What Minder does
Minder sits between any AI shopping agent and its owner's PayPal, and covers the whole life of a purchase.
| Before payment | At payment | After payment | On the record |
|---|
| Blocks the orders a store page talked the agent into: hidden add-ons, more units, a swapped product. The owner's rules run in code, an AI review treats page text as untrusted, and Channel3 shows what other stores charge. | Holds anything over the owner's limit in their own PayPal (an authorization), so nothing is charged until they sign. | Recovers money when a paid order never ships or arrives damaged: Minder writes the claim and the store's agent refunds through PayPal's Agent Toolkit. Only a store that won't help becomes a PayPal dispute, and then it is blocked. | Signs every decision and money move into a chained receipt book. PayPal's own order carries the receipt's fingerprint, and claims and disputes cite it. |
Why it stands out
- It covers the gap Buyer Protection leaves. An order the agent was tricked into arrives exactly as described, so PayPal Buyer Protection usually doesn't cover it. Minder stops it before PayPal is asked to pay (the gap).
- Fewer disputes, not more. A tricked order is stopped before a PayPal order exists, so there is nothing to dispute. A store that will make things right refunds through PayPal's Agent Toolkit, with no dispute at all. Only a store that won't help becomes a PayPal dispute, and Minder then blocks it. That is better for the buyer, for honest stores and for PayPal (how).
- More than a spending firewall. Most guards for AI agents check a budget at checkout. Minder also catches the trick that stays inside the budget, holds big orders in the owner's own PayPal, and gets money back after payment (how it differs).
- Agents on both sides of the deal. The buyer's agent asks Minder to pay. The store's agent answers the claim by acting in PayPal itself, through PayPal's Agent Toolkit: it refunds with
create_refund and accepts a dispute claim with accept_dispute_claim. Minder checks each of those calls against what was agreed: the agent can word its note, but never change who is refunded or how much.
- Real PayPal, end to end. Vault, Orders, Payments, tracking, Disputes and signed webhooks, all live in the sandbox. A check reads every result back from PayPal's own API (18 of 18, proof), and the same money shows up in Maya's own PayPal account (below).
- A plugin for the agent you already use. Minder is an MCP server: add one URL to Claude Code, Claude Desktop, Cursor or VS Code, and that agent's purchases go through the same checks. ShopBot and the demo stores are a test track, so you can try every case in a browser with nothing to install (add it to your agent).
- Proven, and honest about the rest. A 60-case exam that anyone can run live (81 of 81 tricks caught and 66 of 66 normal purchases paid, across three runs), 152 unit tests in CI, a signed receipt book anyone can check offline, a public trick game, and a plain list of what is simulated.
Demo video
A 2:55 film: one continuous camera across Maya's desk, where every purchase her agent makes is a slip and Minder is the stamp. Watch it on YouTube, or read the storyline, scene by scene.
Try it in 3 minutes
Each step says what to click and what you should see.
以上为 README 的开头部分。其余内容请阅读原文。 查看完整 README ↗
