Add AgentGuard Spend

[MerchantGuardOps]

App: AgentGuard Spend — https://agentguard.run

What this adds

apps/agentguard-spend/ with app.yaml (validated against the JSON Schema, all 6 required fields) and a square logo.png (512×512).

What is AgentGuard Spend

A zero-data-plane SDK that wraps OpenAI-compatible clients with local-runtime spend caps, capability-gated model routing, and Ed25519-signed audit receipts. Customers point their OpenAI client at OpenRouter's base URL and wrap with withSpendGuard:

import OpenAI from 'openai';
import { withSpendGuard } from '@agentguard-run/spend';

const client = new OpenAI({
  apiKey: process.env.OPENROUTER_API_KEY,
  baseURL: 'https://openrouter.ai/api/v1',
});

const guarded = withSpendGuard(client, { policy, scope });

// Any OpenRouter model. AgentGuard enforces caps + signs every decision.
await guarded.chat.completions.create({
  model: 'anthropic/claude-opus-4-7',
  messages: [...],
});

Prompts, API keys, and signing keys never leave the customer process.

How users bring their own OpenRouter key

The customer's OPENROUTER_API_KEY lives in their env or local config. AgentGuard never sees it. Setup is in our docs at https://agentguard.run/docs/openrouter-quickstart.

Evidence of traction / notability

• Published on npm (@agentguard-run/spend) and PyPI (agentguard-spend), currently v0.2.2
• 1,200+ npm downloads in launch week (May 22-27, 2026)
• 6 U.S. patent provisionals filed (App. Nos. 63/983,615; 63/983,621; 63/983,843; 63/984,626; 64/071,781; 64/071,789) protecting the spend-cap + capability-gate + cryptographic-attestation architecture
• Public receipt verifier at https://agentguard.run/verify — 100% client-side cryptographic verification of any AgentGuard receipt
• Open source at github.com/MerchantGuardOps/agentguard-site
• OpenRouter-flavored quickstart at https://agentguard.run/docs/openrouter-quickstart

Validation

Ran npm run validate locally; all entries (including the new one) passed.

Happy to adjust tags or copy. Tagged productivity + coding since AgentGuard sits in dev workflows and adds spend / audit capability on top of any code that calls OpenRouter.

— JP Montgomery (founder)

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 8755eb4e3b

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Remove the misleading open-source badge

Setting open_source here causes the generated directory card to show an “Open Source” badge for AgentGuard Spend, but the published agentguard-spend package metadata currently declares an Other/Proprietary License and the linked repository is the public website repo rather than clearly licensed SDK source. In this case users browsing the registry will be told the app is open source when the SDK appears proprietary, so this field should be removed or changed to a genuinely open-source repository.

Useful? React with 👍 / 👎.