Bound the mandate
Set total ceiling, per-call cap, provider allowlist, provider caps, networks, assets, protocols, and expiry.
Payment control for autonomous agentsGive the agent a budget.
Give the agent a budget.
Keep the money governed.
Canalis turns one approved task budget into policy-controlled payments across machine-service providers. Every authorization is bounded, recorded, reconciled, and attributable to the wallet that owns the task.
Persistent wallet-scoped control planeProven Solana devnet channel lifecycleGuarded external execution until signer runtime exists
Task payment envelope$1.00 USDC example
01
AuthorizeOwner approves budget + policy
$1.00 cap02
RouteProvider calls pass policy first
≤ $0.25/call03
AccumulateOffchain cumulative authorization
$0.20 used04
Illustrative task economics. Real transaction signatures are shown only when genuine chain evidence exists.Settle + recoverPay actual usage; return remainder
$0.80 backWhy this exists
Autonomy should not mean giving software an unbounded wallet.
Machine workflows can trigger many small paid calls. Canalis keeps those calls fast while preserving a financial mandate the agent cannot silently expand.
Authorize before fulfillment
A paid provider flow is checked against the task policy before Canalis accepts the resulting work and receipt.
Settle only actual usage
Cumulative authorization can be finalized through the Solana payment-channel boundary while unused capacity remains attributable to payer recovery.
Product surface
A control plane for the full payment lifecycle.
Reusable spending rules
Versioned policies and task snapshots keep caps, providers, assets, networks, and protocols explicit.
Policies →Provider registry
Configure deterministic, x402, and MPP providers with health, pricing, credentials, and runtime-readiness checks.
Providers →Receipts + transactions
Trace offchain authorization, response hashes, settlement signatures, distribution, and payer recovery in one audit view.
Transactions →Guided recovery
Provider incidents, ambiguous finalization, recoverable escrow, and settlement failures surface with safe next actions.
Activity →Real Solana devnet evidence
The payment-channel primitive is proven without fabricated signatures.
The committed proof opens a channel with a 100,000-unit ceiling, settles 30,000 units to the provider, and returns the remaining 70,000 units to the payer. These are devnet proof values—not a claim that every configured external provider is autonomously executable today.
Channel ceiling100,000
Provider settlement30,000
Returned to payer70,000
NetworkSolana devnet
Runtime truth
Canalis separates configuration from execution capability.
Wallet-scoped tasks, policies, providers, analytics, receipts, activity, recovery, deterministic execution, and the proven devnet payment-channel path.
External x402 and MPP endpoints can be registered and protocol-health-checked without code changes.
External autonomous spending and mainnet task creation remain blocked until an appropriate non-custodial signer/session runtime is connected.
Start with the mandate