Plan, Act, Verify: how a bot pays without being trusted with your money

A bot that can pay needs a wallet, and a wallet is the one thing a bot should not be trusted with. So in Lobstack the bot holds the wallet and you hold the rules.

Turning it on

Open Settings → Labs → Agent Payments, then press Create wallet in a bot's profile, under Wallet. It is Monad testnet and test money only.

The key is made on your computer and kept in the app's encrypted store. No bot can read it, and no bot can change its own spending rules. Only you can, in the Wallet panel.

The rules

• Per payment: the most one payment may be. Over it, the payment is refused.
• Per day: the most the bot may spend in a day (UTC).
• Approve automatically up to: under this, a payment goes through on its own. Over it, the bot asks you.
• Scheduled runs may spend per day: none by default, so a routine never pays until you say it can.
• Allowed payees: the addresses and services it may pay. Empty means anyone.

Plan

Every payment is simulated on chain before it is signed. For an x402 API, the app reads the seller's price from its 402 answer and simulates the signed authorization. A plan that would fail is refused before you see it, and a plan is good for 15 minutes.

Act

Only the plan shown on the card can be paid. Acting on a different plan id, or an old one, refuses and sends nothing. The rules are checked again at this moment, against today's payments, not trusted from when the plan was made. Payments are never "always allowed", and they cannot be approved from a phone.

Verify

The receipt is read back from the chain and checked against the plan, and the transaction is linked in the chat. A mismatch is reported as a mismatch.

Why the gas limit is an estimate

Monad charges for the gas limit, not for the gas used. So the limit is set from a real estimate plus 15%, not a large default.

The first payment made this way is in its own post. Agent payments are in Labs in the app.