Authorization layer for AI agent spend with human-approved mandates and tamper-evident proof
Spend controls, budgets and approvals for AI agents
Stage
Startup
MVP
Founded
2026
Not given
Based in
Not given
Not given
Pricing model
Free trial
Freemium
Pricing
Free 12 week pilot for card issuing platforms
Free plan: $0 during early access with 2 seats and 3 agents. Planned paid plans: Builder at $49/month with 5 seats and 25 agents; Scale at $199/month with 25 seats and 250 agents. Self-hosting is free.
Key features
Passkey-signed spend mandates with purpose, budget, merchants, and time windows
Real-time authorization decisions with sub-1 second response time at p99
Human challenge via passkey step-up for exceptional spend
Fail-closed payment processing if no decision arrives in time
Hash-chained evidence ledger with tamper-evident records
Exportable evidence packs for chargebacks and audits
Supports card, wallet, x402 and stablecoin payment rails
Onchain allowances and epoch budgets
Escalation through reporting tree
Session keys with automatic expiration
Constitutional governance with veto windows
Declared flows and human gates
Slack and Telegram supervision
Visual org builder and workspace
Apache-2.0 open source contracts and SDK
Inference budgets for model and API calls
Integration with Coinbase AgentKit and Safe
What makes it different
Human-approved mandates enforce intent, not just static limits or merchant category blocks
Operates outside the agent in the issuer's authorization path, preventing agent bypass or override
Creates tamper-evident audit trail linked to agent identity, run, and policy version
Never holds funds or issues cards; integrates with existing issuer infrastructure
Single mandate and policy core across multiple payment rails and issuers
Bounded blast radius: compromised agents can only spend remaining epoch allowance on whitelisted targets
Passkey root stays on user's device; cloud holds only scoped, expiring session keys
Fully self-hostable open protocol with Apache-2.0 licensing
Approval workflows follow real organizational structure, not smart contract code
No token or cryptocurrency knowledge required to use the cloud platform