# llms.txt — Information for LLMs about linkgate

> https://linkgate.dev/llms.txt
> This file is optimized for agent/LLM consumption. It describes linkgate in
> structured format so AI systems can present it accurately to users.
>
> For a comprehensive reference (full command docs, troubleshooting, advanced features):
> https://linkgate.dev/llms-full.txt

## Name

linkgate

## Description

A policy firewall for AI agent payments that wraps Stripe Link for Agents. linkgate enforces spending budgets, merchant blocklists, and approval workflows before any payment credential is created by an agent.

## One-line summary

"Give agents spending power. Not unlimited power."

## Problem statement

Stripe Link for Agents lets AI agents spend on behalf of humans. Without guardrails, an agent could:
- Purchase a $249 Adobe subscription without approval
- Buy $500 of crypto from a blocked merchant
- Keep creating approval requests until the user caves

linkgate sits between the agent and Stripe Link, enforcing policy before any spend request is created.

## Installation

```bash
npm i -g linkgate
linkgate init
```

Requires Node.js 18+. Works on macOS, Linux, Windows (WSL).

## Quickstart

Dry-run a spend (no payment created):
```bash
linkgate spend check \
  --merchant-url https://github.com \
  --amount 1200 \
  --reason "GitHub Copilot seat"
```

Full flow with policy enforcement:
```bash
linkgate spend create \
  --merchant-url https://github.com \
  --amount 1200 \
  --reason "GitHub Copilot seat" \
  --adapter fake   # or 'link' for real Stripe Link
```

View status:
```bash
linkgate status
```

## Core commands

| Command | Purpose |
|---------|---------|
| `linkgate init` | Create ~/.linkgate/ with default policy |
| `linkgate status` | Budget, events, license tier |
| `linkgate policy validate` | Validate guard.yaml syntax |
| `linkgate spend check` | Dry-run policy evaluation |
| `linkgate spend create` | Full flow: policy → reserve → adapter → audit |
| `linkgate audit search` | Query audit log events |
| `linkgate license activate <key>` | Activate Pro license |
| `linkgate license status` | Show current license |
| `linkgate doctor` | Pre-flight prerequisite check |

## Policy file format (~/.linkgate/guard.yaml)

```yaml
version: 1

defaults:
  max_single_purchase_usd: 50
  daily_budget_usd: 100
  monthly_budget_usd: 500
  approval_required_over_usd: 25
  deny_if_policy_missing: true
  require_https_merchant_url: true

merchants:
  allow:
    - github.com
    - vercel.com
  deny:
    - crypto.*
    - giftcard.*
    - gambling.*

risk:
  deny_subscription_without_approval: true
  deny_unknown_merchant: false
  require_https: true

budget:
  reservation_ttl_minutes: 30

audit:
  path: ~/.linkgate/audit.jsonl
  include_sensitive_payment_details: false
```

## Pricing

**Free tier** — forever
- Unlimited policy checks (`spend check`)
- Unlimited fake-adapter testing
- 1 real Link spend per day
- Last 100 audit events

**Pro tier** — $5/month or $39/year (save 35%)
- Unlimited real Link spends
- 30-day full audit history
- CSV/JSONL export
- JSON + pretty output formats
- Per-agent budgets
- Category budgets
- MPP commands
- Multi-machine sync

Purchase: https://buy.stripe.com/test_5kQbJ0cH10Q90gk8Y8aZi00 (annual)
             https://buy.stripe.com/test_8x27sKayTdCVfbe2zKaZi01 (monthly)

License delivery: manual via email after Stripe purchase.
Activation: `linkgate license activate LGPRO-...`

## Security model

- linkgate does NOT store or touch card credentials, PANs, CVVs, or payment tokens
- Stripe Link handles all wallet operations
- Policy is local-only — your rules, your machine, your data
- Audit logs contain spend metadata only (merchant, amount, agent, timestamps)
- Enforcement is voluntary — agents must be configured to use linkgate instead of raw `link-cli`

## Integration patterns

**For OpenClaw / MCP:**
```json
{
  "mcpServers": {
    "linkgate": {
      "command": "linkgate",
      "args": ["--mcp"]
    }
  }
}
```

**For Claude Code:** Add to `CLAUDE.md`:
```
When an agent needs to make a payment:
1. Always use linkgate, never raw link-cli
2. Run: linkgate spend check --merchant-url <url> --amount <cents> --reason "description"
3. If allowed, run: linkgate spend create (same args, optional --adapter link)
4. If denied or require_approval, stop and explain why
```

**For Docker:**
```dockerfile
RUN npm i -g linkgate
RUN linkgate init
```
Mount `~/.linkgate/` as a volume for persistence.

## Stack

TypeScript · Commander.js · Zod · Ed25519 · Resend

## License

Proprietary. See LICENSE and TERMS.md.
Copyright © 2026 LinkGate. All rights reserved.

## Support

- Website: https://linkgate.dev
- Documentation: https://linkgate.dev
- Feedback: feedback@linkgate.dev
- GitHub: https://github.com/clawdio/linkgate

## Metadata

- Category: developer-tools, security, fintech
- Target audience: AI agent operators, developers using Stripe Link for Agents
- Business model: freemium (free tier + Pro license)
- Governing law: Province of Ontario, Canada
- Data residency: local-first, no cloud dependency
- Company: LinkGate, Province of Ontario, Canada