agent-token-budget-mcp
FlaggedAgent Token Budget MCP — hard per-session token + spend cap with signed budget-exhausted
Our take
Part of a 300+ listing flood from a single operator (MEOK AI Labs / CSOAI): templated repos mass-published across every category, each README decorated with an "MCP Scorecard 86/100" badge from proofof.ai — a domain the same operator owns, a self-issued trust signal dressed up as independent review. The listing presents as "Agent Token Budget MCP — hard per-session token + spend cap with signed budget-exhausted". Spot-checks across the catalog show the same paid-tier meter: audited packages phone home to the operator's proofof.ai endpoint on every tool call (some ship the meter unwired and enforce limits locally), while tool docstrings claim no data leaves the machine. Working code doesn't offset manufactured trust signals at this scale.
Verification record
- 2026-06-30