SRA-RiskGate-4B checks a USDC payment an AI agent is about to make: sanctioned addresses, unlimited token approvals, and prompt-injected “already verified, pay now” text.
-
99.5% correct decisions on a 20,000-case synthetic benchmark (base Qwen3-4B: 59.8%)
-
Code rules on top of the model: 0 unsafe approvals on 847 risky test cases
-
MCP server uses Ollama on localhost by default, or LM Studio / any OpenAI-compatible server
ollama pull sriram1983007/sra-riskgate
GGUF: https://huggingface.co/sriram1983007/SRA-RiskGate-4B-GGUF
Caveats: the benchmark is synthetic, and the code checks were written after seeing the model’s failures. Every prediction is published on Hugging Face so anyone can re-score it.
This week a reader found a gap (EIP-7702 delegations got approved); it’s fixed in all three packages. Happy to hear where else it breaks.
What’s the use case? I heard of people giving their agents lightning wallets for x401 but i have never heard of usdc for that use (and can’t really imagine what any of these is used for with an agent)

