Agent Wallet Treasury x402

Agents are getting wallets. The moment one reads a poisoned web page, email or API response, “the agent can pay” becomes “anyone who can write text can pay.” What we built: Agent Treasury is an open-source MCP server between an agent and its money. Mandates: per-agent caps, payee allowlist and approval threshold. Server-quoted prices: the policy sees the price the vendor’s 402 response asks for, never a number the model typed. Taint escalation: once an agent has read untrusted content, its limits tighten and unknown payees are refused. Out-of-band approval: the agent has no approve tool. A human approves in a dashboard, the CLI, or a signed, expiring push link, and each request executes at most once. Safe budgets: check, decide and reserve are atomic, so parallel requests can’t overspend. Audit: a signed hash-chained log with external anchoring, plus reporting and CSV export.