IntentFence Agent Action Firewall MCP Server

IntentFence is a fail-closed authorization firewall for autonomous AI agents. Immediately before a consequential MCP, HTTP, A2A, or payment action, it binds the exact action and payload hash to explicit action/resource allowlists, spend and retention ceilings, and optional action-specific approval. It returns a five-minute ES256 receipt; the TypeScript and Python SDKs verify the receipt and local action digest…. It is available as a remote MCP endpoint.

Teams that work with a2a, agentic ai and policy as code and want a hosted endpoint instead of running a local process. The project is written in TypeScript.

VERIFIED ACTIVE

LAST COMMIT 2026-07-30 · ★ 2 · #309 OF 318 MAINTAINED FINANCE · VERIFIED 2026-09-18

Apache-2.0 · TypeScript servers · how we verify → /methodology

01 · Install IntentFence Agent Action Firewall

before you install - you'll need

Set INTENTFENCE_EVM_PRIVATE_KEY, INTENTFENCE_MAX_AUTO_PAYMENT_USDC, INTENTFENCE_AUTO_PAYMENT_BUDGET_USDC before connecting.

Claude Code

claude mcp add razel369-intentfence --transport http https://agentpass-protocol.rmalka06.chatgpt.site/api/mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "razel369-intentfence": {
      "url": "https://agentpass-protocol.rmalka06.chatgpt.site/api/mcp"
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

https://agentpass-protocol.rmalka06.chatgpt.site/api/mcp

transport: streamable-http

endpoint alive - responded to MCP initialize · probed 2026-09-17

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as remote - your agent's requests go to agentpass-protocol.rmalka06.chatgpt.site

endpoint auth accepted our unauthenticated MCP initialize - no credentials needed to connect

license Apache-2.0 - declared in the repository

registry namespace io.github.razel369 is GitHub-verified and matches the repo owner

03 · What IntentFence Agent Action Firewall can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Limitations (from the README)

Declared-input receipts attest only that IntentFence evaluated caller-supplied policy data. Quote-assessment receipts bind the exact caller-observed PAYMENT-REQUIRED challenge; they do not prove that IntentFence contacted the merchant, or prove merchant identity, delivery, or downstream enforcement. The receipt-signing key is separate from the USDC recipient wallet. IntentFence never needs a payer's seed phrase or wa

Latest releases

mcp-v0.11.0 · 2026-07-20

Public stdio MCP package for account-free agent installation. Built and tested from commit 55e6bc323d0ce42847fac543c9fa913a6dc870ca.

mcp-v0.10.1 · 2026-07-20

Corrected immutable stdio MCP release with current install documentation and opt-in, budget-capped one-call x402 payments for generic MCP clients. · Install · npx --yes --package intentfence-mcp · SHA-256…

mcp-v0.10.0 · 2026-07-20

Public stdio MCP package for account-free agent installation, built and tested from commit f8bbee3549408587cd3e3e5db2aec3589fe501ca. · Install · npx --yes --package intentfence-mcp · SHA-256…

04 · Who maintains IntentFence Agent Action Firewall

IntentFence Agent Action Firewall is maintained by razel369. It's the only MCP server we track from this author; the repo dates to Jul 2026.

05 · Facts

repository: github.com/razel369/intentfence
category: finance - ranked #309 of 318 actively-maintained finance servers as of 2026-09-18.
release cadence: 10+ releases in the last 90 days (latest 2026-07-20)
registry: io.github.razel369/intentfence (active, first published 2026-07-13 · 14 versions)

06 · IntentFence Agent Action Firewall FAQ

What is IntentFence Agent Action Firewall?

Is IntentFence Agent Action Firewall still maintained?

Yes - as of 2026-09-18, its last commit was 2026-07-30 and it shipped 10+ releases in the last 90 days. We re-verify nightly.

How do I install IntentFence Agent Action Firewall?

Run `claude mcp add razel369-intentfence --transport http https://agentpass-protocol.rmalka06.chatgpt.site/api/mcp`. The README documents 3 environment variables (INTENTFENCE_EVM_PRIVATE_KEY, INTENTFENCE_MAX_AUTO_PAYMENT_USDC, INTENTFENCE_AUTO_PAYMENT_BUDGET_USDC) to set first. Set INTENTFENCE_EVM_PRIVATE_KEY, INTENTFENCE_MAX_AUTO_PAYMENT_USDC, INTENTFENCE_AUTO_PAYMENT_BUDGET_USDC before connecting. You can also paste the ready-made client config above.

Does IntentFence Agent Action Firewall require authentication?

No - the endpoint accepted our unauthenticated MCP initialize when probed on 2026-09-17; you can connect without credentials.

07 · Alternatives to IntentFence Agent Action Firewall

Alternatives to IntentFence Agent Action Firewall

Maintained finance servers if IntentFence Agent Action Firewall isn't the fit.

Pairs well with

Servers that cover what IntentFence Agent Action Firewall doesn't - only shown when the pairing reason fits the companion.

More finance MCP servers · Redbark · Lsopenapi · Lightning Enable MCP Server · PSX MCP · TensorFeed x402 Base Reader

More TypeScript MCP servers · Claudexor · Awesome Copilot MCP Server (rbbtsn0w) · Rclone · Tentra - Memory for AI Coding Agents · Crabcut · see all