Xaps Sdk — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Xaps Sdk (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
The Cognitive Circuit Breaker for Autonomous Agents
Xaps is an economic security layer for autonomous AI agents. Before executing a smart contract, transfer, or financial action, your agent calls Xaps for an independent dual-agent audit. Standard Web3 tools verify signatures — Xaps verifies intent and logic.
<!-- mcp-name: io.github.APMC1/xaps -->
pip install xaps-sdkOr install from this repository:
pip install "xaps-sdk @ git+https://github.com/APMC1/[email protected]"from xaps import XapsClient, XapsRejectedError
client = XapsClient(api_key="your_agent_key")
receipt = client.audit(
action="execute_smart_contract",
contract_address="0x742d35Cc6634C0532925a3b844Bc9e7595f0bEb",
amount=1000.0,
)
audit = receipt["audit"]
if audit["status"] == "REJECTED":
raise XapsRejectedError(audit["beta_attack"], receipt=receipt)
print(f"Approved: {audit['alpha_defense']}")
print(f"Balance remaining: ${receipt['remaining_balance']:.2f}")from xaps import XapsClient
async with XapsClient(api_key="your_agent_key") as client:
receipt = await client.audit_async(
action="execute_smart_contract",
contract_address="0x742d35Cc6634C0532925a3b844Bc9e7595f0bEb",
amount=1000.0,
)Use the XAPS MCP server to audit high-stakes actions from Claude Desktop, Cursor, or any MCP host. See docs/mcp-host-integration.md for full setup.
xaps_audit in 60 Secondsxaps-mcp console command): pip install xaps-sdk export XAPS_AGENT_KEY="your_agent_key"~/Library/Application Support/Claude/claude_desktop_config.json): {
"mcpServers": {
"xaps-audit": {
"command": "xaps-mcp"
}
}
}For local dev from a git clone, use python /path/to/xaps_mcp_server.py with XAPS_MCP_DEV=1 instead.
Full example: examples/mcp_claude_desktop_config.json
Before anysend_transaction,approve, ordepositcall: invokexaps_auditwithaction,contract_address, andamount.
Agent rule templates: examples/.agentrc
| Variable | Default | Description |
|---|---|---|
XAPS_AGENT_KEY | — | Agent billing key (alternative to constructor arg) |
XAPS_API_URL | https://api.xaps.network | API base URL |
# Or pass explicitly
client = XapsClient(api_key="...", base_url="https://api.xaps.network")XapsClient(api_key=None, base_url=..., timeout=10.0)Create a client. Raises ValueError if no API key is provided.
client.audit(action, contract_address, amount, payload_override=None)Synchronous audit. Returns receipt dict:
{
"xaps_receipt": true,
"agent_key": "...",
"remaining_balance": 9.99,
"audit": {
"status": "APPROVED",
"alpha_defense": "...",
"beta_attack": "..."
}
}await client.audit_async(...)Async variant for agents running on asyncio.
| Exception | When |
|---|---|
XapsAuthError | Invalid or missing API key (401) |
XapsPaymentError | Insufficient prepaid balance (402) |
XapsRateLimitError | Too many requests (429) |
XapsAPIError | Other API errors |
XapsRejectedError | Audit returned REJECTED (optional helper) |
git clone https://github.com/APMC1/xaps-sdk.git
cd xaps-sdk
pip install -e ".[dev]"
pytestThe sovereign node (xap-sovereign-node) is private. This public repo contains only the SDK.Your Xaps Agent Key is a billing identifier, not a cryptographic secret. Do not commit it to version control.
MIT — see LICENSE.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.