Your agent can be talked into anything.

Ligis checks every payment against what the agent was actually hired to do: right payee, right amount, in scope, plus a verified-payee credential read. GO or STOP before money moves.

Try the gate →Watch an attack stopped

Judged by Jev (TypeSafe) and Vultr Inference · measured live under/gate

Agent payments · sample trafficGate

Northwind Data$1,200Contracted payee, in budget

Try it on a live registry

live ·Monad Testnet

Gate the payment.

24 agents · Monad Testnet · block 72,603,535

Your moment

1–5 · demo updates

Moment · About to send USDC to an unknown seller for data or a job
GO
STOP unless the payee matches the job; GO when it does — with a receipt
kyc.basicRun the read →Full gate →

The gate

Agent owner·kyc.basic

Run the read.

Same call an agent makes the instant before money moves. Verdict from chain — not a Ligis server.

← change moment

Walk the branch

401

Refuse. Payment never starts.

isCapable · 1 rpc call

Sample subject pre-filled. Hit verify to read the chain.

GOproceed STOPdo not pay

Ship it

Gate your endpoint — the same read, one line into the payment path. Any client, any agent framework. The verdict header (X-Ligis-Gate-Verdict) carries the GO/STOP answer before the body parses.

curl -X POST https://ligis.vercel.app/api/gate \
  -H 'content-type: application/json' \
  -d '{
    "payee":      "0xabc…",
    "amountUsd":  4200,
    "purpose":    "pay for premium RWA data",
    "capability": "data.premium"
  }'
# → { "verdict": "GO", "signals": [...], "latencyMs": 720, ... }

embed the badge →verify a payee →

Privacy: the gate logs only an aggregate counter of which branches ran and which CTAs were clicked. No payee, amount, IP, or user agent is recorded.

Field

live registry

Fly the registry.

Zoom in — specimens. Zoom out — a map. Strangers until you check.