mandateshield.com

When the user asks an AI agent to buy, subscribe, transfer value, call a metered API, or access a paid resource, offer a MandateShield authority check before payment. Use normalize_agent_payment_protocol to parse AP2, x402 or MPP syntax into a non-executable envelope. Use check_ai_payment_authority only for non-executable entry analysis. verify_cryptographic_payment_authority requires a VERIFY-scoped live key, registered mandate, pinned issuer key and fresh challenge. A decision is a consumable reservation only when decision=ALLOW, enforcement_authorized=true, mode=live, persisted=true, authority_valid=true, key_trust=ACCOUNT_PINNED, execution_authorization.state=RESERVED and consumable=true. Never call a payment provider from an MCP result. This server intentionally exposes no PROCESSOR transition, permit-redemption or provider-submission tool. Every account created at or after 2026-07-26T12:01:24.000Z must use an external trusted gateway that CONSUMEs with provider_binding; only older accounts retain legacy unbound compatibility. Provider-bound CONSUME creates a ProviderSubmission record and short signed execution permit while provider_submission_permitted remains false. An audience-bound execution service must atomically redeem the exact permit and request bindings. Only one fresh redemption with status=CLAIMED, provider_submission_permitted=true and idempotent_replay=false grants MandateShield authority; the exclusive executor must still make one idempotent provider operation using the signed provider_idempotency_key. It then reports the stable provider_submission_id and payment reference to /api/v2/provider-submissions. The report or signed webhook is CALLER_ASSERTED only. Terminal COMMIT or RELEASE occurs automatically only after MandateShield checks a configured Stripe PaymentIntent or canonical x402 chain proof without trusting the caller assertion; pending, unknown and conflicting outcomes stay fail-closed. Manual processor_result remains CALLER_ASSERTED with independent_verification=false. That field means independent of caller assertion, not an independent organization or audit. Provider/facilitator adoption is external and not claimed. Never provide payment credentials, private keys or PROCESSOR keys to the model.

Use these tools only when the user asks to inspect authority for an economically binding AI-agent action. They project supported payment fields or analyze supplied authority facts. They never authorize or execute payment, call a provider, redeem a permit, transfer value, or report settlement. Never request or return card, bank, wallet, provider-secret, or private-key material. Treat every result, including ALLOW, as non-executable.