Give your local agent a Bitcoin balance with hard spending caps it can't exceed — even under prompt injection

Reddit r/AI_Agents Tools

Summary

An open-source tool that enables AI agents to make Bitcoin Lightning payments with hard spending caps enforced server-side, preventing abuse even under prompt injection. Includes an MCP server for Claude Desktop/Cursor integration and Python/TypeScript SDKs.

I built an open-source way for an AI agent to make real payments (Bitcoin over Lightning) with spending limits enforced in code, not vibes. The agent gets a scoped API key and a virtual balance with a hard policy: per-transaction / daily caps, rate limit, destination allowlist. The limits are enforced server-side before anything moves — so even a jailbroken or prompt-injected agent can't spend more than you allowed, or pay anyone you didn't allowlist. The agent never holds a signing key. There's an MCP server, so Claude Desktop / Cursor can pay directly as a tool call, plus Python + TypeScript SDKs. Self-hosted, MIT-licensed, runs on your own node. pip install conduit-btc Curious what this community thinks about the trust model for agents touching money. Code:
Original Article

Similar Articles

Where do you enforce spend or position limits for an agent that can hit a real API: the prompt, the tool schema, or the account? Notes from watching 10 trading agents on paper money.

Reddit r/AI_Agents

The author shares observations from a paper-trading arena with 10 AI agents trading fake money, discussing design considerations for enforcing spend or position limits when agents interact with real APIs, highlighting limitations of prompt-based checks and advocating for deterministic account-level controls.

Would you give an AI agent a $200 spending limit?

Reddit r/AI_Agents

Discusses the idea of giving AI agents a small, locked-down budget (e.g., $200) for routine business expenses like software trials, drawing a parallel to giving a junior employee a limited corporate card.