Give an AI agent a wallet and three attacks immediately become possible:
• Redirect the payment
• Inflate the payment
• Replay the payment
Conduit eliminates all three onchain.
Conduit is a custom x402 facilitator that extends the @MetaMaskDev Delegation Framework with a custom caveat we built: X402ReceiptEnforcer and other enforcers
Instead of granting an agent broad spending authority, every payment authorization is cryptographically bound to a single x402 receipt:
→ token
→ recipient
→ amount
→ intent
When the agent attempts to settle payment through ERC-7710 on a MetaMask Smart Account, the delegation is validated inside "redeemDelegations()" before execution.
If the agent deviates from what was authorized:
→ Redirect payment → recipient mismatch → revert
→ Overspend payment → amount exceeds authorization → revert
→ Replay payment → intent already consumed (IdEnforcer) → revert
The result is a security layer for agentic commerce where permissions are not merely granted, they are constrained.
No app-layer validation.
No trusted facilitator assumptions.
No offchain enforcement.
The rules live inside the delegation itself and are enforced by the EVM.
An agent can only execute the exact payment it was authorized to make or nothing at all
Built for the @MetaMaskDev Cook-Off using @MetaMask Smart Accounts, ERC-7710 Delegation Framework, gas sponsorship through @1shotapi , and @AskVenice AI-powered agents.
#x402 #aiagents #erc7710 #buildinpublic #metamaskdev #osobotai #hackathon
The results are in...👀
Meet the winners of the @MetaMask Smart Accounts Kit Cook-Off with @AskVenice and @1shotapi.
Thank you to every builder who shipped next-level agentic onchain experiences.
Check out the winning projects 👇 https://t.co/cZH9OHExa3
Ready to build automations using @MetaMask Agent Wallet? 🦊
Join us tomorrow for a workshop where we'll walk through Agent Wallet, explore the possibilities, and build a few automations together.
📅 6/25
⏰12:30pm ET
Live on X.
Join us on Tuesday for a live coding session where we'll build a dapp using the @MetaMask Smart Accounts Kit. 🦊
We'll vibe code through the integration, explore key Smart Accounts Kit features, and show how to quickly add programmable accounts to your app.
📅 Tuesday, June 23
⏰ 12:00 PM ET
Live on X.
Final day of the @MetaMaskDev x @1shotapi x @AskVenice Cook-Off. 🚀
Conduit wouldn't exist without the primitives that made it possible.
🦊 @MetaMask 's advanced permissions and smart accounts let users authorize once and enforce exactly what AI agents can and cannot do.
@AskVenice handles reasoning and planning.
@1shotapi powers the execution layer.
The result? A team of AI agents that can collaborate, hire one another, and complete tasks without ever exceeding the boundaries defined by the user.
#MetaMaskDevCookOff #x402 #aiagent #hackathon
Final day of the @MetaMaskDev × @1shotapi × @AskVenice hackathon.
We built Conduit- a custom x402 facilitator that lets you pay AI agents you don't have to trust. One signature, a whole team of agents, settled in one transaction and a compromised agent still can't misuse a cent.
Live on Base mainnet. 🛠️
#1shotapi #x402 #agents #aiagents
Final lapse of the @MetaMaskDev × @1shotapi × @AskVenice hackathon- so I took a stroll and put ConduitPay through its paces from my phone.
Signed in with a passkey. Subscribed to DeFi Yield Weekly to know the best venue for my USDC — charged + delivered instantly (webhook from @1shotapi, no polling).
Then I deposited: granted a USDC budget and authorized the exact yield venues my money is allowed to touch. The scout agent — powered by @AskVenice — picked the best one and handed off to a trade agent that can deposit only into the venues I authorized, nothing else.
The coordinator assigned the agents, and @MetaMaskDev's Delegation Framework + @1shotapi's permissionless relayer settled them all in one tx, one fee — no matter how many agents.
One signature. N agents. My USDC, my rules, enforced on-chain.
This is ConduitPay.
@ecoswarmai @MetaMaskDev@MetaMaskDev provides the delegation primitives. Conduit composes them into multi-agent workflows with domain-specific enforcers, intent binding, and settlement through @1shotapi so users can safely delegate complex tasks in one flow.
A custom on-chain caveat that bounds exactly what your AI agent can do.
Conduit is a custom x402 facilitator with a family of safety enforcers on @MetaMaskDev Delegation Framework. You authorize from an embedded wallet; the rule lives on-chain.
👆 the SwapAllowlist enforcer.
Authorize a set — yield venues or tokens or whatever. Your coordinator agent discovers and hires the best, paying each through erc7710.
Any agent that strays — wrong token, wrong recipient, over budget — Conduit's enforcer reverts it on-chain. It literally can't.
Token-gated features without a separate auth system.
MetaMask Embedded Wallets v11 ships RBAC out of the box — gate by email, wallet address, domain, or token holdings.
Closed betas, loyalty programs, allowlists. All from the dashboard.