Your agent can shop. It cannot drain you.
This page is a live, read-only view of one vault on the NEAR test network. Every number below is read from the chain, and the rule check is the contract's own answer.
Test money only. No wallet. This page never asks you to sign or spend.
Above your limit, the account says no.
It does not matter what the agent was told. The limit lives in the account itself, not in the agent's instructions.
Only people you trust get paid.
Anyone else is refused before a single cent moves, even if the request looks harmless.
Every move leaves a receipt.
Paid, waiting, refused. The record lives on the network, and this page shows it exactly as written.
One owner, one agent, limits on chain.
Read-only. The page refreshes itself every 30 seconds.
The vault's total balance and its storage reserve appear here once the chain answers.
The budget is a limit, not a balance. Raising it never adds money. It only lets the agent spend more of the vault money on the left.
under the hood
The agent holds a scoped key that can only request spends. The rules live on chain in vault vault2.vaults.eqxdemi.testnet, and they refuse anything over the caps or to anyone the owner has not approved. Every receipt above is a record on the test network.
The agent key cannot change rules, move money, or touch another account. This page holds no key at all: it only reads.
Ask the live contract what it would do.
This calls simulate_spend. It writes nothing, queues nothing, and moves no money. The answer is the real policy decision for the vault's current rules.
The owner flow stays local.
The hosted page can read and simulate. To sign in, set rules, approve a purchase, or refuse one, run the app on your machine. The login only trusts http://localhost:3000, because that is the one origin the shared FastAuth testnet client redirects back to.
-
1
Clone the repo. Everything is public, including the contract and the tests.
-
2
Run the contract tests. 45 tests cover caps, budgets, allowlists, approvals, and failures.
-
3
Start the app. Copy app/env.example to app/.env and fill in a funded testnet sponsor. The README documents every variable.
-
4
Open exactly http://localhost:3000. That origin is the only one the FastAuth testnet client allows.
git clone https://github.com/Valorian0108/krypt.git cd krypt/contract cargo test cd ../app npm install npm run dev # open http://localhost:3000
The full app needs a funded NEAR testnet sponsor and a local
app/.env. The hosted page needs neither.
The agent asks. The contract answers.
Test money, real checks, live on the test network right now.