{
  "markdown": "# DingDawg Agent Spend Policy MCP\n\nA small, local MCP server that deterministically evaluates whether a proposed\nagent spend action matches a supplied policy.\n\nIt returns one of `ELIGIBLE`, `DENY`, or `STEP_UP`, with a stable reason code.\n`ELIGIBLE` is local policy evidence only. It is **not** payment authorization.\n\n## Safety boundary\n\nThis package does not hold funds, private keys, payment credentials, customer\ndata, or settlement authority. It does not sign, send, settle, custody, or\nrecord payments. It makes no network requests.\n\nA production payment adapter needs separate, independently verified controls\nfor authenticated policy/action provenance, canonical payload hashing, durable\natomic budget reservation and replay protection, customer-controlled signing,\nrail validation, and settlement reconciliation.\n\n## Install\n\n```bash\nnpx -y @dingdawg/agent-spend-policy-mcp\n```\n\nConfigure it as a local stdio MCP server:\n\n```json\n{\n  \"mcpServers\": {\n    \"dingdawg-agent-spend-policy\": {\n      \"command\": \"npx\",\n      \"args\": [\"-y\", \"@dingdawg/agent-spend-policy-mcp\"]\n    }\n  }\n}\n```\n\n## Tool\n\n`evaluate_spend_policy` accepts an evaluation time, a policy, a proposed action,\nand the already-spent amount. All money is passed as integer micro-unit strings,\nnever JavaScript floating-point numbers.\n\nThe caller supplies the clock and already-spent value; therefore this tool is\nsafe for dry runs and local evidence, not a replacement for a trusted payment\nor accounting system.\n\n## Agent contract\n\nThe versioned machine-readable contract is\n[`capabilities.json`](./capabilities.json). It describes the only tool this\npackage exposes, its required inputs, its three possible outcomes, and its\nnon-negotiable safety boundary.\n\n- Transport: local stdio MCP\n- Tool: `evaluate_spend_policy`\n- Required inputs: `evaluationTime`, `policy`, `action`, and\n  `alreadySpentMicros`\n- Outputs: `ELIGIBLE`, `DENY`, or `STEP_UP`, each with a stable reason code\n- Side effects: none\n- Credentials, payment execution, custody, signing, settlement, and network\n  access: not supported\n\nThe manifest is package-source evidence for this release, not a promise of a\nhosted agent-discovery endpoint. `ELIGIBLE` remains local policy evidence only,\nnot payment authorization.\n\n## Development\n\n```bash\nnpm install\nnpm test\nnpm run pack:check\n```\n",
  "bytes": 2328,
  "sha": "b3450e2317ec0a684a1de9cab96f79633fda0f90f121ccdc09da1d4c66e7d625",
  "repo_slug": "dingdawg/dingdawg-agent-spend-policy-mcp",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_io_github_dingdawg_agent_spend_policy_mc_3bb27a9c/readme"
}