Tollary

Put a boundary before an MCP transfer tool signs

Tollary checks a short-lived owner mandate and exact unsigned Base USDC call. Nonce and expiry rules help reject replayed or stale authorization while the signer remains yours.

npx tollary inspect --source guide-mcp-duplicate
npx tollary lint --input ./guard-request.json --source guide-mcp-duplicate

Your application must still be idempotent and verify the Tollary attestation. This is one independent check, not a complete wallet policy engine.

Testnet only. A lint cannot prove that no duplicate can occur elsewhere in your stack.

Agent instructions · OpenAPI · Limitations