Skip to content

Programmable authority / v0.1

Give agents authority.Not unlimited access.

CAPYN is the authorization control plane for autonomous agents—capabilities, hard limits, approvals and audit evidence before consequential actions execute.

Fail closedRequest-bound approvalInteger money accounting

Live authority explainer

auth_120_aws

Vendor

AWS

Amount

$120.00

Capability

spend.compute

Policy signal

seed / acme-ai

01

Identity/procurement-agent

PASS
02

Capability/spend.compute

PASS
03

Vendor/aws / approved

PASS
04

Hard ceiling/$120.00 ≤ $150.00

PASS
05

Approval/$120.00 > $100.00

REVIEW

Decision

REQUIRE_APPROVAL

Identity

Which authenticated agent is asking?

Mandate

What authority was delegated, and until when?

Policy

Do capability, vendor and spend constraints pass?

Approval

Does this exact request require a human?

Evidence

Can every decision and action be reconstructed?

Authority before execution

Agents can already pay. The missing layer is authority.

CAPYN does not replace a wallet, payment protocol or settlement network. It answers the question each of them needs answered first: may this agent perform this exact action?

CAPYNAuthority control plane

Identity

Mandate

Policy

x402SOLANA / USDCSTRIPE / AP2
The policy engine stays chain-agnostic. Execution adapters move value; they do not decide permission.

One request, one decision

A policy result an agent can act on—and a human can explain.

Each response carries a deterministic decision, machine-readable reasons and the authorization evidence needed to investigate it later.

procurement-agent

$18.00 OpenAI

capability / spend.compute

ALLOW

All delegated limits pass

procurement-agent

$30.00 UnknownVendor

capability / spend.api

DENY

VENDOR_NOT_ALLOWED

procurement-agent

$120.00 AWS

capability / spend.compute

APPROVAL

Threshold exceeded

Developer-first authority

One typed call before the agent acts.

Authenticate the agent with its own revocable key. CAPYN infers identity server-side, evaluates the active mandate, and returns the exact next step.

agent.ts typed contract
import { Capyn } from "@capyn/sdk";

const capyn = new Capyn({
  apiKey: process.env.CAPYN_API_KEY!
});

const result = await capyn.authorize({
  capability: "spend.compute",
  amount: { value: "18.00", currency: "USD" },
  vendor: { id: "openai" },
  metadata: { purpose: "Inference capacity" }
});

// result.decision → "ALLOW"

Security boundary

Deny what the system cannot prove.

Unknown agent, expired mandate, missing capability, unapproved vendor, exceeded hard limit or malformed policy: CAPYN fails closed with an explicit reason.

Complete evidence

Every consequential transition becomes an audit event.

Requests, denials, approvals, revocations and executions are recorded in an append-oriented event stream with organisation and actor context.

Start with the decision point

Give the agent a mandate, not the treasury keys.

Run the four-scenario demo locally or inspect the working control plane in the browser.