Give an AI agent a wallet and three attacks immediately become possible: • Redirect the payment • Inflate the payment • Replay the payment Conduit eliminates all three onchain. Conduit is a custom x402 facilitator that extends the @MetaMaskDev Delegation Framework with a custom caveat we built: X402ReceiptEnforcer and other enforcers Instead of granting an agent broad spending authority, every payment authorization is cryptographically bound to a single x402 receipt: → token → recipient → amount → intent When the agent attempts to settle payment through ERC-7710 on a MetaMask Smart Account, the delegation is validated inside "redeemDelegations()" before execution. If the agent deviates from what was authorized: → Redirect payment → recipient mismatch → revert → Overspend payment → amount exceeds authorization → revert → Replay payment → intent already consumed (IdEnforcer) → revert The result is a security layer for agentic commerce where permissions are not merely granted, they are constrained. No app-layer validation. No trusted facilitator assumptions. No offchain enforcement. The rules live inside the delegation itself and are enforced by the EVM. An agent can only execute the exact payment it was authorized to make or nothing at all Built for the @MetaMaskDev Cook-Off using @MetaMask Smart Accounts, ERC-7710 Delegation Framework, gas sponsorship through @1shotapi , and @AskVenice AI-powered agents. #x402 #aiagents #erc7710 #buildinpublic #metamaskdev #osobotai #hackathon

RT @MetaMaskDev: The @MetaMask Smart Accounts Kit Cook-Off has wrapped - 321 builders, 142 submissions, and our highest project count acros…

We will be there 💯💯

Final day of the @MetaMaskDev x @1shotapi x @AskVenice Cook-Off. 🚀 Conduit wouldn't exist without the primitives that made it possible. 🦊 @MetaMask 's advanced permissions and smart accounts let users authorize once and enforce exactly what AI agents can and cannot do. @AskVenice handles reasoning and planning. @1shotapi powers the execution layer. The result? A team of AI agents that can collaborate, hire one another, and complete tasks without ever exceeding the boundaries defined by the user. #MetaMaskDevCookOff #x402 #aiagent #hackathon

Final day of the @MetaMaskDev × @1shotapi × @AskVenice hackathon. We built Conduit- a custom x402 facilitator that lets you pay AI agents you don't have to trust. One signature, a whole team of agents, settled in one transaction and a compromised agent still can't misuse a cent. Live on Base mainnet. 🛠️ #1shotapi #x402 #agents #aiagents

Final lapse of the @MetaMaskDev × @1shotapi × @AskVenice hackathon- so I took a stroll and put ConduitPay through its paces from my phone. Signed in with a passkey. Subscribed to DeFi Yield Weekly to know the best venue for my USDC — charged + delivered instantly (webhook from @1shotapi, no polling). Then I deposited: granted a USDC budget and authorized the exact yield venues my money is allowed to touch. The scout agent — powered by @AskVenice — picked the best one and handed off to a trade agent that can deposit only into the venues I authorized, nothing else. The coordinator assigned the agents, and @MetaMaskDev's Delegation Framework + @1shotapi's permissionless relayer settled them all in one tx, one fee — no matter how many agents. One signature. N agents. My USDC, my rules, enforced on-chain. This is ConduitPay.

Locked in building on @MetaMask 🔥🔥🔥💯

The most interesting part isn't that an agent can pay. It's that users can safely delegate what an agent is allowed to pay for. That's the problem we're tackling with Conduit using @MetaMaskDev Smart Accounts, EIP-7710, and x402. 🚀