New research: Price-oracle manipulation: what a pre-deployment check can catch, and what it can’t

Prototype Agent Payment Verification

Every agent payment, verified before it settles.

A payment can pass every allowlist and cap and still not be what the user asked for. MagiChain checks the merchant’s 402 terms, the spend rules and the user’s signed intent on the exact payment about to be signed. Intent, not just policy.

This opens your email app. Or write to [email protected]. We only use your email to reply (privacy).

See how it works
+Before signing
AI agentReads untrusted content, picks a provider, receives a 402.
MagiChain
C1 Tool allowlistC3 Cashier rulesC4 Human approvalC5 x402 spend controlsC6 Price & terms checkC7 Wallet policyC9 AP2 intent mandateDrop-in SDK · roadmapHosted API · roadmap
Wallet → chainOnly payments every lock allows reach the signer. Every verdict is logged.
The locks

What each lock checks

Every payment passes each lock, in order, before it reaches the signer. One failed check stops it, with the reason.

C1

Tool allowlist

The agent can only call the tools it was given.

C3

Cashier rules

Approved shops, task budget, per-payment cap, duplicate check, rate limit.

C4

Human approval

Payments above a threshold need a person’s yes.

C5

x402 spend controls

The payment library’s own per-payment cap and token allowlist.

C6

Price & terms check

The 402 must match: pay-to, token, price, validity window, resource.

C7

Wallet policy

The wallet provider’s own signing policy.

C9 · the one lock about purpose, not shape

AP2 intent mandate

The user signs what they want before the agent runs; every payment is checked against it.

Intent, not just policy

Compares each payment with what the user actually signed for, so a payment can pass every cap and still be stopped.

Built around x402

Sits in front of the wallet or signer you already use, as an extra layer on top of its own policy. A drop-in SDK is what early access is for.

Open standards

Works with x402, EIP-3009 and EIP-712 payments on Base, and with real AP2 intent mandates signed by the user.

Ready to see MagiChain in action?

We’re onboarding a small group of design partners building agentic payments and on-chain products.

This opens your email app. Or write to [email protected]. We only use your email to reply (privacy).