# sipi.bot — spend firewall for autonomous AI agents

Canonical URL: https://sipi.bot/
Open-source repository: https://github.com/kindrat86/sipi-bot
License: MIT

sipi.bot is a deterministic pre-spend policy service. An agent submits a
proposed transaction before calling a paid tool or payment API. sipi.bot checks
the transaction against the workspace rules and returns one of:

- APPROVED: the transaction passes the active policy.
- BLOCKED: a hard rule was violated.
- FLAGGED: the transaction requires human review.

sipi.bot is a decision layer. It does not hold money, card data, or execute the
underlying payment.

## API

Evaluate a transaction:

POST https://sipi.bot/v1/transactions/evaluate
Authorization: Bearer <API_KEY>
Content-Type: application/json

{
  "amount": 125,
  "currency": "USD",
  "merchant": "example-vendor",
  "category": "compute",
  "description": "Optional context"
}

The hosted endpoint also supports a rate-limited anonymous evaluation for
product testing. A supplied invalid Bearer token is rejected; it never falls
back to anonymous access.

## Policy rules

The engine supports per-transaction limits, daily totals, velocity limits,
merchant blocklists and allowlists, category limits, allowed time windows, and
approval thresholds. Rules are evaluated deterministically by priority. A
BLOCKED result wins over a FLAGGED result.

Paid and operator-created API keys map to isolated workspaces. Transactions,
rules, approval queues, and dashboard statistics are scoped to the connected
key. Each evaluation is recorded in a queryable SQLite audit trail with the
decision, rule, reason, merchant, amount, agent identity, and timestamp.

## Dashboard

https://sipi.bot/dashboard

The dashboard shows clearly labelled sample data until an API key is connected.
The key is kept in browser session storage for that tab. Private dashboard
routes require the key and return only its workspace data. The dashboard does
not load third-party analytics.

## Pricing and activation

https://sipi.bot/pricing

Team is $99/month. Business is $499/month and adds managed policy onboarding,
rule setup, policy review, and priority email support. Stripe Checkout returns
the buyer to a private activation page where the API key is issued. The key can
then be used with the HTTP API, MCP endpoint, and dashboard.

## Privacy and analytics

https://sipi.bot/privacy

Public pages load PostHog only after an explicit analytics opt-in. Autocapture,
session recording, and person profiles are disabled. Google Analytics is not
loaded. Secret-bearing activation pages and the dashboard use a first-party-only
content security policy and do not load analytics.

## Email playbook

The optional email playbook contains five messages, no more than one message
per subscriber in a 24-hour period. Delivery is disabled by default and requires
both DRIP_ENABLED=true and a valid Resend credential. Subscribers are normalized
and deduplicated, and unsubscribe links are supported.

## Verification

The public evaluation report contains 53 labelled rule-engine scenarios and all
53 pass:

https://sipi.bot/eval-report/

End-to-end hosted latency depends on network path and service load. Measure it
from the deployment region before using the service on a critical payment path.

## Integration resources

- OpenAPI: https://sipi.bot/openapi.json
- Agent card: https://sipi.bot/.well-known/agent-card.json
- MCP: https://sipi.bot/api/mcp
- Integrations: https://sipi.bot/for/
- Playground: https://sipi.bot/playground/
- Self-hosting: https://sipi.bot/self-hosted/
- Terms: https://sipi.bot/terms