Skuuy

AgentPay is an AI agent that manages its own operating budget. A human sets a spending mandate once $5.00 total cap, quota packs only, $2.50 maximum per purchase and after that the agent works inside it: it runs real API work through MCP tools, pauses cleanly when its quota runs out, deliberates in plain language about whether to buy, and buys only if the code-level guardrails pass (cap, catalogue allowlist, exact price, rail, mandate, expiry). One decision, one charge, every step in an auditable ledger. The demo is settled proof, not a simulation: three $2.00 PayPal Sandbox buys, each verified in both the AgentPay ledger and PayPal, with an automatic receipt and an automatic financial report after each buy. Proven settlement evidence (PayPal Sandbox, test funds only): 29 Oct — spark_live_pos, capture 9YL05462XC5957258, $2.00, quota 1000/1005, mandate ****501f; 30 Oct demo_auto_proof, capture 6HJ51202LE7692904, $2.00, quota 985/1005, automatic receipt and report ($5.00 cap / $2.00 spent / $3.00 remaining / 1 transaction); 30 Oct demo_fresh_gate (rehearsal, pre-fix evidence), capture 61H39800D9715751F, $2.00, quota 227/1005, no retroactive receipt or report claimed. A quota-5 session with no mandate failed closed at $0. Pre-existing vs event-built: skuuy-mcp and earlier Skuuy checkout rails are pre-existing and disclosed, not claimed as event work. Event-built (27 Oct – 5 Nov): AgentPay itself AgentSession Durable Object, agent loop, Spark Plan/Deliberate, PayPal Vault buy path with guardrails, sealed proof sessions, automatic receipts and reports, rate limiting, dashboard. Third-party MCP proof shown once only: ondocs (read-only search); the core RPC task never depends on it. x402 is implemented behind a fail-closed gate; production on-chain settlement is not yet verified and disabled by default (X402_NOT_IMPLEMENTED) PayPal Vault is the proven rail. Honest scope: the $2.00 pack costs more per call than $0.001 x 1000 its value is one settlement plus headroom, never a dollar saving. Idempotency is code-level (decision id) only; no live concurrent double-buy test was run. Quota decrements sequentially inside the single-threaded Durable Object handler. Rate limiting is per-IP, per-Worker-isolate best-effort friction (model endpoints 10/min/IP, mutations 60/min/IP), not a global hard cap.