C.R.E.A.M.

Payment control plane for AI agents.

An open-source Rust framework that sits between AI agents and payment providers — governing every transaction through policy enforcement, intelligent routing, and an immutable audit ledger. Exposed as both REST and MCP: one API surface for cards, cross-border transfers, and stablecoin micropayments. Every payment requires structured justification before money moves.

It governs

Every payment states why it should happen, then passes eight hard gates and a policy engine before a single cent moves.

It routes

The optimal rail is chosen per transaction across cost, latency, and health — with automatic failover the moment a provider degrades.

It records

Every step is written to an append-only ledger the database physically refuses to alter. Nothing is updated. Nothing is deleted.

A control plane, not a wallet.

Eight gates. Twelve rule types. Every payment justified, routed, and recorded before money moves — and written down forever after.

Eight Gates. Zero Shortcuts.

Every payment request passes through an eight-stage pipeline before money moves: schema validation, agent identity resolution, justification evaluation, policy engine, routing engine, provider execution, settlement confirmation, and immutable audit write. Each stage is a hard gate — fail any one and the transaction is rejected with a structured explanation. Sub-300ms for approved autonomous transactions.

Declarative Rules. No Exceptions.

Twelve built-in rule types — amount caps, velocity limits, geographic restrictions, category blocks, duplicate detection, cooldown windows — evaluated as a declarative rule set before every transaction. Rules compose: an operator defines the policy once, and every agent inherits the constraints. Human-in-the-loop escalation is a policy rule, not an afterthought.

Cost. Latency. Health.

The routing engine scores every available provider across cost, latency, health, and corridor availability — then selects the optimal rail for each transaction. Circuit breakers detect degraded providers and failover automatically. Cross-provider idempotency via Redis distributed locks prevents double-payments during failovers. Trait boundaries everywhere — swap provider implementations without touching core logic.

Append Only. Delete Nothing.

Every step of every payment — from initial request through settlement — is written to an append-only audit log. The database physically blocks updates and deletes. Every payment request includes a machine-structured justification from the agent, creating an audit trail that explains not just what happened, but why the agent believed it should. MCP-native integration for Claude, GPT-4, LangChain, and LangGraph.

Specifications

CLASSIFICATION
Payment Control Plane
STATUS
In Development
FRAMEWORK
Axum (async)
LANGUAGE
Rust
DATABASE
PostgreSQL (SQLx)
CACHE / LOCKS
Redis
MCP SERVER
TypeScript (native)
DASHBOARD
Next.js 15 · shadcn/ui
PROVIDERS
Stripe · Airwallex · Coinbase
LATENCY TARGET
<300ms autonomous
LICENSE
Apache 2.0

Frequently Asked Questions

Is C.R.E.A.M. open source?

Yes. C.R.E.A.M. is an open-source Rust framework licensed under Apache 2.0, with source at github.com/kaminocorp/cream.

What is C.R.E.A.M.?

C.R.E.A.M. is a payment control plane for AI agents: it sits between agents and payment providers, governing every transaction through policy enforcement, intelligent routing, and an immutable audit ledger.

What language is C.R.E.A.M. built in?

C.R.E.A.M. is built in Rust on the async Axum framework, using PostgreSQL (via SQLx) for storage and Redis for caching and distributed locks.

Does C.R.E.A.M. support MCP?

Yes. C.R.E.A.M. is exposed as both REST and MCP, with a native TypeScript MCP server and MCP-native integration for Claude, GPT-4, LangChain, and LangGraph.

Which payment providers does C.R.E.A.M. support?

C.R.E.A.M. routes across Stripe, Airwallex, and Coinbase, selecting the optimal rail per transaction by cost, latency, and health, with automatic failover when a provider degrades.

Is C.R.E.A.M. production-ready?

C.R.E.A.M. is listed with In Development status; it targets sub-300ms approval for autonomous transactions and records every step to an append-only ledger the database physically refuses to alter.