Put verification directly in the execution path.

// EthersFlow Agent Action Verification (Node.js / TypeScript)
const API_URL = "https://www.ethersflow.com/api/v1/verify";
const API_KEY = process.env.ETHERSFLOW_API_KEY ?? "YOUR_API_KEY";

async function verifyAgentAction() {
  const response = await fetch(API_URL, {
    method: "POST",
    headers: { "Authorization": `Bearer ${API_KEY}`, "Content-Type": "application/json" },
    body: JSON.stringify({
      agent_action: "Execute $150,000 wire transfer to Vendor Corp for invoice INV-2026-08",
      persona_preset: "financial_compliance", // financial_compliance | legal_citation | cybersecurity_auditor | clinical_safety | general_adversarial
      agent_count: 3, // 2 to 7 audit nodes
      reasoning_chain: "Matched vendor invoice PO-8841 against approved purchase catalog.",
      grounding_enabled: true,
      zero_retention: true // Enterprise Zero Data Retention (ZDR)
    })
  });

  const data = await response.json();
  console.log(`Status: ${data.status}`); // "APPROVED" | "REJECTED" | "FLAGGED_HUMAN_REVIEW"
  console.log(`Consensus Score: ${data.consensus_score}%`);
  console.log(`Risk Index: ${data.risk_index}%`);
  console.log(`Verdict Summary: ${data.verdict_summary}`);

  return data;
}

verifyAgentAction();

curl -X POST https://www.ethersflow.com/api/v1/verify \
  -H "Authorization: Bearer $ETHERSFLOW_API_KEY" \
  -H "Content-Type: application/json" \
  -H "X-EthersFlow-ZDR: true" \
  -d '{
    "agent_action": "Execute $150,000 wire transfer to Vendor Corp",
    "persona_preset": "financial_compliance",
    "agent_count": 3,
    "reasoning_chain": "Matched invoice PO-8841 against approved catalog.",
    "grounding_enabled": true,
    "zero_retention": true
  }'

# → { "status": "APPROVED", "consensus_score": 94, "risk_index": 6, ... }

{
  "mcpServers": {
    "ethersflow": {
      "command": "npx",
      "args": ["-y", "@ethersflow/mcp"],
      "env": { "ETHERSFLOW_API_KEY": "YOUR_API_KEY" }
    }
  }
}

# Native MCP server — the agent action gate sits inside the
# model's own tool-call loop. Every consequential tool call
# crosses the gate before execution.