TollaryTESTNET ONLY · NO MAINNET SALES

AWS KMS · X402 · BASE USDC

Your agent chose the payment. Do not let it choose its own permission.

For teams whose agent builds Base USDC transfers while an isolated AWS KMS ECC_SECG_P256K1 key remains the signer. Tollary checks the owner mandate and exact unsigned transaction before the only permitted signing route can proceed.

Customer-owned key

No credential, private key, mnemonic, signed transaction, wallet connection, or custody enters Tollary.

Exact transaction boundary

Recipient, atomic USDC amount, token, nonce, gas, fee ceiling, calldata, and owner mandate stay byte-bound.

Two independent RPC views

The paid state decision is ALLOW or BLOCK. An unavailable service is never disguised as a security verdict.

First: run the free no-network qualification

The fit check uses generated fixtures and the published IAM templates. It contacts no AWS API, RPC, wallet, or Tollary endpoint and moves no funds.

mkdir -p tollary-fit/examples/aws-kms-iam
cd tollary-fit
curl -fsSLo aws-kms-fit-check-1.0.0.mjs \
  https://tollary.p-e.kr/sdk/aws-kms-fit-check-1.0.0.mjs
for name in agent-role-policy gateway-role-policy kms-key-policy-fragment; do
  curl -fsSLo "examples/aws-kms-iam/${name}.json" \
    "https://tollary.p-e.kr/sdk/aws-kms-iam/${name}.json"
done
node aws-kms-fit-check-1.0.0.mjs --json
Download the fit check Read the exact boundary Verify file hashes

Only continue when all four facts are true

  1. Your production key is AWS KMS secp256k1 and never leaves your AWS account.
  2. The agent sends official USDC on Base Mainnet through an autonomous or x402 workflow.
  3. A separate owner or control plane—not the same untrusted agent—signs the EIP-712 mandate.
  4. The agent has no alternate raw kms:Sign, wallet, relay, or broadcast path around the guarded gateway.

If any fact is false, do not buy the Guard. The free fit check and documentation are sufficient.

Then inspect the price before any payment

A fresh owner-signed request can be sent to the free lint endpoint. Only a structural ALLOW is eligible for the paid state gate. Calling the paid endpoint without a payment signature returns its exact x402 terms without connecting a wallet or moving funds.

Run the browser lint and inspect the 402 Open the Guard contract Read live product metadata
Commercial status

The hosted Guard is currently limited to Base Sepolia test payments. It does not accept real-value Mainnet payment. Current readiness, price, network, delivery terms, statutory-rights disclosure, and refund boundary must be read from the live API and PAYMENT-REQUIRED response immediately before any future purchase.

Runtime readiness · Commercial readiness · Legal disclosure

What Tollary does not do

It does not provide investment advice, sanctions clearance, legal compliance, custody, exchange, signing, broadcasting, asset recovery, or a guarantee that an authorized payment is commercially wise. It verifies a narrow deterministic transaction-integrity contract.