# Cleanmandate

> Verified Payment Mandate Layer for AI Agents — Cleanverse Hackathon 2025

- **Type:** MCP server
- **Install:** `agentstack add mcp-icohangar-ops-cleanmandate`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [icohangar-ops](https://agentstack.voostack.com/s/icohangar-ops)
- **Installs:** 0
- **Category:** [Finance & Payments](https://agentstack.voostack.com/c/finance-and-payments)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [icohangar-ops](https://github.com/icohangar-ops)
- **Source:** https://github.com/icohangar-ops/cleanmandate

## Install

```sh
agentstack add mcp-icohangar-ops-cleanmandate
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# CleanMandate

  

**Verified payment mandates for AI agents** — Cleanverse Build hackathon entry (Track 02: Trusted AI Agent Transactions).

**Repos:** [Codeberg](https://codeberg.org/cubiczan/cleanmandate) · [GitHub](https://github.com/Cubiczan/cleanmandate)

CleanMandate composes your existing agent stack with [Cleanverse](https://cleanverse.com) compliance primitives on **Monad**:

| Layer | Role |
|-------|------|
| **A-Pass** | Wallet-bound principal identity |
| **CCP** | Pre-transaction rules + Travel Rule |
| **A-Token** | Compliant stablecoin transfer |
| **CHP** | Consensus Hardening Protocol lock gate |
| **Policy** | YAML spend controls (from `compliance-as-code-agent` patterns) |
| **Audit** | HMAC-signed `.cleanmandate/audit.jsonl` |

## Architecture

```
Principal (A-Pass) → Agent mandate JSON
    → cm-policy (allowlists, caps)
    → Cleanverse CCP (Travel Rule)
    → CHP gate (auto / human-in-the-loop)
    → A-Token transfer on Monad
    → Exportable compliance bundle
```

Integrates conceptually with:

- [`agent-conductor`](https://codeberg.org/cubiczan/agent-conductor) — MCP orchestration
- [`compliance-as-code-agent`](https://codeberg.org/cubiczan/compliance-as-code-agent) — policy packs
- [`consensus-hardening-protocol`](https://codeberg.org/cubiczan/consensus-hardening-protocol) — CHP locks
- [`swarmfi-executor`](https://codeberg.org/cubiczan/swarmfi-executor) — guarded execution patterns

## Quick start

```bash
cargo build --release -p cm-cli

# Mock mode (default) — offline demo, no API key
./target/release/cleanmandate pay \
  --mandate examples/mandates/vendor-payment.json \
  --dry-run

# Live sandbox (invitation code required from Cleanverse)
export CLEANVERSE_MODE=sandbox
export CLEANVERSE_API_KEY=your_key
export CLEANVERSE_API_BASE=https://sandbox.api.cleanverse.com/v3

./target/release/cleanmandate pay \
  --mandate examples/mandates/vendor-payment.json
```

## CLI

| Command | Description |
|---------|-------------|
| `cleanmandate pay --mandate ` | Full pipeline |
| `cleanmandate pay --dry-run` | Gates only, skip A-Token |
| `cleanmandate validate --mandate ` | Local policy check |
| `cleanmandate export --mandate-id ` | Audit bundle |
| `cleanmandate status` | Config + mode |

Environment:

- `CLEANVERSE_MODE` — `mock` (default) or `sandbox`
- `CLEANVERSE_API_KEY` — Bearer token for sandbox
- `CLEANVERSE_API_BASE` — API base URL
- `CLEANMANDATE_SIGNING_KEY` — HMAC key for audit ledger

## Hackathon demo script

1. Show mandate JSON (`examples/mandates/vendor-payment.json`) — agent requests $250 vendor payment.
2. Run `cleanmandate validate` — policy passes (allowlisted vendor, under cap).
3. Run `cleanmandate pay --dry-run` — A-Pass ✓, CCP ✓, CHP auto-lock ✓.
4. Bump amount to $6,000 in JSON — CHP returns `chp_review` (human approval).
5. Run live pay with sandbox credentials — A-Token tx hash on Monad testnet.
6. `cleanmandate export` — signed audit trail for regulators.

See [docs/CLEANVERSE_INTEGRATION.md](docs/CLEANVERSE_INTEGRATION.md) and [docs/DEMO.md](docs/DEMO.md).

## Cubiczan stack

| Finance | [Strata](https://github.com/Cubiczan/Strata) · [Metabocommand](https://github.com/Cubiczan/Metabocommand) · [meshcfo](https://github.com/Cubiczan/meshcfo) · [working-capital-optimizer](https://github.com/Cubiczan/working-capital-optimizer) · [cash-flow-optimizer](https://github.com/Cubiczan/cash-flow-optimizer) |
| Governance | [consensus-hardening-protocol](https://github.com/Cubiczan/consensus-hardening-protocol) · [agent-conductor](https://github.com/Cubiczan/agent-conductor) · [compliance-as-code-agent](https://github.com/Cubiczan/compliance-as-code-agent) · **cleanmandate** |

CleanMandate is the **payment rail** for agent commerce — CHP locks and Metabocommand approvals gate spend before A-Token settlement.

## Business plan / deck

Hackathon submission deck: [docs/business-plan/cleanmandate-deck.pdf](docs/business-plan/cleanmandate-deck.pdf)

## Crates

| Crate | Purpose |
|-------|---------|
| `cm-core` | Mandates, Travel Rule, audit ledger |
| `cm-policy` | YAML policy engine |
| `cm-cleanverse` | A-Pass / CCP / A-Token HTTP client |
| `cm-chp` | CHP approval gate |
| `cm-executor` | Orchestration pipeline |
| `cm-cli` | `cleanmandate` binary |

## License

MIT — Shyam Desigan / Cubiczan

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [icohangar-ops](https://github.com/icohangar-ops)
- **Source:** [icohangar-ops/cleanmandate](https://github.com/icohangar-ops/cleanmandate)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-icohangar-ops-cleanmandate
- Seller: https://agentstack.voostack.com/s/icohangar-ops
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.