tpay is a wallet your agent holds and spends on its own. It keeps a Sui keypair in your OS keychain, enforces the limits you set, and turns any x402 paywall into a transparent retry — no human at the checkout.
What you get
Made for agents
Your agent holds the wallet and pays on its own. No human in the loop, no API keys to manage.
Rules it can't break
Set the limits. The wallet enforces them on every spend, and asks for your approval before signing.
Gasless on Sui
Pay in Sui stablecoins. The facilitator sponsors gas, so every payment costs only the price of the call.
Pay across chains
Pay in Sui — settle on the destination chain. One wallet for every service your agent uses.
Two ways to use it
tpay meets your agent wherever it runs:
- As a CLI —
tpay curlis a drop-in forcurl. It forwards every flag, and when a server replies402 Payment Requiredit settles the payment and retries the request automatically. Wire it into any agent that can run a shell command. - As an MCP server —
tpay mcpexposes the active wallet to agents over the Model Context Protocol with two tools:payandget_balance. Usetpay claudeto launch Claude with the wallet already connected. See Agents.
Approval and key storage
The secret key lives in your operating system’s keychain, never in a plaintext file. Before any payment is signed,tpay asks you to approve it — on macOS that’s a Touch ID prompt. An agent can request a payment, but it settles only after you authorize it.
tpay ships prebuilt binaries for macOS (Apple Silicon and Intel) and Linux (x64 and arm64). Secure keychain storage with biometric approval is available on macOS today.Next steps
Get started
Install
tpay, create a wallet, and make your first payment.Connect an agent
Expose the wallet to Claude and other MCP clients.