Treasury infrastructure for autonomous agents
Normal wallets assume one human. SwarmOS safely manages many agents with scoped spend, approvals, and receipts.
Programmable vaults, policy-gated execution, and hash-chained receipts. Give your AI agents spend controls that actually work.
How It Works
Register & Authenticate
Generate Ed25519 keypair, register agent, issue time-bounded session key. Server never holds private material.
Define Policy & Create Vault
Set per-action limits, chain allowlists, and approval thresholds. Create a capital cell (vault) bound to your policy.
Execute & Verify
Submit intent → policy check → risk score → sign → execute → hash-chained receipt. Circuit breaker protects on anomaly.
The Problem SwarmOS Solves
Teams running multiple AI agents face a simple question: who controls the money?
Without SwarmOS
- ✗Shared wallet keys — one compromised agent drains everything
- ✗No spend limits — a hallucinating LLM can burn your entire budget
- ✗No audit trail — you find out about unauthorized transfers after the fact
- ✗No kill switch — when something goes wrong, you scramble to revoke access manually
With SwarmOS
- ✓Isolated vaults per agent — blast radius is one cell, not your treasury
- ✓Policy-gated execution — per-action limits, approval thresholds, chain allowlists
- ✓Hash-chained receipts — every action is signed, sequenced, and independently verifiable
- ✓4-state emergency machine — NORMAL → DEGRADED → SAFE_READONLY → HARD_STOP in one call
Architecture
5 bounded domains, 25+ API endpoints, 11-step signing pipeline, 4-state emergency machine
Identity Control
- Ed25519 Admission
- Session Keys
- Capability Tokens
Treasury Runtime
- Wallet Kernel
- Capital Cells
- Signing Pipeline
Policy & Risk
- Policy Engine
- Budget Tracking
- Emergency Controls
Verification
- Preflight Checks
- Post-Verifier
- Background Audit
Security Observability
- 10-Rule Scanner
- Event Pipeline
- Receipt Chain
Built for Trust
Tests
Including 30 adversarial tests across 8 attack surfaces
Security Invariants
Non-negotiable properties with dedicated verification suite
Operational Drills
Mandatory SAFE_READONLY, stale session, recovery, verifier drills
Release Candidate
Feature-complete, pilot-ready, documented known limitations
Developer-First SDK
Register an agent, create a vault, and execute a policy-gated transfer in 15 lines of Python. Every action produces a hash-chained receipt.
- Ed25519 key generation built-in
- Session keys with automatic signing
- Approval artifacts for high-risk actions
- Emergency controls (engage/release)
from swarmos_sdk.client import SwarmOSClient
client = SwarmOSClient()
# Register agent
client.generate_keys()
client.register()
client.issue_session_key()
# Create vault with policy
client.create_policy("my-policy",
per_action_limit="500",
chain_allowlist=["local"])
cell = client.create_cell("local", "ETH",
"my-policy", "operations vault")
client.deposit(cell["cell_id"], "1000")
# Execute transfer (policy-gated, signed, receipted)
result = client.execute(
cell["cell_id"],
"transfer.external",
"local", "ETH", "50",
"0xrecipient"
)
print(f"Receipt: {result['receipt_id']}")Get Early Access
SwarmOS is in release candidate. We're onboarding pilot operators for 3-5 person teams running 5-20 autonomous agents.