Verifiable, provable agent payments.
Self-hosted.
Compliance as an enabler, not a cost. You can deploy autonomous agents because the compliance is already solved.
Accept crypto on your storefront, API, or AI agent
One platform, seven chains, four payment protocols. Drop-in storefront plugins, hosted x402, MPP subscriptions, recurring pull payments, and webhook-grade notifications — no chain nodes, no indexer, no infrastructure.
Accept crypto on any platform
Algorand · Voi · Hedera · Stellar · Base · Solana · Tempo
Drop-in payment plugins for WooCommerce, OpenCart, PrestaShop, Shopware and more. Hosted checkout supports all seven chains — Algorand, Voi, Hedera, Stellar, Base, Solana & Tempo. Browser extension payments now available on six chains: Algorand, Voi, Hedera, Base, Arc & Tempo (x402, MPP, AP2 all wired).
Customer is redirected to a secure AlgoVoi-hosted payment page. Works with any wallet on seven chains — Pera, Defly, Lute, HashPack, Freighter, LOBSTR, MetaMask, Phantom, Trust. Payment confirmed via webhook + API status check.
Customer pays directly on the store page using the AlgoVoi browser extension. No redirect, instant on-chain settlement via algosdk.
WordPress + WooCommerce plugin with hosted checkout redirect and in-page browser extension payment.
OpenCart 4 extension with AJAX-powered checkout, chain selector, and dark-themed storefront.
PrestaShop 8 module with custom payment options, cookie-secured sessions, and full dark theme.
Shopware 6 plugin with Symfony payment handlers, Twig chain selector, and webhook verification.
Framework-free PHP adapter. Single-file drop-in for any custom PHP application — no dependencies, no composer required.
Zero-dependency Python adapter using only the standard library. Works with Flask, Django, FastAPI, or plain WSGI.
Idiomatic Go package using only the standard library. Includes http.HandlerFunc helpers for webhooks and chain selectors.
Zero-crate Rust library with pure-stdlib SHA-256, HMAC, and base64. Pluggable HttpClient trait for any TLS backend.
Machine Payments Protocol middleware including MPP Subscriptions (recurring agent-billable resources). Gate your APIs behind WWW-Authenticate: Payment challenges. Flask, Django, WSGI.
Agent payment middleware supporting AP2 (ed25519 mandates) and Google A2A v0.3 skills (verify-payment, create-checkout, check-status). AI-to-AI payment orchestration out of the box.
Multi-tenant X (Twitter) bot. Tweet "pay £X" in a reply and the bot generates a live checkout link. Preferred chain per tenant.
Cloud-hosted Telegram bot. Send a payment request in any chat and receive an instant AlgoVoi checkout link. Multi-tenant, webhook-driven.
Cloud-hosted Viber bot. Request a payment inside any Viber conversation and get a checkout link delivered in seconds.
Shared multi-tenant Discord bot. Invite once, type "pay £X" in any claimed guild and AlgoVoi replies with a live checkout link. Per-guild preferred network, auto-refreshed guild map.
Start accepting crypto payments today
Sign up with your wallet — testnet is live instantly. Pass our quick ID check (individuals auto-approved in minutes; companies typically within 1 business day) and your first $1,000 of mainnet payments are free across all 7 chains. After that, just 0.50% per payment.
Security-first architecture
Every adapter is hardened against real-world payment attack vectors.
Let MetaMask users pay your
Algorand, Solana, or Stellar checkout — no destination wallet
EVM USDC bridged via Circle CCTP V2 (Solana destinations — native USDC, ~50s, zero slippage) or Allbridge Core (Algorand and Stellar destinations). Per-tenant routing, picked at attempt creation. No bridge UI, no swap, no destination-chain credentials in the customer’s wallet.
Reach 100M+ MetaMask users without onboarding them to Algorand, Solana, or Stellar
xChain is automatically enabled on every tenant configured for algorand_mainnet or solana_mainnet or stellar_mainnet. Solana defaults to Circle CCTP V2 for ~50s native USDC settlement; Algorand and Stellar use Allbridge Core (Algorand via the deterministic LogicSig pattern, Stellar via canonical Circle USDC delivered through a Soroban swap pool — any Stellar wallet works). CCTP V2 will be added to Stellar once Circle ships mainnet contracts.
x402 as a service —
monetise any API in minutes
Gate any HTTP endpoint behind a crypto micropayment. AlgoVoi hosts the x402 facilitator, verifies on-chain settlement, and fires your webhook — you just add middleware. No chain nodes. No indexer. No infrastructure.
# Python — gate any Flask route with x402
from algovoi import require_payment
@app.route("/api/data")
@require_payment(
price="1000000", # 1 VOI in microunits
asset="0", # native coin
network="voi-mainnet",
pay_to="YOUR_VOI_ADDRESS",
)
def premium_data():
return jsonify({"data": "..."})Start charging for your API today
Sign up with your wallet, drop in the middleware, and you're live on testnet instantly. Pass our quick ID check and your first $1,000 of mainnet payments are on us — AlgoVoi users pay automatically.
Gate your AI API calls
behind on-chain payment
Drop-in wrappers for every major LLM provider. Charge per token, per request, per call — settle to your wallet on Algorand, VOI, Hedera, Stellar, Base, Solana, or Tempo. Every adapter speaks x402, MPP, and AP2 out of the box.
| Protocol | Trigger | On-chain txn | Best for |
|---|---|---|---|
| x402 | HTTP 402 response | Yes — AVM pay txn | Web content / APIs |
| MPP | WWW-Authenticate: Payment | Yes — AVM charge txn | Machine-to-machine APIs |
| AP2 | window.algorand.ap2.request() | No — ed25519 mandate | AI agent commerce |
| WC | algo_signTxn via WalletConnect | Yes — any AVM txn | AI agent arbitrary signing |
Get notified the moment
a payment confirms
Wire AlgoVoi to wherever your team already is — Slack, Teams, Discord, Telegram, or your own backend. Auto-retry for 32 hours, HMAC-signed payloads, full audit log, manual retry. Same reliability stack behind every destination.
{
"id": "evt_a3f7c192-d8e1-4b6c-9f0a-7b1e2c4d8e3f",
"type": "payment.confirmed",
"created": 1777200000,
"api_version": "1",
"data": {
"tenant_label": "Acme Payments Ltd",
"resource_id": "premium-content",
"chain": "algorand:mainnet",
"asset": { "id": "31566704", "label": "USDC", "decimals": 6 },
"amount_microunits": "5000000",
"amount_pretty": "5 USDC",
"tx_id": "ABCD1234EFGH5678ABCD1234EFGH5678ABCD1234EFGH5678ABCD",
"payer_address": "GHSRL2SAY247…MWI"
}
}
# Verify in Python
expected = hmac.new(SECRET.encode(), f"{ts}.".encode() + raw_body, hashlib.sha256).hexdigest()
if not hmac.compare_digest(expected, v1):
abort(401)Wire your stack in two minutes
Paste a Slack incoming-webhook URL, a Discord channel webhook, a Teams workflow URL — or point AlgoVoi at your own backend. Every destination shares the same retry queue, same signing layer, same audit page. No infrastructure to run.
Hosted payment infrastructure
for businesses
AlgoVoi-Hand is a managed, compliance-ready crypto payment gateway. Register as a tenant, pass a compliance review, and accept payments on seven chains — without running nodes, facilitators, or verification servers.
# Control plane — create tenant (after KYB application approved)
POST https://cp.algovoi.co.uk/tenants
Authorization: Bearer <admin-key>
{
"display_name": "Acme Payments Ltd",
"networks": ["algorand_mainnet", "voi_mainnet"],
"payout_addresses": {
"algorand_mainnet": "AAAA…ZZZZ",
"voi_mainnet": "BBBB…YYYY"
},
# Simplified CDD — required before first mainnet payment
"legal_entity_name": "Acme Payments Ltd",
"jurisdiction": "GB",
"contact_name": "Jane Smith"
}
# → 201 { "id": "uuid", "short_id": "acme-x4f2",
# "mode": "test", "kyb_status": "pending" }
# Issue a tenant API key (shown once only)
POST /tenants/{id}/apikeys
# → { "key": "ak_live_…" }Start free, settle real money
Sign up with your wallet — testnet access is instant, no review needed. Pass our quick ID check and get $1,000 of real USDC payments across Solana, Base, Algorand, Hedera, Stellar, VOI, and Tempo with zero platform fees. After that, just 0.50% per payment.
10-Layer
Security Stack
Every request passes through multiple independent security layers. Defence-in-depth from the network edge to on-chain verification.
Payment Flow Security Trace
TLS & Edge Protection
Nginx + Cloudflare
- ✓TLS 1.3 enforced at Cloudflare edge; nginx accepts only TLS 1.3 + 1.2 with strong ciphers
- ✓HSTS enforced (1 year, includeSubDomains)
- ✓Cloudflare-only origin enforcement (iptables drops direct-IP probes)
- ✓Rate limiting: 5 req/min auth, 60 req/min API
- ✓Admin API restricted to localhost
API Authentication
Gateway
- ✓Argon2id-hashed API keys (64 MiB memory cost)
- ✓Timing-safe comparison prevents oracle attacks
- ✓Per-tenant rate limiting + RLS context isolation
- ✓64 KB body size limit on all requests
- ✓CSP headers: default-src none on API routes
Hosted Checkout
Payment pages
- ✓All display values HTML-escaped (XSS prevention)
- ✓Amount & receiver always from database (never client)
- ✓Memo binding verified on-chain (replay prevention)
- ✓Payment link tokens: 192-bit cryptographic random
- ✓Kill switch check before rendering
On-Chain Verification
Facilitator
- ✓HMAC-SHA256 signed internal requests
- ✓60-second replay protection window
- ✓Direct indexer/Mirror Node verification
- ✓Supports Algorand, VOI, Hedera, Stellar, Base, Solana, and Tempo
- ✓Integer-only arithmetic (no float rounding)
Admin & Control Plane
Operator API
- ✓Three-path auth: static key / JWT / DB-backed keys
- ✓IP allowlist checked before key verification
- ✓Granular scope enforcement (14 permission atoms)
- ✓Full audit trail on every admin action
- ✓CORS whitelist with wildcard guard at startup
Database Security
PostgreSQL 16/17
- ✓TLS 1.3 enforced (ssl_min_protocol_version=TLSv1.3, AES-256-GCM cipher)
- ✓hostssl required for any non-bridge source; hostnossl reject as belt rule
- ✓Row-Level Security policies per tenant
- ✓Internal Docker network only (no host port published)
- ✓Self-signed CA (10y root, 825d server cert), private key kept offline
Inter-VM Network
Vultr private VPC
- ✓All control-plane / facilitator / KYB / bot traffic on a private VPC
- ✓Sub-1ms RTT between production hosts
- ✓No inter-VM control traffic crosses the public internet
- ✓VPC-only firewall on facilitator-2 (port 8001) and KYB (port 8022)
- ✓SSH key-only on every host (PasswordAuthentication no)
Encryption at Rest
Cryptography
- ✓Two-key separation: KYB documents and tenant secrets use different Fernet keys
- ✓Production startup refuses to launch if keys equal or unset
- ✓AVK1 magic-prefix scheme on KYB files (forward-compat for AVK2/AVK3 rotation)
- ✓MultiFernet for zero-downtime key rotation on either layer
- ✓API keys: Argon2id one-way hash (never stored)
Price Oracle
Fiat conversion
- ✓CoinGecko response capped at 64 KB (OOM prevention)
- ✓Plausibility bounds: $0.001 - $100K per unit
- ✓Pure integer arithmetic (zero float precision loss)
- ✓30-minute staleness check with error fallback
- ✓Background loop independent of request traffic
Infrastructure
Docker & Containers
- ✓All services run as non-root (appuser)
- ✓Network segregation: public + internal networks
- ✓Only nginx exposes ports 80/443
- ✓Minimal base images (python:slim, nginx:alpine)
- ✓Log rotation: 50 MB max, 5 files
Configuration Safety
Startup validation
- ✓All secrets enforced at minimum 32 characters
- ✓Production mode blocks dev-only features
- ✓Fernet key format validated at startup
- ✓Localhost DB URL rejected in production
- ✓Secret values never logged (only length)
All security controls are code-verified against the production codebase. Full technical audit available at docs/SECURITY_OVERVIEW.md
We author the IETF
receipt-format substrate
Six sole-AlgoVoi-authored IETF Internet-Drafts on datatracker. 512 byte-for-byte cross-validation agreements across eight implementations and seven vector sets. A production platform that runs the substrate in production across eight chain families, plus a public adopters registry recording downstream parties anchoring to the same canonicalisation discipline. Substrate work = open standards; APM = production implementation; one acquirer story across both surfaces. The standards we author become the production stack we ship — see below.
Six sole-AlgoVoi IETF Internet-Drafts
AlgoVoi authors the IETF receipt-format substrate for agentic payments under sole authorship: canonicalisation discipline + compliance + settlement + cancellation + refund + composite-trust-query. All six I-Ds POSTED on datatracker with -01 cross-reference revisions live. Anchors to urn:x402:canonicalisation:jcs-rfc8785-v1.
View on IETF datatracker →Nine-implementation cross-validation
Cumulative 512 byte-for-byte agreements across two attestation runs (2026-05-24: 192/192; 2026-05-25: 320/320) covering 7 distinct vector sets under 9 independent JCS implementations across 9 languages. PHP runner uses ~50 lines of pure-stdlib inline JCS, proving the discipline reproduces in any runtime with native JSON + SHA-256.
See 8-impl matrix →Substrate Adopters Registry
A public registry of parties publishing artefacts under canon_version: jcs-rfc8785-v1. Three current entries including PEAC Protocol as the first organic downstream-adopter signal observed in the wild. Machine-readable JSON-LD mirror at /adopters.json for automated consumption by composite-trust-query verifiers and downstream tooling.
View Adopters Registry →AlgoVoi APM (Agent Payment Module)
The production deployment of the substrate work, in three schemes. (1) Live rails — x402, MPP, AP2 and A2A across 7 live chains (Algorand, VOI, Hedera, Stellar, Base, Solana, Tempo) plus ARC testnet. Non-custodial, instant on-chain finality, no customer funds held. (2) Recurr — recurring and subscription payments the customer authorises and pays from their own wallet, settling in real time each cycle. Also non-custodial. (3) Agentic Payment Mandates — a fiat-funded (PayPal Orders v2) custodial spending-authority rail, in development, and subject to the EMR 2011 safeguarding and FCA authorisation requirements specified in our docs. It runs as a separate runtime from the live rails and Recurr and does not affect them. All five receipt formats emit under the JCS canonicalisation pin. Substrate = open standards; APM = production implementation; one acquirer story.
View APM landing →Agent Trust Bench
A public, provider-neutral test suite for agentic payment security. 193 adversarial and benign x402 profiles across 31 threat categories, same profiles exposed on all 8 supported chains. RECEIVE-ONLY by invariant, $1 USDC cap per call, 30-day responsible-disclosure window, all proceeds donated. Machine-readable discovery at /.well-known/x402.json.
agent-trust-bench.algovoi.co.uk →Public audit-verifier repo
External auditors verify AlgoVoi compliance retention without trusting our gateway. Reads bundle JSON offline, recomputes per-row content_hash under RFC 8785 JCS, checks chain continuity, validates HMAC envelope signature, and confirms the Object Lock COMPLIANCE manifest entry — all on an air-gapped machine.
View on GitHub →16 packages on PyPI + npm · Apache 2.0
Core I-D reference suite: algovoi-substrate (JCS canonicalisation + action_ref + compliance receipts), algovoi-settlement-attestation, algovoi-refund-receipt, algovoi-cancellation-receipt, algovoi-composite-trust-query, algovoi-rfc9421-verifier. Plus 10 open lite modules: agent-passport-lite, payment-mandate-lite, policy-binding, compliance-gate-lite, spend-guardrail-lite, cancellation-receipt-lite, refund-receipt-lite, composite-trust-query-lite, delegation-ref, substrate-guard. All 16 live on PyPI at 0.1.3+. Each core library matches the IETF I-D it implements.
View npm packages →ARC Testnet · ERC-8004 agent registry
AlgoVoi is registered as an ERC-8004 agent on ARC Testnet (agent ID 5938). Demonstrates cross-protocol identity for autonomous-payment agents — the same identity stack scales to ARC mainnet when the chain launches.
See privacy_class discussion →We ship what we standardise
The same substrate we author at the IETF — hardened, post-quantum, and on sale today. A cryptographic trust core, ten self-hosted OEM SDKs, and a self-serve store where you buy a licence in USDC and install in minutes. Standards we author; products we ship.
Substrate 2 — post-quantum trust core
The cryptographic trust foundation, on-premise. Post-quantum signing by default (FIPS 204 / FN-DSA), zero-knowledge reputation — prove a score clears a threshold without revealing it, with offline-verifiable Bulletproofs range proofs — and cross-issuer federation that composes credentials with no shared trust root. Available in the Enterprise / On-premise plan.
Substrate 2 →Ten self-hosted OEM SDKs
Settlement verification, agent passport, payment mandate, spend guardrail, privacy proofs, compliance gate, verifiable audit log, and a verifiable archive family — each a standalone Falcon-1024-signing SDK that runs in your own infrastructure. Every purchase mints a Substrate 2 receipt.
Explore the suite →Self-serve store — pay in USDC
Buy a Starter licence self-serve in USDC across seven mainnet chains. Settlement issues a post-quantum-signed licence key plus a one-command private-index install — on-screen and by email — so you install and run in minutes.
Open the store →Offline-verifiable OEM licensing
Every SDK verifies its own licence offline against a Falcon-1024 signature — no licence server, no callback, no telemetry. Buy once, deploy self-hosted, run air-gapped if you need to.
How licensing works →Two agents settle directly.
One integration. Every chain, every protocol.
AlgoVoi Mesh lets two autonomous agents mutually authenticate with post-quantum Falcon-1024, negotiate a chain over signed offers, and settle one content-addressed reference on-chain that anyone can recompute offline. The same mesh settles the full agentic-payment suite, x402, AP2, A2A and MPP, not a single protocol. Proven on-chain across multiple chains and consensus families, including the first settlement on a UTXO chain (Bitcoin).
Post-quantum settlement at the agent boundary
The agent-to-agent trust stays post-quantum even on chains whose own signatures are not, because the chain only ever carries the anchor. AlgoVoi Mesh is a $299 perpetual licence, per enforcement boundary, self-hosted, with no metering.
Free to build on.
Paid where it counts.
Build the whole agentic trust chain with the open Keystone toolchain, then license the cores that carry value. Every core is self-hosted, offline-verifiable, and non-custodial.
Run the whole estate yourself
When you need the operator platform, AlgoVoi Payment Rails and the Verifiable Compliance Suite are self-hosted, one-time perpetual licences from $15k. Your Keystone references are the evidence they consume.
See all bundles on the store →Prefer to try it hands-on? The multi-chain wallet and the live x402 / MPP / agent demo run in your browser.
Try the live wallet and agent demo →Ready to pay the web
with crypto?
AlgoVoi is free, open source, and built for on-chain micropayments and AI agent commerce. Swap tokens, connect agents, and pay the web — install in seconds.
Building on agents? Run your own rails.
Self-hosted x402 / MPP / AP2 / agent-to-agent rails with operator custody, where every settlement produces a post-quantum signed receipt an auditor verifies offline with stock open-source tools. One-time perpetual licence, from $15k. Verifiable Compliance Suite from $15k.