{"name":"sanction","type":"agent-wallet","display_name":"Sanction — Agent Wallet","description":"The wallet an AI agent carries. Policy, budget, clearance, and evidence travel with the agent. Counterparties verify a mandate here before they work, sell, or settle.","version":"0.7.0","homepage":"https://getsanction.com","carry":{"mcp_stdio":{"command":"npx","args":["sanction-mcp"],"package":"sanction-mcp"},"mcp_remote":"https://onesanction.com/mcp","rest":"https://onesanction.com/api/v1"},"present":{"mandate":"https://onesanction.com/api/v1/exec","format":"execution-jwt","alg":"HS256","issuer":"sanction"},"verify":{"mandate":"https://onesanction.com/api/v1/mandate/verify"},"evidence":{"export":"https://onesanction.com/api/v1/audit/export","verify":"https://onesanction.com/api/v1/audit/verify"},"tools":[{"name":"sanction_authorize","description":"Ask before any purchase, subscription, or transfer."},{"name":"sanction_authorize_provision","description":"Ask before provisioning seats, licenses, or infrastructure."},{"name":"sanction_authorize_tool","description":"Ask before invoking another tool, shell command, deploy, or send."},{"name":"sanction_authorize_capability","description":"Ask before acquiring a skill, plugin, or new API."},{"name":"sanction_check_authorization","description":"Poll an escalated request for its one-use grant."},{"name":"sanction_log_tokens","description":"Record LLM token usage against the wallet's budgets."},{"name":"sanction_log_outcome","description":"Record a confirmed business outcome for cost-per-outcome ceilings."},{"name":"sanction_request_execution","description":"Mint a short-lived mandate (execution JWT) for a child agent or counterparty."},{"name":"sanction_inject_credential","description":"Retrieve a vaulted secret under that mandate. Audit-logged."},{"name":"sanction_wallet_status","description":"Today and month-to-date spend, token cost, and pending approvals."}],"honesty":{"enforcement":"cooperative","interception":"llm-gateway-only","note":"stdio MCP is agent-invoked: the host must call Sanction before acting. The hosted URL (`/mcp`) is the same cooperative wallet over Streamable HTTP. The LLM gateway intercepts inference spend without cooperation. A hosted MCP broker that intercepts tools/call is Next — until then, do not claim a hijacked agent cannot spend."}}