Open source, self-hosted agent spend firewall
sipi.bot is MIT-licensed and runs on your hardware. Stdlib Python — zero framework dependencies. The hosted version at sipi.bot runs on the same code you self-host.
What you get self-hosting
The full spend firewall: per-transaction caps, daily totals, velocity limits (runaway-loop protection), merchant allow/block, category limits, time windows, and an approval threshold. A live dashboard with tamper-evident audit log. An MCP tool for Claude Code / Cursor / Hermes, an HTTP API for any agent runtime, and a CLI.
Deploy in under 2 minutes
git clone https://github.com/kindrat86/sipi-bot.git cd sipi-bot pip install . sipi-bot serve --port 8080
Open http://localhost:8080 for the dashboard and http://localhost:8080/for/ for framework integration docs. That's the entire self-hosted surface — landing page, dashboard, pricing, docs.
What the hosted version adds
The hosted version at sipi.bot ($99/mo) adds uptime guarantees, persistent audit logging across restarts, and priority support. The self-hosted core is feature-complete — the hosted version is for teams that don't want to run their own infrastructure. There is no gated functionality; the entire policy engine ships in the open-source release.
Architecture that ships with you
37MB Docker image on Fly.io. Stdlib http.server + sqlite3. No framework, no ORM, no build step. You can audit the entire codebase in an afternoon — it's ~3000 lines of Python with a 53-scenario eval gym that proves every rule works.
Frequently asked
Is the self-hosted version limited compared to the hosted one?
No. The open-source core is feature-complete: the full policy engine, dashboard, audit trail, MCP tool, HTTP API, and CLI. The hosted version adds uptime guarantees, persistent log retention, and support.
What are the infrastructure requirements?
Any machine that runs Python 3.11+. The server uses Python's stdlib http.server and sqlite3 — no framework, no database server, no external dependencies. A Raspberry Pi can run it.
Can I get support while self-hosting?
Yes. GitHub issues are the primary support channel. The hosted tier includes priority response and SLAs.