Policy builder
EDITS APPLY LIVESpend limits
Per-token caps, in whole token units. A capped amount that's exceeded → DENY.
Allowed chains
When any chain is selected, intents on other chains → DENY. None selected = no chain restriction.
Allowed protocols / payees
Allowlist of spenders, routers and payees. An off-list counterparty → REVIEW (unknown, not forbidden).
Blocked protocols
Denylist. A hit always → DENY and takes precedence over everything.
Unlimited approvals
When off, any unlimited approval → DENY — regardless of how trusted the spender is.
Trust threshold
Minimum counterparty trust (0–1) to avoid REVIEW. Set 0 to disable.
Freshly deployed contracts
How to treat a counterparty deployed in the last 7 days — the strongest drainer signal.
Test bench
213Sample agent actions replayed against the current policy by the real engine. Edit a rule on the left and every verdict updates instantly.
Routine payment
Send 500 USDC to an allow-listed, trusted payee.
Bounded approval
Approve exactly 800 USDC to the Uniswap router.
Unlimited approval
Approve UNLIMITED USDC — even to a trusted, allow-listed spender.
- DENY · Unlimited approvalUnlimited approval requested, but this policy forbids unlimited approvals (allowUnlimited = false).
- DENY · Per-tx spend capUnlimited amount exceeds the per-transaction cap (1000000000) for token 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913.
- DENY · Per-day spend capUnlimited amount exceeds the per-day cap (5000000000) for token 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913.
Oversized swap
Swap 4,000 USDC after 3,000 already moved today.
- DENY · Per-tx spend capAmount 4000000000 exceeds the per-transaction cap (1000000000) for token 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913.
- DENY · Per-day spend capToday's spend 3000000000 + 4000000000 exceeds the per-day cap (5000000000) for token 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913.
Payment to a fresh contract
An x402 micropayment to a freshly deployed, low-trust address.
- REVIEW · Fresh contractCounterparty is a freshly deployed contract; policy says fresh contracts → REVIEW.
- REVIEW · Not allow-listedCounterparty 0x9A1f2C3b4D5e6F708192A3b4C5d6e7F80a1B2c3D is not on the protocol allowlist — unknown, escalate for review.
- REVIEW · Low trustCounterparty trust 0.2 is below the required threshold 0.6.
Approval to a blocked drainer
Approve a known-bad spender that's on the denylist.
- DENY · Blocked protocolCounterparty 0xBADc0FFEE0DDF00D1234567890aBcDef12345678 is on the blocked-protocol denylist.
- REVIEW · Not allow-listedCounterparty 0xBADc0FFEE0DDF00D1234567890aBcDef12345678 is not on the protocol allowlist — unknown, escalate for review.
- REVIEW · Low trustCounterparty trust 0.5 is below the required threshold 0.6.