Introducing Pakt: The Firewall for Agentic Finance

Pakt is a new product for safe & private agentic trading, letting you delegate trading to agents while staying in control.

It puts guardrails between agents and your money. You specify or auto-generate a policy for your trading strategy, and Pakt makes sure your agents can never breach it, even if they hallucinate, have bugs or get hacked.

Apply to join the closed beta at usepakt.ai.

Sleep well while your agents trade

Agents could already be running your strategy. They trade 24/7, do maths faster, identify patterns in data you'll never see, and take profit with no emotion. But without a Pakt in place, there is always a small chance they could hallucinate or be prompt-injected, putting your funds at risk.

The missing piece for agentic finance

1. Any agent, any venue

Pakt works with the agent you already use, on the venues you already trade. It connects as an MCP server, so it runs with Claude Code, claude.ai, Codex, Hermes, OpenCode and anything else that speaks MCP.

• Live now with Hyperliquid perps.
• Next up is a centralized exchange like Binance, Coinbase and Robinhood, as selected by private beta participants.

2. Private by design

Nobody except you can see your strategy or your Pakt - but you can still prove things about it, including your PnL, your volume, your compliance with a mandate - all without revealing a single trade.

• A fund can show an allocator it stayed inside its risk limits.
• A trader can publish a verifiable track record without disclosing the strategy behind it.

3. Smart limits

Other permission systems only see the order in front of them. Only Pakt also knows your account state, enabling smart limits for even the most complex strategies.

• Trade limits: assets, venues, action kinds, order sides, size, rate, price, margin, collateral.
• Account limits: leverage, liquid reserves, health floor, equity floor.
• Information limits: which price feeds and state sources to trust, how fresh they must be, how long an order stays valid.

A trade can look right on its own and still be refused because of where it would leave your account once it fills.

4. Non-custodial

Your funds stay in your own accounts and wallets at all times. The signing key lives inside a hardware enclave and your agent never holds it.

We never have access to your funds or your keys, so there is nothing for us to hold, freeze or lose. Pakt does not place orders. It only decides what should be signed based on the limits you set.

Pakt's guardrails protect you from a wide variety of potential issues

When you create a Pakt with your agent, your agentic guardrails are enforced at all times, protecting you in case the AI gets anything wrong:

• Simple bugs - AI occasionally writes buggy code which could result in unexpected behaviour.
• Hallucinations - your agent could base decisions on data sources that do not exist, for example.
• Misunderstandings - your agent might simply misunderstand your instructions.
• Hacks - if someone somehow takes control of your agent, they are unable to do anything that isn't already defined in your Pakt and have no access to keys or funds.
• Prompt injections - even if an agent is tricked into trying to do a different action, Pakt will prevent it being executed
• Human error - we all make mistakes, and perhaps you have multiple windows open and add the wrong instruction in the wrong window.

The agent proposes, the proof decides

Pakt makes agents prove their actions and effects. Proofs are checked inside secure hardware, and only trades that pass are signed and executed. Verifiable receipts ensure consistency and enable audits.

1. Your agent proposes an exact action. It prepares a complete order, such as a $250 BTC buy on Hyperliquid, and asks Pakt to authorize it under your active Pakt.
2. Pakt gathers the facts. Signed data feeds supply your current positions, balances, prices and margin, stamped with the time so stale data is rejected.
3. Pakt proves the decision. A policy program checks the action and its effect on your account against every rule in your Pakt, and produces a cryptographic proof of the result.
4. A hardware enclave verifies the proof and decides. If every rule passes, the enclave authorizes a signature for that exact action, and nothing else. A restricted signer then signs it and hands it back to your agent to submit. If any rule fails, no signature is released and your agent is told why the action was refused.
5. Every decision leaves a receipt. Signed or refused, you get a verifiable record you can check in your browser.

Zero-knowledge proofs and Trusted Execution Environments

No trade can be executed unless it comes with a valid cryptographic proof that it meets your Pakt's constraints.

Verification and signing runs inside an isolated hardware enclave that nobody can access. This prevents your agent from ever being able to access your funds directly, and keeps your trading strategy private.

Launch new trading agents or secure existing workflows

Build a new trading agent from scratch and Pakt writes its limits as you describe the strategy:

1. What should this agent do? Buy BTC perps with USDC, on Hyperliquid.
2. How much per trade, and when? Max $1,000 per trade, between 09:00 and 17:00 UTC.
3. How much leverage are you comfortable with? Maximum 3x.

Or point Pakt at the setup you already run and it helps turn your existing strategy into a safe autonomous agent. The venues stay the same, and your funds stay where they are. The only thing that changes is the addition of the agentic firewall.

Pakt is for everyone putting agents in charge of real money

• Enthusiasts who trade from chat. Every order is checked against your Pakt before it is signed, so a bad prompt costs you a refusal rather than a position.
• AI builders launching agents. Run autonomous trading strategies without managing keys, wallet infrastructure or permissions systems. Pakt handles what gets signed so you can work on what gets proposed.
• Experienced traders securing existing flows. Automate your strategy and keep control of your funds. Works with Tread.fi, Cede.flow, Hummingbot, Freqtrade, 3Commas and your own custom scripts.
• Wallets, exchanges and platforms. Let your users trade while they sleep, inside limits they set themselves. You get the 24/7 volume without the risk of unsupervised agents.

Who's behind Pakt

Pakt is built by BOB Labs, the team behind BOB Gateway, a Bitcoin-optimized swaps and trading engine. The team includes multiple PhDs with more than 2,000 research citations, and is backed by Castle Island Ventures, Coinbase Ventures, Ledger Cathay, IOSG and RockawayX.

Apply for beta access

Applications for the closed beta are open. If you fill in the short form and tell us about your agentic trading experience, you can move up the queue.

Apply for beta access at at usepakt.ai.