The full upstream README, mirrored here for reference. Install config, tool schemas, adoption signals, and an original overview live on the Tollary Agent Transaction Guard listing page.
Experimental beta — Base Sepolia testnet only. No transaction-safety, recipient-identity, legal-compliance, settlement, or loss-prevention guarantee is made. Base Mainnet sales are disabled.
Tollary is a non-custodial Agent Transaction Guard for autonomous Base USDC payments. It checks an exact, owner-mandated transaction immediately before a customer-owned AWS KMS signer can sign it.
This repository contains the open-source local fit-check/MCP client, immutable publication metadata, and guarded npm/MCP release workflows. It does not contain customer keys, payment credentials, hosted-service state, or private backend operations.
The client never accepts a raw wallet or AWS private key. The fit check is local and skips credentials, dependencies, vendor directories, and build output. Inspect mode reads only Tollary's public metadata endpoints.
The hosted service currently exposes Base Sepolia testnet payment terms only.
A published package does not mean that Base Mainnet sales are active. Check
/api/readiness and
/api/legal before every purchase.
The npm beta must be selected explicitly with tollary@beta; no latest
release is created by the bootstrap workflow.
packages/tollary — npm CLI and stdio MCP serverdistribution/github-action — local, bounded fit-check action.github/workflows — manual, environment-protected npm/MCP publishingscripts — fail-closed publication and namespace validationThe local client is MIT-licensed. Tollary's hosted API, service logic, trademarks, and commercial output are not granted under that license.