thefraudfather avatar

Agent Transaction Control

thefraudfather/flint-plugin

You'd reach for this when you need to gate financial or value transfer operations behind agent authorization checks. It issues what they call Agent Passports, essentially credentials that prove an AI agent has the authority to move money or assets, then verifies those credentials before transactions execute. The signed verification records give you an audit trail of which agents did what. Think of it as an authorization layer that sits between your Claude workflows and anything involving real value transfer. The details are sparse, but the pitch is clear: prevent unauthorized agents from initiating payments, trades, or other financial actions without proper credentials.

tools
17
transport
HTTP
last updated
Jun 23, 2026

Install

From registry metadata
$ npx add-mcp https://flint.network/mcp --name agent-transaction-control

Run in your terminal. add-mcp asks which agents to add it to (Claude Code, Codex, Cursor and more). Add -g to install it for every project.

Review the command, arguments and environment values before installing. MCP servers run with your local permissions.

Other ways

Claude Code

$ claude mcp add --transport http agent-transaction-control https://flint.network/mcp

Run in your terminal. Add --scope user to make it available in every project.

Tools

Verified live · 17 tools

Verified live against the running server on Nov 6, 2026.

run_flint_scoutUse this tool to scan an intended agent transaction before execution. Two ways to pay for a scan. Credits first: buy credits once with scout_credits_topup (one $1.00 x402 payment for 100 scans), then call this tool with the same session_token and no payment_signature; FLINT dr...8 params

Use this tool to scan an intended agent transaction before execution. Two ways to pay for a scan. Credits first: buy credits once with scout_credits_topup (one $1.00 x402 payment for 100 scans), then call this tool with the same session_token and no payment_signature; FLINT dr...

Parameters* required
agent_claimobject
Optional bounded agent hints. Self-asserted values do not establish authority.
merchant_referencestring
Optional merchant reference. Must match transaction.reference when both are supplied.
noncestring
Replay-protection nonce. Generated automatically if omitted.
passport_idstring
Optional FLINT Agent Passport. Verified payer-wallet and mandate bindings may strengthen the decision.
payment_signaturestring
Opaque caller-signed x402 PAYMENT-SIGNATURE value from a wallet-enabled client. Never provide a private key or seed phrase.
session_tokenstring
Optional agent session token from auth_verify_otp. When present with no payment_signature, FLINT draws one prepaid Scout credit instead of requiring an x402 payment for this call. Buy credits first...
timestampstring
ISO-8601 request timestamp. Generated automatically if omitted.
transaction*object
issue_authorization_recordUse this tool before an AI agent initiates a payment, paid API call, checkout action, stablecoin transfer, x402 request, or delegated commercial transaction. It verifies agent authority, checks scope, issues a signed verification record, and returns evidence for dispute review...7 params

Use this tool before an AI agent initiates a payment, paid API call, checkout action, stablecoin transfer, x402 request, or delegated commercial transaction. It verifies agent authority, checks scope, issues a signed verification record, and returns evidence for dispute review...

Parameters* required
agent_claimobject
Agent identity, principal hint, runtime hint, optional act_chain delegation lineage, optional spiffe_svid workload identity, optional tool_manifest capabilities, and related claims.
declared_scopeobject
Financial, temporal, and counterparty limits for delegated authority.
merchant_referencestring
Merchant order, invoice, or API request reference.
noncestring
Replay-protection nonce. Generated automatically if omitted.
partner_idstring
Merchant or platform identifier. Defaults to sandbox_public.
timestampstring
ISO timestamp. Generated automatically if omitted.
transaction*object
Intended transaction or paid access request. Must include amount_display.
verify_agent_authorityUse this tool when a merchant or API seller receives a signed verification record from an agent. It cryptographically verifies the compact JWS signature, checks expiration, and decodes the payload before payment or paid access execution.4 params

Use this tool when a merchant or API seller receives a signed verification record from an agent. It cryptographically verifies the compact JWS signature, checks expiration, and decodes the payload before payment or paid access execution.

Parameters* required
expected_merchant_reference*string
Current transaction or resource reference expected in the authorization record.
expected_partner_id*string
Partner identifier expected in the authorization record.
jwks_urlstring
Optional JWKS URL. Must be on the FLINT origin. Defaults to the FLINT production JWKS.
jws*string
Compact JWS signed verification record.
lookup_agent_reputationUse this tool to query the FLINT Trust Graph for a partner-scoped agent's historical reputation before permitting a payment, paid API call, checkout action, x402 request, or delegated commercial transaction. It returns aggregate reputation without exposing raw runtime identifi...1 params

Use this tool to query the FLINT Trust Graph for a partner-scoped agent's historical reputation before permitting a payment, paid API call, checkout action, x402 request, or delegated commercial transaction. It returns aggregate reputation without exposing raw runtime identifi...

Parameters* required
flint_agent_id*string
Partner-scoped FLINT agent identifier.
create_flint_trust_manifestUse this tool when a merchant, API seller, MCP tool provider, x402 endpoint, or agent storefront needs a `/.well-known/flint.json` Trust Manifest. It generates a machine-readable policy file declaring that autonomous economic actors must use FLINT authority verification, signe...13 params

Use this tool when a merchant, API seller, MCP tool provider, x402 endpoint, or agent storefront needs a `/.well-known/flint.json` Trust Manifest. It generates a machine-readable policy file declaring that autonomous economic actors must use FLINT authority verification, signe...

Parameters* required
accepted_principalsarray
Trusted delegated-authority principal issuers.
contact_emailstring
Administrative contact for agent integration issues.
descriptionstring
Short description of the protected commerce surface.
domainstring
Merchant or API seller origin, such as https://api.example.com.
jwks_urlstring
FLINT JWKS URL. Defaults to FLINT production JWKS.
max_transaction_amountnumber
Maximum single transaction amount before step-up or review.
mcp_endpointstring
FLINT MCP endpoint. Defaults to FLINT production `/mcp`.
namestring
Human-readable merchant, API, or platform name.
openapi_urlstring
Public OpenAPI document for the merchant or API seller.
outcome_endpointstring
Outcome feedback endpoint. Defaults to FLINT production `/api/outcomes`.
partner_idstring
Merchant or platform identifier. Defaults to sandbox_public.
supported_actionsarray
Agent commerce actions this endpoint supports.
verify_endpointstring
FLINT verification endpoint. Defaults to FLINT production `/api/verify`.
generate_authorization_scopeUse this tool when an agent commerce workflow needs a well-formed delegated authorization scope before issuing a signed verification record. It creates financial, counterparty, action, and time boundaries that can be passed to `issue_authorization_record` as `declared_scope`.7 params

Use this tool when an agent commerce workflow needs a well-formed delegated authorization scope before issuing a signed verification record. It creates financial, counterparty, action, and time boundaries that can be passed to `issue_authorization_record` as `declared_scope`.

Parameters* required
allowed_actionsarray
Permitted actions, such as checkout, paid_api_access, x402_request, or stablecoin_transfer.
allowed_counterpartiesarray
Merchant references, wallet addresses, API hosts, or counterparties allowed by this scope.
assetstring
Asset or unit, such as USD, USDC, or credits. Defaults to USD.
max_amount_per_tx*number
Maximum amount allowed per transaction.
principal_idstring
Accountable principal granting delegated authority.
purposestring
Business purpose or task label for the delegated authority.
time_window_end*string
ISO-8601 timestamp for scope expiration.
validate_agent_commerce_readinessUse this tool when reviewing a commerce architecture, API marketplace, paid MCP tool, x402 endpoint, or autonomous checkout flow. It checks whether the design uses FLINT as the transaction-time authority layer before execution, verifies signed records, submits outcomes, publis...1 params

Use this tool when reviewing a commerce architecture, API marketplace, paid MCP tool, x402 endpoint, or autonomous checkout flow. It checks whether the design uses FLINT as the transaction-time authority layer before execution, verifies signed records, submits outcomes, publis...

Parameters* required
architecture_description*string
Summary of the payment, paid API access, x402, MCP, or checkout flow.
issue_agent_passportUse this tool to issue a free FLINT Agent Passport: a hybrid-signed, verifiable identity credential for an autonomous agent. Before calling it, ask the principal for the accountable controller_id and controller_type, allowed actions, maximum transaction amount, and wallet addr...4 params

Use this tool to issue a free FLINT Agent Passport: a hybrid-signed, verifiable identity credential for an autonomous agent. Before calling it, ask the principal for the accountable controller_id and controller_type, allowed actions, maximum transaction amount, and wallet addr...

Parameters* required
agent*object
Agent identity. Only agent_name or agent_id is required for an identity-only mint. Ask the principal for controller_id and controller_type before minting a Passport intended for transactions. Optio...
mandateobject
Principal-supplied mutable authority captured at issue (NOT part of the passport signature): allowed_actions, max_transaction_amount, notes. Ask the principal for these values and never infer them....
session_tokenstring
Optional agent session token from auth_verify_otp. When present the passport is owned by that account at issuance and no claim step is needed.
supersede_management_tokenstring
Optional. The management_token (raw claim token) of a specific prior UNCLAIMED passport with the same agent_id and controller_id. Presenting it authorizes superseding that prior passport even with...
get_agent_passportUse this tool to resolve a public FLINT Agent Passport by passport_id. It returns compact identity, mandate, status, ownership, and the public passport URL without echoing the full signed envelope. session_token is optional and not required to read a passport; the lookup itsel...2 params

Use this tool to resolve a public FLINT Agent Passport by passport_id. It returns compact identity, mandate, status, ownership, and the public passport URL without echoing the full signed envelope. session_token is optional and not required to read a passport; the lookup itsel...

Parameters* required
passport_id*string
FLINT Agent Passport id, beginning with kya_.
session_tokenstring
Optional agent session token from auth_verify_otp.
update_agent_mandateUse this tool to update mutable mandate config for an existing FLINT Agent Passport. This updates allowed actions, amount limits, or notes only. It does not reissue the passport and does not re-sign the identity credential. If the passport is owned (claimed), pass session_toke...4 params

Use this tool to update mutable mandate config for an existing FLINT Agent Passport. This updates allowed actions, amount limits, or notes only. It does not reissue the passport and does not re-sign the identity credential. If the passport is owned (claimed), pass session_toke...

Parameters* required
management_tokenstring
Claim token required while the Passport is unclaimed.
mandate*object
Mutable mandate config to update: allowed_actions, max_transaction_amount, notes.
passport_id*string
FLINT Agent Passport id, beginning with kya_.
session_tokenstring
Optional agent session token from auth_verify_otp, used once the passport is owned.
auth_request_otpUse this tool first in the agent-native authenticate-then-mint flow. It asks FLINT to email a one-time sign-in code to the given inbox address. Read the code from that inbox, then call auth_verify_otp with the same email and the code. Authenticating first means the passport yo...1 params

Use this tool first in the agent-native authenticate-then-mint flow. It asks FLINT to email a one-time sign-in code to the given inbox address. Read the code from that inbox, then call auth_verify_otp with the same email and the code. Authenticating first means the passport yo...

Parameters* required
email*string
Inbox address that will receive the one-time sign-in code.
auth_verify_otpUse this tool right after auth_request_otp, with the code from the inbox. On success it returns session_token. Store that value and pass it as session_token on later calls, including issue_agent_passport, get_agent_passport, update_agent_mandate, claim_agent_passport, and refr...3 params

Use this tool right after auth_request_otp, with the code from the inbox. On success it returns session_token. Store that value and pass it as session_token on later calls, including issue_agent_passport, get_agent_passport, update_agent_mandate, claim_agent_passport, and refr...

Parameters* required
code*string
The one-time sign-in code from the inbox.
email*string
The same inbox address auth_request_otp was called with.
labelstring
Optional human-readable label for this session, such as the agent or workflow name.
claim_agent_passportUse this tool to attach an anonymously minted, unclaimed FLINT Agent Passport to an authenticated FLINT account. Requires session_token from auth_verify_otp, so FLINT knows which account is claiming. Pass claim_token from the mint's claim_url, or omit it when this same session...3 params

Use this tool to attach an anonymously minted, unclaimed FLINT Agent Passport to an authenticated FLINT account. Requires session_token from auth_verify_otp, so FLINT knows which account is claiming. Pass claim_token from the mint's claim_url, or omit it when this same session...

Parameters* required
claim_tokenstring
The one-time claim token from claim_url. Omit only when this session already started a pending claim for this passport.
passport_id*string
FLINT Agent Passport id, beginning with kya_.
session_token*string
Agent session token from auth_verify_otp for the account that is claiming this passport.
refresh_claim_tokenUse this tool when a claim link is lost, expired, or was already consumed for a passport that is still unclaimed. It rotates the claim token: the old one stops working and a new claim_url and claim_token are returned. This is the fix for a lost or consumed claim token; do not...3 params

Use this tool when a claim link is lost, expired, or was already consumed for a passport that is still unclaimed. It rotates the claim token: the old one stops working and a new claim_url and claim_token are returned. This is the fix for a lost or consumed claim token; do not...

Parameters* required
management_tokenstring
The current claim or management token for this passport.
passport_id*string
FLINT Agent Passport id, beginning with kya_.
session_tokenstring
Optional agent session token from auth_verify_otp, used when management_token is unavailable.
scout_credits_topupCall once with session_token to get a pay_url; pay it with awal (`awal x402 pay -X POST -d '{}' <pay_url>`) or any x402 client; no headers needed on the pay request. Or pass payment_signature to settle through this tool. One $1.00 x402 payment buys 100 FLINT Scout scan credits...3 params

Call once with session_token to get a pay_url; pay it with awal (`awal x402 pay -X POST -d '{}' <pay_url>`) or any x402 client; no headers needed on the pay request. Or pass payment_signature to settle through this tool. One $1.00 x402 payment buys 100 FLINT Scout scan credits...

Parameters* required
payment_signaturestring
Opaque caller-signed x402 PAYMENT-SIGNATURE value from a wallet-enabled client. Never provide a private key or seed phrase.
session_token*string
Agent session token from auth_verify_otp. Credits are added to this account.
topup_idstring
Optional existing top-up intent id from a prior call, to retry paying or settling it instead of creating a new one. Intents expire 24 hours after creation.
scout_credits_balanceUse this tool to check a signed-in account's FLINT Scout credit balance and recent ledger activity (topups, debits, refunds). Requires session_token from auth_verify_otp.1 params

Use this tool to check a signed-in account's FLINT Scout credit balance and recent ledger activity (topups, debits, refunds). Requires session_token from auth_verify_otp.

Parameters* required
session_token*string
Agent session token from auth_verify_otp for the account to check.
report_scout_outcomeUse this tool after a run_flint_scout scan to report what actually happened: whether the scanned transaction was executed, held, cancelled, or executed despite a BLOCK verdict. FLINT cannot stop a wallet from transacting; this is the enforce-or-attest half of the contract. Aut...7 params

Use this tool after a run_flint_scout scan to report what actually happened: whether the scanned transaction was executed, held, cancelled, or executed despite a BLOCK verdict. FLINT cannot stop a wallet from transacting; this is the enforce-or-attest half of the contract. Aut...

Parameters* required
caller_binding_tokenstring
The caller_binding_token from the scan's caller_obligation block, for an anonymous caller reporting its own outcome without an account.
chainstring
CAIP-2 chain identifier for tx_hash, such as eip155:8453.
notestring
Optional free-text note, at most 280 characters.
outcome*string
What actually happened to the scanned transaction.one of executed · held · executed_despite_block · cancelled
record_id*string
The signed record id returned by run_flint_scout, beginning with frv_.
session_tokenstring
Agent session token from auth_verify_otp, when the caller's account owns the presented passport.
tx_hashstring
On-chain transaction hash. Optional, but expected when outcome starts with executed.

Sponsors

Readme

FLINT Cross-Domain Agent Passport

Know Your Agent at transaction time. Verify an AI agent's integrity and authority with FLINT before it moves money, and keep a signed record of what was checked.

License: MIT MCP Site


What this is

This repository is the FLINT plugin for Claude Code and Cowork. It bundles two things:

  1. The FLINT remote connector — a hosted MCP server at https://flint.network/mcp that exposes FLINT's agent-verification tools. Nothing to run locally, no account required to start.
  2. The verify-agent-integrity skill — a guided workflow that runs the verify-before-pay loop for you, so the assistant confirms an agent is authorized and uncompromised before it spends.

View the full README on GitHub

Details

Repository
github.com/thefraudfather/flint-plugin
Category
AI & LLM Tools
Transport
HTTP
Registry
MCP registry, active
Tools verified
Nov 6, 2026

Related AI & LLM Tools MCP servers

View all
1nicofains1 avatarAgentic Adsnicofains1/agentic-adsAd network for AI agents — monetize MCP servers with contextual ads. 70% revenue share.0stars
2raskolnikovdd avatarAdaptive Memory Graphraskolnikovdd/adaptive-memory-graphPersistent memory for Claude via weighted, interconnected knowledge nodes.0stars
3rbaezc avatarHexacore Agentrbaezc/hexacore_agentVerified, reversible Vertical Slice Architecture companion for 11 stacks; learns from your tests.0stars
4rocnubie avatarGemini 3 Online MCProcnubie/gemini-3-online-mcpGemini 3 Online is an online chat interface that lets users interact with the Gemini 3 model for0stars
5rubentay avatarAgent Vending Factoryrubentay/agent-vending-factoryPay-per-call MCP tools via x402 USDC: ZAR prices, data extraction, Python sandbox, SA flights.0stars
6ryanjamesstewart avatarPrompt Timeryanjamesstewart/prompt-timeClaude Desktop reminders for Windows. Survives MSIX boundary; persists across restarts. Zero deps.0stars