Bursar

Bursar gives an AI agent money of its own and limits it cannot break. Endow an agent once: the principal stays invested in listed US stocks on Robinhood Chain, anyone can add to it, and the agent spends a yearly draw. That spending runs through a mandate, a contract that sets how much the agent may pay per call, per day and per month, which providers it may pay, and the amount above which a person has to approve. A payment outside those limits fails on chain, whatever any service in front of it says.

The agent pays in USDG over x402, the HTTP payment standard. Each payment waits in escrow until the job is delivered and can be disputed until then.

• Endowments. Endow any ERC-8004 agent on Robinhood Chain, Base or Ethereum. An agent that sells over x402 on Base has what it earns paid into its endowment.
• Console. Create and fund a mandate, set its limits, approve larger payments, see what your agents spent, and dispute a job that came back wrong.
• Contracts on Robinhood Chain mainnet (chain 4663), settling in USDG. Every address is listed in the bursar repository.
• Payments beyond Robinhood Chain. A mandate pays x402 services on Base in USDC, and Bursar supports the Machine Payments Protocol from Stripe and Tempo.
• Agents and assistants. An MCP server, hosted at mcp.bursar.world for ChatGPT, Claude and Gemini, packages for Coinbase AgentKit, LangChain, the OpenAI Agents SDK and the Vercel AI SDK, and a skill for OpenClaw.
• Providers. A Cloudflare Worker charges agents with one import. A route that also takes USDC on Base through Coinbase is indexed in the Bazaar behind Agentic.Market.
• Stocks and treasury. A mandate can buy listed stock tokens at a price checked against Chainlink feeds, keep idle USDG in a short-term Treasury fund (SGOV), and draw USDG credit against stock tokens pledged as collateral.
• Private mandates. A mandate's terms can stay off the public record, with a zero-knowledge proof that each payment fits them. Funding and payments can go through a shielded USDG pool, and you choose who may read your records.
• Stats. What agents have paid through Bursar, read live from the contracts.
• $BURSAR. Bursar's token on Robinhood Chain, 0xe4d2422ed4d203a0f1ec2043a4db1eda426fca18. It trades on Pons.
• Documentation and the product site at bursar.world.

The contracts hold real funds and have not had an external audit. They run with low limits: a provider with no history can be paid at most 25 USDG per job, rising with its record to at most 250 USDG. Size what you fund accordingly.

flowchart TB
  subgraph users["People and agents"]
    direction LR
    P["Principal wallet"]
    C["Console<br/>app.bursar.world"]
    A["Agent<br/>SDK or MCP server"]
  end

  subgraph offchain["Services"]
    direction LR
    F["Facilitator<br/>x402 payments"]
    U["Underwriter<br/>spend checks"]
    R["Resolver service<br/>dispute votes"]
    S["Provider sidecar<br/>runs on the provider"]
  end

  subgraph chain["Robinhood Chain, chain 4663"]
    subgraph mandates["Mandates"]
      MF["MandateAccountFactory"]
      MA["MandateAccount"]
      CM["Committed mandates<br/>and proof verifier"]
    end
    subgraph endow["Endowments"]
      EF["EndowmentFactory<br/>and RemoteIdentity"]
      EN["Endowment"]
    end
    subgraph settle["Settlement and trust"]
      E["Escrow"]
      OR["OracleRegistry"]
      AR["AgentRegistry"]
      REP["Reputation"]
    end
    subgraph rwa["Stocks, treasury and credit"]
      RG["AssetRegistry, PriceGuard<br/>and StockSpendRouter"]
      TP["TreasuryPark"]
      CV["CollateralVault<br/>and CreditPool"]
    end
    subgraph privacy["Privacy"]
      DR["DisclosureRegistry"]
      SL["SolvencyLog"]
      SP["ShieldedPool<br/>and Entrypoint"]
    end
    subgraph gov["Governance and token"]
      TL["AdminTimelock"]
      TOK["Staking and<br/>resolver bonds"]
    end
    subgraph ext["Robinhood Chain assets and markets"]
      USDG[("USDG")]
      CL["Chainlink price feeds"]
      UNI["Uniswap v4"]
    end
  end

  subgraph base["Base"]
    BS["x402 services<br/>and buyers, in USDC"]
  end

  P -->|"creates, funds, sets limits"| C
  P -.->|"approves payments above threshold"| MA
  C --> MF
  MF -->|"one account per mandate"| MA
  C -->|"endows an agent"| EF
  EF -->|"one per agent"| EN
  EN -->|"holds listed stocks"| rwa
  EN -->|"yearly draw"| MA
  F <-->|"pays services, takes sales"| BS
  F -->|"earnings"| EN
  A -->|"pays inside its limits"| MA
  A -->|"x402 payment"| F
  F -->|"checks the spend"| U
  U -->|"reads limits"| MA
  F -->|"settles"| E
  MA -->|"locks each payment"| E
  CM -->|"locks each payment"| E
  S -->|"delivers and releases"| E
  AR -->|"provider caps"| E
  E -->|"records outcomes"| REP
  E -->|"disputed jobs"| OR
  R -->|"commits and reveals votes"| OR
  OR -->|"resolver bonds"| TOK
  MA -->|"stock, treasury, credit"| rwa
  RG --> CL
  RG --> UNI
  CV --> CL
  C -->|"private mandates, shielded funding"| privacy
  E -.->|"balances in daily root"| SL
  TL -->|"administers"| settle
  MA --- USDG
  SP --- USDG

  classDef own fill:#faf8f7,stroke:#49345f,color:#49345f
  classDef extn fill:#ffffff,stroke:#ecb29d,color:#49345f
  class P,C,A,F,U,R,S,MF,MA,CM,EF,EN,E,OR,AR,REP,RG,TP,CV,DR,SL,SP,TL,TOK own
  class USDG,CL,UNI,BS extn

A patron endows an agent in the console, and the endowment pays the agent a yearly draw into its mandate. A principal sets a mandate's limits, and the factory deploys one account for them. An agent pays through that account, directly or as an x402 payment the facilitator checks and settles. Each payment is locked in escrow until the provider's sidecar delivers the work and releases it. A disputed job goes to bonded resolvers, who vote on chain. A static copy of this diagram is in architecture.svg.

Patrons. Open the endowments page, find an agent by its ERC-8004 id and fund it. Anyone can add to an endowment after that.

Principals. Open app.bursar.world, connect a wallet on Robinhood Chain, create a mandate and fund it with USDG. Give your agent a key of its own and name its address as the mandate's agent. Start with a small balance.

Agent developers. Pay from code with @bursar/sdk, or give an agent the same abilities through @bursar/mcp. Both are on npm under @bursar, with adapters for the common agent frameworks.

Providers. npm create @bursar/provider scaffolds a Cloudflare Worker that charges agents over x402. The provider sidecar takes on jobs from escrow for any other stack. What you can be paid per job grows with your settlement record.

Please report vulnerabilities privately to security@bursar.world or through GitHub private vulnerability reporting on the affected repository. The security policy explains what to include and what happens next.

bursar.world · X @UseBursar · hello@bursar.world · security@bursar.world