Skip to main content

Payment OS for the Agent Economy — non-custodial MPC wallets with natural language spending policies for AI agents

Project description

Sardis

The Payment OS for the Agent Economy

Status: Beta License: Open Core MCP: Native npm npm downloads Chains: 5 Tools: 46 Context7

AI agents can reason, but they cannot be trusted with money. Sardis is how they earn that trust.

Sardis gives AI Agents (Claude, Cursor, Autonomous Bots) non-custodial MPC wallets with natural language spending policies. It's Stripe + IAM + Risk Engine for the Agent Economy.

The Problem We Solve: Financial Hallucination — agents accidentally spending $10k instead of $100 due to retry loops, decimal errors, or logic bugs. Sardis prevents this with a real-time policy firewall.


Quick Start: Zero Integration with MCP

npx @sardis/mcp-server start

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "sardis": {
      "command": "npx",
      "args": ["@sardis/mcp-server", "start"]
    }
  }
}

That's it. Your agent now has a wallet with spending limits.


How It Works

User: "Buy OpenAI API credits for $20"

Agent: sardis.pay("OpenAI", $20, "API Credits")
       ↓
Sardis: Policy Check → SaaS Category ✓ → Amount < Limit ✓
       ↓
       APPROVED ✅
       Card: 4242 **** **** 9999

---

User: "Buy me an Amazon gift card for $500"

Agent: sardis.pay("Amazon", $500, "Gift Card")
       ↓
Sardis: Policy Check → Retail Category ✗
       ↓
       BLOCKED 🛑 Financial Hallucination PREVENTED

Architecture

┌──────────────────────────────────────────────────────────┐
│                     AI AGENT                             │
│            (Claude, Cursor, LangChain)                   │
└─────────────────────┬────────────────────────────────────┘
                      │ MCP / SDK
                      ▼
┌──────────────────────────────────────────────────────────┐
│              SARDIS POLICY ENGINE                        │
│  ┌─────────────┐  ┌─────────────┐  ┌─────────────┐     │
│  │   Natural   │  │  Merchant   │  │   Amount    │     │
│  │  Language   │  │  Allowlist  │  │   Limits    │     │
│  │   Rules     │  │             │  │             │     │
│  └─────────────┘  └─────────────┘  └─────────────┘     │
└─────────────────────┬────────────────────────────────────┘
                      │ Approved
                      ▼
┌──────────────────────────────────────────────────────────┐
│              MPC SIGNING (Turnkey)                       │
│                Non-custodial keys                        │
└─────────────────────┬────────────────────────────────────┘
                      │
          ┌───────────┴───────────┐
          ▼                       ▼
┌─────────────────┐    ┌─────────────────┐
│  On-Chain Rails │    │   Fiat Rails    │
│  USDC on Base   │    │  Virtual Cards  │
│  Polygon, ETH   │    │    (Lithic)     │
└─────────────────┘    └─────────────────┘

Framework Integrations

Sardis uses an Adapter Pattern to feel native in your stack:

Framework Package Status
Claude Desktop / Cursor @sardis/mcp-server ✅ Ready
LangChain sardis.integrations.langchain ✅ Ready
Vercel AI SDK @sardis/sdk ✅ Ready
OpenAI Functions / Swarm get_openai_function_schema() ✅ Ready
LlamaIndex get_llamaindex_tool() ✅ Ready

Python (LangChain)

pip install sardis
from sardis.integrations import SardisTool

# Add to your agent's toolkit
tools = [SardisTool()]

TypeScript (Vercel AI SDK)

import { createSardisTools } from '@sardis/sdk/integrations';

const tools = createSardisTools(sardisClient);

Key Features

Feature Description
Non-Custodial MPC Keys secured via Turnkey threshold signatures
Natural Language Policies "Allow $50/day for SaaS only"
Financial Firewall Block hallucinations before they cost money
Virtual Cards Instant card issuance for fiat payments (Lithic)
Multi-Chain Base, Polygon, Ethereum (USDC/USDT)
MCP Native Zero-integration setup for Claude/Cursor

Project Status

Beta Infrastructure: Core Features Complete, Hardening In Progress

Component Status
Core Policy Engine ✅ Live (150+ tests)
MPC Wallets (Turnkey) ✅ Live
On-Chain Settlement ✅ Live (Base, Polygon, ETH)
KYC/AML Compliance ✅ Integrated (Persona, Elliptic)
MCP Server ✅ Complete (@sardis/mcp-server)
Python/TypeScript SDKs ✅ Complete (LangChain, Vercel AI)
Landing Page + Demo ✅ Live
Virtual Cards (Lithic) ✅ Sandbox Ready (Mainnet Feb 2026)
Demo Video (Remotion) ✅ Ready

Open Core Licensing

Sardis follows an Open Core model:

  • MIT License — SDKs, MCP Server, Integration Adapters

    • @sardis/sdk
    • @sardis/mcp-server
    • sardis (Python)
  • Proprietary — Core Banking Infrastructure, Policy Engine internals, MPC Node management


Links


Sardis — The Payment OS for the Agent Economy
Non-Custodial • MCP Native • Financial Hallucination Prevention

© 2026 Efe Baran Durmaz

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

sardis-0.3.0.tar.gz (11.6 MB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

sardis-0.3.0-py3-none-any.whl (12.3 kB view details)

Uploaded Python 3

File details

Details for the file sardis-0.3.0.tar.gz.

File metadata

  • Download URL: sardis-0.3.0.tar.gz
  • Upload date:
  • Size: 11.6 MB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.13.7

File hashes

Hashes for sardis-0.3.0.tar.gz
Algorithm Hash digest
SHA256 cbf090850b83eb1cad6ed659d589533be2802a2e0430b8abd98003ae92d65edd
MD5 b765218e889d2e64f131a504d32b6813
BLAKE2b-256 f4a9c9d53e00ce53d846336355e1e9112d7d5c84d2cfb508be9d4ac97d0d81b6

See more details on using hashes here.

File details

Details for the file sardis-0.3.0-py3-none-any.whl.

File metadata

  • Download URL: sardis-0.3.0-py3-none-any.whl
  • Upload date:
  • Size: 12.3 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.13.7

File hashes

Hashes for sardis-0.3.0-py3-none-any.whl
Algorithm Hash digest
SHA256 5302094ad052385e7a7aada73c2df778f058ca4caa861b27c4c5c3f9d2e8eec2
MD5 b2012efb7989012b9b02ffdfafe6abf2
BLAKE2b-256 e757aa80de03be644c77040849bb35e297aac2e8614c0a7d3043d2e91215fedf

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page