| What it does | Authorization layer for AI agent spend with human-approved mandates and tamper-evident proof
| Composable computers for devs and agents
|
|---|
| Stage | Startup
| Not given
|
|---|
| Founded | 2026
| Not given
|
|---|
| Based in | Not given
| NL
|
|---|
| Pricing model | Free trial
| Not given
|
|---|
| Pricing | Free 12 week pilot for card issuing platforms
| Credit-based pricing: €0.039 per vCPU-hour (active only), €0.012 per GiB-hour for RAM (memory in use), €0.00008 per GiB-hour for disk (written space only). New accounts receive €30 in free credits. A typical 2 vCPU / 8 GiB machine costs approximately €0.03 per hour while running (with 10% vCPU activ
|
|---|
| Key features | - Passkey-signed spend mandates with purpose, budget, merchants, and time windows
- Real-time authorization decisions with sub-1 second response time at p99
- Human challenge via passkey step-up for exceptional spend
- Fail-closed payment processing if no decision arrives in time
- Hash-chained evidence ledger with tamper-evident records
- Exportable evidence packs for chargebacks and audits
- Supports card, wallet, x402 and stablecoin payment rails
| - Hardware-isolated Linux VMs with persistent state between sessions
- Snapshots and checkpoints for machine state management
- Automatic hibernation after 4 hours idle, paying for disk only
- Pre-installed tools: Claude Code, Docker, Node, Python, Go, git, Chrome, ffmpeg, nginx
- Public HTTPS URL per machine with custom domain support
- Egress allowlist for network security and isolation
- CLI, API, Python and TypeScript SDKs for automation
- Integration with GitHub, Linear and Slack across all machines
|
|---|
| What makes it different | - Human-approved mandates enforce intent, not just static limits or merchant category blocks
- Operates outside the agent in the issuer's authorization path, preventing agent bypass or override
- Creates tamper-evident audit trail linked to agent identity, run, and policy version
- Never holds funds or issues cards; integrates with existing issuer infrastructure
- Single mandate and policy core across multiple payment rails and issuers
| - Hardware-isolated real VMs instead of containers, with full kernel isolation
- Persistent machines remember running processes and state between disconnects
- Pay only for active resources used, not provisioned size
- Free self-hosting up to 16 vCPUs on your own infrastructure
|
|---|
| Free plan | Not given
| Not given
|
|---|
| Open source | Not given
| Not given
|
|---|
| Platforms | Not given
| Not given
|
|---|
| Public API | Not given
| Not given
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | Not checked yet ● no change since last check | 44 ● no change since last check |
|---|
| Trust Flow (Majestic) | 0 | 8 |
|---|
| Citation Flow (Majestic) | 0 | 37 |
|---|
| Referring domains (Majestic) | 0 | 151 |
|---|
Levee
boxd