\n Autonomous finance for AI agents.
\n A wallet whose keys the model never sees, a spending policy that runs before anything is signed, and execution for markets that never close.\n
\n moneowallet.com ·\n Quickstart ·\n Packages ·\n How it fits together ·\n Status ·\n Contributing\n
\n\n---\n\nAn agent that can only read is cheap to get wrong. An agent that can move money is not.\nMoneo is the layer in between: it gives an agent its own account, its own limits, and a\nrecord of every attempt, so a mistake costs a refusal instead of a balance.\n\nBuilt for [Robinhood Chain](https://moneowallet.com), where tokenized equities and USDG settle\naround the clock. An agent that can trade at 3am is only useful if it cannot also lose the\naccount at 3am, which is what the guard is for.\n\n```bash\nnpm install @moneolabs/wallet @moneolabs/guard @moneolabs/trading\n```\n\nOr skip the code entirely and hand your agent host a wallet of its own — a real key, a cautious\npolicy, and live pools on Robinhood Chain over [MCP](packages/mcp):\n\n```bash\nnpx @moneolabs/mcp\n```\n\n## Quickstart\n\n```ts\nimport { createGuard } from \"@moneolabs/guard\";\nimport { createWallet, localSigner, memoryRail, toolkit } from \"@moneolabs/wallet\";\n\n// What this agent may do with money. Data, not code, and versioned.\nconst guard = createGuard({\n perTransaction: { max: \"$25\" },\n rolling24h: { max: \"$100\" },\n counterparties: \"allowlist-only\",\n allow: [\"x402:*\", \"vendor:acme\"],\n escalate: { above: \"$50\" },\n});\n\n// One account per agent. The signer holds the key, the wallet holds a handle.\nconst wallet = await createWallet({\n agent: \"research-agent-01\",\n signer: localSigner(),\n rail: memoryRail(),\n guard,\n funding: \"$500\",\n});\n\nawait wallet.pay({ to: \"x402:api.pricefeed.dev/quote\", amount: \"$0.04\" });\n\n// Hand the tools to your agent framework of choice.\nconst tools = toolkit(wallet, { guard });\n```\n\nTwo runnable examples live in [examples/](examples):\n\n```bash\nnode --experimental-strip-types examples/quickstart.ts\nnode --experimental-strip-types examples/guarded-trading.ts\n```\n\n## Packages\n\n| Package | What it does |\n| -------------------------------------- | --------------------------------------------------------------------------------------------------- |\n| [@moneolabs/wallet](packages/wallet) | An account per agent. Pluggable custody and rails, an agent toolkit for MCP or function calling. |\n| [@moneolabs/guard](packages/guard) | Caps, rolling budgets, velocity limits, allowlists, and human escalation, evaluated before signing. |\n| [@moneolabs/trading](packages/trading) | Multi-venue quotes, slippage bounds, market, limit, TWAP and bracket orders, positions and P&L. |\n| [@moneolabs/mcp](packages/mcp) | MCP server over all of it: `npx @moneolabs/mcp` hands any agent host the guarded wallet. |\n| [@moneolabs/core](packages/core) | Exact money arithmetic, assets, durations, clocks, price sources. Shared by the rest. |\n\nEach package works on its own. The guard is useful with no wallet at all: it will happily sit in\nfront of a payment function you already wrote.\n\n## How it fits together\n\n```\nagent\n │ pay / quote / trade\n ▼\nwallet ──────► guard ──────► decision: allow | hold | block\n │ │\n │ └─► ledger (every attempt, verdict and reason, blocks included)\n │\n ├─► signer (holds the key; the agent never sees it)\n └─► rail (chain, processor, internal ledger)\n```\n\nThree properties fall out of that shape, and they are the point of the project:\n\n**A refusal is free.** Policy runs between intent and signature, so a blocked payment is never\nbroadcast and never costs a fee. `check()` tells you what would happen without doing it.\n\n**Money in flight is money you do not have.** An allowed decision reserves budget immediately and\nsettles or releases later. A payment that fails at the rail hands its budget back rather than\nleaving it stuck.\n\n**Every verdict is attributable.** Decisions record which agent asked, what for, and which version\nof which policy answered. Policy versions are content-addressed, so two policies that differ only\nin key order or in how an amount was written get the same id.\n\n## Design notes\n\n**Amounts are never floats.** Every amount is an integer count of minor units in a `bigint`. A\nbudget that drifts by a fraction of a cent per check is a budget that eventually lets something\nthrough. `parseMoney(\"$0.001\")` throws rather than silently rounding away precision you meant.\n\n**Time is injected.** Rolling windows, velocity limits, and TWAP schedules all read a `Clock`. Pass\n`manualClock()` and a thirty minute order takes a millisecond to test. The test suite covers a\ntwenty five hour budget rollover without waiting for one.\n\n**Refusals are values.** The agent toolkit returns a blocked payment as a normal result with a\nreason and a hint, not as an exception. A model that gets a stack trace retries. A model that gets\n\"this limit is set by the wallet owner, ask them to raise it\" stops and says so.\n\n**Externals are interfaces.** `Signer`, `Rail`, `Venue`, `PriceSource`, `Approver`, and\n`DecisionLedger` are all interfaces with working reference implementations. The target is\nRobinhood Chain, but nothing in the packages hardcodes it: a network is a string you pass and a\nrail is an object you supply.\n\n## What is and is not implemented\n\nThis repository is honest about its edges.\n\n**Fully implemented and useful today.** The guard is complete: caps, rolling budgets, velocity,\nallowlists and denylists, asset and action rules, escalation, reservation and settlement, policy\nversioning, replay against history. There is no hosted service behind it and none is needed. The\nmoney arithmetic, the position book, and the order types are equally real.\n\n**Implemented behind an interface, with a local reference adapter.** Custody ships as\n`localSigner`, a genuine Ed25519 signer whose key never leaves the process, plus `remoteSigner` for\nenclave or MPC services. Value movement ships as `memoryRail`, a real double-entry ledger that\nhappens to be in memory. Execution ships as `simulatedVenue`, deterministic and driven by a price\ntable you supply.\n\n**Not included.** There is no hosted Moneo API, no chain client, no card issuing, and no bundled\nprice feed. Those are the adapters you write or that ship separately.\n\nWhich also means **there is no API key and no account to create**. These are libraries, not a\nclient for a service: policy is evaluated in your process, and the signer and rail are objects you\npass in. The things with credentials are whatever you connect them to.\n\n## Development\n\n```bash\nnpm install\nnpm test # 120 tests, no network, no waiting on real clocks\nnpm run typecheck\nnpm run build\nnpm run check # format, types, tests, build\n```\n\nRequires Node 20 or newer.\n\n## License\n\nMIT. See [LICENSE](LICENSE).\n\nMoneo is developer infrastructure, not a broker, bank, or investment adviser. You are responsible\nfor the policies your agents run under and for the rails you connect.\n", "bytes": 7437, "sha": "22c3ec238695d2e63c630e9598f9901bd28426fe26115534f173752a7eb30b0f", "repo_slug": "moneolabs/moneo", "fonte": "repo", "truncated": false, "api": "https://agentalog.com/api/listings/mcp_io_github_moneolabs_moneo_0f94cf91/readme" }