Xonta is a self-hosted gateway in front of any MCP server. It signs a receipt for every tool call and spend, keeps the agent inside a budget and a per-call risk cap, and strips hidden instructions out of tool output. Anyone can verify a receipt with a public key and plain arithmetic. Open source, Apache-2.0, one command to run.