One wallet per agent
Its balance, its limits, revocable in one click. It never touches another agent’s budget.
KEYBAN AGENT WALLETAdd Keyban to Claude CodeOther clients
Your AI agents pay.You stay in control.
Keyban opens an account for each agent. It buys data and services per call, within the limits you set, under your CFO’s control.
Two wallets free for three months. No commitment, no credit card.
claude mcp add --transport http --scope user keyban https://mcp.prod.keyban.io/mcpYour agents pay per call at
Apollo
Perplexity
Exa
People Data Labs
Firecrawl
ElevenLabs
Tavily
OpenRouter
Browserbase
Nano Banana
fal.ai
Serper
Financial Datasets
DataForSEO
Brave Search
Build profiles for the 40 retail CFOs on our target list.
Here is my spending plan. One supplier is new, so I need your approval before starting the mission.
Agent WalletAwaiting approvalMission approvedMission declinedMission · Prospecting agentEnrich 40 retail CFO accounts in France
- ApolloCompany and contact enrichment · 40 × $0.10$4.00
- FirecrawlReading the accounts’ websites · 40 × $0.02$0.80
- PerplexityAccount news · 20 × $0.05$1.00
- People Data LabsNew supplierCFO job history · 10 × $0.25$2.50
Estimated cost$8.30
Hard cap for the mission$12.00
- Agent’s monthly budget: $184 left of $250
- Verified suppliers, reputation above threshold
- People Data Labs never used by this agent: approval required
Approved by Finance with a passkey · the agent starts the mission
Declined · no payment sent, the agent is notified
Human-only action: the agent can’t approve itself
WHY AGENT WALLET
Everything you need to let an agent spend.
Rules the agent can’t touch
The policy engine checks every request in the infrastructure, not in the prompt.
A human above the threshold
Below it, the agent moves on its own. Above it, the request reaches a person.
Every service, per call
Web search at €0.01, a contact record at €0.01, a verified company at €0.10. No subscription per supplier.
One treasury for every agent
A multisig vault funds the wallets, topped up from your bank account through Stripe.
Non-custodial by design
Your funds stay yours. 2-of-2 signature: Keyban can’t spend anything on its own.
01Setup
Three minutes, and your agent can pay.
The Keyban MCP server plugs into your client — Claude Code, Claude, ChatGPT, Codex or Cursor — and exposes approved tools only. Your runtime doesn’t change.
- Add Keyban to your agentOne command in Claude Code. Claude, ChatGPT and Codex have their own.
- Sign inRun /mcp, then sign in from the browser with your Keyban account.
- Create its wallet, set its limitsIn the console: cap per purchase, per day, approved payees.
Create my first wallet Free for three months, no credit card.
Claude Code
claude mcp add --transport http --scope user \
keyban https://mcp.prod.keyban.io/mcpThen run /mcp and sign in from the browser.
02Control
Rules checked. Two shares sign. Funds never held.
The agent only submits an intent: rules, score and keys stay out of its reach. One key share alone never signs, not even Keyban’s.
- AI AGENTIt asksMCP tool
keyban.pay€0.02x402 · api.exa.aiout of the agent’s reach
No key, no rule, no score is accessible to it.
- POLICY ENGINEKeyban checks
- CAP€0.02 under €5.00 / day
- PAYEEon your allowlist
- RISKscore 12 / 100
Outside the rules: refused, or sent to a human.
- SIGNATURETwo signaturesKeyban sharereleased by the checksClient sharenever leaves the device
Signed · settled in 1.4 s
Neither share signs alone. The client’s never leaves their device.
Funds stay yours
They never leave the client’s wallet. No licence to wait for.
2-of-2 signature
Keyban holds one share, never both. The client’s stays on their device.
MiCA / DORA
EU-native by design. Procurement and the CISO pass instead of stalling.
03Services
The services your agents buy, per call.
Payable over x402 from the agent’s wallet: no account, no card, no subscription with the supplier.
ApolloB2B prospecting
PerplexityAI search
ExaNeural web search
People Data LabsPeople data
FirecrawlWeb page scraping
ElevenLabsVoice and audio
TavilySearch for agents
OpenRouterLanguage models
BrowserbaseCloud browser
Nano BananaImage generation (Google)
fal.aiGenerative images and video
SerperGoogle results
Financial DatasetsMarket data
DataForSEOSEO data
Brave SearchIndependent search- And many moreTranscription, translation, crypto data…
First use cases
Where agents already consume paid services. Each one replaces a subscription.
- 01
Competitive research
Competitors’ prices and announcements, every morning.
Per call€0.01per web search - 02
Lead enrichment
A complete contact record for each prospect.
Per call€0.01per contact record - 03
Supplier check
The company verified before the first payment.
Per call€0.10per company checked - 04
After a meeting
The transcript, then the minutes.
Per call€0.03per hour transcribed
04Savings
One wallet per agent, instead of one account per supplier.
Directly, each supplier asks for its own account, card, key and often a subscription. With Keyban, the agent pays per call from its wallet.
| Each supplier, directly | KeybanThrough KeybanOne wallet per agent | |
|---|---|---|
| Accounts to open | One per supplier | One |
| Payment methods | A card per supplier | One treasury |
| Supplier API keys | One per supplier | None: the agent pays per call |
| Subscriptions | Often one each | None |
| Spending limits | Depends on the supplier | Per agent, checked before every payment |
| Where to follow spending | One invoice per supplier | Every purchase in one console |
SAVINGS CALCULATOR
How much would your agents save?
Pay per call instead of subscribing with every supplier. Two questions, and the figure for your case.
Open the calculator25%less service spend for a sales agent used by 50 clients
05Console
One console for agents, wallets and treasury.
Finance defines the framework, technical teams connect the agents. Each team sees what its role needs.
06Questions
Wallets, identities and AI-agent payments.
What is an Agent Wallet?+
An Agent Wallet is a dedicated payment account for an AI agent. It carries its own budget and rules: maximum amount, approved suppliers, approval thresholds and available payment methods.
Why not give an agent a corporate card?+
A shared card or key does not clearly isolate the spending, permissions and accountability of each agent. Keyban separates wallets and applies controls before every payment is signed.
How do you stop an agent from exceeding its budget?+
The Policy Engine verifies limits at infrastructure level, outside the agent's prompt. A non-compliant request is rejected or sent for human approval. The agent cannot change the rule that governs it.
Do we need to rewrite our agents?+
No. Any MCP client connects to the Keyban server — Claude Code, Claude, ChatGPT, Codex, Cursor, VS Code or your own agent — and keeps its runtime. Payment requests pass through Keyban before being routed to the appropriate rail.
What can an agent buy?+
Services payable per call over x402 — web search, contact enrichment, company checks, call transcription — within the limits of its rules, with no account or subscription at the supplier.
Do I need a credit card to start?+
No. The Free plan is free for three months, with no commitment and no payment card.
Can the agent get paid too?+
Yes. An Agent Wallet is an account, not just a payment method: it pays, it gets paid and it holds a balance. Incoming payments feed the same balance Finance follows in the console.
Who holds the funds?+
You do. Funds stay in the client’s wallet and Keyban never holds them. Signing requires two shares: Keyban’s, released only if policy and the risk score allow it, and the client’s, which never leaves their device. One share alone signs nothing, Keyban included.
How do you measure an agent’s error rate?+
Every transaction gets a risk score and stays attached to its agent. The console aggregates those decisions per agent: you read an error rate instead of approving every payment or seeing nothing.
What is the Treasury Wallet for?+
It is the vault that funds every agent. It holds one consolidated balance across rails, tops up from your bank account through Stripe, and its sensitive moves go through a human multisignature.
What is an Agent Passport?+
It links the agent to your organisation, technical identity, scope and status. Signed by your brand, it lets third-party services verify who is acting and with which permissions.
NEXT STEP
Start the free trial Give your agents autonomy.
Add Keyban to your agent, sign in, set its cap. Two wallets free for three months on the Free plan, with no commitment and no payment card.