Payment OS for the Agent Economy — non-custodial MPC wallets with natural language spending policies for AI agents
Project description
Sardis
The Payment OS for the Agent Economy
AI agents can reason, but they cannot be trusted with money. Sardis is how they earn that trust.
Sardis gives AI Agents (Claude, Cursor, Autonomous Bots) non-custodial MPC wallets with natural language spending policies. It's Stripe + IAM + Risk Engine for the Agent Economy.
The Problem We Solve: Financial Hallucination — agents accidentally spending $10k instead of $100 due to retry loops, decimal errors, or logic bugs. Sardis prevents this with a real-time policy firewall.
Quick Start
Python
pip install sardis
from sardis import SardisClient
client = SardisClient(api_key="sk_...")
wallet = client.wallets.create(name="my-agent", chain="base", policy="Max $100/day")
tx = wallet.pay(to="0x...", amount="25.00", token="USDC")
TypeScript
npm install @sardis/sdk
import { Sardis } from '@sardis/sdk';
const client = new Sardis({ apiKey: 'sk_...' });
const wallet = await client.wallets.create({ name: 'my-agent', chain: 'base' });
const tx = await wallet.pay({ to: '0x...', amount: '25.00', token: 'USDC' });
MCP (Claude Desktop / Cursor)
npx @sardis/mcp-server start
Add to your claude_desktop_config.json:
{
"mcpServers": {
"sardis": {
"command": "npx",
"args": ["@sardis/mcp-server", "start"]
}
}
}
That's it. Your agent now has a wallet with spending limits.
How It Works
User: "Buy OpenAI API credits for $20"
Agent: sardis.pay("OpenAI", $20, "API Credits")
|
Sardis: Policy Check -> SaaS Category OK -> Amount < Limit OK
|
APPROVED
Card: 4242 **** **** 9999
---
User: "Buy me an Amazon gift card for $500"
Agent: sardis.pay("Amazon", $500, "Gift Card")
|
Sardis: Policy Check -> Retail Category BLOCKED
|
BLOCKED - Financial Hallucination PREVENTED
Architecture
AI AGENT
(Claude, Cursor, LangChain)
|
MCP / SDK
|
SARDIS POLICY ENGINE
Natural Language | Merchant | Amount
Rules | Allowlist | Limits
|
MPC SIGNING (Turnkey)
Non-custodial keys
|
+----------+----------+
| |
On-Chain Rails Fiat Rails
USDC on Base Virtual Cards
Polygon, ETH (Lithic)
Packages
Python (PyPI)
| Package | Description |
|---|---|
sardis |
Meta-package — installs SDK + Core + CLI |
sardis-sdk |
Production Python SDK |
sardis-core |
Domain models and config |
sardis-chain |
Multi-chain execution |
sardis-compliance |
KYC/AML/SAR |
sardis-cards |
Virtual cards (Lithic) |
sardis-wallet |
Wallet orchestration |
sardis-ledger |
Append-only audit trail |
sardis-api |
FastAPI gateway |
sardis-protocol |
AP2/TAP verification |
sardis-a2a |
Agent-to-Agent protocol |
sardis-ucp |
Universal Commerce Protocol |
sardis-ramp |
Fiat on/off-ramp |
sardis-cli |
Command-line interface |
sardis-checkout |
Merchant checkout flows |
pip install sardis # SDK + Core + CLI
pip install sardis[all] # Everything
pip install sardis[cards] # + virtual cards
TypeScript (npm)
| Package | Description |
|---|---|
@sardis/sdk |
TypeScript SDK |
@sardis/mcp-server |
MCP server (46 tools) |
@sardis/ai-sdk |
Vercel AI SDK integration |
@sardis/ramp |
Fiat on/off-ramp |
Framework Integrations
| Framework | Package | Status |
|---|---|---|
| Claude Desktop / Cursor | @sardis/mcp-server |
Stable |
| LangChain | sardis-sdk |
Stable |
| Vercel AI SDK | @sardis/ai-sdk |
Stable |
| OpenAI Functions / Swarm | sardis-sdk |
Stable |
| LlamaIndex | sardis-sdk |
Beta |
| CrewAI | sardis-sdk |
Beta |
| Mastra | @sardis/sdk |
Beta |
Key Features
| Feature | Description |
|---|---|
| Non-Custodial MPC | Keys secured via Turnkey threshold signatures |
| Natural Language Policies | "Allow $50/day for SaaS only" |
| Financial Firewall | Block hallucinations before they cost money |
| Virtual Cards | Instant card issuance for fiat payments (Lithic) |
| Multi-Chain | Base, Polygon, Ethereum, Arbitrum, Optimism |
| 5 Protocols | AP2, TAP, UCP, A2A, x402 |
| MCP Native | Zero-integration setup for Claude/Cursor |
| Compliance | KYC (Persona), AML (Elliptic), SAR reporting |
Project Status
| Component | Status |
|---|---|
| Core Policy Engine | Live (150+ tests) |
| MPC Wallets (Turnkey) | Live |
| On-Chain Settlement | Live (5 chains) |
| KYC/AML Compliance | Integrated (Persona, Elliptic) |
| MCP Server | v0.2.5 (46 tools) |
| Python SDK (15 packages) | Live on PyPI |
| TypeScript SDK (4 packages) | Live on npm |
| Virtual Cards (Lithic) | Sandbox Ready |
| 5 Protocols | AP2, TAP, UCP, A2A, x402 |
Open Core Licensing
-
MIT License — SDKs, MCP Server, Integration Adapters
sardis(Python meta-package)@sardis/sdk,@sardis/mcp-server,@sardis/ai-sdk
-
Proprietary — Core Banking Infrastructure, Policy Engine internals, MPC Node management
Links
- Website: sardis.sh
- Documentation: sardis.sh/docs
- GitHub: github.com/EfeDurmaz16/sardis
- PyPI: pypi.org/project/sardis
- npm: npmjs.com/package/@sardis/mcp-server
- Context7: context7.com/efedurmaz16/sardis
Sardis — The Payment OS for the Agent Economy
Non-Custodial | MCP Native | Financial Hallucination Prevention
© 2026 Efe Baran Durmaz
Project details
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file sardis-0.3.1.tar.gz.
File metadata
- Download URL: sardis-0.3.1.tar.gz
- Upload date:
- Size: 11.6 MB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.2.0 CPython/3.13.7
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
e98b7baadae151ed073ce2dc81e91cc01680be26f255fee98754bb6806c3dee1
|
|
| MD5 |
be667961fda25db1c58dc7e1e6a088ac
|
|
| BLAKE2b-256 |
f3c750e82baa6e24909590821ece7a07aa32ad19500b1df8dc58741647af5b5a
|
File details
Details for the file sardis-0.3.1-py3-none-any.whl.
File metadata
- Download URL: sardis-0.3.1-py3-none-any.whl
- Upload date:
- Size: 12.7 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.2.0 CPython/3.13.7
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
863229d95e1473f365d21df147d974ef5743497bc18bbe5e49dd46d39c29a3fc
|
|
| MD5 |
81cc40431b8a4510df37d6c4dc66d511
|
|
| BLAKE2b-256 |
bdfbf453daa87bc6f212ff3f1f78297bcf89bfe86ec0376bb4a49c52c75cf601
|