Shotoku – local authorization layer for AI agents

Shotoku is a local-first authorization layer that gives AI agents budgets, approval gates and a tamper-evident audit trail, enforcing spending decisions on your machine before any payment happens. It uses a YAML policy file with per-vendor maxAmount and maxDailyAmount limits, exposes a TypeScript authorize() function and an MCP server, and records every approved, denied or pending decision in a local JSONL file. Shotoku holds no funds or credentials and never signs or settles payments; it is in beta and open-source.