For agents.

Live today

Check before you trust.

Before your agent funds, pays or relies on another agent, it reads that agent's wallet. One GET, no key. The answer says what a cosigner with a default policy would have held, and why.

1. 01

   Call

   Send the wallet address the other agent signs with. Mainnet only.

   GET /api/wallet-check?address=<wallet>
2. 02

   Read

   score from 0 to 100, verdict, would_hold and the deductions behind the score.

   check.verdict · check.would_hold
3. 03

   Act on the verdict

   • 80+

     looks disciplined: go on, inside your mandate.

   • 50+

     needs a cosigner: only with a person's approval, or a small amount.

   • <50

     would be held: stop and report would_hold to your owner.

// Before you fund or pay another agent: read its wallet. Free in beta, no key.
const res = await fetch(`https://www.rollcage.tech/api/wallet-check?address=${wallet}`);
const check = await res.json();
if (!res.ok) throw new Error(check.error);
if (check.verdict === 'would be held') {
  // Stop. Report what a cosigner would have held.
  await notifyOwner(check.would_hold.map((h) => `${h.what}: ${h.why}`).join('\n'));
} else if (check.verdict === 'needs a cosigner') {
  // Ask a person, or keep the amount small.
}

Rules for the agent

Call it today

Plain HTTP.

Use the HTTP API today (curl / fetch); the MCP server and skill package ship when the API leaves beta.

• curl

  Any mainnet wallet address. The answer is JSON.

  curl "https://www.rollcage.tech/api/wallet-check?address=<wallet>"Copy

• fetch

  From an agent, a server or a browser: the API answers with CORS headers.

  const check = await fetch('https://www.rollcage.tech/api/wallet-check?address=' + wallet).then((r) => r.json());Copy

• Skill file

  For any agent that reads SKILL.md: when to run the check and how to read it. Read it.

  https://www.rollcage.tech/agents/SKILL.mdCopy

• OpenAPI

  The live endpoint, with the planned ones kept apart. Read it.

  https://www.rollcage.tech/agents/openapi.yamlCopy

Planned · private beta

The cosign loop.

The plan for agents that hold funds: send every transaction to POST /api/cosign before you broadcast it, and broadcast only what comes back allow. The cosigner assumes you may be fooled: it checks the transaction, not your reasoning. Not live yet.

1. 01

   Build and sign

   Build the transaction as usual and sign it with the agent key. Don't broadcast it.

   tx_b64 = base64(signed_tx)
2. 02

   Ask for a co-signature

   Rollcage simulates it, checks your policy and the mandate. Planned: 0.001 USDC. Target: p95 under 300 ms.

   POST /api/cosign
3. 03

   Act on the decision

   • Allow

     Broadcast cosigned_tx as is. It carries Rollcage's signature.

   • Hold

     Wait for the owner. Report reason and hold_id.

   • Block

     Final. Report reason to the owner.

{"decision":"hold",
 "reason":"mandate mismatch: outbound transfer to a never-seen address, 92% of balance",
 "checks":{"simulate":"pass","policy":"pass","mandate":"fail"},
 "latency_ms":186,"cosigned_tx":null,"hold_id":"h_7f2a"}

Planned · private beta

Crash tests and certificates.

The plan for agents that evaluate agents: crash-test the other agent and read the score; if it says it's certified, look the certificate up. Not live yet. Until then, the wallet check is the evidence you can get today.

Prices

Free in beta.

Beta: calls are free; the x402 flow is the planned paid tier and is not enforced. The prices below are the planned ones, in USDC on Solana.

Planned · payment

Pay with x402.

Beta: calls are free; the x402 flow is the planned paid tier and is not enforced. Once billing opens: ask, get the price, pay it, ask again. No account and no key.

$ curl -i -X POST https://www.rollcage.tech/api/cosign \
    -H 'content-type: application/json' \
    -d '{"transaction_b64":"<base64 tx>","agent_id":"<agent>"}'

HTTP/1.1 402 Payment Required
PAYMENT-REQUIRED: {"scheme":"exact",
  "network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
  "asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","amount":"1000",
  "payTo":"<address>","resource":"https://www.rollcage.tech/api/cosign"}

$ curl -i -X POST https://www.rollcage.tech/api/cosign \
    -H 'content-type: application/json' \
    -H 'X-PAYMENT: <signed USDC transfer, base64>' \
    -d '{"transaction_b64":"<base64 tx>","agent_id":"<agent>"}'

HTTP/1.1 200 OK
X-PAYMENT-RESPONSE: <settlement tx signature>
{"decision":"hold",
 "reason":"mandate mismatch: outbound transfer to a never-seen address, 92% of balance",
 "checks":{"simulate":"pass","policy":"pass","mandate":"fail"},
 "cosigned_tx":null,"hold_id":"<id>"}

Machine-readable

Files for agents.

Static files, served from this site. Point your agent at any of them.

• llms.txtIndex for language models: what is live, what is planned, links.
• agents/SKILL.mdPortable skill: when to run the check, how to read it, live and planned calls.
• agents/openapi.yamlOpenAPI 3.1: the live endpoint, and the planned ones under x-planned.
• agents/mcp.jsonMCP card: the planned tools. The MCP server is not published yet.
• security.htmlWhat runs today, and how the cosigner is designed.