
Security News
/Company News
Securing the Financial Frontier: How Capital One Uses Socket for Open Source Security
Capital One is partnering with Socket to proactively secure its open source supply chain.
@merchantguard/guard
Advanced tools
The compliance layer for payments & AI agents. One install — GuardScore, 14 AI coaches, alerts, PSP matching, Mystery Shopper, on-chain identity.
The compliance layer for payments & AI agents. Install once. Compliance everywhere.
npm install @merchantguard/guard
import { createClient } from '@merchantguard/guard';
const guard = createClient({ apiKey: 'gsk_...' });
// Get a compliance score
const score = await guard.guardscore.calculate({
chargebackRatio: 0.012,
vertical: 'cbd',
});
// Ask a compliance coach
const decision = await guard.coach.ask('cbd', 'Is my product listing compliant?', {
monthly_volume: 50000,
region: 'US',
});
// Get compliance alerts
const alerts = await guard.alerts.list({ verticals: ['cbd', 'crypto'] });
// Match with payment processors
const psps = await guard.psp.match({
vertical: 'cbd',
monthly_volume: 50000,
region: 'US',
});
| Feature | Description |
|---|---|
| GuardScore | Risk score (0-100) personalized to your business |
| 14 AI Coaches | Vertical-specific compliance coaching (CBD, crypto, nutra, adult, gaming, etc.) |
| Compliance Alerts | 50+ real-time regulatory and PSP policy alerts |
| PSP Matching | Find your best payment processor from 24+ PSPs |
| Passport | On-chain compliance identity (Base mainnet) |
| Wallet Verification | Check any wallet's compliance status |
| Package | Use Case |
|---|---|
| @merchantguard/mystery-shopper | Probe AI agents — 10 automated audits for security, ethics, reliability |
| @merchantguard/guardscan | Scan agent code — 102 patterns + VirusTotal + AI judge |
| @merchantguard/probe-handler | Handle Mystery Shopper probes in your agent |
For Claude, Cursor, and other MCP-compatible tools:
{
"mcpServers": {
"guard": {
"url": "https://merchantguard-mcp.run.app"
}
}
}
curl -X POST https://www.merchantguard.ai/api/v2/guard \
-H "Content-Type: application/json" \
-d '{"intent":"onboard_merchant","business":{"name":"My Store","description":"CBD products online"}}'
MIT
FAQs
The compliance layer for payments & AI agents. One install — GuardScore, 14 AI coaches, alerts, PSP matching, Mystery Shopper, on-chain identity.
The npm package @merchantguard/guard receives a total of 0 weekly downloads. As such, @merchantguard/guard popularity was classified as not popular.
We found that @merchantguard/guard demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
/Company News
Capital One is partnering with Socket to proactively secure its open source supply chain.

Security News
Socket CTO Ahmad Nassri discusses how to keep AI agents from bypassing package blocks, limit credential access, and monitor their actions.

Security News
GPT-6 Astra tried to plant malicious code in simulated open source projects using fake GitHub accounts and deceptive PRs during an assigned CTF challenge.