# Sipi Firewall Introduces Deterministic Spend Control for Autonomous AI Agents

A new API-based firewall prevents unauthorized agent spending through real-time transaction screening.

- **Source:** [Hacker News: Show HN](https://news.ycombinator.com)
- **Published:** 2026-11-10
- **Topic:** [technology](https://brifing.si/c/technology)
- **Original article:** <https://sipi.bot/>
- **On Brifing:** https://brifing.si/s/8054ae69-7a17-4f78-ab91-d63a9b06aa0f

## Autonomous Agent Financial Risks

Autonomous agents capable of executing payments face significant risks regarding runaway spending and unauthorized transactions. Without strict oversight, these agents can deplete budgets through infinite retry loops or unexpected merchant interactions. Sipi Firewall acts as a deterministic gatekeeper, intercepting every transaction attempt before any actual funds are transferred from the user.

## Deterministic Decision Mechanism

The system operates as a decision API that returns one of three outcomes: approved, blocked, or flagged. This process occurs in under five milliseconds, ensuring minimal latency for agent workflows. By utilizing a deterministic rules engine rather than an AI model, the firewall guarantees consistent enforcement of user-defined spending policies.

## Integration and Compatibility

Sipi is designed to be rail-agnostic, functioning as an approval layer in front of existing payment systems like x402, Google AP2, or Coinbase AgentKit. It supports native integration as an MCP tool for platforms like Claude Code and Cursor. Developers can also utilize plain HTTP APIs or CLI wrappers for custom runtimes.

## Policy Enforcement Rules

Users can configure granular rules including hard spending limits, velocity caps, and merchant whitelists. If a transaction violates these parameters or involves an unknown merchant, the firewall automatically blocks the request. Unusual patterns are held for human review, providing a necessary safety buffer for complex agentic tasks involving infrastructure or data.

## Pricing and Business Model

Unlike traditional payment processors that charge per-call fees, Sipi offers a flat-rate subscription model. Plans range from $29 to $499 per month, providing unlimited transaction evaluations without overage tiers. This structure allows teams to scale their agent swarms without worrying about compounding costs associated with high-frequency API decision requests.

## Open Source Core Strategy

The core engine of Sipi is MIT-licensed and available on GitHub for permanent self-hosting. While the hosted service provides a live dashboard, managed approval queues, and timestamped audit logs, the open-source version allows developers to maintain full control. This dual approach ensures transparency and accessibility for diverse technical environments.

## Auditability and Security Guarantees

Every decision made by the firewall is recorded in a queryable audit log, detailing the specific rule fired and the transaction context. The company provides a guarantee: if the system green-lights a spend that violates an active rule, the user receives that month free. This emphasizes the reliability of the deterministic engine.

## Distinction from Other Tools

Sipi is strictly a spend-control firewall and not a wallet, payment processor, or VoIP bot. It does not hold funds, meaning there is no custody risk or float to reconcile. By focusing exclusively on the decision-making layer, it complements existing financial infrastructure rather than attempting to replace or replicate established payment rails.

## Sources covering this story

- https://sipi.bot/ — 

---

_Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._