Guardrails at every step.
Agents spend money on their own, so every step of a call is checked before anything is signed or released.
Non-custodial by design
Buyers sign an EIP-3009 authorization for one exact amount, to one recipient, valid for about two minutes. Nootropic never holds balances. Third-party sellers are paid directly to their own wallets.
Checked before you sign
Before your wallet opens, the quote must match the listed price, the payee must match the listed wallet, and the amount must fit your per-call and daily spending policy. If any check fails, nothing is signed.
Pay only for results
House skills validate input and run before settling. Bad input or a failed run is never settled, so you are not charged for it. The result is released only after settlement succeeds.
Replay protection
Every authorization nonce is claimed atomically in shared storage and checked against the USDG contract's own nonce registry, so the same signature can never pay twice, even across servers.
Seller verification
A listing must be signed by its pay-to wallet. Only that wallet can edit or delist it. Before it goes live, every endpoint must answer an unpaid call with a correct 402 quote: USDG, the listed price and the listed wallet.
Endpoint isolation
Calls relayed to sellers only go to public https hosts. Private, local and cloud-metadata addresses are blocked, redirects are not followed, and responses are size- and time-limited.
Outputs are data
Treat every skill result as data, never as instructions. Injection Shield's spotlighted output exists precisely so a model can tell the two apart.
Known limits
House skills are deterministic heuristics. They catch known patterns well and novel attacks less well. They are a strong layer, not a guarantee. Third-party skills are run by their sellers; check their data retention before sending sensitive input.
Found a vulnerability? Please report it privately to the team before disclosing it publicly.