container:

docker build -t evidiq-aegis-mcp .
docker run -d --name evidiq-aegis-mcp -p 3013:3013 --env-file .env evidiq-aegis-mcp

Local routes: POST /mcp · GET /skill.md · GET /x402 · GET /health

---

Development

npm install      # install dependencies
npm run build    # compile TypeScript to dist/
npm test         # run the test suite
npm run dev      # start local watch server

---

Links

• Website — https://evidiq.dev
• Aegis documentation — https://evidiq.dev/docs/aegis
• Live MCP endpoint — https://mcp.evidiq.dev/aegis/mcp
• Agent Skill — https://mcp.evidiq.dev/aegis/skill.md
• x402 discovery — https://mcp.evidiq.dev/aegis/x402
• Service health — https://mcp.evidiq.dev/aegis/health
• OKX.AI Agent #10367 — https://www.okx.ai/agents/10367
• OKX Payment SDK guide — https://web3.okx.com/onchainos/dev-docs/payments/service-seller-sdk
• Registration tx — https://www.oklink.com/xlayer/tx/0x098d13bb4cbb595f778d817cec58625fe3ea9b4dac5fe1fd22d7f5e297688aad
• EVIDIQ main repository — https://github.com/evidiq/evidiq
• x402 Protocol — https://x402.org

---

License

MIT © 2026 EVIDIQ — see LICENSE. Part of the EVIDIQ trust and execution layer for the AI agent economy.