llama-stack-botsrated

One-click attach

Free. No key for local attach. Pairs with the host runtime. Not a second runtime. Paid checks are not required to attach.

pip install "botsrated[x402]"

from botsrated import PaymentGuard
guard = PaymentGuard(preset="carefulBuyer")  # omit preset = warn only, never stops a payment
guard.install(x402_client)                   # the x402 client your agent already pays with

The pair-with package is not on PyPI yet: pip install -e integrations/llama-stack, then attach_payment_guard from llama_stack_botsrated.

Preflight and the guard surface signed receipt links (receipt_url). When org ledger is enabled, paid checks write there by default. No custody. Facts, not grades.

Live docs: botsrated.com/docs/guard#llama-stack.

Default install

Pairs with Llama Stack. Payment-client wrap only. Llama Stack stays the runtime, the distribution, and the inference server. A secondary before-tool hook is deferred. Free. No key for local attach. Today: pip install "botsrated[x402]" and PaymentGuard. The pair-with package is not on PyPI yet: pip install -e integrations/llama-stack (botsrated>=0.3.1,<0.4).

Pair-with package (not on PyPI yet):

# Free. No key for local attach. Not a runtime.
# Optional BOTSRATED_TOKEN for Desk remote policy.
from llama_stack_botsrated import attach_payment_guard
# Omit preset = advice. Omit fail_mode = open.
guard = attach_payment_guard(x402_client)

It does not sign a payment and does not hold funds.

Install in 3 steps

1. Free. No key for local attach. Install the guard that works today: pip install "botsrated[x402]", then PaymentGuard on the x402 client your agent already pays with (one-click above). The pair-with package is not on PyPI yet. From a checkout, in a clean virtualenv: pip install -e integrations/llama-stack (pulls botsrated>=0.3.1,<0.4).
2. On the pair-with package, attach to your x402 client. Installing does not attach a guard:

from llama_stack_botsrated import attach_payment_guard
guard = attach_payment_guard(x402_client)

3. Omit preset for advice only (carefulBuyer / strict stop an unobserved payTo when you pass them). Omit fail_mode to stay open. "closed" stops the payment when BotsRated or your policy cannot answer. A missing decision is never a pass. A remote pass never clears a local block.

BOTSRATED_TOKEN is optional. Omit token and the guard reads BOTSRATED_TOKEN. On botsrated 0.3.0 and later it is sent only as remote_policy={"token", "fail_mode"}, never as a bare string. A configured token on a core without parse_remote_policy raises and is not dropped. The policy decision is not signed. Get a token in Desk.

Omit fail_mode and the guard stays open. "closed" stops the payment when BotsRated or your policy cannot answer. A missing decision is never a pass. A remote pass never clears a local block. Nothing defaults you to closed.

Token and preflight

botsrated_preflight(url) is the free preflight and does not attach a guard.

BOTSRATED_TOKEN is optional. Omit token and the guard reads BOTSRATED_TOKEN. On botsrated 0.3.0 and later it is sent only as remote_policy={"token", "fail_mode"}, never as a bare string. A configured token on a core without parse_remote_policy raises and is not dropped. The policy decision is not signed. Get a token in Desk.

Tests: pytest -m "not live" in this directory. They do not import a Llama Stack server.