the buyer-side runtime for x402
Your AI agent works. You stay in control of every cent.
Wallie (the allowance-kit npm package) gives your AI agent a spending allowance for supported x402 APIs. Set budgets, per-payment limits, approved destinations, spending-rate limits, and a kill switch. Review payments and blocked attempts in a local audit ledger. Limits apply to payments routed through Wallie. Existing metered OpenAI, Anthropic, and cloud-provider invoices are outside their scope.
Start with practice money — then verify real settlements on Base and Solana. See the live-payment guide and Cloud capabilities.
The gap
Put a policy in front of each payment.
Learn how to set an x402 spending allowance, or use Wallie Cloud x402 spending guide to monitor connected agents.
Payment settlement and spending policy solve different problems. Wallie checks your configured limits before authorizing a payment.
Bound repeat spending
A retry loop can repeat an otherwise valid purchase. Set a total allowance, per-payment cap, and spending-rate limit before the agent runs.
Start with practice money
Use the local demo to try payments, blocked attempts, and approvals. Then follow the live-network setup when you are ready to fund a wallet.
Keep a spending record
Inspect payments, blocked attempts, and approval requests in a local audit ledger. Use the record to investigate spending and review your configuration.
How it works
Three moves, then it runs itself.
One-time funding, then fully autonomous fine-grained pay-per-use — every call authorized against policy before money moves.
Fund the allowance once
Provision a dedicated agent wallet and load it with a fixed allowance. The agent can never touch more than this — by construction, not by promise.
$ npx wallie init # provisions agent wallet $ npx wallie topup 5.00 # loads the $5.00 allowance $ npx wallie policy perCallMaxUsd 0.50 $ npx wallie policy allowHostSuffixes '["localhost","api.weather.example"]'
The agent pays its own way
Swap fetch for payingFetch. Wallie speaks the full x402 wire protocol — 402 challenge, price discovery, signed payment, settlement receipt — and authorizes each price through your policy before signing anything.
const res = await fetch(url); // ❌ 402 Payment Required — nothing is // attached, so the call just fails … // … or the agent pays with no ceiling, // no allowlist and no audit trail.
import { payingFetch } from "wallie"; const r = await payingFetch(ctx, url); // ✅ 402 → policy check → sign → pay → // retry → receipt → append to ledger // r.txHash · r.costMicro · r.blockedBy
Watch everything. Intervene anytime.
A live dashboard shows balance, spend by destination, and every blocked attempt. Flip the kill switch to block subsequent authorizations. Already signed or settled payments cannot be recalled. Underneath, an append-only ledger records every authorization, payment, and block with rule, reason, and tx hash: your local decision history.
{"t":"payment","at":"2026-08-25T09:41:02Z","url":"…/weather?city=lisbon","amountMicro":"1000","txHash":"0xcddcb9a6…"}
{"t":"payment","at":"2026-08-25T09:43:57Z","url":"…/research?topic=agent-payments","amountMicro":"250000","txHash":"0x4e5bc352…"}
{"t":"blocked","at":"2026-08-25T09:44:31Z","rule":"velocity_circuit_breaker","detail":"rolling 12s spend would exceed $2.00 limit","attemptedMicro":"10000"}
Guardrails
Six rails. All enforced before money moves.
Policies live in a hot-reloaded config file. Change them any time — the next call uses them. Five rules block outright; one escalates to a human.
Instant freeze
One click pauses every payment for the agent — even mid-loop. Flips back just as fast.
Destination allowlist
Default-deny. If a prompt injection redirects your agent to evil-api.example, nothing leaves the wallet.
Price ceiling
An endpoint repricing itself to $5.00 gets declined pre-auth — the agent never signs it.
Loop breaker
Rolling-window spend limit. A retry bug burns pennies, not thousands, before the breaker trips.
Hard total cap
The allowance is the ceiling. There is no overdraft, no credit, no surprise invoice.
Escalation gate
Above your threshold, purchases pend for explicit human approval instead of auto-executing.
── PHASE 1 · fine-grained pay-per-use ── PAID weather?city=lisbon $0.001000 0xcddcb9a6… PAID research?topic=agent-pmts $0.250000 0x4e5bc352… ── PHASE 2 · runaway loop ── PAID loop #1 … #149 $0.010000 each BLOCKED loop #150 velocity_circuit_breaker ── PHASE 3 · attack & mispricing ── BLOCKED evil-api.example.com host_not_allowlisted BLOCKED report?id=q3-2026 human_approval_required BLOCKED feed?key=pro per_call_cap ── RESULT ── spent $1.99 across 154 settled payments · 5 blocks enforced remaining allowance: $3.007 of $5.00
Protocol
Built on x402. Pluggable settlement.
Wallie includes live USDC payment support on Base and Base Sepolia. The buyer supports x402 v1 and v2 for supported exact-payment offers. Wallie also has a Solana rail with exact payments and upto payment channels, including a recorded public devnet settlement. Start with the practice-money demo, then follow the live-network guide. Seller integrations can use the included Coinbase CDP adapter behind this interface:
interface Facilitator { verify(payment: PaymentPayload): Promise<VerifyResult>; settle(payment: PaymentPayload): Promise<SettleResult>; } // MockChain for practice · Coinbase CDP adapter included for live seller integration
Proof of work
Receipts, not testimonials.
Wallie is a young open-source project, so we do not borrow logos or invent numbers. Instead, here is what you can check yourself: real settlements on public chains, a demo you can run, and source you can read line by line.
Every claim on this page links to its receipt. Practice-money demos are labelled as such; live settlements link to a public explorer.
Stocklana hackathon
The same allowance, now on Solana.
Wallie was built into the Stocklana hackathon — $126,000 in prizes for agents that work with tokenized stocks. Three pieces run on the same six guardrails and the same audit ledger you saw above: a Solana x402 payment rail, a Meteora DBC exit report for the $5,000 Meteora bounty, and a PreStocks premium report with a policy-bounded buyer for the $10,000 PreStocks bounty. Judging closes after 2 October 2026; nothing here claims a prize.
Exact and metered payments, refunded on-chain.
exact USDC for a fixed-price call. upto payment channels for a metered call — the agent pays only for what it uses and the unused ceiling is refunded on-chain. Escrowed money stays its own visible number, never folded into "spent". Shipped in v0.6.0 with a finalized public devnet payment.
The exit number a bonding curve never prints.
A tokenized-stock launch on Meteora's Dynamic Bonding Curve is priced on the way in — never on the way out. A Wallie agent, held to a $0.50 allowance, polls the live pool for exit value, fee to leave, shortfall to graduation, and what unlocks after. Each poll opens a $0.10 x402 channel, is charged $0.01, and refunds $0.09.
Buy the discount. Never past the allowance.
PreStocks publishes a mark price next to every tokenized pre-IPO share. A Wallie agent pays a cent per premium report, and when a watched token trades under its mark it buys on Jupiter through a buy policy: per-trade cap, session cap, price impact, fill ceiling against mark. The data and the stock come out of one allowance and land in one ledger.
Pricing
Open source core. Hosted when you're ready.
The runtime is open source and self-hostable. Wallie Cloud adds a hosted event feed and heartbeat monitoring that keeps running when your agent's machine is offline.
OSS Core
Local spending controls and tools. Self-host, inspect, fork.
- Full policy engine & six rails
- x402 buyer and seller support, including Solana upto
- Append-only audit ledger
- Local dashboard & kill switch
- Node ≥ 20.11 package; optional viem for live signing
Wallie Cloud
Provisioned automatically — your key by email within minutes.
- Every agent's decisions in one feed
- Email alerts for connected agents
- An "agent silent" watchdog when your machine goes quiet
- Any number of agents per workspace
- Non-custodial — wallet signing stays in your infrastructure
Advanced requirements
Tell us about your audit, retention, or deployment needs.
- Scope and availability agreed separately
- Not included in the standard Cloud subscription
- No compliance certification is provided
How Wallie Cloud works — same core, a thin alerting plane
notify cloud sends every decision (paid / blocked / queued) plus a 60s heartbeat./v1/events + heartbeat land in your workspace; browse them in the account app.Usage-based pricing may be introduced later, with notice. Non-custodial by default: wallet private keys stay in your infrastructure.
FAQ
Questions engineers actually ask
No. The demo uses a local practice ledger. Live USDC payments on Base or Base Sepolia require explicit live setup, wallet funding, and the optional viem signing dependency. Solana uses its optional signing packages and supports exact payments and metered upto channels. Its public payment proof is from devnet. See Solana setup.
The buyer supports exact USDC payments on Base and Base Sepolia. Solana supports exact payments and upto payment channels. The metered Solana path has a public devnet canary; the submission page states the validation scope. MPP and L402 are not included.
Live wallet keys are supplied through the runtime environment. Code running with access to that environment may read them, so isolate the wallet runtime from untrusted code. Cloud does not receive wallet private keys; it authenticates connected agents with a separate workspace key.
Policies run in your local Wallie runtime. Protect policy files and wallet credentials with operating-system access controls. Cloud receives decision events and heartbeats; it does not enforce a separate security boundary or keep a version history of your policy files.
Wallie checks a configured allowance before signing supported x402 payments. These controls do not cap existing metered API bills, spending outside the runtime, or payments made by code that bypasses its policy checks.
Wallie is part of 1YC.
One company, a set of small products that each do one job completely — screenshots, PDFs, uptime pages, dead-man switches, and now agent allowances. One ledger, prices in the open, an open-source runtime, no tracking and no dark patterns.
Give your agent its first allowance.
Start free on your laptop with practice money. Prove the whole path — real USDC on Base, metered refunds on Solana — then switch on Cloud alerts for €20/mo when your agents work for real. No card for the tutorial; your Cloud key arrives by email within minutes.