ALLOWANCE
Give your AI agent an allowance, not your wallet.
A spending firewall for AI agents, built on PayPal.
Replay needs no login. Run it live needs the passcode in the Devpost testing instructions. PayPal sandbox only.
Every payment gets a verdict.
Twelve deterministic rules, on every money-moving tool call.
Allow.
Paid from your saved PayPal wallet.
Step-up.
PayPal asks you first, on your phone.
Block.
Stopped, with the rule that fired.
A card your agent can’t overdraw.
Set it once. Link PayPal once. Undo anything for ten minutes.
The AI shops.
It never decides.
The guard never reads what an attacker writes. Only your task, your allowance, a trusted catalog and PayPal.
See how the Attack Lab tests itof attacks fooled the unguarded agent
got past ALLOWANCE
of normal errands falsely blocked
180 attack runs · 120 benign runs · gpt-5.4-mini · Method and raw data21% unguarded, 0% with ALLOWANCE, 0% false blocks
Built entirely on PayPal.
No new rails. Just PayPal’s own primitives.
Consent
Vault v3 payment token
Payment
Orders v2, saved wallet
Ask first
PayPal checkout on your phone
Undo
Refunds, in one click