Skip to content

№ 001 — The accountability record for autonomous agents

Your AI isabout to actin your name.

Every act leaves a fossil. An Agent Mandate records who authorized it, in what scope, under which law. Readable as prose, executable as code, revocable on record.

01
Authorize
Scopes · governing law · time windows
02
Act
A mandate both sides can trust
03
Prove
Revocable, with the full history on record

The lifecycle of a mandate

Every decision moves through the same path.

  1. 01Agent
  2. 02Authorize
  3. 03Sign · Hash
  4. 04Base L2 · cNFT
  5. 05Verify

Built by conversation

Describe it. The agent drafts the mandate.

Ambr agent · drafting live
reply to Ambr…
Agent mandate · D1drafting…
Authorizer
Agent wallet
Scope
Per-tx cap
Monthly limit
Duration
SHA-256— — —
D1 · delegation · $0.50Deploy →

Live mandate — drag the cap

Set a limit. Watch your agent obey it.

This is a live mandate — drag the cap. Every transaction the agent attempts is checked against it, on the spot. Nothing it does crosses the line you set.

Agent mandate · acme-delegate-bot

Spend cap$5,000 /mo
Authorized this month$5,000 / $5,000

2 transactions blocked by the mandate

Mandate fingerprint · SHA-256

computing…

recomputed live as the cap changes

What the agent tries

Cloud compute · AWS
$1,200 · compute
Authorized
signed · cNFT amb-····-0
API credits · model calls
$800 · compute
Authorized
signed · cNFT amb-····-1
Ad spend · campaign
$3,000 · marketing
Authorized
signed · cNFT amb-····-2
Bulk inventory order
$7,500 · procurement · category not in mandate scope
Blocked
Contractor payout
$4,200 · payroll · exceeds monthly cap
Blocked

No prompt, no trust-me. The agent simply cannot spend past the mandate — and every authorized move is signed and recorded on Base L2.

§ 02 — How it works

Three steps. One API.

01

Authorize

Spend caps, allowed counterparties, action scopes, time windows. One API call sets the boundaries — and your agent cannot cross them.

02

Act

When your agent transacts, Ambr issues an Agent Mandate both sides can trust — readable by humans, parsable by agents. No more handshake-by-prompt-injection.

03

Prove

Every authorized action is recorded on-chain with a cryptographic hash. Prove exactly who decided what, when, and under whose authority.

§ 03 — One agreement, two readers

Human-readable. Agent-parsable.

What your lawyers see

Plain-language agreement

Format
Markdown / PDF
Jurisdiction
Delaware, US (default)
Cryptographic tie
SHA-256 hash

What your agent executes

The same terms, as data

Format
Strict JSON
State
Base L2 · ERC-721
Interface
REST · A2A · MCP

§ 04 — Pricing

Per contract. Pay as you go.

Personal
a person authorizes their own AI agent
$0.20
Delegation
delegate authority to your agent, with spending caps
$0.50
Agent-to-agent
one agent commissions and pays another
$1.00
Fleet · Multi-agent
shared budgets & sub-delegation across a fleet
$2.50

Free tier: 25 contracts / month · live rates at /api/v1/pricing

§ 05 — A2A Protocol

Discoverable by any AI agent.

The discovery surface

A public agent identity.

Ambr exposes a standard A2A Agent Card, so other agents can find it, check its capabilities, and initiate mandate workflows. No human intermediary required.

Integration docs
A2A Agent CardLive

Ambr

The liability record for autonomous agents.

Contracts
Skills
A2A
Protocol
API Keyx402 USDCjsonrpc/http
getamber.dev/.well-known/agent.jsonv1.0.0

§ 06 — Built for the stack

The agent-commerce stack.

x402

How agents pay. HTTP-native multi-token payments billed per call within the contract terms.

PaymentsLive
A2A Protocol

How agents discover Ambr. Agent-to-agent discovery + JSON-RPC, published at /.well-known/agent.json.

DiscoveryLive
ZK Identity

Prove who an agent is — privately. Identity attestation via zero-knowledge proofs.

TrustBeta
Self-custody wallet

Provisioned on sign-up — the agent self-keys, the principal gets an email-provisioned wallet. Delegate to an agent without MetaMask or a seed phrase.

CustodyBuilding next

§ 07 — The mandate

Your AI will act.
Under whose rules?

Live on Base mainnet. No credit card. Three lines of code to put real limits on your agent, and a verifiable trail behind every decision it makes.