VeytoConcepts
Five things. That is the whole model.
Agent
An identity that spends. It has a name, a public payer address, a spending policy, and
a status (active or frozen). Agents belong to your account and are invisible to anyone
else's.
Wallet — you keep the key
Veyto is non-custodial. You hold your wallet's private key; Veyto holds your public address. When a payment is approved, Veyto hands back unsigned EIP-3009 material and your process signs it.
This is not a configuration option. There is no route that accepts a private key, and the hosted service could not sign for you if you asked it to.
Guardrails
The rules a payment is checked against, before any money moves:
| control | meaning |
|---|---|
cap_per_payment_minor | the most any single payment may be |
cap_per_day_minor | the most that may leave in a day |
velocity_max_per_hour | how many payments per hour |
Plus freeze — a kill switch that stops the spend path immediately.
Budget is reserved, not merely checked: a hundred concurrent requests against one budget approve exactly as many as fit.
Blocked
A payment that a guardrail stopped. It is a successful outcome — see Blocked.
Receipt
Signed evidence that a payment happened, and under which rules. Verifiable by anyone, without trusting the API that served it. See Receipts.