Hand an autonomous agent a funded wallet without the fear. A private model must approve every payment before the money can move — and the budget is a MetaMask delegation it physically cannot exceed. Two locks: whether, and how much. Neither trusted; both enforced on-chain.
Every cap is on-chain. Not trust — math.
You grant the city treasury a master budget via MetaMask Advanced Permissions (ERC-7715) — a scoped delegation with a hard USDC cap. The agents hold no keys.
The Manager re-delegates narrower sub-budgets to worker agents (ERC-7710). A worker can never access more than it was handed — the chain enforces it.
Workers hit real HTTP 402 paywalled services. Each payment settles as a bounded ERC-7710 redemption, relayed gaslessly through 1Shot with gas paid in USDC.
Pull authority in one click. The Manager and every worker beneath it is cut off instantly — the next spend never clears, and nothing new settles on-chain.
A Manager re-delegates a narrower budget to a worker. The chain enforces the smaller cap — the transaction reverts if the worker tries to exceed it.
0x24af…ae27 ↗A worker hits a real HTTP 402 paywalled service and settles the payment as a bounded ERC-7710 redemption. Resource unlocks only after chain confirmation.
0xbbce…450b ↗Every payment redeems through 1Shot’s permissionless relayer. Gas paid in USDC — no ETH required. Proven on Base mainnet, not testnet.
0x0349…48bf ↗Every agent reasons with Venice’s zero-retention model. Reasoning traces appear live in the City UI — each worker shows exactly how it chose to spend.
Watch agents reason →Autonomous AI spending is the unsolved part of agent coordination. Agent City solves it with on-chain caps — so autonomy never means unbounded financial risk.
See it move money →Each agent runs a resumable planner — reason, propose, act — but only inside its cap. The approval step pauses before any value moves, keeping you in control.
Enter the city →Agents sign nothing on your behalf beyond the scoped delegations you explicitly grant down the tree. Your wallet stays in your custody.
Budgets are on-chain caveats, not prompts. Exceed one and the transaction reverts — by construction, not by policy or agent goodwill.
Pull authority in one click — every worker beneath the Manager is cut off the instant you revoke; no further payment goes through.
The live demo runs on Base: the Manager hires workers, they pay via x402, 1Shot settles on-chain — and you can revoke the whole city in one click.
Enter the city →