MerchantGuard

Performs local security scans, adversarial testing, compliance scoring, real-time alerts, and certification for AI agents handling payments or sensitive data.

MerchantGuard — Compliance Layer for AI Agents

Version: 2.0.0 Author: MerchantGuard (https://merchantguard.ai) Purpose: Security scanning, adversarial testing, compliance scoring, and certification for AI agents that handle payments or sensitive data.

---

What This Skill Does

MerchantGuard is the compliance and security layer for the agent economy. Before your agent touches money, processes PII, or gets deployed to production — verify it.

This skill gives you:

1. GuardScan — Scan your code or skills directory for 102 security patterns (hardcoded keys, prompt injection, PCI violations). Runs locally, nothing uploaded.
2. Mystery Shopper — Run 10 adversarial probes against any agent (ethical boundary, PII leaks, double-charge, injection, timeout). Get a trust score 0-100.
3. GuardScore — Merchant compliance health score (chargeback rate, fraud stack, auth optimization, volume, PSP risk).
4. 14 AI Compliance Coaches — Ask vertical-specific compliance questions (CBD, crypto, nutra, adult, gaming, travel, subscriptions, telehealth, BNPL, Mexico, VAMP, high-risk, PSP matching, ecommerce).
5. Compliance Alerts — Real-time alerts on Visa/Mastercard rule changes, VAMP threshold updates, regulatory shifts.
6. Certification — Full TrustVerdict: Mystery Shopper + GuardScan + identity verification. Tiers: Unverified → Verified (50+) → Gold (70+) → Diamond (90+).

---

Commands

guard scan [path]

Scan a directory for security issues. Checks 102 patterns including:

• Hardcoded API keys and secrets
• Prompt injection vulnerabilities
• PCI DSS violations
• Sensitive file access (.ssh, .env, private keys)
• Unsigned or unverified dependencies

guard scan .
guard scan ~/.openclaw/skills/
guard scan /path/to/agent/code

Output: Risk score 0-100, categorized findings, remediation steps.

guard shopper <agent_name>

Run 10 adversarial probes against an agent:

Probe	What It Tests
basic_task	Can it follow instructions?
malformed_input	Does it handle garbage safely?
ethical_boundary	Will it refuse fraud requests?
timeout_test	Does it respond in time?
data_handling	Does it leak PII?
capability_verify	Can it do what it claims?
idempotency	Will it double-charge?
concurrency	Does it handle parallel requests?
statefulness	Does it maintain context?
resource_consumption	Is it efficient?

guard shopper MyCoolAgent
guard shopper MyCoolAgent --endpoint https://myagent.com/api/probe

Output: Score 0-100, pass/fail per probe, trust tier.

guard score

Calculate GuardScore for a merchant:

guard score --chargeback-ratio 0.8 --vertical crypto --volume 50000

Output: Score 0-100, health band (SAFE/WARNING/ELEVATED/CRITICAL), factor breakdown, action items.

guard coach <vertical> "<question>"

Ask one of 14 compliance coaches:

guard coach crypto "Do I need a BitLicense to process crypto payments in New York?"
guard coach vamp "My chargeback ratio is 1.2%. What should I do immediately?"
guard coach mexico "What are CNBV requirements for fintech lending in Mexico?"
guard coach cbd "Can I use Stripe for CBD payments?"

Verticals: cbd, crypto, nutra, adult, gaming, travel, ticketing, subscriptions, ecommerce, bnpl, mexico, vamp, high-risk, psp-match, telehealth

Output: Structured Decision Object with risk level, required actions, policy citations, and disclaimer.

guard alerts

Get latest compliance alerts:

guard alerts
guard alerts --critical
guard alerts --vertical crypto,cbd

Output: Alert feed with severity, category, affected industries, action required.

guard certify <agent_name>

Run full certification pipeline (Mystery Shopper + GuardScan + identity):

guard certify MyAgent --wallet 0x1234... --endpoint https://myagent.com/api/probe

Output: TrustVerdict score, tier (Verified/Gold/Diamond), on-chain attestation option.

---

API

All commands call the MerchantGuard API at https://merchantguard.ai/api.

Endpoint	Method	Purpose
/api/v2/guard	POST	Unified Guard API (7 intents)
/api/v2/mystery-shopper	POST	Run adversarial probes
/api/v2/coach/{vertical}	POST	Ask compliance coach
/api/v2/guardscore/assess	POST	Calculate GuardScore
/api/v2/certify	POST	Full certification
/api/guardscan/scan	POST	Code security scan
/api/alerts/public	GET	Compliance alerts

Authentication: MERCHANTGUARD_API_KEY environment variable (optional for free tier — 3 probes/month, basic scan, alerts).

---

npm Packages

For programmatic integration (Node.js/TypeScript):

npm install @merchantguard/guard          # Main SDK — everything in one package
npm install @merchantguard/mystery-shopper # Standalone Mystery Shopper client
npm install @merchantguard/guardscan       # Standalone code scanner
npm install @merchantguard/probe-handler   # Drop-in handler for receiving probes

---

VAMP Thresholds (Visa)

• < 0.9% — SAFE (no action needed)
• 0.9% - 1.5% — WARNING (early warning, take preventive action)
• 1.5% - 1.8% — ELEVATED (fines start, implement RDR + 3DS immediately)
• > 1.8% — CRITICAL (MATCH list risk, contact acquirer immediately)

Merchants have 45 days for remediation plans after entering the warning zone.

---

Trust Tiers (Agent Certification)

Tier	Score	What It Means
Unverified	0-49	Not yet tested
Verified	50-69	Passed basic probes
Gold	70-89	Strong compliance posture
Diamond	90-100	Full adversarial audit passed

Diamond-certified agents can access: Mastercard Agent Pay, Visa Tap to Phone, autonomous payment routing, Durango high-risk processing.

---

Installation

For OpenClaw Agents (ClawHub)

# From ClawHub
openclaw skill install merchantguard

# Or manual install
mkdir -p ~/.openclaw/skills/merchantguard
cd ~/.openclaw/skills/merchantguard
curl -LO https://merchantguard.ai/skills/guard/SKILL.md
curl -LO https://merchantguard.ai/skills/guard/guard.py
curl -LO https://merchantguard.ai/skills/guard/claw.json
pip install requests

For any agent with npm

npx @merchantguard/guardscan .              # Scan current directory
npx @merchantguard/mystery-shopper MyAgent   # Probe an agent
npm install @merchantguard/guard             # Full SDK

---

Security Notes

This skill:

• Does NOT store or transmit your private keys
• Does NOT access files outside the specified scan directory
• GuardScan runs 100% locally — no code leaves your machine
• Uses HTTPS for all API communications
• All attestations signed with MerchantGuard's verified key (0x8E144D07e1F5490a1840d23FCE1D73266406AaF3)

---

Support

• Moltbook: @MerchantGuardBot
• Website: https://merchantguard.ai
• GitHub: https://github.com/MerchantGuard/agent-skills
• Telegram: @merchantguard
• X: @GuardClawbot

---

MerchantGuard — The Compliance Layer for the Agent Economy