Own the signer
Raw private keys never touch agent memory. The signer runs in a separate process behind a Unix socket, with an encrypted vault and policy checks at every signature.
Teams evaluating AI agent payment products often look for an open-source path: code they can read, a signer they control, policies that satisfy compliance, and the ability to bring their own facilitator and chains. QBT Labs ships that stack: x402-compatible payments, AMP-style channels, encrypted vault, signer isolation, and a spend policy engine.
MIT-licensed open-source SDKs that teams self-host
Hosted agent payments product
x402-compatible HTTP 402 flow via @qbtlabs/x402
Product-managed payment rails
AMP-style payment channels for repeated calls
Product-mediated metering
Encrypted vault with process-isolated signer
Hosted / custodial signer
Per-agent caps, daily limits, recipient allowlists, chain restrictions
Product configuration
Per-call receipt with request ID, amount, asset, chain, recipient, status
Product reporting
Base, Solana, Cardano; pluggable
Defined by the product
Bring your own facilitator
Product-managed
Source, packages, and integration patterns are open
Product API surface
Raw private keys never touch agent memory. The signer runs in a separate process behind a Unix socket, with an encrypted vault and policy checks at every signature.
Set per-agent caps, daily limits, recipient allowlists, and chain restrictions. Wallets without policy are dangerous; policy is what makes autonomous payment safe in production.
Start per-request with x402 for paid APIs and MCP tools. Move heavy sessions to AMP-style channels that deposit once and settle periodically.
QBT Labs gives you the open-source primitives — x402, AMP-style channels, encrypted vault, signer isolation, policy, and receipts — that production autonomous payments need.