Stellar
Testnetno XLM neededA passkey that owns a spend vault.
Your face or fingerprint becomes a smart account on Stellar. It deploys a vault, sets the limit, and watches the vault refuse a payee it does not trust. Five steps, every one with its transaction.
Everything here runs on Stellar testnet with test USDC, and the fees are sponsored, so you need no wallet, no seed phrase and no XLM. Signing uses smart-account-kit 0.8.0 against the OpenZeppelin smart-account contracts.
Sign in with a passkey
No wallet and no seed phrase. The passkey stays on your device and controls an OpenZeppelin smart account, a C... contract deployed for you with the fee sponsored.
Deploy a vault and set its limit
A fresh AgentSpendPolicy vault whose owner is your smart account. We deploy it and seed it with test USDC; you sign the limit yourself, which is what proves the passkey owns it.
Check who you are about to pay
Our risk engine answers ALLOW, WARN or DENY for this payee, and hands back the one chain write that verdict implies. You sign it with the passkey.
The on-chain allowlist is binary: ALLOW writes an entry, WARN is a server-side flag and writes nothing, and DENY writes a revoke so pay() reverts with PayeeNotAllowed. Only two of the three verdicts ever touch the ledger.
The agent pays someone untrusted
The agent asks the vault to pay an address that is not on the allowlist. The vault refuses before anything moves.
The agent pays someone trusted
Same vault, same agent, same amount. This payee is on the allowlist and inside the limit, so the payment settles.
Your receipts
Every transaction this page put on Stellar testnet, in the order it happened. Nothing is listed here without a hash that made a ledger.
No transactions yet. Run step 1 and this fills itself in.
- Everything on this page is Stellar testnet and test USDC. Nothing here moves real money.
- A refused payment fails in simulation, so it has no hash. The linked refusal is a recorded one from the ledger.
- The passkey never leaves your device, and the server never holds a key that can move your vault.
- The same vault contract runs on pubnet, where it holds real USDC under a real cap.