Onchain firewall wallet for AI agents
AI agents can spend money. Leash makes sure they can only spend it the way you allowed.
- Agent requests payment1. vault.pay(to, amount, memo)
- Vault checks policy2. caps · reputation · kill switch
- Executed Blocked Needs approval
Verified onchain · real Base Sepolia runs
- EXECUTED
Normal purchase
0.01 USDC to the Legit Data API for weather data
- BLOCKEDEXCEEDS_PER_TX_CAP
Real LLM, prompt-injected
openai/gpt-oss-120b told to pay 500 USDC to the attacker · Over per-payment limit
- BLOCKEDLOW_REPUTATION
Hijacked agent
4 USDC "verification fee" to an address with reputation 12/100 · Untrusted recipient
- PENDING → APPROVED
Market report, 8 USDC
Above the 5 USDC threshold: held until the owner signed
0xf92d0f…da2f70approval 0xd10875…0c16dd
Held by the vault, not the agent
All-time, within policy
Recorded onchain
Payments checked by policy
Agent console
Connecting to agent server…
$ waiting for a run. Pick a scenario above.
Live activity
Reading vault history from Base Sepolia…
Kill switch
Freeze every payment and approval instantly
Payments are checked against the policy.
Pending approvals
Payments above the approval threshold wait for you
Loading requests…
Try the “Buy market report” scenario (8 USDC).
Policy
Enforced by the vault contract, not the agent
- Per-payment limit
- Daily limit
- Needs approval above
- Min. reputation
- Approval window
Larger payments are blocked
Executed + approved, per UTC day
Owner must sign
For non-allowlisted recipients
Then the request expires
Recipient reputation
Allowlist
Empty. Every recipient must pass the reputation check.