SafePayevery payment, sealed
session … PayPal sandbox
Layers Nemotron reasoning: on Tavily web verify: on Agent Toolkit gate: on state: durable (Supabase) Telegram approvals: on operator actions: open (demo)
Console

Write the policy, then let the agent pay.

Everything below is scoped to your session: the policy, the agents and the spend budget. The audit chain is shared and never reset; the Ledger shows your session's links by default.

Policy in plain words

Nemotron reads your words; you review every field before it applies. The model never applies anything by itself.
What the draft says

      Review the exact fields (editable JSON)

      Policy in force

        rules hash

        Custom payment intent

        SafePay's own payables agent: paste an invoice

        An agent that reads invoices and pays them, with no privileges: what it reads becomes a payment that goes through the same policy, history rules, web and reasoning checks and seal as any other agent. Nemotron reads the invoice, but every field it returns must appear in the text; an invoice that talks to the reviewer, or announces new bank details, is held for a person. Try the samples in order.

        Agentic commerce: an order through the PayPal Agent Toolkit

        The agent wants to buy something. PayPal's guidance for the Toolkit's order flow is to create the order and invoke pay only after a person approves; SafePay is that approver, made automatic: the Toolkit's create_order runs only after the guardrail says ALLOW, and the buyer-approval link the Orders flow requires stays intact. Held or blocked, the Toolkit is never called.

        Mandates: authorize a budget, capture what the task costs

        An agent booking a hotel does not know the final bill. It asks for a ceiling; SafePay judges the ceiling like any payment and, on ALLOW, authorizes it with PayPal (Orders v2, intent AUTHORIZE): nothing is charged yet. Each capture is then checked on its own (the agent that opened it, not frozen, within what is left) before PayPal is called, and carries its own seal. Closing voids the rest and gives it back to the daily cap. In the sandbox PayPal's published test card stands in for the company card.

        Agentic commerce: buy from an agent-ready store

        The shopping agent reads the live catalog of a real store made buyable by agents with AgentPOS (our open-source point of sale for AI agents), and the store quotes the cart itself. SafePay then judges the quoted total as a mandate (policy, live web check of the store, Nemotron against the task), authorizes it with PayPal and captures exactly the quote. The amount comes from the store, never from the agent. AgentPOS settles in USDC on Stellar; here the catalog and quote are the store's real ones and the rail is a PayPal sandbox mandate (1 USDC = 1 USD).

        Loading the store's catalog…