JUDGE MODE · SAFE BY DEFAULT

Firewall for AI Wallets

x402 is the payment rail. AgentPay Guard is the authorization layer.

An autonomous due-diligence agent buys premium data for a tokenized parking asset without giving the model unrestricted wallet control.

Run Interactive DemoInspect Real Evidence

60-second architecture

HOSTED: NO SPEND
Agent task
HTTP 402
Deterministic guard
Casper payment boundary
Independent verification
Premium RWA data

Three decisions a judge can verify

ALLOW

1. Allowed request

Merchant, payee, resource, amount, budget, integrity, and expiry all match.

  • Real path may reach the signer boundary.
  • Hosted scenario moves no funds.
  • Separate real evidence is below.
DENY

2. Prompt-injection attack

A malicious instruction attempts to substitute the payee or escalate the amount.

  • Reason: PAYEE_MISMATCH
  • Signer called: false
  • Transaction: none
REJECTED

3. Replay attack

A consumed transaction cannot authorize a different or repeated request.

  • Reason: NONCE_ALREADY_USED
  • No premium data
  • No submission

Verified Testnet Payment

VERIFIED

One real policy-authorized native-CSPR payment. Premium data was released only after independent Casper RPC verification.

transaction801d558b18be546ebe18ff884541d451428dacc92e17c8a6c6a33df4d8b4440fnetworkcasper-testamount2.5 CSPRpayera25198a08bcaa9a861edc88db374123469a1349cf2a55e3529a3e4430efcce13payee public key01e16a6a8992000821589fc26d00bc63c1c06e636765e27bba3b8df99f302c8ec6payee account hash40ccfcd1c883b9b6241dc73dba2c13e852b9ea859bc50c244dbb940f63f297b4block height8510676executionsucceededpayment responseverifiedverified2026-07-15T09:03:06.514Zpremium resourcereleased after verificationGit commitf313893a149ac3e37903d99d0a68b6bd1f7e981c

Signing ran locally with a dedicated Testnet key. The hosted Vercel app never loads private keys or initiates spending. The Odra proof recorder is a separate existing on-chain proof path.

MCP Agent Interface

REAL MCP PROTOCOL

A project-owned MCP server built with the official Model Context Protocol SDK invokes the same normalization, policy, x402 retry, and PAYMENT-RESPONSE verification used by the product. Its injected adapter is deterministic and no-spend.

Available tools

agentpay_run_rwa_due_diligence
Runs the safe MAD-001 journey
agentpay_evaluate_payment
Explains ALLOW or stable denial code
agentpay_get_verified_testnet_payment
Reads public Testnet evidence
agentpay_security_model
Returns fail-closed wallet invariants
Agent

“Get the premium MAD-001 due-diligence report.”

agentpay_run_rwa_due_diligence
→ agentpay_evaluate_payment
→ policy ALLOW
→ verified evidence
pnpm demo:mcp:judge

Real versus hosted

HOSTED

Judge scenarios

Deterministic, repeatable, no signer, no funds, no private keys.

REAL

Guarded payment

One independently verified native-CSPR TransactionV1 on Casper Testnet.

SEPARATE

Odra proof recorder

A public audit/proof transaction. It is not payment settlement, escrow, or custody.

Separate Odra Proof Recorder

Loading proof status...

RepositoryEvidence reportMachine-readable evidencePayment transactionContract deploymentProof transactionInteractive demoFinal video · pending upload