Xaps SDK
The Cognitive Circuit Breaker for Autonomous Agents
Xaps is an economic security layer for autonomous AI agents. Before executing a smart contract, transfer, or financial action, your agent calls Xaps for an independent dual-agent audit. Standard Web3 tools verify signatures — Xaps verifies intent and logic.
Install
pip install xaps-sdk
Or install from this repository:
pip install "xaps-sdk @ git+https://github.com/APMC1/xaps-sdk.git@v0.1.2"
Quick Start
from xaps import XapsClient, XapsRejectedError
client = XapsClient(api_key="your_agent_key")
receipt = client.audit(
action="execute_smart_contract",
contract_address="0x742d35Cc6634C0532925a3b844Bc9e7595f0bEb",
amount=1000.0,
)
audit = receipt["audit"]
if audit["status"] == "REJECTED":
raise XapsRejectedError(audit["beta_attack"], receipt=receipt)
print(f"Approved: {audit['alpha_defense']}")
print(f"Balance remaining: ${receipt['remaining_balance']:.2f}")
Async
from xaps import XapsClient
async with XapsClient(api_key="your_agent_key") as client:
receipt = await client.audit_async(
action="execute_smart_contract",
contract_address="0x742d35Cc6634C0532925a3b844Bc9e7595f0bEb",
amount=1000.0,
)
MCP Integration
Use the XAPS MCP server to audit high-stakes actions from Claude Desktop, Cursor, or any MCP host. See docs/mcp-host-integration.md for full setup.
Start Using xaps_audit in 60 Seconds
-
Install (exposes the
xaps-mcpconsole command):pip install xaps-sdk
-
Set your agent key in the environment (recommended — avoid storing secrets in config files):
export XAPS_AGENT_KEY="your_agent_key"
-
Add to Claude Desktop config (macOS:
~/Library/Application Support/Claude/claude_desktop_config.json):{ "mcpServers": { "xaps-audit": { "command": "xaps-mcp" } } }
For local dev from a git clone, use
python /path/to/xaps_mcp_server.pywithXAPS_MCP_DEV=1instead.Full example: examples/mcp_claude_desktop_config.json
-
In your agent prompt:
Before any
send_transaction,approve, ordepositcall: invokexaps_auditwithaction,contract_address, andamount.
Agent rule templates: examples/.agentrc
Configuration
| Variable | Default | Description |
|---|---|---|
XAPS_AGENT_KEY |
— | Agent billing key (alternative to constructor arg) |
XAPS_API_URL |
https://api.xaps.network |
API base URL |
# Or pass explicitly
client = XapsClient(api_key="...", base_url="https://api.xaps.network")
API Reference
XapsClient(api_key=None, base_url=..., timeout=10.0)
Create a client. Raises ValueError if no API key is provided.
client.audit(action, contract_address, amount, payload_override=None)
Synchronous audit. Returns receipt dict:
{
"xaps_receipt": true,
"agent_key": "...",
"remaining_balance": 9.99,
"audit": {
"status": "APPROVED",
"alpha_defense": "...",
"beta_attack": "..."
}
}
await client.audit_async(...)
Async variant for agents running on asyncio.
Exceptions
| Exception | When |
|---|---|
XapsAuthError |
Invalid or missing API key (401) |
XapsPaymentError |
Insufficient prepaid balance (402) |
XapsRateLimitError |
Too many requests (429) |
XapsAPIError |
Other API errors |
XapsRejectedError |
Audit returned REJECTED (optional helper) |
Billing
- $0.01 USD per successful audit, deducted from prepaid balance
- Fund your agent key at xaps.network
Development
git clone https://github.com/APMC1/xaps-sdk.git
cd xaps-sdk
pip install -e ".[dev]"
pytest
The sovereign node (
xap-sovereign-node) is private. This public repo contains only the SDK.
Security
Your Xaps Agent Key is a billing identifier, not a cryptographic secret. Do not commit it to version control.
License
MIT — see LICENSE.
Metadata
Release files for xaps-sdk 0.1.2
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| xaps_sdk-0.1.2.tar.gz | 12.0 kB | Without provenance | Details for xaps_sdk-0.1.2.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| xaps_sdk-0.1.2-py3-none-any.whl | Python 3 | none | any | Details for xaps_sdk-0.1.2-py3-none-any.whl |
Total release size: 22.7 kB
Release files / xaps_sdk-0.1.2.tar.gz
| Download URL | xaps_sdk-0.1.2.tar.gz |
|---|---|
| Size | 12.0 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
711f6bf3f99028a559d11f986867a2f54f16f2e8d6ac747e26ade572d860eef3
|
|
BLAKE2b-256 checksum How to use checksums |
6f77cbd91f31ac3a7c58f24ad4b48ade4790cce0bfab501a3a94bde7359e6068
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.14.3
|
Release files / xaps_sdk-0.1.2-py3-none-any.whl
| Download URL | xaps_sdk-0.1.2-py3-none-any.whl |
|---|---|
| Size | 10.7 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
a7f3e3a2b41e4a622359441ad9d6ea9898ca26d1789d048b7f03f74befe55112
|
|
BLAKE2b-256 checksum How to use checksums |
593dcf9d7029522e8aca8bcf0a8a2bddcf7c421748c8c2df0aa794b81a98c5f5
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.14.3
|
Security for xaps-sdk 0.1.2
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.