langgraph-botsrated

One-click attach

Free. No key for local attach. Pairs with the host runtime. Not a second runtime. Paid checks are not required to attach.

pip install "botsrated[x402]"

from botsrated import PaymentGuard
guard = PaymentGuard(preset="carefulBuyer")  # omit preset = warn only, never stops a payment
guard.install(x402_client)                   # the x402 client your agent already pays with

The pair-with package is not on PyPI yet: pip install -e integrations/langgraph, then attach_payment_guard from langgraph_botsrated.

Preflight and the guard surface signed receipt links (receipt_url). When org ledger is enabled, paid checks write there by default. No custody. Facts, not grades.

Live docs: botsrated.com/docs/guard#langgraph.

Default install

Pairs with LangGraph. Payment-client wrap and an optional pre-pay node helper. Not an orchestration framework, and not a StateGraph, checkpoint store, or agent loop. Free. No key for local attach. Today: pip install "botsrated[x402]" and PaymentGuard. The pair-with package is not on PyPI yet: pip install -e integrations/langgraph (botsrated>=0.3.1,<0.4).

Pair-with package (not on PyPI yet):

# Free. No key for local attach. Not a runtime.
# Optional BOTSRATED_TOKEN for Desk remote policy.
from langgraph_botsrated import attach_payment_guard
# Omit preset = advice. Omit fail_mode = open.
guard = attach_payment_guard(x402_client)

It does not sign a payment and does not hold funds.

Install in 3 steps

1. Free. No key for local attach. Install the guard that works today: pip install "botsrated[x402]", then PaymentGuard on the x402 client your agent already pays with (one-click above). The pair-with package is not on PyPI yet. From a checkout, in a clean virtualenv: pip install -e integrations/langgraph (pulls botsrated>=0.3.1,<0.4).
2. On the pair-with package, attach to your x402 client. Installing does not attach a guard:

from langgraph_botsrated import attach_payment_guard
guard = attach_payment_guard(x402_client)

3. Omit preset for advice only (carefulBuyer / strict stop an unobserved payTo when you pass them). Omit fail_mode to stay open. "closed" stops the payment when BotsRated or your policy cannot answer. A missing decision is never a pass. A remote pass never clears a local block.

BOTSRATED_TOKEN is optional. Omit token and the guard reads BOTSRATED_TOKEN. On botsrated 0.3.0 and later it is sent only as remote_policy={"token", "fail_mode"}, never as a bare string. A configured token on a core without parse_remote_policy raises and is not dropped. The policy decision is not signed. Get a token in Desk.

Omit fail_mode and the guard stays open. "closed" stops the payment when BotsRated or your policy cannot answer. A missing decision is never a pass. A remote pass never clears a local block. Nothing defaults you to closed.

Pre-pay node and token

botsrated_payment_middleware(guard, pay_node, context=read_payment) runs that same guard before an opaque pay node. On a block it does not call the node and returns only botsrated_payment_reason. botsrated_preflight(url) is the free preflight and does not attach a guard.

BOTSRATED_TOKEN is optional. Omit token and the guard reads BOTSRATED_TOKEN. On botsrated 0.3.0 and later it is sent only as remote_policy={"token", "fail_mode"}, never as a bare string. A configured token on a core without parse_remote_policy raises and is not dropped. The policy decision is not signed. Get a token in Desk.

Tests: pytest -m "not live" in this directory.