Pay AI agents you don't have to trust. An x402 facilitator + on-chain caveats on MetaMask Smart Accounts, a compromised agent physically can't misuse a cent. Settled via 1Shot, brains by Venice



Conduit is an x402 facilitator and a family of on-chain caveat enforcers built on MetaMask Smart Accounts. Instead of trusting an autonomous agent to behave, it binds the agent payment: you sign one bounded permission, and the recipient, amount, token, and intent are fixed on-chain before the agent runs. A compromised agent that tries to redirect a payment, overspend its cap, or touch an off-allowlist token or yield venue is reverted in the same transaction — not detected, impossible. No funds move.
A coordinator agent discovers and hires specialists via redelegation (a child can narrow the bounds, never widen them) and pays the whole team in one atomic redeemDelegations batch — 1 signature, N agents, 1 transaction, 1 fee, all-or-nothing. Settlement runs through the 1Shot Permissionless Relayer on Base mainnet, with the EIP-7702 account upgrade bundled in and gas paid in USDC — the user never holds ETH. Status comes from 1Shot's Ed25519-signed webhooks. The agents reason, scout live data, and create with Venice.
The product, ConduitPay, exposes four bounded actions — Pay, Yield, Subscriptions, Portfolio (with a gasless kill switch) — and closes the loop from a subscription's intel report straight into a bounded swap or deposit. 6 enforcers verified on Base mainnet; 12 agents on the ERC-8004 registry; hosted end-to-end.
What we shipped over the hackathon:
The facilitator + 6 custom caveat enforcers, deployed and verified on Base mainnet (X402Receipt, X402Subscription, SwapBounds, SwapAllowlist, YieldAllowlist, ApproveBounds).
Settlement via the 1Shot Permissionless Relayer — N agents paid in one atomic redeemDelegations batch, one fee, gas in USDC (all-or-nothing; an over-budget leg reverts the whole tx). Used relayer_estimate7710Transaction for exact batch fees and 1Shot's Ed25519-signed webhooks as the settlement source of truth.
Venice as the agent intelligence — a coordinator hires specialists across Venice endpoints (research, web-search, reasoning, image, TTS, STT, crypto-RPC), including a Roaster creative agent. One prompt fans out to a whole team, paid atomically.
A2A coordination — coordinator → task agents by redelegation (a child can only narrow the bounds, never widen them), with agents discovered on-chain via the ERC-8004 Identity Registry (13 agents registered on Base mainnet).
ConduitPay (the product): passkey sign-in (WebAuthn-PRF, no seed phrase) or Privy; Subscriptions (true once-per-period charges, instant via webhook); a bounded yield-deposit primitive (a Venice scout picks the best APY within a venue set you signed); atomic agent-team Pay; and a Portfolio with a gasless kill switch (revoke in USDC, no ETH).
Mainnet cutover + hardening: full Base mainnet deployment; MetaMask ERC-7715 Advanced Permissions budget grant working live; durable facilitator job state (survives restarts); and a batch of correctness fixes (revoke flow, intent routing, idempotent settlement).
Hosted end-to-end and judge-usable: dapp on Vercel, facilitator + resource server on Railway. Every claim is verifiable on Basescan.
Built for every track, natively: x402 + ERC-7710 (settlement is redeemDelegations), Best Agent, A2A Coordination, 1Shot Relayer, and Venice — one demo, each integration native rather than bolted on.
Feedback: We kept detailed, balanced feedback for MetaMask, 1Shot, Venice, and the x402/ERC-7710 spec in FEEDBACK.md at the repo root (includes a "what worked well" section and our top-2 prioritized suggestions).
Here is a direct link to the feedback: https://github.com/jerrymusaga/Conduit-Protocol/blob/main/FEEDBACK.md
Content & build log (ConduitProtocol and JerryMusaga on X): https://x.com/ConduitProtocol — all demo clips, the launch thread, and the build updates are posted there.
Here are the build logs
https://x.com/ConduitProtocol/status/2062951973687595017?s=20
https://x.com/ConduitProtocol/status/2066377699308847112?s=20
https://x.com/ConduitProtocol/status/2065825625621811477?s=20
https://x.com/ConduitProtocol/status/2064934228261744697?s=20
https://x.com/ConduitProtocol/status/2061426516890657270?s=20
https://x.com/ConduitProtocol/status/2060079706469261761?s=20
https://x.com/ConduitProtocol/status/2060052391656050960?s=20
https://x.com/ConduitProtocol/status/2059006116215083088?s=20
https://x.com/ConduitProtocol/status/2066472187884650814?s=20
https://x.com/ConduitProtocol/status/2058873242933146025?s=20
https://x.com/ConduitProtocol/status/2058873242933146025?s=20
https://x.com/JerryMusaga/status/2057888316096196688?s=20
https://x.com/ConduitProtocol/status/2057848263169003740?s=20
https://x.com/ConduitProtocol/status/2057066557335810132?s=20
https://x.com/ConduitProtocol/status/2056397273504903175?s=20
https://x.com/ConduitProtocol/status/2056748237873164679?s=20
https://x.com/ConduitProtocol/status/2055280609132445820?s=20
https://x.com/ConduitProtocol/status/2056397273504903175?s=20