SRA-RiskGate MCP
An MCP server that enables AI assistants and agents to perform risk checks on stablecoin and x402 payments before execution. It supports tools to check address sanctions against OFAC SDN lists, validate payment rules, verify transaction details, and review payments using the SRA-RiskGate-4B model. The server is designed to fail closed, holding or rejecting payments if checks fail or the model is unreachable.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
What you can do with it
- Check stablecoin payments before an AI agent pays
- Validate address sanctions against OFAC SDN lists
- Review x402 payment requirements before signing
- Check Circle Wallets API requests before sending
Source and maintenance
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
sra-riskgate-mcp 0.9.2
{
"version": "0.9.2",
"transport": "stdio",
"identifier": "sra-riskgate-mcp",
"runtimeHint": "uvx",
"registryType": "pypi",
"environmentVariables": [
{
"name": "SRA_BASE_URL",
"format": "string",
"description": "OpenAI-compatible endpoint serving SRA-RiskGate-4B (default: Ollama at http://localhost:11434/v1)"
},
{
"name": "SRA_MODEL",
"format": "string",
"description": "Model name on that endpoint (default: sriram1983007/sra-riskgate)"
},
{
"name": "SRA_MAX_AMOUNT",
"format": "string",
"description": "Rule ceiling in USDC; larger payments are held (default: 1000)"
},
{
"name": "SRA_KNOWN_RECIPIENTS",
"format": "string",
"description": "Verified payee addresses, comma-separated; payments to anyone else are held (default: check off)"
},
{
"name": "SRA_KNOWN_RECIPIENTS_FILE",
"format": "string",
"description": "File with one verified payee address per line, added to SRA_KNOWN_RECIPIENTS"
},
{
"name": "SRA_BLOCKED_ADDRESSES",
"format": "string",
"description": "Addresses to always reject, comma-separated"
},
{
"name": "SRA_BLOCKED_ADDRESSES_FILE",
"format": "string",
"description": "File with one address to reject per line, added to SRA_BLOCKED_ADDRESSES"
},
{
"name": "SRA_MAX_AUTH_VALIDITY_SECONDS",
"format": "string",
"description": "Longest an x402 authorization may stay valid before it is held (default: 3600)"
},
{
"name": "SRA_API_KEY",
"format": "string",
"description": "API key for the model endpoint, if it needs one"
},
{
"name": "SRA_TIMEOUT",
"format": "string",
"description": "Seconds to wait for the model (default: 120)"
},
{
"name": "SRA_DEPEG_HOLD_PCT",
"format": "string",
"description": "Hold payments when USDC is this many percent off $1.00 (default: 1)"
},
{
"name": "SRA_DEPEG_REJECT_PCT",
"format": "string",
"description": "Reject payments when USDC is this many percent off $1.00 (default: 5)"
},
{
"name": "SRA_MAX_GATEWAY_VALIDITY_SECONDS",
"format": "string",
"description": "Longest a Circle Gateway batched payment may stay valid before it is held (default: 691200, 8 days)"
},
{
"name": "SRA_CIRCLE_WALLETS",
"format": "string",
"description": "Circle Wallets the agent may use, as walletId=0xaddress pairs, comma-separated; any other wallet is held"
},
{
"name": "SRA_CIRCLE_USDC_TOKEN_IDS",
"format": "string",
"description": "Circle token ids confirmed to be USDC, for transfers by tokenId, comma-separated"
},
{
"name": "SRA_EXPECTED_DELEGATES",
"format": "string",
"description": "EIP-7702 delegate contracts your wallet uses on purpose, comma-separated; with account_code, any other delegation is held"
},
{
"name": "SRA_EXPECTED_DELEGATES_FILE",
"format": "string",
"description": "File with one expected delegate address per line, added to SRA_EXPECTED_DELEGATES"
}
]
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Connect from your client
Each snippet configures the same source-provided package; replace placeholders before use.
Cursor
{
"mcpServers": {
"sra-riskgate-mcp": {
"command": "uvx",
"args": [
"sra-riskgate-mcp==0.9.2"
],
"env": {
"SRA_BASE_URL": "<YOUR_SRA_BASE_URL>",
"SRA_MODEL": "<YOUR_SRA_MODEL>",
"SRA_MAX_AMOUNT": "<YOUR_SRA_MAX_AMOUNT>",
"SRA_KNOWN_RECIPIENTS": "<YOUR_SRA_KNOWN_RECIPIENTS>",
"SRA_KNOWN_RECIPIENTS_FILE": "<YOUR_SRA_KNOWN_RECIPIENTS_FILE>",
"SRA_BLOCKED_ADDRESSES": "<YOUR_SRA_BLOCKED_ADDRESSES>",
"SRA_BLOCKED_ADDRESSES_FILE": "<YOUR_SRA_BLOCKED_ADDRESSES_FILE>",
"SRA_MAX_AUTH_VALIDITY_SECONDS": "<YOUR_SRA_MAX_AUTH_VALIDITY_SECONDS>",
"SRA_API_KEY": "<YOUR_SRA_API_KEY>",
"SRA_TIMEOUT": "<YOUR_SRA_TIMEOUT>",
"SRA_DEPEG_HOLD_PCT": "<YOUR_SRA_DEPEG_HOLD_PCT>",
"SRA_DEPEG_REJECT_PCT": "<YOUR_SRA_DEPEG_REJECT_PCT>",
"SRA_MAX_GATEWAY_VALIDITY_SECONDS": "<YOUR_SRA_MAX_GATEWAY_VALIDITY_SECONDS>",
"SRA_CIRCLE_WALLETS": "<YOUR_SRA_CIRCLE_WALLETS>",
"SRA_CIRCLE_USDC_TOKEN_IDS": "<YOUR_SRA_CIRCLE_USDC_TOKEN_IDS>",
"SRA_EXPECTED_DELEGATES": "<YOUR_SRA_EXPECTED_DELEGATES>",
"SRA_EXPECTED_DELEGATES_FILE": "<YOUR_SRA_EXPECTED_DELEGATES_FILE>"
}
}
}
}Cline
{
"mcpServers": {
"sra-riskgate-mcp": {
"command": "uvx",
"args": [
"sra-riskgate-mcp==0.9.2"
],
"env": {
"SRA_BASE_URL": "<YOUR_SRA_BASE_URL>",
"SRA_MODEL": "<YOUR_SRA_MODEL>",
"SRA_MAX_AMOUNT": "<YOUR_SRA_MAX_AMOUNT>",
"SRA_KNOWN_RECIPIENTS": "<YOUR_SRA_KNOWN_RECIPIENTS>",
"SRA_KNOWN_RECIPIENTS_FILE": "<YOUR_SRA_KNOWN_RECIPIENTS_FILE>",
"SRA_BLOCKED_ADDRESSES": "<YOUR_SRA_BLOCKED_ADDRESSES>",
"SRA_BLOCKED_ADDRESSES_FILE": "<YOUR_SRA_BLOCKED_ADDRESSES_FILE>",
"SRA_MAX_AUTH_VALIDITY_SECONDS": "<YOUR_SRA_MAX_AUTH_VALIDITY_SECONDS>",
"SRA_API_KEY": "<YOUR_SRA_API_KEY>",
"SRA_TIMEOUT": "<YOUR_SRA_TIMEOUT>",
"SRA_DEPEG_HOLD_PCT": "<YOUR_SRA_DEPEG_HOLD_PCT>",
"SRA_DEPEG_REJECT_PCT": "<YOUR_SRA_DEPEG_REJECT_PCT>",
"SRA_MAX_GATEWAY_VALIDITY_SECONDS": "<YOUR_SRA_MAX_GATEWAY_VALIDITY_SECONDS>",
"SRA_CIRCLE_WALLETS": "<YOUR_SRA_CIRCLE_WALLETS>",
"SRA_CIRCLE_USDC_TOKEN_IDS": "<YOUR_SRA_CIRCLE_USDC_TOKEN_IDS>",
"SRA_EXPECTED_DELEGATES": "<YOUR_SRA_EXPECTED_DELEGATES>",
"SRA_EXPECTED_DELEGATES_FILE": "<YOUR_SRA_EXPECTED_DELEGATES_FILE>"
}
}
}
}VS Code
{
"servers": {
"sra-riskgate-mcp": {
"type": "stdio",
"command": "uvx",
"args": [
"sra-riskgate-mcp==0.9.2"
],
"env": {
"SRA_BASE_URL": "<YOUR_SRA_BASE_URL>",
"SRA_MODEL": "<YOUR_SRA_MODEL>",
"SRA_MAX_AMOUNT": "<YOUR_SRA_MAX_AMOUNT>",
"SRA_KNOWN_RECIPIENTS": "<YOUR_SRA_KNOWN_RECIPIENTS>",
"SRA_KNOWN_RECIPIENTS_FILE": "<YOUR_SRA_KNOWN_RECIPIENTS_FILE>",
"SRA_BLOCKED_ADDRESSES": "<YOUR_SRA_BLOCKED_ADDRESSES>",
"SRA_BLOCKED_ADDRESSES_FILE": "<YOUR_SRA_BLOCKED_ADDRESSES_FILE>",
"SRA_MAX_AUTH_VALIDITY_SECONDS": "<YOUR_SRA_MAX_AUTH_VALIDITY_SECONDS>",
"SRA_API_KEY": "<YOUR_SRA_API_KEY>",
"SRA_TIMEOUT": "<YOUR_SRA_TIMEOUT>",
"SRA_DEPEG_HOLD_PCT": "<YOUR_SRA_DEPEG_HOLD_PCT>",
"SRA_DEPEG_REJECT_PCT": "<YOUR_SRA_DEPEG_REJECT_PCT>",
"SRA_MAX_GATEWAY_VALIDITY_SECONDS": "<YOUR_SRA_MAX_GATEWAY_VALIDITY_SECONDS>",
"SRA_CIRCLE_WALLETS": "<YOUR_SRA_CIRCLE_WALLETS>",
"SRA_CIRCLE_USDC_TOKEN_IDS": "<YOUR_SRA_CIRCLE_USDC_TOKEN_IDS>",
"SRA_EXPECTED_DELEGATES": "<YOUR_SRA_EXPECTED_DELEGATES>",
"SRA_EXPECTED_DELEGATES_FILE": "<YOUR_SRA_EXPECTED_DELEGATES_FILE>"
}
}
}
}Claude Desktop
{
"mcpServers": {
"sra-riskgate-mcp": {
"command": "uvx",
"args": [
"sra-riskgate-mcp==0.9.2"
],
"env": {
"SRA_BASE_URL": "<YOUR_SRA_BASE_URL>",
"SRA_MODEL": "<YOUR_SRA_MODEL>",
"SRA_MAX_AMOUNT": "<YOUR_SRA_MAX_AMOUNT>",
"SRA_KNOWN_RECIPIENTS": "<YOUR_SRA_KNOWN_RECIPIENTS>",
"SRA_KNOWN_RECIPIENTS_FILE": "<YOUR_SRA_KNOWN_RECIPIENTS_FILE>",
"SRA_BLOCKED_ADDRESSES": "<YOUR_SRA_BLOCKED_ADDRESSES>",
"SRA_BLOCKED_ADDRESSES_FILE": "<YOUR_SRA_BLOCKED_ADDRESSES_FILE>",
"SRA_MAX_AUTH_VALIDITY_SECONDS": "<YOUR_SRA_MAX_AUTH_VALIDITY_SECONDS>",
"SRA_API_KEY": "<YOUR_SRA_API_KEY>",
"SRA_TIMEOUT": "<YOUR_SRA_TIMEOUT>",
"SRA_DEPEG_HOLD_PCT": "<YOUR_SRA_DEPEG_HOLD_PCT>",
"SRA_DEPEG_REJECT_PCT": "<YOUR_SRA_DEPEG_REJECT_PCT>",
"SRA_MAX_GATEWAY_VALIDITY_SECONDS": "<YOUR_SRA_MAX_GATEWAY_VALIDITY_SECONDS>",
"SRA_CIRCLE_WALLETS": "<YOUR_SRA_CIRCLE_WALLETS>",
"SRA_CIRCLE_USDC_TOKEN_IDS": "<YOUR_SRA_CIRCLE_USDC_TOKEN_IDS>",
"SRA_EXPECTED_DELEGATES": "<YOUR_SRA_EXPECTED_DELEGATES>",
"SRA_EXPECTED_DELEGATES_FILE": "<YOUR_SRA_EXPECTED_DELEGATES_FILE>"
}
}
}
}Let your agent find its tools
Find servers like SRA-RiskGate MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.