caps beat willpower. authorize once, then let the agent move money inside rules you can see.
agent mark
passkeys before charges.
mandates with hard caps.
pause that actually stops spend.
An agent that can buy airtime or pay a bill is only useful if it cannot surprise you. Munchkins treats spend as a signed permission, not a chat suggestion.
Consent first. Then autonomy. Face ID unlocks a mandate. The mandate names the ceiling.
Daily limits, per trade limits, and pause live above every tool call. If the agent would exceed them, the charge does not leave.
Login is identity. Passkey is spend. Mixing those is how silent money happens.
Ghana MoMo first. Airtime, DSTV, ECG, Jumia links, food discovery. The agent speaks the rails people already use, then settles where configured on chain.
External checkout stays external. A buy link is not an order until the merchant confirms it.
AP2 style mandates encode intent. x402 settles pay per call. MCP hosts the tools. Sub0 sessions keep short lived keys inside caps.
We integrate what we can prove in product, not what looks good on a slide.
Every move that touches balance should show up as a confirm, a receipt, or a clear failure. No background top ups. No “the agent handled it” without a trail.
Ask waits for your yes. Assist and auto can start passkey when a confirm is required, but nothing debits without that gate.
Pause revokes active sessions. Resume does not invent new ones behind your back.
Agents are useful between taps: watching a price, quoting a bill, opening the right checkout. The work is boring money done carefully, not spectacle.
That is the frontier we care about.