AI agent payments

Plan a spending capability and export it for your agent.

This page only plans and exports. It saves nothing and never asks for a key: your agent keeps its own state, you run the generated command on the agent machine, and every payment that needs approval is approved from the command line, never from this page.

1. Describe the capability

Empty lists mean none, never any. The budget must not widen: per payment, then per window, then lifetime.

Approval key address (issuer)The address printed by `aipay-agent approval address`. Only this key can approve escalated payments.Label (optional)ChainsComma-separated chain keys, e.g. base, solana.AssetsComma-separated symbols, e.g. USDC, ETH.Recipient addressesExact addresses, comma-separated.Merchant idsMerchant ids the agent may pay.Max per paymentMax per windowWindow (seconds)Lifetime totalExpires onTimelock (seconds, optional)Delay before the grant can be spent. Leave empty for none.Risk levelApproval mode

Check before you grant

Set the issuer to your approval key address.
Name at least one chain.
Name at least one asset.
Name at least one recipient address or merchant id.
Fill in every budget field with a positive decimal number.
Set an expiry date.

2. Export it to the agent machine

Copy the command into the terminal where the agent runs, or hand the JSON to an MCP client that exposes aipay_capability_grant.

CLI command

aipay-agent capabilities grant --issuer <issuer-address> --per-payment <max-per-payment> --per-window <max-per-window> --window-seconds <window-seconds> --total <lifetime-total> --expiry <expiry> --risk medium --approval-mode auto

Capability JSON

{
  "issuer": "",
  "scope": {
    "chains": [],
    "assets": []
  },
  "budget": {
    "perPayment": "",
    "perWindow": "",
    "windowSeconds": "",
    "total": ""
  },
  "expiry": "",
  "riskLevel": "medium",
  "approval": {
    "mode": "auto"
  }
}

3. Inspect a policy snapshot

Paste the JSON printed by `aipay-agent policy` to read it here. This box is read-only: nothing is stored and nothing is sent.

Paste a snapshot to see the kill switch, capabilities and pending approvals.

What this page will never do

It never stores or transmits anything: the plan lives in this tab only.
It never asks for a seed phrase, a private key or a PIN.
It cannot grant, revoke or approve anything, and it never signs.
Approvals stay on the command line, so the agent can never approve itself.

Next steps

1.Create the approval key on the agent machine: aipay-agent approval keygen.
2.Grant the capability with the copied command (issuer is that key's address).
3.Run aipay-agent policy to export a snapshot and paste it above to check it.
4.When a payment escalates, approve it with aipay-agent approval approve --id <id>.