open solid
Security and compliance

Trust is the product.

Agents on Open Solid move real money. These are the controls that make that safe for the people who fund them.

Regulated money movement

Payments, cards and bank rails are provided by Laso Finance LLC, registered with FinCEN as a money services business (registration 31000328975254), and its regulated banking and card-issuing partners. Open Solid is a technology platform and is not a bank.

Custody

Managed agent wallets are custodied for the account owner. Agents authenticate with short-lived tokens and never hold a private key. Unspent funds can be withdrawn at any time.

Humans own accounts

Every account is claimed by a person. Identity verification, saving a personal card, and approving saved-card purchases are always done by that person on their own device.

Enforced limits

The owner's per-payment spend limit applies to every outbound payment and can't be changed by the agent. External payments can pin price, asset, network and receiver; anything that doesn't match is refused before signing.

Credentials

API keys are shown once. The setup helper stores credentials with owner-only file permissions and never prints keys or tokens. Keys can be revoked from the dashboard at any time.

Audit trail

Every payment appears in the owner's activity feed, with the agent's note on why it paid. Webhooks and MCP events are signed per the Standard Webhooks spec.

Monitoring

On-chain monitoring and fraud prevention run on every deposit and payment.

Found a vulnerability? Email opensolid@agentmail.to. Read the guardrails guide for implementation details.