AgentRaaS wrap MCP server

AgentRaaS

The reliability layer for what AI agents do.

AgentRaaS sits between your agents and the APIs they act on. Every call runs once even when it is retried, is checked against what that agent may do, waits for a human when it is risky, and is recorded. Connect by webhook URL, SDK headers or MCP. The core is open source and free to self-host.

Look first: live read-only demo, no signup. Built-in services include Stripe, Slack, GitHub, HubSpot, Resend, SendGrid, Notion, Zendesk, Jira, Twilio, Shopify and Alpaca (trading); any other HTTP API works as a Custom Action and any MCP tool through agentraas wrap.

The problem

Your n8n workflow calls Stripe. It times out, n8n retries, and the customer is charged twice. Your agent creates a HubSpot contact, the response is lost, the agent retries, and now there are two.

How it works

flowchart LR
    Agent["Agent<br/>(n8n, Python, MCP)"] -->|request| P
    subgraph P["AgentRaaS"]
        direction TB
        D["Deduplicate"] --> V["Policies and validation"] --> C["Circuit breaker"] --> A["Audit log"]
    end
    P -->|forwarded once| API["API<br/>(Stripe, Twilio, HubSpot, any URL)"]

1. Your agent calls AgentRaaS instead of the API.
2. AgentRaaS claims a dedup slot in Redis for that exact request.
3. The first call is forwarded and its result stored.
4. A retry gets the stored result, or 409 while the first is still in flight.

A call that times out after it was sent is treated as outcome unknown: never retried, its slot kept, sent to the dead-letter queue. Every forwarded call also carries Idempotency-Key: agentraas-, so providers that honor it (Stripe and others) run it once even on a replay.

Free tools, no server needed

pip install agentraas runs entirely on your machine.

agentraas chaos --mock -- python my_agent.py   # find calls that would run twice

from agentraas.local import exactly_once

@exactly_once()
def charge(customer, amount, idempotency_key=None):
    return stripe.Charge.create(customer=customer, amount=amount, idempotency_key=idempotency_key).id

Vercel AI SDK (npm install agentraas).

• protect_tool for LangChain/LangGraph and CrewAI, protectTools for the

tools and a log. In the official MCP Registry.

• agentraas wrap -- gives any MCP server exactly-once write

delete data, run code or send messages, without calling any of them (GitHub Action for pull requests).

• agentraas scan lists which tools in your MCP servers can move money,

• The chaos tester exits non-zero, so it can fail CI (GitHub Action).

Details: src/sdk/README.md, src/sdk-js.

Self-host

git clone https://github.com/agentraas/agentraas.git
cd agentraas
./install.sh

install.sh generates the secrets, builds the image (the first Rust build takes a few minutes), starts Postgres, Redis and MinIO, and runs the migrations. Then open http://localhost:13000/dashboard and register. Kubernetes: a Helm chart is in infra/helm/. Render: one-click deploy.

Works with Docker or Podman. Linux: either one. macOS: Docker Desktop (or Colima). Windows: Docker Desktop with WSL2; run ./install.sh from a WSL terminal, with the repo cloned inside WSL (not on C:\).

On SELinux hosts, install.sh relabels the bind mounts. After changing files by hand, recreate (docker compose or podman-compose, down then up -d) rather than restart.

What you get

Shortened. The full README is on GitHub.