CSOAI-ORG/csoai-ap2-mandate-mcp
v1.0.4 github Python analyzed 1192e70
MEOK Google AP2 Mandate MCP — issue + verify + revoke signed user-side spend authorisations for agentic commerce. PSD2 SCA crosswalk + MiCA + 6AMLD overlays. By MEOK AI Labs.
CSOAI-ORG/csoai-ap2-mandate-mcp is an MCP server distributed on github, maintained by CSOAI-ORG, tracked here since June 2026. It has shipped 1 release (currently 1.0.4) and exposes 7 tools. Tools include consume_mandate, crosswalk_psd2, issue_mandate, list_mandate_scopes, revoke_mandate, sign_mandate_chain, and 1 more. Its composite risk grade is B — an inferred review prompt computed from observed signals, not a verdict.
what we found
Reading the source raised one review prompt — toxic flow (lethal trifecta) — each a pattern worth a human look rather than a finding of fault.
full security breakdown →tools
-
consume_mandate -
crosswalk_psd2 -
issue_mandate -
list_mandate_scopes -
revoke_mandate -
sign_mandate_chain -
verify_mandate
release cadence · 90d
2026-07-19 2026-09-01 now
recent releases
| version | date | src |
|---|---|---|
| 1.0.4 | 2026-08-20 | pypi |