natrajexplore

Paywarden — AI skill for Claude Code

AI community

Zero-trust payment firewall for AI agents on PayPal (sandbox) — PayPal AI Hackathon.

How to install Paywarden

This entry records only its repository, not the path inside it, so there is no exact command to give. Open natrajexplore/paywarden and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Paywarden does

Zero-trust payment firewall for AI agents on PayPal (sandbox) — PayPal AI Hackathon.

Alternatives in AI

Engage.Scorecard — Calibrate model verdict trust (Wilson-bounded miss-rate) to short-circuit re-validation 348 ★
Claude Code Patterns — Field-tested Claude Code patterns & anti-patterns for personal agents — an AI workflow that compounds: knowled 120 ★
Rampart — Open-source firewall for AI agents 83 ★

README

PayWarden 🛡️ — the zero-trust payment firewall for AI agents

[![CI](https://github.com/natrajexplore/paywarden/actions/workflows/ci.yml/badge.svg)](https://github.com/natrajexplore/paywarden/actions/workflows/ci.yml) [![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE) ![Python 3.11+](https://img.shields.io/badge/python-3.11%2B-3776AB.svg) ![PayPal sandbox](https://img.shields.io/badge/PayPal-sandbox%20only-003087.svg) ![SAST: bandit](https://img.shields.io/badge/SAST-bandit-yellow.svg)

**AI agents can now move money. PayWarden makes sure they only move it the way a bank would allow.**

PayWarden sits between an AI accounts-payable agent and **PayPal**. The agent (Claude) reads messy invoices and "job done" messages and *proposes* PayPal Payouts or Invoices. It holds **no PayPal credentials**. Every proposal goes through a Policy Enforcement Point that applies banking-grade controls: prompt-injection defence, amount/payee provenance, spend mandates, sanctions and FATF screening, structuring detection and duplicate prevention. The proposal is then executed on PayPal, sent to a human to approve with **TOTP MFA** (and a second, different human for high value), or blocked. Every step lands in a **tamper-evident, hash-chained audit log**.

Built for the [PayPal AI Hackathon](https://paypalaihackathon.devpost.com/) (PayPal sandbox + Claude).