Protect your AI agents from runaway spend.

Tripwire is an on-chain insurance layer for autonomous agents. Set hard spend limits, get paid out automatically when an agent goes off-rails, and keep your fleet accountable without rewriting any of its logic.

Introduction

Every week an AI agent somewhere drains a treasury. Long-running loops, compromised API keys, a tool that calls itself — the failure modes are many and the outcome is the same: a wallet empties, an invoice arrives, nobody is watching.

Tripwire sits in front of your agent's wallet and enforces a policy you define: maximum spend per hour, per transaction, per tool, per recipient. When the agent tries to breach that limit, the transaction is held; if a breach slips through, the underwriting pool pays you out.

Quickstart

Most teams are covered in under ten minutes. You'll need a Solana wallet with signing permission over your agent's treasury and at least 50 $COVER to stake.

1. Create an account

   Sign up at tripwireagent.xyz/signup and connect the wallet that controls your agent's treasury.

2. Define a policy

   Pick your spend ceilings: per-tx, per-hour, per-day. Optional allowlists for recipients and programs.

3. Stake $COVER

   Deposit $COVER to activate the policy. The stake backs your payout and earns yield while idle.

4. Route traffic

   Point your agent's RPC at the Tripwire endpoint, or drop the SDK into your codebase. No logic changes required.

How it works

Tripwire is not a wrapper around your agent — it's a transaction gate that sits between the agent's signer and the chain. Three things happen on every transaction:

Policies

A policy is a signed JSON object that declares the rules for an agent's wallet. Store it alongside your agent config — Tripwire enforces the same rules regardless of which client writes the transaction.

{
  "agent_id": "ag_8fnZ4qpL",
  "wallet": "DYw8jQGHt5...9kPa",
  "limits": {
    "per_tx_usd": 50,
    "per_hour_usd": 250,
    "per_day_usd": 1500
  },
  "allow_programs": ["Jupiter", "Raydium"],
  "payout_recipient": "HrAx2pR...aLp7",
  "coverage_usd": 5000
}

On-chain limits

Limits are denominated in USD and computed at the time of simulation using the Pyth price feed. You can set:

• Per-transaction cap — rejects any single tx above the value
• Hourly / daily / weekly — rolling windows, reset at sliding boundaries
• Program allowlists — only interact with named Solana programs
• Recipient blocklists — block specific counterparties

$COVER staking

Tripwire is underwritten by the $COVER token pool. To activate a policy you deposit $COVER equal to 2% of your coverage amount. In exchange:

• Your policy is backed up to the full coverage amount
• The stake earns base yield from pool fees (currently ~6.8% APR)
• Unused stake is withdrawable after a 48-hour cooldown

Claims & payouts

Most payouts are automatic. When Tripwire's attestor detects a confirmed breach, a payout transaction is signed by the pool and sent to your payout_recipient within one block.

Disputed claims (edge cases, partial breaches) go to the DAO review queue and settle within 72 hours.

JavaScript SDK

The SDK wraps any signer with policy enforcement. It works with @solana/web3.js keypairs, wallet adapters, and remote signers.

// npm install @tripwire/sdk
import { TripwireSigner } from "@tripwire/sdk";
import { Keypair } from "@solana/web3.js";

const signer = new TripwireSigner({
  keypair: Keypair.fromSecretKey(process.env.AGENT_KEY),
  apiKey: process.env.TRIPWIRE_API_KEY,
  agentId: "ag_8fnZ4qpL",
});

// use it anywhere you'd use a normal signer
const sig = await signer.sendTransaction(tx);

Webhooks

Tripwire posts to your webhook URL whenever a policy event fires. Events are signed with an HMAC header (X-Tripwire-Signature) derived from your webhook secret.

POST /your-webhook HTTP/1.1
X-Tripwire-Signature: t=1713589200,v1=3a8b...

{
  "event": "tx.rejected",
  "agent_id": "ag_8fnZ4qpL",
  "tx_hash": "5gQR...Zx2",
  "reason": "per_tx_usd exceeded",
  "amount_usd": 82.14
}

CLI

The CLI is useful for scripting and CI — you can apply policies from JSON files, tail event streams, and simulate transactions locally.

# install
npm install -g @tripwire/cli

# authenticate
tripwire login

# apply a policy file
tripwire policy apply ./agent-policy.json

# tail events in real time
tripwire events tail --agent ag_8fnZ4qpL

REST API

Base URL: https://api.tripwireagent.xyz/v1. Authenticate with a bearer token — issued per-project under Settings → API keys.

Errors

The API uses conventional HTTP codes. Body is always JSON with code, message, and optional details.

FAQ