PolicyVault
Covenant-enforced delegated spending on Kaspa L1 — for people and AI agents.
PolicyVault lets a vault owner hand a spending key to an employee, a service, a bot, or an AI agent without handing over control of the funds. The spending policy — per-transaction caps, cumulative budgets, recipient allowlists, M-of-N approvals, owner pause and recovery — is enforced by Kaspa consensus through a covenant: even a delegate who bypasses the entire application and talks directly to a Kaspa node cannot exceed the owner's policy.
What it is
- Non-custodial — no server-side keys, ever; every funds-moving signature happens in the owner's or agent's own wallet over frozen, independently verified bytes. PolicyVault is not a wallet.
- Deterministic — policy decisions are reproducible from transaction bytes; no indexer, service, or AI model is ever the financial authority.
- For AI agents — authorized delegates, including agents using an external wallet or signer, operate within the covenant's limits. Agents integrate through the REST API, the Python client, or the MCP server (
policyvault-mcpon npm;io.github.zapsoblige-hash/policyvaultin the MCP registry). The shipped MCP tools support scoped reads, supported simulations and unsigned requests; they do not hold signing keys, sign transactions or submit them. PolicyVault's verification tools let an external signer check the exact operation before signing. The broader API supports attaching externally produced signatures and separately authorized submission; the browser also uses an external wallet. Requesting, signing, submitting and verified on-chain acceptance are distinct stages. Covenant limits, permitted recipients, budgets and required approvals still apply. - Self-hostable — one documented command path with the same security posture as the hosted deployment.
- Free software and self-hosting — Apache 2.0, including commercial use. Official hosted access is currently free. Kaspa network transaction fees still apply.
Get started
Open the app Read the docs Source on GitHub
Honest status
The web/agent platform is live in production on Kaspa mainnet, and its exact source is public and reproducible. Native mobile is in development and not yet production-capable. No external professional security audit has occurred yet; nothing here claims otherwise.