Spend Shield MCP Server

Watch the gate in 15 seconds - the attack moment: What is it? - A spend-control layer for AI agents. Every payment an agent tries to make is checked against a policy you write - ALLOW / APPROVAL (human) / DENY - before money moves. It never holds money: Stripe, x402, wallets stay downstream. It runs locally over stdio via the published package.

People who work with agent security, guardrails and authorization and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in Python.

VERIFIED ACTIVE

LAST COMMIT 2026-09-07 · ★ 2 · #108 OF 318 MAINTAINED FINANCE · VERIFIED 2026-09-18

MIT · Python servers · how we verify → /methodology

01 · Install Spend Shield

before you install - you'll need

The README does not document required environment variables for a basic install.

Claude Code

claude mcp add felixpg13-glitch-spendshield -- uvx spendshield

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "felixpg13-glitch-spendshield": {
      "command": "uvx",
      "args": [
        "spendshield"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

repo age created 2026-08-31 - young repo, little track record yet

license MIT - declared in the repository

pypi package spendshield - check the name against the project README before installing (PyPI has no namespace ownership)

registry namespace io.github.felixpg13-glitch is GitHub-verified and matches the repo owner

03 · What Spend Shield can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v0.8.0 · 2026-09-01

v0.8.0 - Policy Lifecycle + hardening · What's new since 0.7.2: · Policy Lifecycle - CREATE → VALIDATE → SIMULATE → SCAN → REVIEW → APPLY → ROLLBACK with version conflict detection, atomic locks, and failure atomicity…

v0.7.2 · 2026-09-01

v0.7.2 - Known-Good Baseline ✅ · 第一套完整闭环的 V2 基线(218 tests 全绿)。 · 安全 · 8 攻击面 + 安全宪法 8 条不变量 + Fuzz(随机 seed soak) · Attack Corpus 45 个编号案例(AUTH/REPLAY/RACE/POLICY/INPUT/MCP/CRED/MIG) · 三轮自查堵死 2 严重 + 14 中低危, 全部永久回归 · 能力…

04 · Who maintains Spend Shield

SpendShield is maintained by felixpg13-glitch. It's the only MCP server we track from this author; the repo dates to Aug 2026.

05 · Facts

repository: github.com/felixpg13-glitch/spendshield
category: finance - ranked #108 of 318 actively-maintained finance servers as of 2026-09-18.
release cadence: 2 releases in the last 90 days (latest 2026-09-01)
registry: io.github.felixpg13-glitch/spendshield (active, first published 2026-09-02)
packages: pypi:spendshield

06 · Spend Shield FAQ

What is Spend Shield?

Is Spend Shield still maintained?

Yes - as of 2026-09-18, its last commit was 2026-09-07 and it shipped 2 releases in the last 90 days. We re-verify nightly.

How do I install Spend Shield?

Run `uvx spendshield`. The README does not document required environment variables for a basic install. You can also paste the ready-made client config above.

Does Spend Shield run locally?

Yes - it's a stdio server: it runs on your machine (via uvx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Spend Shield

Alternatives to Spend Shield

Maintained finance servers if Spend Shield isn't the fit.

Pairs well with

Servers that cover what Spend Shield doesn't - only shown when the pairing reason fits the companion.

More finance MCP servers · Spectra MCP Server · FinStack MCP · Freyotrisolana MCP Server · Frihet ERP · Fullbleed PDF Engine

More Python MCP servers · LLM Preflight · Gflow CLI · Figma MCP Server (figma) · Python MCP · Vaultbeat Apple Health · see all