Verified-value settlement
Tie payment to a live SLA — latency percentiles, error rate, availability. When the service drops below the agreed bar, the stream throttles or halts on its own. SLA-failed units are never paid for.
Set one budget, split it into capped allowances, meter each one by the second. The ceiling is the funded amount itself, so a runaway agent can't overspend — a request past the cap is refused before it is ever billed. Start free in Control Mode: full enforcement, no money anywhere. Card and stablecoin rails run the same objects. x402-compatible.
Free Control Mode · card & stablecoin rails · x402-compatible · your payloads never leave your machine
Agents spend fast and don't self-correct.
Dashboards report what a runaway loop cost you — after it cost you. And the rails that do move machine money move it one payer to one payee, one call at a time. Real workflows fan out: an orchestrator hires a dozen services at once. Dynamo is built for that shape — one budget, many streams, all metered and capped together, and refused at the money layer the instant a cap is reached.
The guard puts a capped base URL in front of any OpenAI-compatible endpoint — Cursor, Claude Code, your own agents, anything that takes a custom endpoint. It runs on your machine: your prompts and payloads never leave it, and your instance sees metering facts only — stream ids, unit counts, amounts. When the cap is spent the answer is HTTP 402, and nothing reaches your provider.
Every user gets their own dedicated instance, provisioned by hand while we are early. Request one and we send your URL, tokens, and a quickstart.
# a capped endpoint in front of any OpenAI-compatible tool npm install @dynamoprotocol/guard @dynamoprotocol/sdk npx @dynamoprotocol/guard up # python gateways pip install litellm-dynamo
Per-call rails, session rails, and escrow tools all reason about a single payer and a single payee. Dynamo settles payments across a network of AI agents.
Carve a parent budget into per-agent allowances. Caps hold at every node — per child, per branch, and across the whole network at once.
Dozens of parallel streams reconcile into a single auditable record: what each agent consumed, when, and what it cost — to the second.
Cut any child stream instantly without touching the rest. The orchestrator stays in control of the whole fleet while work is still running.
Discrete payments are all-or-nothing. A metered stream can react to reality second by second. Every control below settles on objective, verifiable facts — latency, error rates, availability, unit counts — never on anyone's opinion of the output.
Tie payment to a live SLA — latency percentiles, error rate, availability. When the service drops below the agreed bar, the stream throttles or halts on its own. SLA-failed units are never paid for.
If a stream degrades halfway through, refund the seconds after it broke — not the whole thing, not nothing. Refunds shaped like the stream that earned them.
A spend cap stops the total. Rate detection stops the runaway — halt the moment an agent burns faster than its authorized envelope, before the ceiling is even reached.
If a long-running stream drops, billing stops at the last settled second with a provable stop-point. Nothing stranded, nothing double-charged.
Budgets, allowances, caps, halts, revocation, and signed vouchers behave identically across every funding mode. Moving from a free trial to real money is a one-line change — not a migration, not a different product.
The complete enforcement engine over internal records: hard caps, rate envelopes, anomaly halts, instant revocation, signed vouchers, a reconciled session. No payment setup of any kind. This is what every instance runs today.
A processor-guaranteed authorization is the ceiling; work is captured as it is delivered, and nothing beyond the cap can ever be captured. Money stays inside a licensed, audited payment institution — Dynamo never holds funds and never sees card numbers.
The contract is the ceiling: caps, splits, and SLA conditions are executed on-chain, with no processor in the middle and no admin keys over anyone's funds. Flat, near-zero settlement fees make sub-cent metering profitable instead of a loss.
Non-custodial on every rail: Dynamo never takes possession of funds, never operates stored-value balances, and never converts between fiat and crypto. Card and stablecoin rails are enabled per instance, after external security review — never by default.
x402 is becoming the common language for agent payments, backed by an open foundation and the largest names in payments. Its exact scheme handles discrete per-call billing well. Continuous, high-frequency consumption is where one transaction per request stops making sense — and that's exactly what Dynamo streams. Settle through x402-compatible flows and keep per-second billing. You don't choose between the standard and streaming. You get both.
SDK reference// one budget, fanned out across agents, capped by the protocol const budget = await dynamo.openBudget({ funding: "none", // Control Mode — enforcement, no money cap: { perDay: 50 } }); const infer = await budget.stream({ to: "agent.inference.svc", rate: 0.002, // per second cap: 20, sla: { p95ms: 800 } // objective threshold }); // revoke one child — its whole subtree stops with it await infer.revoke();
Start with the agent economy — the buyer building today. The same streaming engine reaches much further.
Bill GPU time and token-by-token inference for the seconds consumed, with a hard ceiling and an SLA gate per job.
An agent on a live market or sensor feed pays while subscribed and stops the instant it unsubscribes.
One agent hires several others for a long task and streams payment against scoped, capped, revocable allowances.
Human developers rent APIs, data, and compute by the second instead of committing to a monthly tier.
Watch 90 seconds, pay for 90 seconds. Close the tab and the stream stops — no subscription, no cancel-before-you're-billed. And because settlement is tied to objective delivery facts, a feed that buffers or drops frames bills less. Metering that reacts to what was actually delivered.
Pay-as-you-play for server, map, or session access, with instant in-game micro-purchases. Just as important, payouts flow the other way — splitting one pot across players, creators, and the platform with the same budget engine that fans out across agents.
…and live audio, music, tipping, and any service where value should flow only while it's being delivered.
The headline features stand on a complete base — so Dynamo is the whole payment layer, not a piece you bolt onto three others.
They move money one payer to one payee. Dynamo settles payments across a network of agents — one budget split across many, metered and capped together, reconciled into one session. It stays x402-compatible, so it adds the multi-agent and streaming layer rather than replacing the standard.
No. Every instance runs Control Mode today: the complete enforcement engine — caps, rate envelopes, anomaly halts, revocation, signed vouchers — with no money anywhere and no payment setup of any kind. Card and stablecoin rails are enabled per instance when you need them. The objects are identical across all three, so moving to a money rail is a one-line change rather than a migration.
Settlement is tied to objective facts — latency percentiles, error rates, availability, unit counts — signed and attested, never a subjective judgement of output quality. SLA-failed units are never paid for, degraded streams refund to the attested break-point with the buyer made whole first, and a declared holdback window separates captured from final. Recourse is built into the rail rather than promised in a policy.
No. The guard and the SDK run on your machine and verify credentials offline; what crosses the wire to your instance is metering facts only — stream ids, unit counts, amounts, signatures. Prompts, completions, and payloads never leave your environment. Real money, when you enable a money rail, moves only inside a licensed payment institution or a self-custodied on-chain escrow — never through Dynamo.
Agents are the first buyer, but the engine is general. The same per-second streaming and budget-splitting powers pay-per-second video, pay-as-you-play gaming with player payouts, live audio, and metered human-facing APIs.