AI agents are already trading tokenized stocks. Nobody can prove who authorized them, or how far. Mandatary gives an agent a limited, verifiable, revocable mandate, checks every trade against it before it happens, and keeps the proof your auditor will ask for.
We never hold your funds or your keys. Your wallet stays yours.
Built on open standards, not on our own rules
The problem
"Who authorized this agent, up to how much, and can you prove it?" Today nobody can answer with evidence. So agents get deployed without controls, or not at all.
A wealth manager wants an agent to rebalance tokenized portfolios 24/7. Compliance asks who signed off, what the limits are, and what to show the SEC when it asks for books and records. There is no answer, so the agent stays off.
A trading platform receives a buy order from an agent. It has no way to know whether the agent is allowed to trade this asset, this size, at this hour, on behalf of this client. It either takes the risk or turns agents away.
A developer runs thousands of investment agents with access to tokenized stocks. No regulated venue will onboard them because he cannot prove who is behind each agent or what it was permitted to do.
Mandatary answers all three, with one mandate, one API call and one evidence trail.
One API call, under 300 ms, and you get a clear answer with the reason: allowed, denied or needs a human. Regulated tokens can ask the same question on-chain before the transfer goes through.
Write down exactly what your agent may do, in plain words: which assets, buy or sell, how much per trade and per day, on which venues, at what hours, and when a human must approve. Sign it with your wallet. It becomes a legal document and an on-chain mandate at the same time.
Every decision — allowed, denied, approved by a human, revoked — is written once, chained to the previous one and anchored on the blockchain. Anyone can check it was not altered. Export the period in the format each regulator expects, in minutes.
Register your agent on ERC-8004, verify yourself as its operator and get a signed credential and a public profile. Agents can check each other too: identity, mandate and reputation, paid per query with x402.
How it works
Mandatary runs behind the tools you already use — like a payments processor runs behind a checkout page. Your users never leave your app.
Company identity from GLEIF (LEI), the signer's authority, or the KYC your platform already did. Once.
Pick a template, set the limits in plain words, sign with your wallet. It is registered on-chain and mirrored to your agent's wallet policy.
The platform (or the token itself) asks Mandatary before executing. Allowed, denied or needs a human — with the reason, in under 300 ms.
Each decision is recorded, chained and anchored. Reports come out in the regulator's format whenever you need them.
Why now
A five-year exemption lets tokenized US stocks trade on permissioned venues — but only if they vet every participant, keep records the SEC can read, and run auditable public smart contracts. That is the job Mandatary does.
Issuers have opened hundreds of tokenized stocks to tens of thousands of AI agents. None of those agents carries a verifiable mandate today.
The EU AI Act rules for high-risk systems demand action logs and human oversight. The ERC standards for mandates and evidence are being written now; first movers set how they are used.
Clear boundaries
Trust comes from knowing where our job ends.
Pricing
Start on the pilot plan — no subscription, nothing blocked — and move to a plan when the volume justifies it. Per-mandate pricing for anyone who delegates, and a free tier for agent builders. Revoking a mandate is always free.
The same engine for everyone. Plans differ in volume and in the reports and controls each kind of customer needs.
| Feature | Pilot | Institution | Issuer | Platform |
|---|---|---|---|---|
| Included in every plan | ||||
| Mandates, verifications, evidence, alerts and approval inbox | ✓ | ✓ | ✓ | ✓ |
| Principal report in plain language | ✓ | ✓ | ✓ | ✓ |
| Volume | ||||
| Mandates included in the subscription | at list price | 25 | 100 | 1,000 |
| Verifications per month Overage USD 0.10 each — never blocked |
at list price | 25,000 | 100,000 | 1,000,000 |
| Agent profiles and fleet dashboard | 5 | 50 | 200 | 1,000 |
| Controls and reports | ||||
| Verifier console and your own platform rules | — | — | ✓ | ✓ |
| Books and records (SEC, MiCA, FCA) | — | ✓ | ✓ | ✓ |
| Annual compliance report and agent audit | — | — | — | ✓ |
| Webhooks and member keys by role | — | ✓ | ✓ | ✓ |
| White label (in development) | — | — | — | ✓ |
Verifying a trade, reporting its outcome, revoking a mandate, reading your own evidence, approving or rejecting an operation, seeing your alerts and your billing. Going over a quota is charged as overage — it never blocks a verification and never blocks a revocation.
Pilot plan: no subscription. Every mandate and verification is shown at list price so you can see exactly what a plan would cover — and nothing is ever blocked. Multi-year discounts: 15 % at two years, 20 % at three.
Free tier to register and use the MCP server · Verified agent USD 290/year · Fleet USD 990/year + USD 50 per agent.
Identity or mandate check USD 0.01 · validation or reputation USD 0.05 · paid instantly in USDC via x402, no account needed.
Integration and custom legal templates USD 10,000–25,000 · White-label module for wallets and platforms on request · 15 % / 20 % off on 2- and 3-year plans.
About
Half of Mandatary is software; the other half is legal design — the templates, the verification of who may sign, the format each regulator expects. We build both, because a mandate that engineers love but lawyers cannot defend is worth nothing.
Make it safe to let AI agents handle money: every power written down, every trade checked, every decision provable.
Become the mandate and evidence layer that regulated venues, issuers and institutions rely on wherever tokenized securities trade.
Never touch the money. Deny when in doubt. Only hashes on-chain. Same input, same decision — years later.
We implement public Ethereum standards instead of inventing our own, so nothing you sign is locked to us.
Founder · Legal & product
Data Protection Officer, MBA, Master's in Compliance. Founder of conline.cl, a compliance platform for companies in Chile. Mandatary applies the same idea — make regulation simple and provable — to AI agents that trade.
FAQ
No, never. You sign mandates with the wallet you already use (MetaMask, Coinbase, Safe…). The only key we own signs evidence, and it lives in a hardware-backed key service. The mandate is the source of truth; your wallet is the brake.
That a mandate with a given content existed, signed by a verified person with verified authority; that a specific trade was evaluated against it with a specific result; and that the evidence was not altered. We do not certify that a trade was a good idea, legal on the merits, or suitable for the investor.
No. Mandatary connects to what you use. Platforms call one API (or let their regulated token call our on-chain hook). Mandates can be mirrored into the wallet policies of MetaMask Delegation, Coinbase Agentic Wallets or ERC-8196.
The target is under 300 ms at the 95th percentile. The critical path only reads a cached mandate, runs deterministic rules and checks counters. The blockchain is never in the critical path except when the token itself calls the hook.
The answer is "denied". We deny when in doubt, always. A denied trade is also recorded as evidence, so the reason is visible later.
SEC books and records (for the tokenized-securities innovation exemption), MiCA / MiFID II transaction records, FCA (SYSC 9 / COBS) and a generic format used for Hong Kong and Singapore. Legal templates exist for the US, EU, UK, Hong Kong and Singapore.
The principal, an approver or an emergency contact presses "revoke" in the console or calls the API. Within seconds the mandate is revoked on-chain, the wallet policy is voided, the verification API starts answering "denied" for that agent and every connected platform is notified. Revocation is free and leaves a timestamped record.
Yes. Our contracts are deployed and verified on Base Sepolia, with an API and a TypeScript SDK pointed at it. Book a demo and we'll give you a sandbox key.
Tell us who you are and we'll show you, live, how a mandate is signed, how a trade is verified and what the evidence file looks like. 30 minutes, no commitment.