Skip to content
MandateShield logo

MandateShield MCP server

Which servers in the official MCP registry are MandateShield's own, whether they answer, and what they offer. A program checked each of these, nobody copied them from a product page.

read 2026-10-21

← Back to MandateShield

Whose server it is
  • Registry namecom.mandateshield/payment-authorityverified in the MCP registry

The registry name sits under mandateshield.com. The registry only lets a publisher use that namespace after proving control of the domain through DNS or HTTP.

When we asked itchecked 2026-10-21
  • Stateanswerschecked 2026-10-21
  • Tools3
  • Server calls itselfmandateshield
  • Server version1.13.3
  • Protocol version2025-06-18

On 2026-10-21 the server answered initialize and tools/list without a sign-in. First answer in 48 ms.

Should an agent connect itNot proven either way yet
  • Whether its tools do the product's job has not been judged yet.
  • Checked on 2 of the 7 days it takes to judge reliability.

Once connected

  • Parameters are untyped or undescribed in 3 of 3 tools: check arguments before calling.

Said by rules from the measurements above. The likely first call is a model's pick from the tool list; read its description before relying on it.

Measured dailydaily checks: 2, the first on 2026-10-21
  • INITE MCP scoreafter a weeka score needs 7 daily checks: 2 so far
  • Answeredmeasuring2 of the 7 daily checks it takes to print a share
  • Median first answer1289 ms
  • Space in an agent's context≈ 5,707 tokensthe definitions of all its tools (3), which an agent carries on every turn
  • Tool definitionsB · 78 of 100
  • Typed results3 of 3 toolsdeclared outputSchema: results come typed, read once
  • Parameters without a type: in 1 of 3
  • Parameters without a description: in 3 of 3

What an agent can do with it

  • not sure · Bind approved payee and amount to a Stripe PaymentIntent request
  • not sure · Block altered or duplicate payment calls after approval
  • not sure · Hold spending until an unknown Stripe outcome is verified

Each of the product's use cases, put to Jev against this server's tool list: can an agent do it with these tools?

Worth a look

None of the five warning signs in these definitions.

A program checks the server once a day: initialize and tools/list, no model. Tokens are the definitions' length at about four characters a token. The grade averages six checks of every tool's name, description, schema and annotations; it says how well the tools are described, not whether they work. The score weighs what was measured and nothing else: answering (30%), doing the product's job (25%), definitions (20%), context (10%) and use (15%). A part that was not measured is left out, and a hidden instruction caps the score at 40. The state of vendors' MCP servers: method and numbers →

Tools it offers3 tools · read 2026-10-21
  • check_ai_payment_authority

    Use before an AI agent buys, subscribes, transfers value, calls a metered API, or accesses a paid resource when the user wants a payment-authority check. Analyze whether the proposed purchase fits supplied policy facts. This v1 entry…

  • normalize_agent_payment_protocol

    Use when an agent encounters an AP2 terminal closed-payment projection, x402 v2 PAYMENT-REQUIRED offer, or explicitly profiled MPP Payment challenge and needs the supported fields projected before an authority check. Map those documented…

  • verify_cryptographic_payment_authority

    Use only for a production pre-payment authority gate after the caller has a registered mandate, pinned issuer key, fresh challenge, VERIFY-scoped key, exact final purchase and supported signed evidence. Fail closed for JWS, an AP2-shaped…

How to connect

Add the server to your MCP client config. Claude Desktop, Cursor and most other clients read this shape:

{
  "mcpServers": {
    "payment-authority": {
      "type": "http",
      "url": "https://mandateshield.com/api/mcp"
    }
  }
}

Add it

Claude Code, in a terminal

claude mcp add --transport http mandateshield https://mandateshield.com/api/mcp

Add to CursorAdd to VS Code

claude.ai, ChatGPT and other clients: add https://mandateshield.com/api/mcp as a custom connector in the settings.

OpenAPI spec

25 paths, read 2026-10-21. Open the spec ↗

Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.