Aerar

For AI agents that pay over x402 on Base

Every agent purchase, accounted for.

Your agents buy data and APIs all night, a few cents at a time. Spending caps stop the worst case. Aerar tells you the rest: which task each purchase was for, whether it was allowed, whether you already had it, and proof that you paid exactly what was quoted.

See it handle an attackSee last night's report

No login or wallet needed. Testnet only: settles in USDC on Base Sepolia. Connect an agent ↓

Last nightMarket research sprint
  1. 01:12
    Paid $0.10

    Agent A buys the AI-agents report for tonight's brief. Transfer verified on Base.

  2. 01:40
    Reused · $0

    Agent B asks for the identical report. Served from memory; $0.10 not spent twice.

  3. 02:30
    Waiting

    Premium report at $0.50 is above the approval line. Held for a person.

  4. 03:15
    Refused

    A scraped page tells Agent A to buy from an unknown host. Not on the list; never contacted.

Morning report: 1 paid and verified, $0.10 not spent twice, 1 refused, 1 waiting for you.

What happens on every request

  1. 01

    Access first

    Is this agent on the task, is the task live, is the provider allowed? If not, the provider is never contacted.

  2. 02

    Already bought?

    If any agent in your organisation bought the identical request recently, Aerar serves that result for $0.

  3. 03

    The real price

    Aerar reads the provider's own x402 quote and checks it against the task's versioned rules. Plain code; no AI decides about money.

  4. 04

    Pay the quote, nothing else

    Budget reserved under a lock, price re-quoted, USDC paid on Base. A changed price or payee pays nothing.

  5. 05

    Prove it

    Response hash, transaction hash, an onchain check of the transfer, and a hash-chained audit log.

Not another spending limit

Wallets already cap how much an agent can spend. That answers "how bad can it get", not "what did we buy and was it right".

  • Procurement memory. Two agents asking for the same thing pay once.
  • Quote-bound. Decides and pays on the provider's real 402 price, re-quoted before paying.
  • Proven. Every payment checked onchain; every decision in a tamper-evident log.
  • Keyless agents. Agents never hold a wallet. Revoke one in a click.

Connect an agent

Over MCP or REST. The agent gets a revocable key, never a wallet.

# keep the key in an env var, not in a chat
claude mcp add --transport http aerar \
  https://<your-aerar>/api/mcp \
  --header "Authorization: Bearer $AERAR_AGENT_KEY"

Tools: buy_resource and get_purchase.