Claw-in-a-Box
Live on x402 Bazaar · OKX.AI

Your agent asks
before it spends.

An authorization layer for AI agents. Every spend gets an allow / review / deny verdict — with per-agent accounting, human approval on Telegram, and delegatable capability tokens for when your agent hires other agents.

$0.01 per call x402 · Base + X Layer no SDK required
live — this calls the real API

Try 30 (allow), 150 (review), 999 (deny) — or split a big spend into small ones and watch the daily total catch it. This demo hits the free route; the paid routes (OKX.AI & x402 Bazaar) run the same engine.

Not a replacement for your wallet limits — a layer above them

Wallet layer "How much can this wallet spend?" — protocol-enforced caps and allowlists on the key itself. Your last line of defense.
Claw-in-a-Box "Which agent, under what authority, and should a human look first?" — per-agent accounting (one wallet, many agents — you find out which one is spending), policy verdicts with the exact rules that fired, human approval in the loop, and scoped credentials for sub-agents.
Together Defense in depth. Set a hard ceiling at the wallet, and do the thinking at the authorization layer.

Three things it does

Verdicts, not guesses

Send the intended action, get allow, review or deny back — plus the exact rules that fired. Per-transaction caps, daily totals, destination allowlists, time windows.

POST /paid/v1/guard/check
→ {"verdict":"review", ...}

Your phone, your call

A review verdict pings a human on Telegram with Approve / Deny buttons. Bind your own chat and your agent's reviews come to you — measured end-to-end at under four seconds.

POST /v1/operators/register
→ /bind CODE in Telegram

Agents hiring agents

Hand a sub-agent a narrower, shorter-lived token instead of your credentials. Escalation is refused cryptographically; revoke the root and the whole delegation tree dies at once.

POST /v1/tokens/delegate
POST /v1/tokens/revoke

Claim an agent id, keep the secret

Pay-to-Claim One paid call anchors an agent id to the settlement wallet. Call POST /paid/v1/agents/claim (or the /paid-okx mirror). The returned agent_secret is shown once; only its hash is stored.
Authenticate Send the secret only in X-Agent-Secret when rotating it or registering the claimed agent's Telegram operator. Strict agents also require the header for guard checks on free and paid rails.
Bind execution Add "bind":true to a guard call for a short-lived, one-shot verdict_id, then consume it at POST /v1/verdicts/{id}/consume before executing.

How to call it

  1. Discover. Point your agent at /skill.md — it describes every endpoint in plain English. No SDK, no glue code.
  2. Pay per call. Hit the paid route without payment and you get an HTTP 402 with x402 payment requirements — USDC on Base (/paid/*, x402 Bazaar) or USDT0 on X Layer (/paid-okx/*, OKX.AI) — $0.01 per call. Sign, retry with the payment header, get your verdict.
  3. Bind your Telegram (optional but recommended). Register your agent_id, send /bind CODE to the bot, and every review for that agent lands on your phone instead of the operator's.
  4. Block or poll. Pass "wait": true to hold the call until a human decides, or poll /v1/approvals/{id} and get on with other work.
# the whole integration, start to finish
curl -X POST https://api.clawinabox.xyz/paid/v1/guard/check \
  -H "Content-Type: application/json" \
  -H "PAYMENT-SIGNATURE: <your x402 payment>" \
  -d '{"agent_id":"my-bot","amount":150,"wait":true}'

# → a human taps Approve on their phone, and you get:
{"verdict":"allow", "approval_status":"approved", ...}