Reads every instruction
Not just the headline. Everything a transaction will do, in order.
Secure, verifiable,
and human-aware agent signing
AgentGuard checks every transaction an AI agent wants to sign. Within your rules, it goes through. Outside them, a person decides.
AgentGuard · hosted review
Review queue
vendor-agent · waiting to be signed
⚠ One instruction has no verified definition
- Transfer to vendorVERIFIED
- Unknown authority changeUNKNOWN
ILLUSTRATION
BUILT FOR THE SOLANA AGENT STACK
Kora
Squads
x402
Anchor
SlackKoraSquadsx402AnchorSlackKoraSquadsx402AnchorSlackKoraSquadsx402AnchorSlackTHE JOURNEY
Follow it from agent to decision.
The legitimate transfer passes. The unknown instruction beside it is caught, and a person decides.
Agent · waiting to be signed
- Payment to vendorVERIFIED
- Unknown authority changeUNKNOWN
AgentGuard
DECODELOOKUPPOLICY
AgentGuard · #agent-review
⚠ Paused for a person: one instruction is unknown.
Try it: approve or deny
THE THREATS
The ways an agent gets tricked into signing.
Each one is named, understood and checked for before a key ever signs.
Hidden authority takeoverSpoofed fee payerSwapped program definitionUnresolved lookup tableOver-limit payment
Hidden authority takeoverSpoofed fee payerSwapped program definitionUnresolved lookup tableOver-limit payment
Hidden authority takeoverSpoofed fee payerSwapped program definitionUnresolved lookup tableOver-limit payment
Hidden authority takeoverSpoofed fee payerSwapped program definitionUnresolved lookup tableOver-limit payment
Blind program upgradeUnknown instructionPayment to an unlisted addressDrained relayerSilent approval
Blind program upgradeUnknown instructionPayment to an unlisted addressDrained relayerSilent approval
Blind program upgradeUnknown instructionPayment to an unlisted addressDrained relayerSilent approval
Blind program upgradeUnknown instructionPayment to an unlisted addressDrained relayerSilent approval
WHAT IT DOES
Built so nothing signs blind.
- Approved recipients
- Payment limit
- Approved programs
Knows your rules
The recipients and limits you set, checked every single time.
Paused. Needs a person.
ApproveDeny
Asks a person, never guesses
Anything out of policy pauses and reaches the right human in Slack.
- Payment allowed
- Unknown change, sent to a person
- Upgrade reviewed
Remembers every decision
What was seen, what was decided, and who said yes.
WHERE IT SITS
In front of every signature.
One verification layer, wallet-agnostic, between what proposes a transaction and what signs it.
AI agents
x402 payments
Squads proposers
AgentGuard
Kora relayer
Squads
Wallet infra
Questions
Secure your agents before they sign.
Put AgentGuard in front of Kora, Squads or your agent wallet stack.