Merge pull request #11410 from Jiangw2718i/add-frisk-mcp

Add frisk-mcp: pre-payment counterparty screening for x402 agents

README.md

@@ -3756,6 +3756,7 @@ Tools for conducting research, surveys, interviews, and data collection.
 - [timescale/rsigma](https://github.com/timescale/rsigma) [![timescale/rsigma MCP server](https://glama.ai/mcp/servers/timescale/rsigma/badges/score.svg)](https://glama.ai/mcp/servers/timescale/rsigma) 🎖️ 🦀 🏠 🍎 🪟 🐧 - Exposes the RSigma Sigma detection-engineering toolkit to AI agents over stdio or Streamable HTTP with `rsigma mcp serve`. Tools to author, lint, validate, and convert Sigma detection rules, evaluate and explain detections against log events, and inspect correlation state, all backed by a native Rust engine.
 - [dengyier/OpenWorkProof](https://github.com/dengyier/OpenWorkProof) [![dengyier/OpenWorkProof MCP server](https://glama.ai/mcp/servers/dengyier/OpenWorkProof/badges/score.svg)](https://glama.ai/mcp/servers/dengyier/OpenWorkProof) 🐍 🏠 ☁️ - Verifiable execution protocol for AI agent tool calls. Ed25519-signed PolicyDecisions, causal evidence chains (RFC 8785 JCS), and offline verification from SQLite ledger. 2,281 tests, 2 real-world bugs demonstrated end-to-end. `pip install openworkproof`
 - [aurumflux20/seal](https://github.com/aurumflux20/seal) [![aurumflux20/seal MCP server](https://glama.ai/mcp/servers/aurumflux20/seal/badges/score.svg)](https://glama.ai/mcp/servers/aurumflux20/seal) 🐍 🏠 - Exactly-once execution for agents that move money: the same payment can't settle twice across processes or retries. World-confirmation asks the provider ("did this charge actually land?") and returns CONFIRMED_ONE / MULTIPLE / ABSENT / UNKNOWN; out-of-band reconcile catches spend that bypassed the gateway; earned-autonomy licensing (L0–L5) only raises an agent's unattended spend ceiling on proven-clean history. In the official MCP Registry as `io.github.aurumflux20/seal`. `pip install seal-kernel`
+- [Jiangw2718i/frisk](https://github.com/Jiangw2718i/frisk) [![Jiangw2718i/frisk MCP server](https://glama.ai/mcp/servers/Jiangw2718i/frisk/badges/score.svg)](https://glama.ai/mcp/servers/Jiangw2718i/frisk) 📇 🏠 ☁️ - Screen the counterparty of an x402 payment before an agent pays it. One tool, `screen_payment`, runs deterministic checks — address sanity, dynamic-`payTo` swap detection, transport safety and your own spend policy — and returns `allow`/`review`/`block` with the reasons for the verdict. Advisory: it never holds funds, and your code decides. Runs entirely on your machine by default with no key, no account and no network call (MIT, 5 packages installed); set `FRISK_API_KEY` to answer the same tool from the hosted reputation graph instead. `npx frisk-mcp`
 
 - [epistemedeus/skillguard](https://github.com/epistemedeus/skillguard) [![epistemedeus/skillguard MCP server](https://glama.ai/mcp/servers/epistemedeus/skillguard/badges/score.svg)](https://glama.ai/mcp/servers/epistemedeus/skillguard) 📇 🏠 - Static security scanner for Claude Code skills, plugins, and MCP servers — vet a dependency for malware (secret/env exfiltration, install-time hooks, prompt injection, committed binaries) **before** you install it. Static-only: it clones and reads files, never executes the scanned code. `npx -y github:epistemedeus/skillguard mcp`