SpendGate MCP server
online · 100% uptimeScore a planned spend before an agent pays. Verdicts: approve, ask_human, or block.
0 stars
Reviews
Write oneNobody has reviewed SpendGate yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
SpendGate tools (3)
write = sends, deletes, buys or postsget_api_keyFreeMint a free SpendGate API key. The secret is returned once. Store it and send it as Authorization: Bearer, or as api_key on later score_spend calls. Do not call this on every turn.
get_quotaFreeRead how many free SpendGate scores remain today for this anonymous caller or API key. Does not consume a score and is not billed.
score_spendFreeScore a planned payment before sending it. Call this before any tool that transfers crypto, buys a gift card, starts a subscription, or pays an API or merchant. Pass amount in USD, category, merchant or endpoint URL, and any budget remaining. Returns score 0-100, verdict approve | ask_human | block, reasons, and recommended_action.
Public scan report
scanner v0.1.10 · 2026-10-15 · same rubric, same numbers if you re-run it
- –Code scanremote-only server, no package to scann/a
- Live reliabilityremote reachable in 932ms20/20
- Tool poisoning3 tool descriptions checked15/15
- Auth qualityAPI key sent as a header8/15
- Maintenancelast push 0 days ago15/15
- Maintainer identityregistry namespace matches repository owner6/10
How SpendGate compares
Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 85/100
- higher than 73% of 4,460 AI and agents servers
- Tools
- 3
- the typical AI and agents server has 6
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- Uptime
- 100%
- of our recent checks; the typical remote AI and agents server answers 100%
- Response time
- 80 ms
- faster than 91% of 2,331 AI and agents servers
What its tools let an agent do: 3 read
Install SpendGate in Claude Code, Cursor or VS Code
claude mcp add --transport http spendgate https://spendgate.toolweather.workers.dev/mcp
What the publisher says
From the SpendGate repository's README, as published. We do not edit it. Read it on GitHub
SpendGate
SpendGate helps an autonomous agent decide whether to approve a planned spend before it pays.
It returns a score from 0 to 100, a verdict of approve, askhuman, or block, short reasons, a recommendedaction, and checked_at. The score is deterministic. Rewording the purpose will not fish for a better verdict.
SpendGate does not send the merchant payment and does not hold a wallet key. Overage fees, when configured, are x402 USDC payments on Base to the PAY_TO address you set.
When an agent should use it
Call score_spend or POST /v1/score before a tool transfers crypto, buys a gift card, starts a subscription, or pays an API or merchant.
- Pass the amount in USD, the category, the merchant or endpoint URL, and any daily or monthly budget you still have. If the amount is over a budget you supply, the verdict is block.
- approve means pay. ask_human means stop and ask a person. block means do not pay.
- Amounts strictly under the free micro threshold (default $1) return approve, unless they exceed a budget you passed in.
- Skip it for pure reads that do not spend. If you do check a health probe, use category status_check.
- Keep your own hard cap. SpendGate is a second look, not the only lock.
- Do not retry with a softer purpose to change the score. v1 does not store the body, and the math does not depend on prose.
Free spend watches are not in v1.
Scoring v1
Start at 100, then subtract. Policy version 1. Full constants: GET /v1/policy.
Thresholds after penalties: 70 approve, 40 ask a human, below that block.
Hard overrides, applied after the raw score:
- Amount greater than dailybudgetremaining or monthlybudgetremaining forces block and caps the published score at 24. Omitted budgets are not checked. Equal to the remaining budget is allowed.
- Otherwise, amount strictly under the micro threshold forces approve and raises the published score to at least 80.
agent_id is echoed and not scored.
Free tier and x402
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
SpendGate: common questions
- Is SpendGate MCP server safe?
- Yes, by our scan: it is graded A (85/100). Read the SpendGate safety report
- How do I install SpendGate?
- It runs remotely at spendgate.toolweather.workers.dev. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does SpendGate need an API key?
- Yes. The registry entry asks for
Authorization. - Is SpendGate maintained?
- The last commit was 20 days ago (2026-10-15). The latest release is v1.0.0.
- Is SpendGate up?
- 100% of our last 28 checks got an answer. We check remote servers about four times a day.
- What can I use instead of SpendGate?
- Servers from other publishers that do the same job: Decionis MCP server, CHAP Coordinator MCP server and three.ws Autopilot MCP server.
- How does SpendGate compare with other AI and agents MCP servers?
- safety score 85/100 (higher than 73% of 4,460 AI and agents servers); tools 3 (the typical AI and agents server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to SpendGate
Same job from other publishers: the closest match first, then the best rated.
- DecionisAuthorize consequential AI agent actions before executionnot reviewedEstablishedA
- CHAP CoordinatorAuditable records of human decisions over AI agent work. Approvals, edits, overrides, escalations.not reviewedEstablishedA
three.ws AutopilotSet autopilot scopes and a daily SOL spend cap, then propose, execute, and undo agent actions.not reviewedEstablishedB- Agent Security ScannerSecurity layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.not reviewedEstablishedC
