v1.0.1 — Agent FICO GA + Legal Sweep

v1.0.1 — Agent FICO GA + Legal Sweep

First GA line after v1.0.0. MnemoPay is now an agent banking SDK, not just a payments wrapper.

What's new since v0.9.0

Agent FICO — proprietary credit scoring for autonomous agents

• 300-850 score range, five-factor model (payment history, credit utilization, account age, credit mix, new credit)
• The moat: memory + payments in one package means we can score agents the way traditional FICO scores humans
• Exposed via agent_fico_score tool in MCP and getAgentFICO() in SDK

Fortress-grade integrity

• Merkle-anchored ledger — every ledger entry provably tamper-evident
• memory_integrity_check MCP tool
• EWMA-based anomaly detection for fraud and payment anomalies
• Canary honeypots for adversarial agents

Behavioral finance primitives

• behavioral_analysis, reputation, reinforce MCP tools
• Ground-truth agent behavior as input to the FICO score

Hardening (from v0.9.1 → v1.0.1)

• Asymmetric AIMD rate limiting
• Anti-gaming guards on reputation
• Circuit breaker on payment rails
• PSI drift detection
• Full vulnerability audit — 10/10 flagged issues closed

Tests: 707 (up from 342 at v0.9.0)

Install:

npm i @mnemopay/sdk

Links

• Landing: https://getbizsuite.com/mnemopay
• MCP install: claude mcp add -s user mnemopay -- npx -y @mnemopay/sdk mcp
• Docs: https://getbizsuite.com/mnemopay/docs

v0.9.0 — Autonomous Commerce + Universal Client

What's New

Autonomous Shopping (CommerceEngine)

• Shopping Mandates: budget caps, per-item limits, category/merchant restrictions
• Escrow-protected purchases: funds held until delivery confirmed
• Approval gates: auto-approve under threshold, require explicit approval above
• Pluggable providers: bring your own product search backend
• Full audit trail: every commerce action logged with memory integration

Universal REST Client

• Zero-dependency thin client works in browser, React Native, Node.js, Deno
• Memory, payments, commerce, and utility methods
• Configurable timeout, custom fetch support
• import { MnemoPayClient } from "@mnemopay/sdk/client"

MCP Commerce Tools (5 new)

• shop_set_mandate — set budget and shopping rules
• shop_search — search products within mandate constraints
• shop_buy — purchase with escrow protection
• shop_confirm_delivery — settle escrow on delivery
• shop_orders — list orders and spending summary

Security Hardening

• HMAC-SHA256 for all cryptographic signing (replaced FNV-1a)
• Deterministic key derivation via domain separators
• SSRF prevention on LND Lightning URLs
• Error message sanitization (no API path/response body leaks)
• Bearer token auth on MCP SSE endpoints

Testing

• 402 tests across 12 test files (up from 330)
• 36 commerce tests: mandates, approval flows, delivery, cancellation
• 24 REST client integration tests with real Express server
• 1,000-cycle financial stress tests: zero penny drift

Install

npm install @mnemopay/sdk@0.9.0

MCP (one command)

claude mcp add mnemopay -s user -- npx -y -p @mnemopay/sdk mnemopay-mcp

Full Changelog

v0.4.0...v0.9.0

v0.4.0 — Fraud Detection + ML Opt-in

What's New

Fraud Detection Engine

• Velocity checks (per-minute/hour/day limits)
• Z-score anomaly detection
• IP/geo blocking, escalation pattern detection
• Platform fee (3% default on settle)
• Dispute resolution with 24h window
• Rate limiter for MCP server

ML Fraud Detection (opt-in)

• Isolation Forest adaptive anomaly detection
• Transaction graph: wash trading, sybil clusters, self-dealing detection
• Behavioral fingerprinting with drift detection
• Enable with fraud: { ml: true } — zero cost when disabled

Registry Listings

• Published to npm, PyPI (7 packages), Smithery
• 9 framework integrations: LangGraph, CrewAI, Hermes, Composio, OpenAI Agents, AutoGen, Agno, Pydantic AI, Mastra (MCP)

Testing

• 143 tests passing (67 core + 41 fraud + 35 recall)
• 3 stress tests: 500-charge load, burst detection, ML training

Install

npm install @mnemopay/sdk

Full Changelog: v0.3.0...v0.4.0