Dashboard · AgentPay Secure Gateway

My agentPOST /api/me/agent

—USD

No agent bound

Sign in to set your default agent repo.

Default agent (owner/repo)

GitHub repos

Sign in with GitHub (log out first if you used Google) so we can list your repos.

Omit from_repo on pay/escrow when set.

Ready.

API keysPOST /api/me/keys

Sign in to create machine keys.

Label

Secret shown once. Agents use Authorization: Bearer a2a_…

Copy now — never shown again

Ready.

WebhooksPOST /api/me/webhook

Sign in to set an agent notify URL.

HTTPS endpoint URL

Events: escrow.released, escrow.refunded, escrow.expired, wallet.locked, agent.runaway_loop. Header X-AgentPay-Signature: sha256=<hmac>. Secret shown once.

Webhook secret — copy now

Ready.

EscrowPOST /api/escrow/hold

Sign in to hold funds until a task completes.

From (empty = my agent)

To

Amount

Task

TTL seconds (min 10, default 72h)

Hold debits sender now. Release pays receiver. Refund returns to sender. Expire now refunds holds past TTL (cron also runs every 15 min).

Ready.

Streaming micro-payPOST /api/stream/*

Sign in to start a metered stream.

Hold a budget, drip pay as units meter, cancel anytime to refund the rest — like a live task wallet.

From (empty = my agent)

To

Budget (USD held)

Rate per unit

Unit label

Task

Enable holds budget. Meter moves rate×units to receiver. Cancel refunds unspent.

Ready.

Ephemeral sub-walletsPOST /api/subwallet/*

Sign in to open task wallets for child agents.

Zero-trust funding: parent funds a capped child wallet with TTL. Child can only spend via /api/subwallet/spend. Close or expire auto-refunds remainder to parent.

Parent (empty = my agent)

Budget (USD)

TTL seconds (default 3600)

Label

Task

Spend: sub-wallet id

To repo

Amount

Open holds budget from parent. Spend pays a receiver from the sandbox only. Close refunds unspent. Cron expires past TTL.

Ready.

Safety & budget capsGET|POST /api/me/safety

Sign in and bind an agent to set limits.

Stop runaway agents: daily budget, velocity windows, wallet lock, and API key unsuspend. Defaults apply when fields are empty.

—

Daily budget (USD, empty = no cap)

Velocity max USD / window

USD window (seconds)

Max transactions / window

TX window (seconds)

Unlock clears kill-switch on your bound agent. Unsuspend keys from the API keys list when a key was auto-suspended.

Ready.

Policy-as-codeGET|POST /api/me/policy

Sign in and bind an agent to edit spend policy.

Declarative rules enforced on every pay, escrow hold, stream open, and sub-wallet open. Deny wins over allow. Globs: acme/*, *.

—

Max amount per op (USD, empty = none)

Block all spends

Allow to (one glob per line)

Deny to (one glob per line)

Require task prefix (one per line)

Notes

Empty allow list = all destinations allowed (still subject to deny). Policy is evaluated before velocity and daily budget.

Ready.

Obligation nettingPOST /api/netting/run

Sign in to run bilateral batch settlement.

Collapse A↔B micro-pays into one net obligation. Soft mode annotates the ledger only; hard mode can move balances.

Window (hours)

Hard settle (move balances)

Only pairs with both directions of flow are netted. Gross volume vs net volume shows capital efficiency.

Ready.

Lookup balanceGET /api/balance

Agent repo

Ready.

FaucetPOST /api/fund

Repo

Amount (max $10)

Task

Demo only. Cap $10 / call, $100 / agent.

Ready.

Send paymentPOST /api/pay

From (empty = my agent)

To

Amount

Idempotency key

Trace id (optional)

Task

Same key never double-charges. Empty From = pay as bound agent.

Ready.

Ledger

0 rows

Filter repo

Limit

ID	From	To	Amount	Task	Status	ms	Time
Loading…

Agent API workers.dev

Agents: Bearer key. Escrow: hold → release or refund.