Human-to-Agent Payments

🦞 Claw Cash

Stablecoins in. Bitcoin out.
Money agents can trust, and verify.

$ npx clw-cash init
Agent Skill (SKILL.md)

The Trust Issue

An autonomous agent can receive money. But can it verify what it's holding?

Fiat Currency

Value derived from institutional trust, government policy, and economic sentiment. None of this is independently verifiable by code. An agent consuming fiat data is trusting its context window.

External Data

Exchange rates, inflation data, economic reports. All inputs an agent can consume but never independently verify. The context window is the attack surface.

Bitcoin

21 million cap. Enforced by math. Every block header is cryptographically linked. An agent can verify the chain with code—no trust required.

Verifiable Money

Block headers, Merkle proofs, digital signatures—all verifiable with CLI tools and programming languages. The agent can check the math itself.

How It Works

Humans pay in the currency they know. Agents convert to the currency they can verify.

01

Human pays in stablecoins

USDC, USDT—whatever's convenient. Sent on Polygon, Arbitrum, or Ethereum. Familiar rails, instant settlement.

02

Agent converts to Bitcoin

Automatic swap via Claw Cash. The agent now holds money with a supply it can mathematically verify—21 million, forever.

03

Settle on Bitcoin

Accept payments via Lightning or onchain. Internally, agents hold VTXOs on Arkade—instant transfers, minimal fees, no block confirmations. The fast lane for machine-to-machine payments.

terminal
# Receive USDT from a human on Polygon cash receive --amount 10 --currency usdt --where polygon # Check your balance (BTC + stables) cash balance # Pay another agent via Arkade cash send --amount 50000 --currency sats --where arkade --to ark1q... # Pay a human via Lightning cash send lnbc500n1...

Identity for Agents

Private keys live in a hardware-isolated enclave. Agents authenticate with the method that fits their environment. One identity, any auth provider.

🔐 AWS Nitro Enclave

ISOLATION

Nitro Enclaves use a dedicated CPU and memory partition, fully isolated from the parent EC2 instance. There is no SSH, no shell, no way for an operator to inspect the enclave at runtime. The hypervisor enforces the boundary at the hardware level.

📜 Attestation

VERIFICATION

Every enclave boot produces a cryptographic attestation document signed by the Nitro hypervisor. It includes PCR values — hashes of the enclave image. Clients can verify they're talking to the exact code they expect, not a modified version.

// Key Custody

secp256k1 keys generated inside the enclave, never leave. No persistent storage — encrypted key material only decryptable inside via KMS with attestation-based policies.

// Signing

The CLI sends unsigned transaction data over an attested TLS channel. The enclave signs and returns the signature. The private key is never exposed.

// Full Isolation

No disk, no external network interface. All communication goes through a vsock channel to the parent instance. The hypervisor enforces the boundary at the hardware level.

Authentication

Challenge-callback auth. No passwords, no API keys on disk. The enclave verifies the auth provider's signature directly.

🎫 Challenge-Callback

HOW IT WORKS

Login starts a challenge. The auth provider (Telegram, Slack, etc.) delivers a callback with a signed token. The enclave verifies the signature, issues a session JWT, and the agent is authenticated.

🤖 Bot Sessions

PROGRAMMATIC

For Telegram bots, a shared API key authenticates the bot itself. Each end-user gets their own enclave-backed identity via per-user sessions. No user-facing auth flow needed.

Auth methods
Telegram LIVE
💬 Slack SOON
🔑 Google SOON
🗝 1Password SOON
🛡 YubiKey SOON
🔏 Passkeys SOON

The Privy of agents. Plug any auth provider. Same enclave-backed identity underneath.

Agents That Earn.
Agents That Spend.

Agents need money to operate. Claw Cash gives them a wallet they can actually use.
Works with OpenClaw, Claude Code, or any agent harness.

🤖 Pay Other Agents

Agents hire other agents. Data, code reviews, web scrapes—instant micropayments between machines via Arkade.

💰 Earn Revenue

Your agent offers a service and gets paid by humans in stablecoins. It converts to Bitcoin and holds verifiable money.

🧠 Pay for Inference

Pay your own intelligence. Agents spend sats to call LLMs, run models, and buy compute—paying for the thinking they need, on demand.

Roadmap

What we're building, in order.

NOW

MCP Server

Tool-use integration for Claude Code and Claude Desktop. Your agent calls wallet functions directly as MCP tools.

x402 Client Support

cash pay <url> command. Detect 402 Payment Required, auto-swap BTC to stablecoins, retry with proof. Blocked on x402 facilitators outside USDC on Base.

Spending Policies

Per-agent limits, allowlists, time-based rules. Control how much an agent can spend and where, enforced at the enclave level.

More Auth Providers

Slack, Google, 1Password, YubiKey, Passkeys. Same enclave identity, any auth method your agent environment supports.

LATER

Webhook Notifications

Get notified when transactions complete, swaps settle, or balances change. Push events to your agent's event loop.

Verifiable by Code

An LLM doesn't need to trust. It needs to verify. Bitcoin is the only money where every claim can be checked with a CLI.

// Fixed Supply

21 million coins. Not a policy decision—a consensus rule. The agent can read the code and verify.

// Block Headers

Each header commits to the previous via SHA-256. The chain's integrity is math, not trust.

// Merkle Proofs

Prove a transaction exists without downloading the full blockchain. Lightweight verification for agents.

// Digital Signatures

Every transaction is cryptographically signed. The agent can verify ownership with secp256k1.

// Open Source

bitcoin-cli, btcd, rust-bitcoin—dozens of implementations. The agent can pick its own tools.

// No Counterparty

No bank, no Fed, no API to trust. Just math and a peer-to-peer network the agent can query directly.

"Fiat currency requires faith. Bitcoin requires only computation. For an autonomous agent, the choice is obvious—trust what you can verify."

FAQ

Why Bitcoin instead of stablecoins?
Stablecoins depend on issuers, bank accounts, and regulatory decisions an agent can't verify. Bitcoin's 21 million supply cap is enforced by code. An agent can independently verify every block header, every transaction, every signature. For autonomous software, verifiable beats convenient.
Is x402 payment supported?
Not yet. x402 is on the roadmap but blocked on the lack of x402 facilitators outside USDC on Base (which LendaSwap doesn't support). Once facilitators expand to Polygon, Arbitrum, or Ethereum, Claw Cash will support cash pay <url> with automatic BTC→stablecoin swaps.
Where are the private keys stored?
Inside an AWS Nitro Enclave — a hardware-isolated VM with no persistent storage, no shell access. Keys are generated and sealed inside the enclave boundary and never leave it. The CLI communicates with the enclave over an attested TLS channel.
What currencies and networks are supported?
Bitcoin on-chain, Lightning, and Arkade (instant off-chain). For stablecoins: USDC and USDT on Polygon, Arbitrum, and Ethereum. The agent holds BTC and swaps to stablecoins on demand via LendaSwap and Boltz.
Can my Telegram bot use this?
Yes. Claw Cash acts as a factory bot — your Telegram bot authenticates with a shared API key and gets per-user sessions via POST /v1/auth/bot-session. Each Telegram user gets their own enclave-backed identity. No user-facing auth flow needed.
How fast are agent-to-agent payments?
Instant. Agents hold VTXOs on Arkade, so transfers between agents settle immediately with minimal fees — no block confirmations needed. Lightning payments are also near-instant for paying external services.

Your Agent Deserves
Verifiable Money

One CLI. Bitcoin + stablecoins. Built for machines.

$ npx clw-cash init