The payment platform built for AI agents.
Give your AI agent a virtual card. It signs, pays, and manages spending — no human in the loop. Every transaction authorized by a signed PolicyWindow you control.
// Agent calls Local Wallet through MCP
await mcp.call("kleepay_pay", {
card_id: "card_7f3a9c2d",
amount: 49.00,
currency: "USD",
merchant: "vercel.com",
ttl: "15m",
})
// Signer signs PolicyWindow · Ed25519
// Authorizer: amount ✓ merchant ✓ TTL ✓Payment infrastructure built for autonomous agents.
AI agent integration
One command to install: curl -fsSL https://klw.kleepay.ai/install.sh | sh. MCP native — works with Claude, OpenClaw, any MCP-compatible agent. Skill file at klw.kleepay.ai/skill.md — agents learn KleePay in seconds.
Cryptographic PolicyWindow signing
Every transaction requires an Ed25519-signed policy: amount ceiling, merchant domain, MCC category, time window. Agents can only spend what you authorize — not a cent more.
Virtual Visa cards
Instant virtual cards funded by USDT. Freeze and unfreeze per transaction. Each agent gets its own card — or share one with tight policy constraints. Works at 99% of global merchants.
Simple for you. Invisible to the agent.
Complete KYC
Verify your identity once. No credit check, no bank account. The process takes a few minutes and unlocks your account for card issuance and USDT deposits.
Load USDT, issue cards
Deposit USDT to fund your balance. Create virtual Visa cards and allocate spending to each agent workflow. Set per-card limits — amount, merchant whitelist, MCC category.
Agent executes, Local Wallet authorizes
The agent calls kleepay_pay via MCP. The local wallet daemon validates the policy, signs the transaction, and releases the card for exactly one purchase. Window closes automatically.
Full audit trail
Every authorization is logged with the signed policy that permitted it. Every settlement. Every freeze. When something goes wrong, you know exactly why it was allowed.
Default deny. Always.
Every card rejects every transaction by default. A payment goes through only when a signed, in-scope PolicyWindow permits it — and not a cent more.
The Local Wallet daemon holds your keys locally — they never leave your machine. Each PolicyWindow is signed before any charge is attempted. No signature, no payment.
A PolicyWindow expires in minutes. Compromised credentials go stale before they can be reused. Cards are frozen by default and only open for the duration of one transaction.
The Local Wallet unfreezes the card, the transaction goes through, the card refreezes. Even if a PAN is captured in transit, it cannot be reused outside the active window.
Policies bind to a specific merchant domain and MCC category. An agent authorized for vercel.com cannot spend at aws.amazon.com, even if both are SaaS.
Connect your agent in minutes.
MCP or REST — whichever fits your stack. The Local Wallet runs locally and handles all signing. Read the full agent integration guide.
ACP SharedPaymentToken · Visa TAP · Mastercard Agent Pay · x402 USDC — native protocol support added incrementally as the ecosystem matures.
# ~/.kleepay/klw.toml
[card.infra_agent]
card_id = "card_7f3a9c2d"
max_amount = 500.00 # USD per window
daily_limit = 2000.00
ttl_minutes = 15
[card.infra_agent.allowed]
merchants = ["vercel.com", "aws.amazon.com",
"github.com", "planetscale.com"]
mcc = ["5734", "7372"] # software only
Ready to give your agent a wallet?
Invite-only early access. No subscription — you pay only for what the agent loads.
No spam. We'll email when your access is ready.