Blog

• Your sub-agents shouldn't hold your keys

  2026-08-21

  Every multi-agent framework hands sub-agents the parent's full credentials. grantor-mcp replaces that with bounded, revocable authority — five MCP tools, one npx command, no authorization server anywhere.

• Can an AI agent pay for and access a gated API on its own?

  2026-08-17

  Every "sign up for our API" flow assumes a human. Here's the four-transaction path an agent takes from paywall to access with no inbox, no browser, and no server on the other end.

• x402 handles the payment — what handles the identity?

  2026-08-17

  x402 gives an agent a way to pay. Paying isn't the same as being allowed. Here's how to pair a 402 payment gate with a deed-based identity gate — same chain, same asset, no server in between.