WAD

Security

You authenticate with a passkey. You can freeze an agent. The MCP token is a secret.

Your passkey

The owner signs in and approves spend with a passkey. There is no shared console login secret.

Freeze

Freeze spending takes effect when the server confirms the state change. New payment requests from that agent stop. The console never claims an agent is frozen before that response.

The MCP token

The token the console prints after pairing is a bearer credential — treat it like a password. Anyone who has it can request spend until you freeze or revoke the agent.

Sandbox vs live

Sandbox uses a ledger rail. No real USDC moves. The live pilot holds real USDC on Base for invited users. Transfers on Base cannot be reversed.