veto-pay 0.6.1

One-line agent payments with Veto enforcement. Any rail.

One-line agent payments. Any rail.

pay() — authorize, sign, settle.
Veto runs the policy + risk engine; the rail does the rest.

---

Install

# Decision-only (no on-chain settlement) — lightest install
pip install veto-pay

# With EVM settlement (Base / Optimism / Arbitrum / Ethereum / Polygon)
pip install veto-pay[evm]

# With Solana settlement
pip install veto-pay[solana]

# Both
pip install veto-pay[all]

---

Quick start

from veto_pay import pay, VetoDenied

result = await pay(
    url="https://api.weather.x402.io/forecast",
    max_amount="$0.05",
    rail="auto",            # auto | evm | solana
)
print(result.tx_hash)       # on-chain tx hash on success
print(result.receipt)       # signed Veto receipt — verify offline if you want

If Veto denies, you get a typed exception:

try:
    await pay(url=url, max_amount="$10000")
except VetoDenied as e:
    print(e.reason_codes)   # ['AMOUNT_CAP_EXCEEDED']
    print(e.receipt)        # signed receipt explaining the deny

---

What it does

1. Authorize — POST /api/v1/authorize with the spend intent. Veto's 8-stage engine runs (policy / prompt-injection / typosquat / OFAC / address-poisoning / intent / anomaly / baseline / decision).
2. Branch on decision:
   • deny → raises VetoDenied(reason_codes=...). No tx is made.
   • escalate → raises VetoDenied (escalations require human review before they can settle).
   • allow → continue.
3. Settle on the rail:
   • EVM: calls VetoGuardedAccount.executeWithMandate(struct, sig, amount) on the agent's smart wallet.
   • Solana: builds a 2-instruction tx (Ed25519 verify + veto_guarded_program::execute_with_mandate) and submits to the Solana RPC.
4. Returns the receipt + on-chain tx hash.

---

Configuration

Environment variables (or pass as kwargs):

Variable	Required for	Description
VETO_API_KEY	always	Bearer token from the Veto dashboard
VETO_AGENT_ID	always	UUID of the agent (created by veto agent init)
VETO_BASE_URL	optional	Override the Veto API base. Default https://veto-ai.com.
WALLET_PRIVATE_KEY	EVM + Solana settle	Agent's private key. EVM: 0x-hex. Solana: base58.
WALLET_CONTRACT	EVM settle	The deployed VetoGuardedAccount address. Set by veto agent init.
RPC_URL	EVM settle	EVM RPC endpoint. Auto-detected from chain= if unset.
SOLANA_RPC_URL	Solana settle	Solana RPC. Defaults to Devnet.
VETO_GUARDED_PROGRAM_ID	Solana settle	Program ID of the deployed Solana program.
VETO_RAIL	optional	evm or solana — overrides the auto detection.

---

Decision-only mode

For cooperative-mode integrations (no on-chain settlement, just verdict + receipt):

result = await pay(
    url=url, max_amount="$0.05", decision_only=True
)
# result.tx_hash is None; result.decision + result.receipt are populated.

Useful when:

• The rail handles settlement upstream (e.g., pay.sh's hosted x402 facilitator)
• You're running a dry-run before flipping enforcement on
• You're auditing decisions without enforcing them

---

Tests

pip install -e .[dev,evm,solana]
pytest

---

Public artifacts

Artifact	Repository
This package	veto-protocol/veto-pay
Companion JS	veto-protocol/veto-pay-js
Veto CLI	veto-protocol/veto-cli
EVM contract	veto-protocol/contracts
Solana program	veto-protocol/solana-program
Off-chain verifier (TS)	veto-protocol/mandate-verifier

---

License

MIT.

---

One line. Any rail. Safe transactions.
_{Built by Investech Global LLC · part of the veto-protocol family.}