Agent Clearing Desk

Budgets, allowlists and signed receipts for every tool call an AI agent makes.

Watch one agent key hit every rule

The demo mints a real sandbox key with a 2 cent budget and a 2-tool allowlist, then makes 7 real calls against this Worker. Each call shows its request, status, x-clearing-* headers and latency. Nothing on this page is mocked.

Takes about 10 to 40 seconds. Upstream tools are live.

    Agent call simulator

    Call any governed tool with the current sandbox key, the way an agent would. Tools off the allowlist are refused with a signed receipt and charge 0.

    The response, status and x-clearing-* headers show here.

    Connect an agent over MCP

    Streamable HTTP, stateless JSON-RPC. The same allowlist, budget and Ed25519 signature apply to every tools/call.

    Endpoint
    Header
    x-api-key: cd_live_...
    Public key
    /.well-known/receipt-signing-key.json
    Client config