crewai-pqsafe

Drop post-quantum signed payments into any CrewAI agent in one line — FIPS 204 (ML-DSA-65) enforced.

Part of the PQSafe AgentPay ecosystem. Built on pqsafe-agent-pay.

What it does

crewai-pqsafe provides PQSafePaymentTool, a CrewAI-compatible tool that gives your agents the ability to make payments authorized by a signed SpendEnvelope — a post-quantum (ML-DSA-65, NIST FIPS 204) token issued by the human wallet owner. Add the tool to any CrewAI Agent and every pqsafe_pay call is signature-verified and policy-enforced before any payment is dispatched.

No long-lived API keys in your crew definition. No credentials to rotate. The envelope constrains exactly what the agent can spend, to whom, via which rail, and for how long — and it cannot be forged or exceeded.

Install

pip install crewai-pqsafe

Quickstart

from crewai import Agent, Crew, Task
from crewai_pqsafe import PQSafePaymentTool

payment_tool = PQSafePaymentTool()

finance_agent = Agent(
    role="Finance Agent",
    goal="Process approved supplier payments autonomously",
    backstory="You pay invoices that have been pre-authorized via PQSafe SpendEnvelopes.",
    tools=[payment_tool],
)

That's it. The finance_agent can now call pqsafe_pay on any task that requires a payment.

Full crew example

import json
from crewai import Agent, Crew, Task
from crewai_pqsafe import PQSafePaymentTool

payment_tool = PQSafePaymentTool()

# Agent with payment capability
finance_agent = Agent(
    role="Finance Agent",
    goal="Process approved supplier payments",
    backstory="You pay invoices pre-authorized via PQSafe SpendEnvelopes.",
    tools=[payment_tool],
)

# Task — envelope is injected into the description at runtime
pay_invoice = Task(
    description=(
        "Renew the Perplexity Pro subscription at perplexity.ai — $20 USD. "
        "Use this signed envelope: {envelope_json}"
    ),
    agent=finance_agent,
    expected_output="Payment confirmation with txId, status, and rail",
)

crew = Crew(agents=[finance_agent], tasks=[pay_invoice])

# Kick off — inject the pre-signed envelope issued by the wallet owner
signed_envelope = {
    "envelopeJson": '{"version":1,"issuer":"pq1...","agent":"finance-crew-v1",...}',
    "signature": "deadbeef...",
    "dsaPublicKey": "cafebabe...",
}
result = crew.kickoff(inputs={"envelope_json": json.dumps(signed_envelope)})
print(result)
# Payment successful. txId=airwallex-tx-abc123 status=success rail=airwallex

How it works

1. A human wallet owner issues a signed SpendEnvelope using pqsafe-agent-pay (or the PQSafe wallet). The envelope encodes: agent ID, max amount, allowed recipients, currency, and validity window — all bound by an ML-DSA-65 post-quantum signature.
2. The envelope is passed into the crew as an input variable. It travels with the task context, not stored in the tool.
3. When the agent decides to pay, it calls the pqsafe_pay tool with envelope_json, recipient, amount, and optional memo.
4. PQSafePaymentTool verifies the post-quantum signature server-side, enforces all policy constraints, and routes the payment to the cheapest available rail (Airwallex, Wise, Stripe, USDC/Base, or x402).
5. The tool returns a string: Payment successful. txId=<id> status=<status> rail=<rail> — included in the task output.

What you get

• One-line integration — tools=[PQSafePaymentTool()] on any CrewAI Agent
• FIPS 204 ML-DSA-65 enforcement — every payment is quantum-resistant by default
• Policy guardrails — amount ceiling, recipient allowlist, and time window enforced before dispatch; the agent cannot overspend
• Multi-rail routing — Airwallex (live sandbox), Wise, Stripe, USDC on Base, x402
• No credentials in crew code — only the short-lived signed envelope is required at runtime
• Compatible with any CrewAI crew — hierarchical, sequential, or custom process types

Tool parameters

Returns a string: Payment successful. txId=<id> status=<status> rail=<rail>

Part of PQSafe AgentPay

• pqsafe-agent-pay — Python SDK (envelope creation, signing, verification) — this plugin's dependency
• langchain-pqsafe — same pattern for LangChain agents
• @pqsafe/agent-pay — core TypeScript SDK
• @pqsafe/mastra — Mastra workflow integration

Links

• Main repo: github.com/PQSafe/pqsafe
• Docs: docs.pqsafe.xyz
• Live demo: demo.pqsafe.xyz
• Website: pqsafe.xyz

License

MIT