Enforced by the chain, not by promises
Accounts are ERC-4337 smart accounts. Agents hold scoped session keys. A transaction outside policy is invalid at consensus. No card processor's rule engine can make that guarantee.
The economy is gaining a billion new participants. None of them are human. Scope gives every AI agent an account whose spending rules are enforced by the chain itself. Out-of-policy transactions aren't flagged. They're impossible.
Machine payment rails are live today. The trust layer that lets anyone actually use them was never built.
One injected sentence can drain an agent's wallet. Irreversibly. Crypto has no chargebacks.
Which defeats the entire point of deploying autonomous agents in the first place.
Agents already discover services, negotiate work, and deliver results. But the moment money enters, everything stops. There is no safe way to let a machine spend.
Give an agent a raw key, and one injected sentence can empty the wallet. Irreversibly, with no chargebacks. Keep a human approving every payment, and you've lost the point of automation.
Every serious analysis of agentic commerce names the same blocker. Not the rails. Not the demand. The approval gap.
That gap is not a feature request. It's the missing institution, and every economic revolution built one. Merchant trade got the Medici. Industry got J.P. Morgan. The internet got Stripe. The machine economy gets Scope.
You've granted an app a scope before: narrow, revocable permission to act without owning your account. Scope is exactly that, for spending. Your agent holds a scoped session key. Never real funds.
import { Scope } from '@scope-limited/sdk' // one account per agent. you own it, it can't const account = await Scope.create({ owner: you }) // the policy is welded into the money const key = await account.grant(agent, { budget: '50 USDC / day', counterparty: { reputation: '>= 80' }, // ERC-8004 escalate: '> 10 USDC', // asks you first expires: '30d', }) // within scope → settles in seconds over x402 await agent.pay(api, '0.20 USDC') // ✓ // out of scope → invalid at consensus. not // flagged. not reviewed. rejected by physics. await agent.pay(unknown, '500 USDC') // ✗ reverted
Accounts are ERC-4337 smart accounts. Agents hold scoped session keys. A transaction outside policy is invalid at consensus. No card processor's rule engine can make that guarantee.
A co-signing policy engine checks counterparty reputation, token risk, and spending anomalies before anything signs. And it learns across the whole network.
Big payment? It escalates to your phone. Something feels wrong? One tap revokes the key mid-flight. Full audit trail, always.
Scope is the account, not the rail. x402 today; AP2 and card networks as they mature. Visa can't be neutral. Stripe can't. Coinbase can't. We can. That's the point.
Every transaction the account mediates produces the one asset that makes the rest safe to build: the true ledger of what machines actually do with money.
Spending, scoped. Policy-welded smart accounts for every agent, shipped as an open-source SDK and MCP server.
Every machine dollar explained: budgets, burn, unit economics per task. FinOps for a software workforce.
Millions of micro-obligations between accounts, netted and settled once. The card-network trick, rebuilt at machine scale.
Lent against machine receivables we can see and settle at source. Sybil-proof by construction, because a new account has no history worth borrowing against.
Machine error rates are measurable in ways human error never was. We price what only we can measure.
We're onboarding five design partners running real agents with real budgets. If your agent needs to spend, we want to talk this week.