@yault/aesp

AESP - Agent Economic Sovereignty Protocol

Defining how AI agents operate economically under human sovereignty.

Website | npm

What Is AESP

AESP is a TypeScript SDK and MCP integration layer for agent payments under explicit human control. It is designed so that agents can execute economic actions while humans retain full economic sovereignty.

Core principles:

• Policy-gated execution -- every spend action is bounded by configurable policy rules (per-tx limits, daily/weekly/monthly budgets, address allowlists, time windows).
• Human override path -- risky actions are escalated to a review queue instead of being auto-approved.
• Verifiable commitments -- execution context can be tied to EIP-712 signed intent, enabling on-chain settlement guarantees.
• Practical integration -- MCP tools expose vault operations to AI agent frameworks; subpath exports let you import only what you need.

Install

npm install @yault/aesp

Requires Node.js >= 18.

Quick Start

Run the MCP stdio server

The package includes a yault-mcp binary that connects to a Yault backend and exposes vault operations as MCP tools, compatible with Claude Desktop, Claude Code, and any MCP-compliant client.

export YAULT_API_URL="https://api.yault.io"
export YAULT_API_KEY="sk-yault-..."
yault-mcp

Or with npx:

YAULT_API_URL="https://api.yault.io" YAULT_API_KEY="sk-yault-..." npx @yault/aesp

Use SDK modules

import { PolicyEngine } from '@yault/aesp/policy';
import { getAllMCPTools } from '@yault/aesp/mcp';
import { NegotiationStateMachine } from '@yault/aesp/negotiation';

const engine = new PolicyEngine(storageAdapter);
await engine.load();

const tools = getAllMCPTools(); // 6 MCP tool definitions

Modules

AESP is organized into subpath exports so you can import only what you need:

Subpath	Description
@yault/aesp	Unified re-export of all modules
@yault/aesp/types	Shared type definitions (AgentExecutionRequest, TransferPayload, ChainId, etc.)
@yault/aesp/policy	Policy engine with 8-check evaluation, budget tracking, and policy change classification
@yault/aesp/identity	Agent identity derivation, certificate creation, and hierarchy management
@yault/aesp/negotiation	Offer/counter-offer state machine with session management
@yault/aesp/commitment	EIP-712 structured commitment builder for dual-signed agreements
@yault/aesp/review	Human-in-the-loop review queue with freeze/unfreeze controls
@yault/aesp/mcp	MCP tool definitions, argument validation, and server router
@yault/aesp/a2a	Agent-card builder for cross-agent discovery (A2A protocol)
@yault/aesp/crypto	Cryptographic helpers: signing, encryption, hashing, ZK proof bridge
@yault/aesp/privacy	Context tagging, ephemeral address pools, and consolidation scheduling

MCP Tools

The stdio server exposes 6 backend-connected tools:

Tool	Method + Endpoint	Purpose
yault_check_balance	GET /api/vault/balance/:address	Read a wallet vault balance
yault_deposit	POST /api/vault/deposit	Deposit underlying into vault
yault_redeem	POST /api/vault/redeem	Redeem vault shares
yault_transfer	POST /api/vault/transfer	Transfer vault allocation (parent to sub-account)
yault_check_authorization	GET /api/vault/agent-authorization	Read operator/allowance status
yault_get_balances	GET /api/vault/balances/:address	Read multi-balance breakdown

Backend Requirements

The MCP server is a thin API client. It expects a Yault backend providing:

• GET /api/vault/balance/:address
• GET /api/vault/balances/:address
• GET /api/vault/agent-authorization
• POST /api/vault/deposit -- { address, amount }
• POST /api/vault/redeem -- { address, shares }
• POST /api/vault/transfer -- { from_address, to_address, amount, currency? }

Authentication: Authorization: Bearer sk-yault-* via YAULT_API_KEY env variable.

Security Model

AESP is built around "bounded autonomy":

• Agent API keys should be policy-bound before spend execution.
• Spending controls should include per-tx and rolling limits (daily/weekly/monthly).
• Destination constraints should be allowlist-driven where applicable.
• Sensitive operations should stay outside broad agent key scopes.
• Human escalation remains the fallback for policy violations.

For vulnerability reporting, see SECURITY.md.

Related Packages

Package	Description
@yault/elizaos-plugin-aesp	ElizaOS plugin wrapping AESP for agent frameworks

Development

Run tests:

npm test

Build TypeScript:

npm run build:ts

Build with WASM (requires acegf-wallet as a sibling repo, or set ACEGF_ROOT):

npm run build:wasm
npm run build:ts

See CONTRIBUTING.md for the full development guide.

License

This project is licensed under the Apache License 2.0. See LICENSE for the full text.