{"name":"sanction","type":"agent-wallet","display_name":"Sanction — Agent Wallet","description":"The wallet an AI agent carries. Policy, budget, clearance, and evidence travel with the agent. Counterparties verify a mandate here before they work, sell, or settle.","version":"0.8.0","homepage":"https://getsanction.com","carry":{"mcp_stdio":{"command":"npx","args":["sanction-mcp"],"package":"sanction-mcp"},"mcp_remote":"https://getsanction.com/mcp","mcp_broker":{"url_template":"https://getsanction.com/mcp/broker/{upstream}","register":"https://getsanction.com/api/v1/broker/upstreams","note":"Point the host at the broker instead of the upstream MCP server: every tools/call is authorized by the wallet's policy before it is forwarded, and the upstream credential lives in the wallet's vault, never with the agent."},"rest":"https://getsanction.com/api/v1"},"present":{"mandate":"https://getsanction.com/api/v1/exec","format":"execution-jwt","alg":"HS256","issuer":"sanction"},"verify":{"mandate":"https://getsanction.com/api/v1/mandate/verify"},"evidence":{"export":"https://getsanction.com/api/v1/audit/export","verify":"https://getsanction.com/api/v1/audit/verify"},"tools":[{"name":"sanction_authorize","description":"Ask before any purchase, subscription, or transfer."},{"name":"sanction_authorize_provision","description":"Ask before provisioning seats, licenses, or infrastructure."},{"name":"sanction_authorize_tool","description":"Ask before invoking another tool, shell command, deploy, or send."},{"name":"sanction_authorize_capability","description":"Ask before acquiring a skill, plugin, or new API."},{"name":"sanction_check_authorization","description":"Poll an escalated request for its one-use grant."},{"name":"sanction_log_tokens","description":"Record LLM token usage against the wallet's budgets."},{"name":"sanction_log_outcome","description":"Record a confirmed business outcome for cost-per-outcome ceilings."},{"name":"sanction_request_execution","description":"Mint a short-lived mandate (execution JWT) for a child agent or counterparty."},{"name":"sanction_inject_credential","description":"Retrieve a vaulted secret under that mandate. Audit-logged."},{"name":"sanction_wallet_status","description":"Today and month-to-date spend, token cost, and pending approvals."}],"honesty":{"enforcement":"cooperative+broker","interception":"gateway+mcp-broker","note":"Two enforcement modes, named precisely. INTERCEPTED: the LLM gateway (inference spend) and the MCP broker (`/mcp/broker/{upstream}` — tools/call is authorized before it is forwarded, so on brokered traffic a hijacked agent cannot invoke what policy forbids). COOPERATIVE: stdio MCP and the hosted wallet URL (`/mcp`) — the host must call Sanction before acting. Traffic that goes straight to an upstream without the broker is not governed; route it through the broker if it must be."}}