@fidacy/mcp
com.fidacy/ai-agent-firewall · version 0.24.12 · 2,636 weekly npm downloads · audited 2026-11-03
Notes
Findings
No hidden-instruction or invisible-character findings in any tool, prompt, or resource description.
Claude Connectors Directory readiness
- ✅ Every tool has a title 13 of 13 tools
- ✅ Every tool declares readOnlyHint or destructiveHint 13 of 13 tools
- ✅ Tool names are 64 characters or fewer All within limit
- ❌ Descriptions avoid instructions about model behavior or other tools 1 of 13 descriptions reference other tools or tell the model what it must do: assess_action
- ✅ No hidden instructions or invisible characters in tool metadata None found
Checks the directory's published tool requirements that are visible from tools/list. Passing them does not guarantee acceptance.
What this server's tools can do
- Makes outbound web requests:
request_payment
Not a vulnerability by itself. It tells you what an injected prompt could ask this server to do, so you can decide which tools need approval.
Supply chain
- Install scripts: yes (postinstall): code runs on install, before the server starts
- npm provenance: no
- Source repository linked: yes
- License: Apache-2.0
- Direct dependencies: 2
Tools (13)
| Name | Title | Hint | Description |
|---|---|---|---|
request_payment | Request Payment Authorization | writes | Authorize a payment action against the active Fidacy mandate. Returns an ALLOW with a signed grant, or a DENY with the violated rule. The downstream executor MUST require the grant. Call this before any payment; never pa… |
run_stripe_test_transaction | Run Stripe Test Transaction Through Fidacy | writes | Run Fidacy's fixed Stripe TEST-mode transaction: a $24.00 test payment is created, an out-of-scope export is denied, a tampered $240.00 refund is refused before Stripe, the exact $24.00 refund executes once, and replay i… |
verify_mandate | Verify Active Mandate | read-only | Return the active mandate envelope (caps, allowed payees/categories, window, revocation) and Fidacy's Ed25519 public key for grant verification. |
get_audit_proof | Get Audit Proof | read-only | Return the tamper-evident, hash-chained proof for a decision id, including whether the chain is intact and the public key it verifies against. |
spend_summary | Spend Summary (what my agents spent and what was blocked) | read-only | Operator report over a time window: how many payment decisions were made, how much was paid and to whom, how much was blocked before executing, and which mandate rules did the blocking. Read-only, works offline against t… |
list_decisions | List Recent Payment Decisions | read-only | List recent agent payment decisions, newest first, with payee, amount, the agent's stated reason, and for blocked ones the rule that stopped it. Filter by status to answer 'what got blocked' directly. Read-only, works of… |
explain_decision | Explain a Decision (why was this allowed or blocked) | read-only | Explain one decision in plain language: what was requested, what the mandate did about it, why, and the tamper-evident proof for it. Use when an operator asks why a specific payment was blocked. |
sentinel_alerts | Sentinel Alerts (allowed, but outside this agent's pattern) | read-only | Predictive pattern alerts from the local audit chain: first-ever payee, amount spikes vs this agent's own history, velocity bursts, payments riding the mandate ceiling, and retries after a denial (the behavior our Model … |
assess_action | Assess Action (Signed Trust Verdict) | read-only | Call this BEFORE the agent does something on a human's behalf that is not a payment and cannot be taken back: sending a message or email a person will act on, placing a voice call, filing a claim, committing to a promise… |
anchor_artifact | Anchor Artifact (Bitcoin-anchored integrity proof) | writes | Call this the MOMENT a document that someone could later dispute is created or received — a contract, an invoice, a claim, a prescription, a report you generated, a file you were given. Do not wait to be asked and do not… |
check_artifact | Check Artifact (was this hash anchored?) | read-only | Check whether an artifact was anchored by this account and the state of its Bitcoin checkpoint. Give a file `path` (hashed locally, never uploaded) or a `sha256`. If the current hash of a file does NOT match any anchored… |
upgrade | Upgrade to a Fidacy account | read-only | Start upgrading this local install to a real Fidacy account (server-backed signed verdicts, anchored proof, higher volume). Returns a link to open; your anonymous usage is preserved and migrated to the new account. |
register_email | Register operator email (opt-in) | writes | Register the operator's email so their agent's protection history can attach to a real Fidacy account and Fidacy can reach them. ONLY call this when the human operator has explicitly given their email and agreed to be co… |
Check your own setup
npx mcpvetter scan --liveBadge
Add this to a README:
[](https://mcpvetter.com/servers/fidacy-mcp)Publish this server?
Get the MCPVetter verified badge, a re-audit within 24 hours of every npm release, and an email whenever tools, findings, or Claude directory readiness change. $29 per server per month. You prove ownership first, free.