Sanction MCP Server

Sanction

The trust and governance layer for autonomous AI agents.

Sanction gives agents a wallet, a credential vault, and a clearance system — so they can act autonomously without acting without limits.

---

What It Does

Autonomous agents need permission to spend money, access credentials, and operate in sensitive domains. Sanction is the layer that grants that permission, enforces policy, and logs everything.

---

Distribution

Sanction is available through three channels:

• MCP Server — drop into any Claude Desktop, AIIA, or MCP-compatible agent host
• REST API — direct integration via x-api-key auth
• AWS Bedrock Action Group — enterprise agent orchestration (agentId: JXRNIJRMCX, us-east-1)

---

API

Base URL: https://onesanction.com/api/v1

POST /authorize           — Authorize a spend action before any transaction
POST /tokens              — Log LLM token consumption for budget tracking
POST /exec                — Issue a scoped execution JWT (15-min TTL)
POST /credentials/vault   — Store an encrypted credential
POST /credentials/inject  — Inject a decrypted credential (requires JWT)
POST /agents              — Register an agent against a wallet
POST /wallets             — Create a wallet with spend policy
GET  /wallets/stats       — Dashboard stats (today + MTD)
GET  /api/openapi.json    — OpenAPI 3.0 spec (Bedrock compatible)

Auth

Agent API calls use x-api-key: pxy_... header. Credential injection requires a short-lived Bearer JWT issued by /exec.

---

MCP Setup

{
  "mcpServers": {
    "sanction": {
      "command": "npx",
      "args": ["sanction-mcp"],
      "env": {
        "SANCTION_API_URL": "https://onesanction.com/api/v1",
        "SANCTION_API_KEY": "pxy_...",
        "SANCTION_WALLET_ID": "wallet_..."
      }
    }
  }
}

---

Stack

• Next.js 16 (App Router) + TypeScript
• Neon (serverless Postgres) via Prisma 7
• Vercel deployment
• jose for JWT signing (HS256)
• Node crypto for AES-256-GCM encryption

---

Pricing

---

License

• packages/sanction-mcp (the MCP client) — MIT. Embed it anywhere.
• Everything else (server, dashboard, API) — Functional Source License 1.1 (FSL-1.1-MIT). Source-available: use and self-host it for any purpose except offering a competing service. Converts to MIT two years after release.