Policy Engine
Define the rules for how agents spend, then evaluate every payment request before funds move. Conto keeps limits, categories, trust requirements, and approval rules in the transaction path.
One policy check, two execution paths
Managed wallet
Conto-orchestrated execution · Conto stays in the approved execution path
Agent requests a payment
POST /payments/requestConto evaluates policy
Human approves
Routine spend skips this step.
Conto sends the payment
After approval, Conto completes the payment through the managed wallet.
POST /payments/executeLogged with full context
tx 0x9f2c… ✓
policy · approval · settled
Agent-controlled wallet
Agent keeps its own keys · Conto authorizes, logs on confirm
Agent asks to authorize
POST /payments/approveConto evaluates policy
Human approves
Routine spend skips this step.
Agent signs with its own key
Conto returns an approval token (10 min). The agent sends the tx.
Agent confirms the hash
POST /payments/confirmtx 0x9f2c… ✓
policy · approval · settled
Same payment context, same policy evaluation, same audit trail. Execution is where the path diverges.
Policy controls built for the payment decision
Use policy primitives that evaluate spend at the moment an agent asks to move money.
Spend limits
Set per-transaction, daily, weekly, monthly, and scoped limits by agent, wallet, merchant, category, or project.
Counterparty rules
Require trusted recipients, block risky addresses, and route unknown counterparties to review.
Velocity controls
Catch broken loops, retry storms, and unexpected payment bursts before a wallet is drained.
Approval thresholds
Let routine payments clear while higher-risk requests pause for human review with full policy context.
Policy outcomes your teams can inspect
Finance, operations, and security can see which rule fired, why it fired, and what happened to the payment next.
Payment request
Rules evaluated
Routed to review
1 of 4 rules needs a human before settlement.
How policy decisions shape each payment
The engine sits between agent intent and settlement, turning configured rules into approve, deny, or route decisions.
Step 1
Configure rules
Create policies for the agent, wallet, payment rail, category, counterparty, or approval path.
Step 2
Evaluate every request
Conto checks the payment request against active policies when the agent tries to pay.
Step 3
Return a clear decision
Approved payments continue, denied requests stop, and exceptions route into approval workflows.
Demo
Watch policy checks govern every payout
Watch a dispatch agent pay drivers the moment a delivery completes. Every payout hits the policy engine first, with per-tip caps, category allowlists, and velocity limits returning approve, deny, or review before it settles.
Approval threshold
$40
Velocity limit
5 payouts/hr
Settlement rail
Tempo · pathUSD
What inline policy delivers
Agents can transact autonomously without bypassing financial controls.
Finance and security see the exact policy decision behind each payment.
Control changes happen in Conto instead of scattered runtime code.
Where runtime policy shows up
Escalation paths
Approvals for payment exceptions
Keep routine payments moving while high-value or ambiguous requests pause for human review.
ExploreVendor trust controls
Vendor and counterparty controls
Let trusted vendors clear quickly while new, changed, or risky recipients pause for review.
ExploreMicropayments
Budgets for machine payments
Cap each request and session so API, inference, and compute spend stays bounded.
Explore