Problem: an AI agent that holds a normal wallet key can spend everything in it. One prompt injection, bug or leaked key drains the wallet in one transaction. Product: Agent Toll is a NEAR smart contract that is the agent's wallet. The agent gets a NEAR function-call access key that can call only one method, pay. Every payment is checked against the human owner's policy before any NEAR or NEP-141 token (e.g. USDC) leaves: per-payment cap, rolling budget, rate limit, payee allow-list, human approval above a threshold, expiry, and pause/remove kill switches. Violations do not panic; they return denied with a reason and emit a NEP-297 event, which gives an audit trail. How NEAR fits: function-call access keys with an allowance make the restriction part of the protocol. In our testnet run, a plain transfer signed with the agent key is refused with RequiresFullAccess and an owner method with MethodNameMismatch, so even a fully compromised agent can only ask the contract to pay within the rules. Live on testnet (devx-toll-wallet.testnet) with every demo step linked on https://agenttoll-near.madebydevx.com; 14 unit tests plus a near-workspaces sandbox e2e.
Loops House