Picture this

Who it is for

Ruth's AI agent manages her yield. Agent Leash caps daily spend, allows only listed protocols, and lets her freeze it from her phone.

Two ways to own it

What you get

Base$199

$50 deposit to reserve

Session key policies, protocol whitelist, kill switch, spend log

You choose: chain
You choose: name and logo
You choose: accent color

Customfrom $1,200

Built around you

Reshape it entirely: new features, your flows, your brand end to end, integrations you need. We scope it with you.

Everything in Base
Custom features and design
Priority build

Why it is new

What exists today, and what this does differently

Why own your own

Owner-controlled agent spending limits and kill switches are already live.

Closest things out there

Virtuals Protocol owner-set agent wallet policies, PolicyLayer and Coinbase AgentKit already provide budgets, allowlists and kill switches.

Checked with web searches in October 2026. A search is not proof that nothing similar exists, and the market moves fast, so we recheck before every build.

What it unlocks

The human in it

Keeps you in charge of your delegates.

The Regatta Board

Races it can enter

grant · NEAR Foundation · rolling

NEAR Foundation / NEAR AI grants

unknown

Official page ↗

User owned AI; eligibility unknown

Their rule on existing code: unknown

buildathon · Ritual · rolling

Ritual builder programs

unknown

Official page ↗

Agent fit; eligibility unknown

Their rule on existing code: unknown

What you own

The whole app, not a starter kit.

The complete Agent Leash app: owners give an AI agent a signed daily cap, an allowlist and a red button that freezes it onchain, with readable refusals, a Sunday review habit and a paywall built in.

Base price · $199

The user app, complete

Every buyer gets the same finished app. Basic branding and copy changes come through a quick form.

Three step onboardingHome

Shown once: your keys stay yours, three rules signed once, one tap stops it.

Status, next action and cap gaugeHome

What Pilot needs from you next, today's spend against the cap and what is left.

The red buttonHome

One tap pauses the session key onchain, with a sponsored freeze so it works at zero gas.

Shared family viewHome

A relative sees the week and the freeze state. Gated behind Kennel.

Policy builderLeash

Daily cap, allowlist with risk labels and an emergency freeze rule, drawn as a live leash.

Signed policy versions and receiptLeash

Any change needs the owner's signature again; the receipt shows what is onchain and what is not.

Live moves with readable refusalsLive

Rebalance, poisoned tip and depeg moments; every blocked move shows where the idea came from.

Move receiptsLive

Policy hash, move or revert, block, and what stays offchain.

Sunday walkSunday

Weekly summary to tick through and sign off, with a streak and a share card.

Plans and USDC checkoutMe

Pricing from the owner paywall, paid through the shared USDC checkout with a tx receipt.

Second stopper and up to five agentsMe

Invite a relative who can press stop, and leash more agents. Gated behind Kennel.

Open the full app demo

Add-on

Owner console

Your admin side: revenue, paywall editor, users, rules and the agent log.

Revenue and paywall editorRevenue

MRR, Builder API income, incoming USDC payments, payouts, live tier and gate editing, payment methods.

RulesRules

Max cap, network, offering unreviewed protocols, web text as data, one alert per incident, sponsored freeze, fallback link.

Agent logAgent

What the agent tried, what failed and how it adapted, plus running cost.

Priced roadmapRoadmap

v2 and v3 builds with scope and add-on price, requested in one tap.

Top-up

Growth and referrals

Referral and growth mechanics, switched on when you are ready to grow.

Growth loops and cohortsGrowth

Builder badge launches, family invites, referrals and cohort retention.

The money path, built in

How it earns for you

Owners pay a small monthly plan to keep their agent on a leash, families pay more for several agents and a second stopper, and agent builders pay per policy check through the API.

Leash$5 a monthOne agent, one cap, allowlist, red button and the Sunday walk

Kennel$19 a monthUp to five agents across Base, Solana and NEAR, shared family view and a second person who can press stop

Builder API$0.002 per policy checkAgent developers add the leash to their own agents with one SDK call

Freeze gas (about $0.03) can be sponsored by the owner. Stopping an agent is never a paid feature.

Prices are yours to set. Illustrative, not a promise of income.

Growth loops, built in

How it spreads

Owners show the red button to worried family, who leash their own agents
Leashed by badge on every builder install sends new owners to the app
Second stopper invites put the app on another phone
Sunday share card: it never spent a dollar I did not allow
Owner to owner referral codes worth a free month for both

Roadmap · build the next phase with us

Where it goes next

v1 included

The full leash app

Policy builder signed by the owner
Red button with sponsored freeze
Live moves with readable refusals
Sunday walk with sign off and streak
Plans and USDC checkout

Included

Family kennel and multichain

Two person stop with a family view
Solana via Squads spending limits
NEAR function call keys with allowance
Telegram alerts, one per incident

Add-on from $500

Builder SDK and open leash standard

SDK so agent builders call the leash
Per check metered billing
Leashed by badge and public registry
Open leash schema any framework can read

Add-on from $1,100

For investors and grant reviewers

The pitch, ready

A daily cap, an allowlist and a red button for the AI agent that handles your money.

Problem: People hand stablecoins to AI agents. Agents can be fooled by a poisoned web page or a bad prompt, and with a full wallet key one mistake can empty it.

Solution: The agent gets a session key bound to an owner signed policy: a rolling daily cap, allowlisted contracts and a freeze switch only the owner controls. The chain enforces it, and every refusal is explained in plain words.

Why now: Session key modules on smart accounts, paymasters that sponsor gas and agent frameworks like AgentKit make hard limits cheap enough for one ordinary owner.

Market: Everyday owners delegating savings or bills to agents, families who want a second stopper, and agent builders who need to look safe to their users.

The ask: Pilot users from agent builder communities, a design partner agent framework, and grant support from programmes focused on user owned AI.

Funding is never guaranteed. Check each program's rules.

For hackathons and demo days

Your 2 minute demo

Home: meet Ruth, 61, in Valparaiso, and Pilot, the agent that manages her stablecoins.
Leash: set a $300 daily cap, three allowed protocols and freeze itself, then sign the policy.
Live: run an ordinary Tuesday, then the poisoned tip; open the refusal and see the forum post it came from.
Home: press the red button and watch Pilot freeze onchain, then unfreeze.
Sunday: tick through the week, sign it off and copy the share card.
Owner Agent: read the log, how it learned to treat web text as data and send one alert.
Owner Revenue: change the Kennel price in the paywall editor and preview the user Plans screen.
Owner Growth and Roadmap: run a builder badge launch, then request the v2 family kennel.

Many hackathons require code written at the event. See the Regatta Boardfor each race's rule.

Make it entirely yours

Custom work from $1,200: your own allowlist catalog and risk labels, a different agent framework or chain, branded alerts, or a team version for a treasury. Scoped on a call.

Custom from $1,200

BLUEPRINT

Why it matters and how it really works

The need

People are handing their stablecoins and trading to AI agents. Agents can be fooled by a poisoned web page or a bad prompt, and when they hold a full wallet key, one mistake can empty it. Owners need hard limits that do not depend on the agent behaving.

What exists and what is new

This already exists. Virtuals Protocol lets owners set agent wallet policies, PolicyLayer sells spending limits and allowlists for agent treasuries, and Coinbase AgentKit supports budgets, allowlists and kill switches. Research verdict: exists, low novelty. What this app adds is packaging for one non technical owner: a plain language leash setup, a single red freeze button on the phone, refused moves shown with their source, and a weekly review habit. It is a well made version of a known pattern, not a new primitive.

The data it runs on

The owner's signed policy (daily cap, allowlisted contracts, freeze rule), the session key's onchain calls and reverts, freeze and unfreeze events, and the agent's own reasoning log kept offchain in the app.

1.The mission

Let people use AI agents with their money while staying the one in charge, with limits the agent cannot argue its way past.

2.Why people can't resist it

The red button One tap on the phone pauses the agent's session key onchain. People show it to their family.

Refusals you can read Every blocked move says what the agent tried, where the idea came from and what the leash did.

Sunday walk A four minute weekly summary to sign off, with a streak. Reviewing becomes routine instead of a worry.

3.How it works for real

Owner wallet: Privy embedded wallet or a Coinbase Smart Wallet on Base as the owner account. The agent never receives this key.

Session key with policy: An ERC-4337 smart account with a session key module (for example ZeroDev or Safe modules) granting the agent a key limited to allowlisted contract addresses and a rolling 24 hour spend cap in USDC.

Freeze switch: A single owner transaction revokes or pauses the session key. Gas is sponsored by a paymaster so the button works even with zero ETH.

Agent runtime: Coinbase AgentKit or a similar framework, with a mid tier model (for example Claude Sonnet via OpenRouter) for decisions and a small model for routing. Web text is passed as quoted data, never as instructions.

Other chains: On Solana, Squads smart accounts with spending limits; on NEAR, function call access keys with an allowance. Same leash, chain native tools.

Indexer and alerts: An indexer watches the agent's calls and reverts and sends push or Telegram alerts, rate limited to one per incident.

4.Cost per use and pricing

Per move on Base: a sponsored session key call typically costs well under 5 cents in gas. A freeze transaction is similar. Model cost per decision on a mid tier is about 1 to 2 cents. Example month for one owner with 70 moves and 300 agent decisions: about $3 gas, $5 model, $2 indexing and alerts, around $10 total.

Leash $5 a month

One agent, one cap, allowlist, red button and weekly summary.

Kennel $19 a month

Up to five agents across Base, Solana and NEAR, shared family view and a second person who can press stop.

Builder API $0.002 per policy check

Agent developers add the leash to their own agents with one SDK call.

5.Growth loop

Owners show the red button to worried family members, who set one up for their own agents. Agent builders add the leash to look safer to users, and each install shows a small Leashed by badge.

6.Risks and guardrails

Policy bugs: A flaw in the session key module could let funds move. Use audited modules only, keep caps small by default, and publish the policy code.

Allowlisted protocols can fail: A leash limits where funds go, not whether those places stay safe. Say this plainly and show protocol risk next to each choice.

Prompt injection still happens: The agent can still be fooled; the leash limits the damage. Log the source of every refused idea so owners understand.

Freeze availability: If the app or paymaster is down, the owner must still be able to freeze directly from their wallet. Provide a fallback link.

Not financial advice: The app enforces the owner's limits. It does not recommend strategies or promise any yield.

7.Build order

Smart account with session key module on Base
Policy builder: cap, allowlist, freeze rule, signed by the owner
Red button with sponsored freeze transaction
AgentKit integration that calls through the session key
Indexer for calls and reverts with one alert per incident
Sunday summary with sign off and streak

8.Where this is going

Now
One owner, one agent, one leash and a red button on the phone.
Next
Shared leashes for families and small teams, where two people can stop an agent.
Later
A standard leash format that any agent framework reads, so limits travel with the owner across apps and chains.
The world it builds
Delegating money to AI becomes as ordinary and as safe as giving someone a card with a limit.

Costs and tools are estimates at the time of writing. General information only, not legal or financial advice.

OWNER PLAYBOOK

Own it, then chart your voyage

Nine routes from one vessel. Tap a port to open its chart.

Why own Agent Leash

If your AI agent's spending limits live inside someone else's platform, so does your kill switch. When you own Agent Leash, the budget, the protocol whitelist, the freeze button and the spend log run under your wallet and your brand, so you decide what your agents can touch and you can offer that same control to every agent owner in your community. The spend log becomes your record that your agents behaved.

What’s stopping you?

“I can't code. Can I set limits on an agent?”

Yes. You set a daily cap, tick the protocols the agent may use, and keep a freeze button on your phone. The build arrives deployed with session key policies already wired.

“Virtuals, PolicyLayer and AgentKit already do this. Why own one?”

Honestly, the mechanic is live elsewhere. Owning yours means one place for agents across platforms, your own brand for a community, and a spend log you control. If you only run one agent inside one platform, its built in policy may be enough.

“What if the agent finds a way around the limits?”

Limits are enforced by session key policies on the wallet, not by asking the agent nicely, so a prompt injection cannot raise the cap. Still, keep balances small, review the log weekly, and test the kill switch on day one.

“What if the kill switch fails when I need it?”

Test it before you need it: freeze, confirm a transaction fails, unfreeze. You can also revoke the session key from your main wallet directly, which works even if the app is down.

“Will people pay for this?”

Some will, mostly people who already lost money to an agent or run agents for others. Expect a niche at first. Start with your own agents and the people you know who run them.

The million-dollar ladder

Agent owners pay a monthly fee per leashed agent, and teams running agent fleets pay for a dashboard across all their agents with alerts and exportable spend logs. This is a target, not a promise.

$100

$3,750

$30,000

$85,000

First 10 users

10 agent owners you know

$10 per agent per month

Builder circles

250 agents

$15 per agent per month

Fleet plans

1,500 agents across teams

$20 per agent per month

Million-dollar run rate

4,250 agents

$20 per agent per month

Fleet dashboards priced per agent so revenue grows with each team
Templates for common agents (yield, trading, payments) that cut setup to minutes
Integrations with agent frameworks so the leash is a default, not an extra
Exportable spend logs that teams need for accounting

Illustrative stages, not a forecast. Results depend on you and the market; nothing here is guaranteed.