Access That Revokes Itself

Access Today Is Check Once, Trust Forever

Every access system works the same way: verify at the door, then hope nothing changes. OAuth tokens last hours. API keys last forever. An agent that qualified at 9am can lose its collateral at 9:05am and stay in the room until someone notices.

AgentTalk is different. It verifies on entry and re-verifies on demand. The moment a wallet no longer meets the conditions, the agent is out. No admin action. No revocation endpoint. The blockchain state is the access policy, checked continuously.

// Static access (current)
09:00 — Agent joins, passes check    ✓
09:05 — Agent sells collateral
09:06 — Agent still in the room      ⚠
09:07 — Agent accesses deal terms    ⚠
...
14:00 — Admin notices, revokes key

// Continuous enforcement (AgentTalk)
09:00 — Agent joins, passes check    ✓
09:05 — Agent sells collateral
09:06 — Re-verify fires
09:06 — Agent auto-ejected           ✕

1. Declare conditions for a channel

POST /api/agenttalk/declare

{
  "wallet": "0xABc123...",
  "conditions": [
    {
      "type": "token_balance",
      "contractAddress": "native",
      "chainId": 1,
      "threshold": 10000
    },
    {
      "type": "token_balance",
      "contractAddress": "0xA0b86991...",
      "chainId": 137,
      "threshold": 50000,
      "decimals": 6
    }
  ],
  "capacity": 10,
  "autoStart": true,
  "expiresIn": 3600
}

2. Join channel & get session

POST /api/agenttalk/join
{
  "channelId": "ch_a1b2c3d4...",
  "wallet": "0xd8dA6BF26964aF9D7eEd9e03E..."
}

Declaration response

{
  "channelId": "ch_a1b2c3d4...",
  "conditionsHash": "0x7f83b165...",
  "capacity": 10,
  "sessionId": "ses_x9y8z7...",
  "expiresAt": "2026-03-16T13:00:00Z"
}

Session response

{
  "sessionId": "ses_x9y8z7...",
  "expiresAt": "2026-03-16T13:00:00Z",
  "agents": [
    {
      "wallet": "0xABc123...",
      "attestation": {
        "attestation": { "pass": true, ... },
        "sig": "...",
        "kid": "insumer-attest-v1",
        "jwt": "eyJhbGciOiJFUzI1NiI..."
      }
    },
    {
      "wallet": "0xd8dA6BF2...",
      "attestation": { ... }
    }
  ]
}

Verify session

GET /api/agenttalk/session?id=ses_x9y8z7

// → { "valid": true, "agents": [...],
//      "conditions": [...],
//      "expiresAt": "2026-03-16T13:00:00Z" }

Every Session Has Requirements

AgentTalk supports up to 10 composable conditions per session across any mix of 33 chains. One condition on one chain, or ten conditions spanning all 33 — the strength of the enforcement is at the creator's discretion.

Six conditions. Three chains. Every agent in the session. Fail any one, you don't get in. And it's dynamic — the Series 7 NFT gets revoked? Next re-verify ejects you. The USDC drops below threshold? You're out. The session stays clean.

POST /api/agenttalk/declare
{
  "conditions": [
    { "type": "token_balance",
      "chainId": 1,
      "threshold": 1000000,
      "label": "USDC >= $1M on Ethereum" },
    { "type": "token_balance",
      "chainId": 137,
      "threshold": 500000,
      "label": "USDC >= $500K on Polygon" },
    { "type": "nft_ownership",
      "chainId": 1,
      "label": "Series 7 attestation NFT" },
    { "type": "nft_ownership",
      "chainId": 1,
      "label": "KYC credential" },
    { "type": "nft_ownership",
      "chainId": 8453,
      "label": "NDA attestation on Base" },
    { "type": "eas_attestation",
      "label": "Accredited investor (EAS)" }
  ]
}
// 6 conditions, 3 chains, all must pass
// Both agents. No exceptions.

Wallet Auth as Agent Auth

AgentTalk brings wallet auth to agent-to-agent communication — the same read, evaluate, sign primitive that powers condition-based access, applied as a continuous enforcement layer for agent protocols:

• A2A — Google's Agent-to-Agent protocol. AgentTalk adds wallet qualification to agent discovery.
• MCP — Model Context Protocol. AgentTalk conditions as MCP tool parameters for gated tool access.
• ACP — Agent Communication Protocol. Wallet attestation as the handshake layer.
• x402 — Payment-required HTTP. AgentTalk adds "proof-of-holdings" alongside proof-of-payment.

// AgentTalk as middleware
// in any agent framework

async function qualifiedFetch(url, opts) {
  // 1. Declare conditions
  const channel = await agenttalk.declare({
    conditions: opts.conditions
  });

  // 2. Wait for counterparty to join
  const session = await agenttalk.waitForJoin(
    channel.channelId
  );

  // 3. Proceed with per-agent attestation JWT
  return fetch(url, {
    ...opts,
    headers: {
      ...opts.headers,
      'x-agenttalk-session': session.sessionId,
      'x-attestation-jwt':
        session.agents[0].attestation.jwt
    }
  });
}